last executing test programs: 2m26.51727239s ago: executing program 1 (id=13776): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) getuid() 2m26.217052167s ago: executing program 1 (id=13780): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000002900000004000000000000000000000004018f000000000810000000000000002900000004"], 0x38}}], 0x1, 0x40000000) 2m25.956134123s ago: executing program 1 (id=13784): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f00000005c0)=ANY=[], 0x5, 0x74d, &(0x7f0000001040)="$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") readlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=""/196, 0xc4) 2m25.377205305s ago: executing program 1 (id=13790): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-15,umask=00000000000000000000003,keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303137372c646973636172642c666d61736b3d30303030303030303030303030303030303030303031302c757466382c696f636861727365743d64656661756c742c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c00f7b3d8d50298a1661b65b78edfe8fa580d3642ff9fc09cd7555253597cf3314088d65c3645c5f887b4bedf8fccd6d44477c0027da2e3c9b317a8857a9e70758ddf7ffa0d6b5c3b67fc14ae3d2b63"], 0x41, 0x1528, &(0x7f00000037c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2m24.901514055s ago: executing program 1 (id=13795): syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) 2m24.270436389s ago: executing program 1 (id=13799): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMISLOCKED(r0, 0x80084d17, &(0x7f0000000040)={0xfffffffe, 0x8}) 2m23.850025279s ago: executing program 32 (id=13799): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMISLOCKED(r0, 0x80084d17, &(0x7f0000000040)={0xfffffffe, 0x8}) 5.922459371s ago: executing program 4 (id=15386): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0xd, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x7ff, 0x1, 0x3, 0x3a, 0x4}) 5.620810617s ago: executing program 4 (id=15389): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0x9, 0x28, {0x28, 0x21, "f70ba391030000000000000000cb4fdca0560f820d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.323989054s ago: executing program 0 (id=15395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x26, 0x28, {0x28, 0x382f98b68ae7d33c, "4df2284b8701f87bd135c2f00cad47d42394e6544dcb1f789964515416dc806624871c9f5a6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.556592452s ago: executing program 4 (id=15403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.310493948s ago: executing program 4 (id=15406): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) 3.293848218s ago: executing program 0 (id=15407): setresgid(0xee00, 0x0, 0x0) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) setregid(r0, 0x0) 3.164405701s ago: executing program 0 (id=15408): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) 3.163010311s ago: executing program 3 (id=15409): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 3.067253823s ago: executing program 4 (id=15411): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)={[{@largeio}, {@nolazytime}, {@gqnoenforce}, {}, {@prjquota}]}, 0x4, 0x9667, &(0x7f000001fd40)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f0000005d40)={0x2020}, 0x2020) 2.833274928s ago: executing program 0 (id=15413): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) 2.680505082s ago: executing program 0 (id=15414): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000300)='./file1\x00', 0x1c886, &(0x7f0000005400)=ANY=[], 0x83, 0x6195, &(0x7f000000cc40)="$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") stat(&(0x7f0000003b80)='./file2/file0\x00', 0x0) open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) 2.651612592s ago: executing program 3 (id=15415): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@uid}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0xe00}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2.29289122s ago: executing program 3 (id=15419): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000808, &(0x7f0000006540)={[{@nobarrier}, {@type={'type', 0x3d, "98acdea6"}}, {@nls={'nls', 0x3d, 'macromanian'}}, {@nobarrier}, {@type={'type', 0x3d, "ddbdebdd"}}, {}]}, 0x2, 0x5f9, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/214, 0xd6) 2.120891354s ago: executing program 5 (id=15421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x804) 1.930412108s ago: executing program 2 (id=15422): io_setup(0x9, &(0x7f0000000280)=0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r1, 0x0, 0x0, 0x7}]) 1.894859809s ago: executing program 5 (id=15423): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x104, 0x7, 0x800101, 0x2, 0x4f, "0840950887d026d77b7fcb456b00", 0xc98, 0x2000002}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1.867297349s ago: executing program 3 (id=15424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 1.623559655s ago: executing program 3 (id=15425): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200001, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x401}) 1.595114115s ago: executing program 5 (id=15426): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x800802, &(0x7f0000002580)={[{}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@creator={'creator', 0x3d, "3790abf8"}}]}, 0x21, 0x30a, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.513576787s ago: executing program 2 (id=15427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "e1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1.296025932s ago: executing program 2 (id=15428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x3c}}, 0x0) 1.117335165s ago: executing program 4 (id=15429): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0) 1.058007617s ago: executing program 2 (id=15430): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101003) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x6, 0x1d, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="0d9546502969", 0x0, 0x800001fc, 0x10034, 0xffffffff, 0x0}) 1.057274317s ago: executing program 5 (id=15431): r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x30, 0x40000, 0x0, 0x0) 1.007983258s ago: executing program 2 (id=15432): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x5f0, 0x0, 0x0, 0x0, 0x420, 0x98, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ip={@empty, @multicast2, 0xff000000, 0x0, 'vlan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x2, 0x8}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff0000ff, 0xff, 'netpci0\x00', 'pimreg\x00', {0xff}, {}, 0x16, 0x1, 0x5}, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @local, 0xff, 0xff, 'wg1\x00', 'vlan1\x00', {}, {0xff}, 0x62, 0x0, 0x20}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff000000, 'veth1_to_bond\x00', 'veth1_to_team\x00', {0xff}, {}, 0x88, 0x1, 0x48}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x7f, @remote, 0x4e24}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x18}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x650) 809.019972ms ago: executing program 5 (id=15433): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@init_itable}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0xffffffffffffff01, 0x58e300cd, 0xfffffffffffffff7, 0x10000000000000, 0x5, 0xf7a}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 728.269924ms ago: executing program 2 (id=15434): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x522, &(0x7f0000000240)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0xf1f) mount$9p_fd(0x0, &(0x7f0000000780)='./file2\x00', 0x0, 0x10210b1, 0x0) 645.647436ms ago: executing program 0 (id=15435): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) pread64(r0, &(0x7f0000000240)=""/97, 0x61, 0x9) 150.882917ms ago: executing program 5 (id=15436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x24, r1, 0x1, 0x11e, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 0s ago: executing program 3 (id=15437): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) kernel console output (not intermixed with test programs): 814][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1043.033770][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1043.050175][ T22] usb 1-1: USB disconnect, device number 50 [ 1043.115582][ T1998] lo speed is unknown, defaulting to 1000 [ 1043.967347][ T2022] loop3: detected capacity change from 0 to 512 [ 1044.010374][ T2022] /dev/loop3: Can't open blockdev [ 1044.364540][ T2034] cgroup: Invalid name [ 1044.455893][ T2027] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13822'. [ 1044.495260][ T2030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13823'. [ 1044.526803][ T2030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13823'. [ 1044.535936][ T2030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13823'. [ 1044.657011][ T2040] x_tables: unsorted underflow at hook 4 [ 1044.876085][ T2050] loop2: detected capacity change from 0 to 2048 [ 1044.953712][ T2050] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1045.052356][ T2050] syz.2.13830: attempt to access beyond end of device [ 1045.052356][ T2050] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1045.074097][ T2052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1045.099163][ T2054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13832'. [ 1045.116628][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 1045.253422][ T2050] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1045.306597][ T2050] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1045.401532][ T2050] Remounting filesystem read-only [ 1045.427906][ T2050] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1045.477550][ T2066] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1045.719777][ T4280] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1046.019194][ T2074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13840'. [ 1046.222288][ T2089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13846'. [ 1046.415570][ T1998] chnl_net:caif_netlink_parms(): no params data found [ 1046.481776][ T2098] xt_TCPMSS: Only works on TCP SYN packets [ 1046.970714][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13856'. [ 1047.176609][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 1047.229673][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.346946][ T1998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.355365][ T1998] device bridge_slave_0 entered promiscuous mode [ 1047.429598][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.463193][ T1998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.494778][ T26] audit: type=1326 audit(1047.920:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1047.524836][ T1998] device bridge_slave_1 entered promiscuous mode [ 1047.575871][ T2135] loop2: detected capacity change from 0 to 2048 [ 1047.636415][ T26] audit: type=1326 audit(1047.960:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1047.700934][ T1998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.745853][ T2135] GPT:first_usable_lbas don't match. [ 1047.767064][ T26] audit: type=1326 audit(1048.000:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1047.791467][ T2135] GPT:34 != 290 [ 1047.795102][ T2135] GPT: Use GNU Parted to correct GPT errors. [ 1047.802484][ T1998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.811833][ T2135] loop2: p1 p2 p3 [ 1047.885355][ T26] audit: type=1326 audit(1048.000:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1047.892523][ T2147] rdma_rxe: rxe creation allowed on top of a real device only [ 1047.996441][T27479] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1048.057035][ T26] audit: type=1326 audit(1048.010:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1048.069667][ T1998] team0: Port device team_slave_0 added [ 1048.106569][ T2151] netlink: 'syz.3.13870': attribute type 1 has an invalid length. [ 1048.134855][ T2151] netlink: 'syz.3.13870': attribute type 1 has an invalid length. [ 1048.155174][ T26] audit: type=1326 audit(1048.010:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1048.190633][ T2151] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.13870'. [ 1048.201024][ T1998] team0: Port device team_slave_1 added [ 1048.220726][T27479] usb 3-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 1048.246646][T27479] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.286523][ T26] audit: type=1326 audit(1048.010:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1048.321853][T27479] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1048.356572][T27479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.365922][T27479] usb 3-1: Product: syz [ 1048.396503][ T26] audit: type=1326 audit(1048.010:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1048.420669][T27479] usb 3-1: Manufacturer: syz [ 1048.425373][T27479] usb 3-1: SerialNumber: syz [ 1048.497541][ T26] audit: type=1326 audit(1048.010:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2136 comm="syz.4.13865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1048.720118][T27479] usb 3-1: 0:2 : does not exist [ 1048.725254][T27479] usb 3-1: unit 9 not found! [ 1048.759038][T27479] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1048.803709][ T2165] tipc: Can't bind to reserved service type 2 [ 1048.869392][T27479] usb 3-1: USB disconnect, device number 66 [ 1048.944658][ T1998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.967771][ T1998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.003859][ T1998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.234996][ T4541] udevd[4541]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.256361][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 1049.264017][ T1998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.273514][ T1998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.343961][ T1998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.699234][ T1998] device hsr_slave_0 entered promiscuous mode [ 1049.733377][ T1998] device hsr_slave_1 entered promiscuous mode [ 1049.798839][ T1998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.814809][ T1998] Cannot create hsr debugfs directory [ 1049.876659][ T2183] loop4: detected capacity change from 0 to 1024 [ 1050.246477][ T4322] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1050.322097][ T31] device hsr_slave_0 left promiscuous mode [ 1050.341208][ T31] device hsr_slave_1 left promiscuous mode [ 1050.366486][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.388389][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.441292][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.466423][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 1050.475712][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.494501][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.514079][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.524817][ T31] device bridge_slave_1 left promiscuous mode [ 1050.540704][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.543816][ T2198] tmpfs: Bad value for 'mpol' [ 1050.563607][ T4322] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1050.607213][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.627948][ T4322] usb 4-1: config 0 descriptor?? [ 1050.647680][ T31] device bridge_slave_0 left promiscuous mode [ 1050.664214][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.674255][ T4322] hub 4-1:0.0: USB hub found [ 1050.842822][ T4322] hub 4-1:0.0: 13 ports detected [ 1050.856798][ T4322] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1050.893833][ T31] device veth1_macvtap left promiscuous mode [ 1050.920666][ T31] device veth0_macvtap left promiscuous mode [ 1050.941043][ T31] device veth1_vlan left promiscuous mode [ 1051.044186][ T4322] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1051.064497][ T4322] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1051.099951][ T4322] usbhid 4-1:0.0: can't add hid device: -71 [ 1051.116475][ T4322] usbhid: probe of 4-1:0.0 failed with error -71 [ 1051.167307][ T4322] usb 4-1: USB disconnect, device number 71 [ 1051.336555][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 1051.723496][ T2200] loop2: detected capacity change from 0 to 32768 [ 1052.464959][ T31] bond0 (unregistering): Released all slaves [ 1052.811463][ T31] bond5 (unregistering): Released all slaves [ 1052.823409][ T31] bond4 (unregistering): Released all slaves [ 1052.850887][ T4322] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1053.046558][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 1053.053918][ T4322] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1053.070807][ T4322] usb 3-1: config 0 has no interface number 0 [ 1053.085351][ T4322] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1053.105277][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.116230][ T4322] usb 3-1: Product: syz [ 1053.127187][ T4322] usb 3-1: Manufacturer: syz [ 1053.131846][ T4322] usb 3-1: SerialNumber: syz [ 1053.140565][ T4322] usb 3-1: config 0 descriptor?? [ 1053.149721][ T4322] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1053.159041][ T4322] usb 3-1: selecting invalid altsetting 1 [ 1053.164833][ T4322] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1053.191770][ T4322] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1053.218185][ T4322] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1053.230714][ T4322] usb 3-1: media controller created [ 1053.291053][ T31] bond3 (unregistering): Released all slaves [ 1053.298982][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.627123][ T31] bond2 (unregistering): Released all slaves [ 1053.680691][ T31] bond1 (unregistering): Released all slaves [ 1053.691653][ T4322] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1053.795576][ T4322] usb 3-1: USB disconnect, device number 67 [ 1053.912366][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.084512][ T31] team0 (unregistering): Port device macvlan1 removed [ 1054.670590][ T26] audit: type=1326 audit(1055.090:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1054.713259][ T26] audit: type=1326 audit(1055.090:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1054.759267][ T26] audit: type=1326 audit(1055.100:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1054.822600][ T26] audit: type=1326 audit(1055.100:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1054.865514][ T26] audit: type=1326 audit(1055.100:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1054.890912][ T26] audit: type=1326 audit(1055.100:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1054.916759][ T26] audit: type=1326 audit(1055.100:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2246 comm="syz.2.13908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1055.034228][ T31] team0 (unregistering): Port device team_slave_1 removed [ 1055.129980][ T31] team0 (unregistering): Port device team_slave_0 removed [ 1056.581963][ T1998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1056.650183][ T1998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1056.869367][ T1998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1056.928235][ T1998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1057.265199][ T1998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.397646][ T1998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.421398][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1057.441097][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1057.542212][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1057.570926][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1057.619356][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.626643][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.694741][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1057.732385][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1057.745815][ T2296] usb usb7: usbfs: process 2296 (syz.3.13926) did not claim interface 0 before use [ 1057.768790][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.779143][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.826811][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1057.855408][ T2290] loop2: detected capacity change from 0 to 4096 [ 1057.954752][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1057.971409][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1057.997616][ T2290] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1058.059214][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1058.084372][ T2290] ntfs3: loop2: Failed to load $Extend. [ 1058.117067][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1058.144268][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1058.185458][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1058.245093][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1058.265599][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1058.286217][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1058.325628][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1058.348126][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1058.369061][ T2306] netlink: 'syz.0.13931': attribute type 4 has an invalid length. [ 1058.386659][T27481] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1058.411017][ T1998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1058.576675][T27481] usb 4-1: Using ep0 maxpacket: 16 [ 1058.584400][T27481] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1058.613912][T27481] usb 4-1: config 0 has no interface number 0 [ 1058.654905][T27481] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1058.695731][T27481] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1058.736653][T27481] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1058.774371][T27481] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1058.817984][T27481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.866324][T27481] usb 4-1: Product: syz [ 1058.870737][T27481] usb 4-1: Manufacturer: syz [ 1058.875418][T27481] usb 4-1: SerialNumber: syz [ 1058.886613][T26907] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1058.915640][T27481] usb 4-1: config 0 descriptor?? [ 1058.946690][ T2303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1058.972238][ T2303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1059.085803][T26907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1059.095422][T26907] usb 5-1: not running at top speed; connect to a high speed hub [ 1059.141300][T26907] usb 5-1: string descriptor 0 read error: -22 [ 1059.160723][T26907] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1059.211429][T26907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.232443][ T2303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1059.270779][ T2303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1059.510224][T27481] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1059.533080][ T2335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13940'. [ 1059.556941][T27481] usb 4-1: USB disconnect, device number 72 [ 1059.606013][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1059.624635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1059.645023][ T1998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.731901][ T22] usb 5-1: USB disconnect, device number 61 [ 1059.846716][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13942'. [ 1060.915586][ T2387] loop4: detected capacity change from 0 to 512 [ 1060.987570][ T2387] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1061.010025][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1061.068762][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1061.078272][ T2387] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1061.098042][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1061.127149][ T2387] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1061.142705][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1061.187609][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1061.188100][ T2387] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1061.218391][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1061.253854][ T1998] device veth0_vlan entered promiscuous mode [ 1061.293683][ T1998] device veth1_vlan entered promiscuous mode [ 1061.307701][ T2387] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #16: comm syz.4.13954: corrupted xattr block 31 [ 1061.376767][ T2387] EXT4-fs (loop4): Remounting filesystem read-only [ 1061.396534][ T2387] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 1061.429930][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1061.445903][ T2387] EXT4-fs (loop4): 1 orphan inode deleted [ 1061.458988][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1061.473134][ T2387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1061.480823][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1061.517643][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1061.579699][ T1998] device veth0_macvtap entered promiscuous mode [ 1061.617190][ T1998] device veth1_macvtap entered promiscuous mode [ 1061.678740][ T1998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.751661][ T1998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.796380][ T1998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.836322][ T1998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.866450][ T1998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.896841][ T1998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.927655][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1061.928942][ T1998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.978372][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1062.000441][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1062.040841][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1062.082643][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1062.138249][ T2415] loop4: detected capacity change from 0 to 512 [ 1062.138603][ T1998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.186771][ T1998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.212008][ T1998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.256153][ T1998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.286701][ T2415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1062.322356][ T1998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.390406][ T2415] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.13962: Directory hole found for htree leaf block 0 [ 1062.420300][ T1998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.445253][ T1998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.482714][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1062.500601][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1062.531967][ T2391] loop2: detected capacity change from 0 to 32768 [ 1062.572457][ T1998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.595195][ T1998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.636517][ T1998] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.677909][ T2391] XFS (loop2): Mounting V5 Filesystem [ 1062.706050][ T1998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.784703][ T2391] XFS (loop2): Ending clean mount [ 1062.791396][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1062.827647][ T2391] XFS (loop2): Quotacheck needed: Please wait. [ 1062.950011][ T2454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13970'. [ 1062.964188][ T2454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13970'. [ 1063.036916][ T2454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13970'. [ 1063.201971][ T2391] XFS (loop2): Quotacheck: Done. [ 1063.516097][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.533924][ T4280] XFS (loop2): Unmounting Filesystem [ 1063.536755][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.567415][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1063.691374][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.705203][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.736847][T30577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1064.982695][ T2520] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.13990'. [ 1065.069246][ T2527] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1065.076529][ T2520] netlink: zone id is out of range [ 1065.085811][ T2520] netlink: del zone limit has 4 unknown bytes [ 1065.095162][ T2527] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1065.410583][ T2537] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1065.823710][ T2560] netlink: 'syz.3.14001': attribute type 3 has an invalid length. [ 1065.856805][ T2560] netlink: 766 bytes leftover after parsing attributes in process `syz.3.14001'. [ 1065.866065][ T2559] netlink: 'syz.2.14002': attribute type 21 has an invalid length. [ 1066.033744][ T2518] loop4: detected capacity change from 0 to 32768 [ 1066.227245][ T2518] XFS (loop4): Mounting V5 Filesystem [ 1066.326446][T26907] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1066.345322][ T2518] XFS (loop4): Ending clean mount [ 1066.363051][ T2518] XFS (loop4): Quotacheck needed: Please wait. [ 1066.400132][ T2584] netlink: 9060 bytes leftover after parsing attributes in process `syz.2.14008'. [ 1066.520564][T26907] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1066.543440][T26907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.554583][ T2518] XFS (loop4): Quotacheck: Done. [ 1066.597672][T26907] usb 6-1: Product: syz [ 1066.601938][T26907] usb 6-1: Manufacturer: syz [ 1066.626407][T26907] usb 6-1: SerialNumber: syz [ 1066.647366][T26907] usb 6-1: config 0 descriptor?? [ 1066.674580][T26907] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1066.823324][ T4282] XFS (loop4): Unmounting Filesystem [ 1067.134916][ T4322] usb 6-1: USB disconnect, device number 2 [ 1068.058408][ T2631] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14023'. [ 1068.158529][ T2608] loop3: detected capacity change from 0 to 32768 [ 1068.232370][ T4541] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1068.436570][ T4322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1068.636503][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 1068.651953][ T4322] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.716370][ T4322] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.766407][ T4322] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.803449][ T2656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14030'. [ 1068.818954][ T4322] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1068.856545][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1068.892307][ T2656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14030'. [ 1068.896096][ T4322] usb 6-1: Product: syz [ 1068.922071][ T2656] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14030'. [ 1068.936354][ T4322] usb 6-1: Manufacturer: syz [ 1068.951435][ T4322] usb 6-1: SerialNumber: syz [ 1068.982051][ T4322] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input60 [ 1069.218933][T26907] usb 6-1: USB disconnect, device number 3 [ 1069.253715][T26907] appletouch 6-1:1.0: input: appletouch disconnected [ 1069.516640][ T2679] block nbd3: NBD_DISCONNECT [ 1069.982861][ T2701] netlink: 'syz.5.14045': attribute type 12 has an invalid length. [ 1070.524238][ T2723] netlink: 'syz.3.14053': attribute type 15 has an invalid length. [ 1070.543102][ T2723] netlink: 666 bytes leftover after parsing attributes in process `syz.3.14053'. [ 1070.853544][ T2738] Error parsing options; rc = [-22] [ 1071.007566][ T2741] loop2: detected capacity change from 0 to 64 [ 1071.410781][ T2754] netlink: 'syz.3.14064': attribute type 3 has an invalid length. [ 1071.440789][ T2754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14064'. [ 1071.710551][ T2766] kcapi: manufacturer command 1 unknown. [ 1071.921107][ T2767] loop2: detected capacity change from 0 to 4096 [ 1071.966842][ T2767] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1072.026432][T27481] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1072.068185][ T2767] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1072.211272][ T75] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1072.226577][T27481] usb 4-1: Using ep0 maxpacket: 16 [ 1072.234305][T27481] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1072.261600][ T4280] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1072.279217][ T4280] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1072.289372][T27481] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.298360][ T4280] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1072.316341][T27481] usb 4-1: config 0 has no interface number 0 [ 1072.326907][ T4297] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1072.348108][T27481] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 1072.363715][ T4280] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1072.380641][T27481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.411023][T27481] usb 4-1: Product: syz [ 1072.415273][T27481] usb 4-1: Manufacturer: syz [ 1072.437281][T27481] usb 4-1: SerialNumber: syz [ 1072.453259][T27481] usb 4-1: config 0 descriptor?? [ 1072.481321][T27481] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 1072.524108][T27481] usb 4-1: No valid video chain found. [ 1072.654746][ T2762] loop5: detected capacity change from 0 to 32768 [ 1072.705006][T27481] usb 4-1: USB disconnect, device number 73 [ 1072.752191][ T2762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.14067 (2762) [ 1072.830131][ T2762] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1072.899127][ T2762] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1072.934073][ T2762] BTRFS info (device loop5): using free space tree [ 1073.400585][ T2762] BTRFS info (device loop5): enabling ssd optimizations [ 1073.586827][ T1998] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1074.171717][ T2880] loop2: detected capacity change from 0 to 128 [ 1074.316789][ T2880] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 1074.548926][ T4280] sysv_free_block: flc_count > flc_size [ 1074.582507][ T4280] sysv_free_block: flc_count > flc_size [ 1074.609486][ T4280] sysv_free_block: flc_count > flc_size [ 1074.628447][ T4280] sysv_free_block: flc_count > flc_size [ 1074.634090][ T4280] sysv_free_block: flc_count > flc_size [ 1074.645764][ T4280] sysv_free_block: flc_count > flc_size [ 1074.662028][ T4280] sysv_free_block: flc_count > flc_size [ 1074.672197][ T4280] sysv_free_block: flc_count > flc_size [ 1074.694894][ T4280] sysv_free_block: flc_count > flc_size [ 1074.711052][ T4280] sysv_free_block: flc_count > flc_size [ 1074.735050][ T4280] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1075.573902][ T2890] loop4: detected capacity change from 0 to 32768 [ 1075.718961][ T2890] XFS (loop4): Mounting V5 Filesystem [ 1075.881913][ T2942] device bridge6 entered promiscuous mode [ 1075.947735][ T2890] XFS (loop4): Ending clean mount [ 1076.012292][ T2890] XFS (loop4): Quotacheck needed: Please wait. [ 1076.234634][ T2890] XFS (loop4): Quotacheck: Done. [ 1076.429405][ T4282] XFS (loop4): Unmounting Filesystem [ 1076.615262][ T2965] device wlan0 entered promiscuous mode [ 1076.893976][ T2982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14144'. [ 1076.944137][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14144'. [ 1076.969538][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14144'. [ 1077.709195][ T3012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14159'. [ 1077.754006][ T3011] loop3: detected capacity change from 0 to 2048 [ 1077.996737][ T3019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14162'. [ 1078.428455][ T3034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14170'. [ 1078.704792][ T3045] loop3: detected capacity change from 0 to 1764 [ 1078.857923][ T3046] loop5: detected capacity change from 0 to 4096 [ 1078.919650][ T4283] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1079.001660][ T4283] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1079.020472][ T3046] ntfs3: loop5: ino=9, attr_set_size [ 1079.222858][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14179'. [ 1079.671820][ T5402] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1079.872509][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1079.900403][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1079.929217][ T5402] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1079.961722][ T5402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.980601][ T5402] usb 5-1: Product: syz [ 1079.984858][ T5402] usb 5-1: Manufacturer: syz [ 1080.006425][ T5402] usb 5-1: SerialNumber: syz [ 1080.024576][ T5402] usb 5-1: config 0 descriptor?? [ 1080.049507][ T3088] loop5: detected capacity change from 0 to 2048 [ 1080.057877][ T5402] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1080.106817][ T3088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1080.189144][ T3093] dlm: non-version read from control device 207 [ 1080.502168][ T5402] usb 5-1: USB disconnect, device number 62 [ 1080.542588][ T3101] loop5: detected capacity change from 0 to 512 [ 1080.702734][ T3101] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1080.784158][ T3101] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.14200: No space for directory leaf checksum. Please run e2fsck -D. [ 1080.862869][ T3101] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.14200: checksumming directory block 0 [ 1080.984076][ T3114] loop2: detected capacity change from 0 to 1024 [ 1081.011751][ T1998] EXT4-fs (loop5): unmounting filesystem. [ 1081.047275][ T3114] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1081.159596][ T3114] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.14204: lblock 2 mapped to illegal pblock 2 (length 1) [ 1081.227345][ T3095] loop3: detected capacity change from 0 to 32768 [ 1081.244297][ T3095] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.14198 (3095) [ 1081.279168][ T3114] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1081.291443][ T3114] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.14204: lblock 0 mapped to illegal pblock 48 (length 1) [ 1081.311663][ T3095] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1081.323235][ T3095] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1081.332819][ T3095] BTRFS info (device loop3): using free space tree [ 1081.342741][ T3114] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1081.362376][ T3114] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.14204: Failed to acquire dquot type 0 [ 1081.459524][ T3114] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1081.485847][ T3114] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.14204: mark_inode_dirty error [ 1081.501428][ T3114] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1081.513144][ T3114] EXT4-fs (loop2): 1 orphan inode deleted [ 1081.519776][ T3114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1081.530362][ T4297] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1081.554051][ T4297] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1081.616873][ T4297] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 1081.671282][ T3095] BTRFS info (device loop3): enabling ssd optimizations [ 1081.697836][ T3095] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1081.781621][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 1081.809420][ T4298] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1081.903446][ T4265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4265) [ 1081.939187][ T4298] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1081.981570][ T4298] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 1082.026648][ T3153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14211'. [ 1082.044050][ T4280] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1082.076373][ T3153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14211'. [ 1082.089864][ T4280] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1082.115910][ T3153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14211'. [ 1082.131579][ T4280] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1083.096513][T27479] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1083.332772][T27479] usb 1-1: config 1 has an invalid interface number: 82 but max is 1 [ 1083.352814][T27479] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.395286][T27479] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1083.415213][T27479] usb 1-1: config 1 has no interface number 2 [ 1083.445030][T27479] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.490237][T27479] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1083.519642][T27479] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1083.559680][T27479] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.584785][T27479] usb 1-1: config 1 interface 82 has no altsetting 0 [ 1083.594150][T27479] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1083.621930][T27479] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.653950][T27479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.696366][T27479] usb 1-1: Product: syz [ 1083.703937][T27479] usb 1-1: Manufacturer: syz [ 1083.720852][T27479] usb 1-1: SerialNumber: syz [ 1083.756590][ T5621] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1083.785954][T27479] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 1083.816713][T27479] cdc_ncm 1-1:1.0: bind() failure [ 1083.957953][ T5621] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 1083.998317][ T5621] usb 4-1: config index 0 descriptor too short (expected 87, got 72) [ 1084.021576][ T5621] usb 4-1: config index 1 descriptor too short (expected 87, got 72) [ 1084.035126][ T5621] usb 4-1: config index 2 descriptor too short (expected 87, got 72) [ 1084.047085][ T5621] usb 4-1: config index 3 descriptor too short (expected 87, got 72) [ 1084.107611][ T5621] usb 4-1: config index 4 descriptor too short (expected 87, got 72) [ 1084.140684][ T5621] usb 4-1: config index 5 descriptor too short (expected 87, got 72) [ 1084.150967][ T5621] usb 4-1: config index 6 descriptor too short (expected 87, got 72) [ 1084.191164][ T5621] usb 4-1: config index 7 descriptor too short (expected 87, got 72) [ 1084.239114][ T5621] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1084.256521][T26907] usb 1-1: USB disconnect, device number 51 [ 1084.306914][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.315048][ T5621] usb 4-1: Product: syz [ 1084.362100][ T5621] usb 4-1: Manufacturer: syz [ 1084.377430][ T5621] usb 4-1: SerialNumber: syz [ 1084.417623][ T5621] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1084.525993][ T5621] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1085.028940][ T4363] usb 4-1: USB disconnect, device number 74 [ 1085.458708][ T3260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14253'. [ 1085.576858][ T5621] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1085.583973][ T5621] ath9k_htc: Failed to initialize the device [ 1085.629937][ T4363] usb 4-1: ath9k_htc: USB layer deinitialized [ 1085.976593][ T22] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1086.023567][ T3281] loop5: detected capacity change from 0 to 2048 [ 1086.064780][ T3281] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1086.168787][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.188897][ T3285] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1086.229920][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.302529][ T22] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1086.342681][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.385330][ T22] usb 1-1: Product: syz [ 1086.397044][ T22] usb 1-1: Manufacturer: syz [ 1086.412129][ T22] usb 1-1: SerialNumber: syz [ 1086.448156][ T22] usb 1-1: config 0 descriptor?? [ 1086.478052][ T22] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 1086.526350][ T22] usb 1-1: No valid video chain found. [ 1086.701821][T26907] usb 1-1: USB disconnect, device number 52 [ 1086.840960][ T3305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14270'. [ 1086.870032][ T3305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14270'. [ 1086.964939][ T3309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14272'. [ 1087.029706][ T3310] loop3: detected capacity change from 0 to 1024 [ 1087.078146][ T3310] /dev/loop3: Can't open blockdev [ 1087.402768][ T3321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14277'. [ 1087.440399][ T3321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14277'. [ 1087.754832][ T3336] loop2: detected capacity change from 0 to 764 [ 1087.970843][ T3336] Symlink component flag not implemented [ 1088.015882][ T3336] Symlink component flag not implemented [ 1088.046668][ T3336] Symlink component flag not implemented (128) [ 1088.095683][ T3336] Symlink component flag not implemented (122) [ 1088.252605][ T3352] device geneve5 entered promiscuous mode [ 1088.261331][ T3353] loop5: detected capacity change from 0 to 512 [ 1088.380207][ T3353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1088.451283][ T3319] loop4: detected capacity change from 0 to 32768 [ 1088.667371][ T1998] EXT4-fs (loop5): unmounting filesystem. [ 1088.687967][ T3319] XFS (loop4): Mounting V5 Filesystem [ 1088.972330][ T3319] XFS (loop4): Ending clean mount [ 1089.234932][ T4282] XFS (loop4): Unmounting Filesystem [ 1090.236412][ T22] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1090.335235][ T3397] loop2: detected capacity change from 0 to 32764 [ 1090.448132][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.450294][ T22] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1090.450330][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.450354][ T22] usb 5-1: Product: syz [ 1090.450372][ T22] usb 5-1: Manufacturer: syz [ 1090.450390][ T22] usb 5-1: SerialNumber: syz [ 1090.452450][ T22] usb 5-1: config 0 descriptor?? [ 1090.552227][ T3397] syz.2.14298: attempt to access beyond end of device [ 1090.552227][ T3397] loop2: rw=4096, sector=32767, nr_sectors = 1 limit=32764 [ 1090.552315][ T3397] XFS (loop2): last sector read failed [ 1090.672085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.685580][ T22] cdc_subset: probe of 5-1:0.0 failed with error -22 [ 1090.892574][ T22] usb 5-1: USB disconnect, device number 63 [ 1090.966728][ T3445] netlink: 'syz.3.14316': attribute type 11 has an invalid length. [ 1091.074211][ T3448] binder: 3447:3448 ioctl c00c6211 0 returned -14 [ 1091.299295][ T3454] loop3: detected capacity change from 0 to 2048 [ 1091.480220][ T4541] udevd[4541]: incorrect nilfs2 checksum on /dev/loop3 [ 1091.646332][ T3466] netlink: 'syz.3.14322': attribute type 4 has an invalid length. [ 1091.646359][ T3466] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14322'. [ 1092.451515][ T3495] netlink: 'syz.4.14336': attribute type 28 has an invalid length. [ 1092.476419][ T3495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14336'. [ 1092.487083][ T4363] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1092.653985][ T3498] loop2: detected capacity change from 0 to 4096 [ 1092.676419][ T4363] usb 1-1: Using ep0 maxpacket: 32 [ 1092.689029][ T4363] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1092.713980][ T3498] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1092.731372][ T4363] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1092.779560][ T3498] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1092.797468][ T4363] usb 1-1: string descriptor 0 read error: -22 [ 1092.831536][ T4363] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1092.868914][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.877336][ T3498] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1092.877422][ T3498] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1092.877485][ T3498] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1092.893207][ T3498] ntfs: volume version 3.1. [ 1093.015454][ T3489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1093.054622][ T3498] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1093.065027][ T4363] usb 1-1: MIDIStreaming interface descriptor not found [ 1093.137570][ T3498] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1093.246419][ T3498] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1093.326658][ T3498] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1093.356310][ T3498] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1093.380139][ T4363] usb 1-1: USB disconnect, device number 53 [ 1093.602616][ T3520] kAFS: unable to lookup cell '(/cL' [ 1093.925565][ T3528] loop3: detected capacity change from 0 to 64 [ 1094.053404][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1095.123613][ T3565] loop4: detected capacity change from 0 to 4096 [ 1095.246598][ T3575] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.276596][ T3565] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 1095.336938][ T3565] Remounting filesystem read-only [ 1095.883391][ T3592] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14374'. [ 1095.915743][ T3594] SET target dimension over the limit! [ 1095.923215][ T3592] 0X: renamed from caif0 [ 1096.006946][ T3592] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1096.099908][ T3563] loop5: detected capacity change from 0 to 32768 [ 1096.155348][ T3563] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1096.215275][ T3563] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1096.246639][ T3563] BTRFS info (device loop5): using free space tree [ 1096.451727][ T5621] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1096.541335][ T3563] BTRFS info (device loop5): enabling ssd optimizations [ 1096.562039][ T3563] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1096.780982][ T5621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1096.801935][ T5621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1096.833502][ T5621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1096.866781][ T5621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1096.891665][ T3644] affs: No valid root block on device nbd3 [ 1096.921615][ T5621] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1096.942086][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.999963][ T5621] usb 3-1: config 0 descriptor?? [ 1097.200437][ T3652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14387'. [ 1097.235913][ T5621] hdpvr 3-1:0.0: firmware version 0x8 dated [ 1097.436647][ T5621] hdpvr 3-1:0.0: device init failed [ 1097.442287][ T5621] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1097.464413][ T5621] usb 3-1: USB disconnect, device number 68 [ 1097.766441][T26907] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1097.958651][T26907] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1097.995976][T26907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.046753][T26907] usb 1-1: config 0 descriptor?? [ 1098.070968][T26907] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1098.084733][ T3674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14394'. [ 1098.095414][ T3676] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1098.462531][T26907] gspca_stv06xx: I2C: Read error writing address: -71 [ 1098.478819][T26907] usb 1-1: USB disconnect, device number 54 [ 1098.766498][ T3696] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1098.833059][ T3696] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1099.795889][ T3686] loop4: detected capacity change from 0 to 40427 [ 1099.882147][ T3686] F2FS-fs (loop4): invalid crc value [ 1099.926656][ T3686] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1100.076973][T27479] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1100.160390][ T3686] F2FS-fs (loop4): Start checkpoint disabled! [ 1100.281212][ T3686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1100.302047][T27479] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1100.336549][T27479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.337867][ T3746] netlink: 'syz.2.14423': attribute type 2 has an invalid length. [ 1100.390134][T27479] usb 1-1: Product: syz [ 1100.402764][ T3746] netlink: 504 bytes leftover after parsing attributes in process `syz.2.14423'. [ 1100.407880][T27479] usb 1-1: Manufacturer: syz [ 1100.447401][T27479] usb 1-1: SerialNumber: syz [ 1100.487217][T27479] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1100.510949][ T3751] netlink: 'syz.3.14424': attribute type 1 has an invalid length. [ 1100.569476][T27481] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1101.043752][T26907] usb 1-1: USB disconnect, device number 55 [ 1101.172658][ T3767] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14433'. [ 1101.629179][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14438'. [ 1101.902644][T27481] usb 1-1: Service connection timeout for: 256 [ 1101.922461][T27481] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1101.943788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.026880][ T3791] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1102.038499][T27481] ath9k_htc: Failed to initialize the device [ 1102.044902][T26907] usb 1-1: ath9k_htc: USB layer deinitialized [ 1102.373598][ T3777] loop5: detected capacity change from 0 to 32768 [ 1102.476572][T26907] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1102.525741][ T3777] XFS (loop5): Mounting V5 Filesystem [ 1102.556070][ T3814] device bridge8 entered promiscuous mode [ 1102.666574][T26907] usb 1-1: Using ep0 maxpacket: 16 [ 1102.675948][T26907] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1102.696387][T26907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.704480][T26907] usb 1-1: Product: syz [ 1102.708901][T26907] usb 1-1: Manufacturer: syz [ 1102.713767][T26907] usb 1-1: SerialNumber: syz [ 1102.720259][T26907] r8152-cfgselector 1-1: config 0 descriptor?? [ 1102.773436][ T3822] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1102.823880][ T3777] XFS (loop5): Ending clean mount [ 1103.057891][ T1998] XFS (loop5): Unmounting Filesystem [ 1103.156692][T26907] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1103.174199][T26907] r8152-cfgselector 1-1: USB disconnect, device number 56 [ 1103.291435][ T3833] loop2: detected capacity change from 0 to 164 [ 1103.380253][ T3833] Symlink component flag not implemented [ 1103.406989][ T3833] Symlink component flag not implemented (7) [ 1103.516392][ T22] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1103.726548][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 1103.761220][ T22] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1103.808531][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.836331][ T22] usb 5-1: Product: syz [ 1103.842379][ T22] usb 5-1: Manufacturer: syz [ 1103.859167][ T22] usb 5-1: SerialNumber: syz [ 1103.895584][ T22] r8152-cfgselector 5-1: config 0 descriptor?? [ 1104.122009][ T22] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1104.274686][ T4298] usb 5-1: config 0 descriptor?? [ 1104.346720][ T4298] usb 5-1: can't set config #0, error -71 [ 1104.362346][T27481] usb 5-1: USB disconnect, device number 64 [ 1104.546664][T27479] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1104.746362][T27479] usb 3-1: Using ep0 maxpacket: 32 [ 1104.771247][T27479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.791176][T27479] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1104.800709][T27479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.810034][T27479] usb 3-1: Product: syz [ 1104.814522][T27479] usb 3-1: Manufacturer: syz [ 1104.820726][T27479] usb 3-1: SerialNumber: syz [ 1104.841646][T27479] usb 3-1: config 0 descriptor?? [ 1104.868126][T27479] usb 3-1: bad CDC descriptors [ 1104.873516][T27479] usb 3-1: unsupported MDLM descriptors [ 1104.975762][ T3877] loop5: detected capacity change from 0 to 512 [ 1105.023744][ T3877] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1105.051255][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1105.051275][ T26] audit: type=1326 audit(1105.480:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.4.14485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1105.098068][ T22] usb 3-1: USB disconnect, device number 69 [ 1105.124281][ T3877] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.14483: invalid indirect mapped block 32768 (level 2) [ 1105.226100][ T3877] EXT4-fs (loop5): Remounting filesystem read-only [ 1105.243231][ T26] audit: type=1326 audit(1105.520:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.4.14485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1105.268050][ T26] audit: type=1326 audit(1105.520:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.4.14485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1105.292534][ T3877] EXT4-fs (loop5): 1 orphan inode deleted [ 1105.292622][ T26] audit: type=1326 audit(1105.520:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.4.14485" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76aa39de59 code=0x7ffc0000 [ 1105.326351][ T3877] EXT4-fs (loop5): 1 truncate cleaned up [ 1105.332087][ T3877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1105.379304][ T3877] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.14483: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1105.475525][ T3877] EXT4-fs (loop5): Remounting filesystem read-only [ 1105.587823][ T1998] EXT4-fs (loop5): unmounting filesystem. [ 1105.864144][ T3903] netlink: 'syz.2.14494': attribute type 1 has an invalid length. [ 1106.404682][ T3924] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1107.030433][ T26] audit: type=1326 audit(1107.460:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3946 comm="syz.5.14513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7bd9de59 code=0x7ffc0000 [ 1107.135698][ T26] audit: type=1326 audit(1107.510:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3946 comm="syz.5.14513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7bd9de59 code=0x7ffc0000 [ 1107.235603][ T26] audit: type=1326 audit(1107.510:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3946 comm="syz.5.14513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7bd9de59 code=0x7ffc0000 [ 1107.294638][ T26] audit: type=1326 audit(1107.510:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3946 comm="syz.5.14513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fce7bd9de59 code=0x7ffc0000 [ 1107.388237][ T26] audit: type=1326 audit(1107.510:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3946 comm="syz.5.14513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7bd9de59 code=0x7ffc0000 [ 1107.466439][ T26] audit: type=1326 audit(1107.510:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3946 comm="syz.5.14513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7bd9de59 code=0x7ffc0000 [ 1107.823076][ T3970] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 1107.823076][ T3970] program syz.5.14525 not setting count and/or reply_len properly [ 1107.856828][T27479] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1108.108746][T27479] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.154610][T27479] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1108.173787][T27479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.226431][ T22] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1108.249859][T27479] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1108.292061][ T3986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1108.308506][ T3986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1108.432589][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.459906][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1108.480262][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 1108.495372][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.515617][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1108.540725][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.564490][ T22] usb 4-1: config 0 descriptor?? [ 1108.768863][ T4004] xt_NFQUEUE: number of total queues is 0 [ 1108.798282][T27481] usb 4-1: USB disconnect, device number 75 [ 1108.992549][ T4007] loop2: detected capacity change from 0 to 8192 [ 1109.337298][T27479] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1109.491874][ T4028] loop2: detected capacity change from 0 to 512 [ 1109.539384][T27479] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1109.557355][ T4028] FAT-fs (loop2): Invalid FSINFO signature: 0x41615231, 0x61417272 (sector = 1) [ 1109.569810][T27479] stv0680 5-1:4.0: last error: 86, command = 0x0 [ 1109.586710][ T4028] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1109.608024][T27479] usb 5-1: USB disconnect, device number 65 [ 1109.751468][ T4034] netlink: 'syz.0.14555': attribute type 46 has an invalid length. [ 1109.761747][ T4034] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14555'. [ 1109.771790][ T4298] FAT-fs (loop2): Invalid FSINFO signature: 0x41615231, 0x61417272 (sector = 1) [ 1110.032655][ T4037] loop5: detected capacity change from 0 to 4096 [ 1110.099839][ T4037] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1110.996380][ T5916] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1111.159196][ T4079] loop3: detected capacity change from 0 to 4096 [ 1111.188158][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1111.211493][ T4079] /dev/loop3: Can't open blockdev [ 1111.219976][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1111.250013][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1111.296684][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1111.340004][ T5916] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1111.357641][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.379099][ T5916] usb 5-1: Product: syz [ 1111.386632][ T5916] usb 5-1: Manufacturer: syz [ 1111.407698][ T5916] usb 5-1: SerialNumber: syz [ 1111.438549][ T5916] usb 5-1: config 0 descriptor?? [ 1111.462434][ T5916] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1111.702149][ T4066] loop2: detected capacity change from 0 to 32768 [ 1111.760522][ T4066] jfs_lookup: dtSearch returned -5 [ 1111.874388][ T5916] scsi host1: usb-storage 5-1:0.0 [ 1111.917740][ T5916] usb 5-1: USB disconnect, device number 66 [ 1111.933529][ T4095] nfs: Unknown parameter 'ntext' [ 1112.217432][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1112.217449][ T26] audit: type=1326 audit(1112.650:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.14585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1112.326375][ T26] audit: type=1326 audit(1112.690:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.14585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1112.486711][ T26] audit: type=1326 audit(1112.690:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.14585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1112.624375][ T26] audit: type=1326 audit(1112.690:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.14585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1112.982608][ T26] audit: type=1326 audit(1113.410:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4121 comm="syz.0.14594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad6ed9de59 code=0x0 [ 1113.151296][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1113.196593][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1113.216808][ T4130] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1114.418402][ T4174] loop2: detected capacity change from 0 to 256 [ 1115.339307][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.504793][ T4212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14633'. [ 1115.666345][ T22] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1115.856424][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 1115.868316][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.916991][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1115.935773][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1115.955398][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.975686][ T22] usb 3-1: Product: syz [ 1115.982037][ T22] usb 3-1: Manufacturer: syz [ 1116.006354][ T22] usb 3-1: SerialNumber: syz [ 1116.017780][ T4231] loop4: detected capacity change from 0 to 128 [ 1116.452514][ T4237] loop5: detected capacity change from 0 to 4096 [ 1116.462833][ T22] usb 3-1: cannot find UAC_HEADER [ 1116.505822][ T22] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1116.544350][ T22] usb 3-1: USB disconnect, device number 70 [ 1116.597598][ T4237] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1116.663428][ T4237] ntfs3: loop5: Failed to load $Extend. [ 1116.787785][ T4541] udevd[4541]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.280328][ T4258] xt_addrtype: ipv6 does not support BROADCAST matching [ 1117.481837][ T4275] SET target dimension over the limit! [ 1117.757281][ T4291] usb usb8: usbfs: process 4291 (syz.2.14665) did not claim interface 0 before use [ 1117.783580][ T4295] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551613) [ 1117.823439][ T4295] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1118.595503][ T4344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14680'. [ 1118.694528][ T4346] loop4: detected capacity change from 0 to 1024 [ 1118.809058][ T4348] sctp: [Deprecated]: syz.3.14682 (pid 4348) Use of int in maxseg socket option. [ 1118.809058][ T4348] Use struct sctp_assoc_value instead [ 1118.838996][ T4346] hfsplus: cannot replace xattr [ 1118.921960][ T4352] loop2: detected capacity change from 0 to 512 [ 1118.950946][ T4352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1119.011188][ T4352] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1119.139640][ T4352] EXT4-fs (loop2): 1 truncate cleaned up [ 1119.145492][ T4352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1119.480999][ T4360] loop5: detected capacity change from 0 to 4096 [ 1119.508274][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 1119.543191][ T4360] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1119.896452][ T4375] netlink: 'syz.5.14693': attribute type 1 has an invalid length. [ 1119.916032][ T4375] netlink: 'syz.5.14693': attribute type 3 has an invalid length. [ 1119.973435][ T4375] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14693'. [ 1120.342413][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14700'. [ 1120.389115][ T4388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14700'. [ 1120.407691][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14700'. [ 1120.447909][ T4388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14700'. [ 1120.513834][ T4388] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14700'. [ 1120.932418][ T4406] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14709'. [ 1121.464034][ T4427] netlink: 'syz.0.14718': attribute type 4 has an invalid length. [ 1121.761797][ T4441] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 4441 comm: syz.3.14725) [ 1121.777332][ T26] audit: type=1800 audit(1122.210:650): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14725" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=134657 res=0 errno=0 [ 1122.042220][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14730'. [ 1122.574199][ T4471] loop3: detected capacity change from 0 to 256 [ 1122.684946][ T4541] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1122.742565][ T4477] cgroup: Unexpected value for 'cpuset_v2_mode' [ 1122.991274][ T4485] loop3: detected capacity change from 0 to 64 [ 1123.597527][ T4504] loop4: detected capacity change from 0 to 1764 [ 1123.784006][ T4513] netlink: 'syz.0.14762': attribute type 2 has an invalid length. [ 1123.919097][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14764'. [ 1123.932075][ T4521] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1123.962237][ T4519] device bridge_slave_1 left promiscuous mode [ 1124.006131][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.028367][ T4519] device bridge_slave_0 left promiscuous mode [ 1124.041266][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.313193][ T4525] device sit0 entered promiscuous mode [ 1124.354479][ T4525] netlink: 'syz.2.14768': attribute type 1 has an invalid length. [ 1124.399762][ T4525] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14768'. [ 1124.851883][ T4515] loop3: detected capacity change from 0 to 32768 [ 1124.880944][ T4515] /dev/loop3: Can't open blockdev [ 1125.343246][ T4561] loop5: detected capacity change from 0 to 22 [ 1125.388257][ T4561] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1125.445338][ T4561] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1125.607486][ T4565] device xfrm0 entered promiscuous mode [ 1126.196747][ T4583] loop5: detected capacity change from 0 to 512 [ 1126.284764][ T4583] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.14793: bad orphan inode 15 [ 1126.394319][ T4583] ext4_test_bit(bit=14, block=5) = 0 [ 1126.400335][ T4583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1126.419615][ T4583] EXT4-fs error (device loop5): __ext4_new_inode:1081: comm syz.5.14793: reserved inode found cleared - inode=1 [ 1126.588320][ T1998] EXT4-fs (loop5): unmounting filesystem. [ 1126.996471][T27479] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1127.211799][T27479] usb 3-1: Using ep0 maxpacket: 32 [ 1127.221885][T27479] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1127.246452][T27479] usb 3-1: config 0 has no interface number 0 [ 1127.260967][T27479] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1127.271528][T27479] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1127.292356][T27479] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1127.314806][T27479] usb 3-1: Product: syz [ 1127.332747][T27479] usb 3-1: Manufacturer: syz [ 1127.350659][T27479] usb 3-1: SerialNumber: syz [ 1127.413945][T27479] usb 3-1: config 0 descriptor?? [ 1127.633472][T27479] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1127.648103][T27479] ipheth: probe of 3-1:0.196 failed with error -71 [ 1127.675515][T27479] usb 3-1: USB disconnect, device number 71 [ 1128.096537][T27481] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1128.288371][T27481] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 1128.306613][T27481] usb 1-1: config 0 has no interface number 0 [ 1128.316270][T27481] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1128.365089][T27481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.401739][T27481] usb 1-1: config 0 descriptor?? [ 1128.437468][T27481] ums-realtek 1-1:0.3: USB Mass Storage device detected [ 1128.636863][T26907] usb 1-1: USB disconnect, device number 57 [ 1129.252853][ T4651] binder: 4648:4651 ioctl c0046209 0 returned -22 [ 1130.081283][ T4680] loop2: detected capacity change from 0 to 1024 [ 1130.517213][ T4692] loop5: detected capacity change from 0 to 512 [ 1130.732941][ T4698] loop2: detected capacity change from 0 to 8 [ 1130.825308][ T4698] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1130.865969][ T4698] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1130.907796][ T4704] loop4: detected capacity change from 0 to 64 [ 1130.926456][ T4698] SQUASHFS error: Unable to read directory block [631:26] [ 1131.609869][ T4724] netlink: 'syz.3.14863': attribute type 1 has an invalid length. [ 1131.816633][ T4730] netlink: 'syz.4.14866': attribute type 5 has an invalid length. [ 1132.322308][ T4713] loop2: detected capacity change from 0 to 32768 [ 1132.338544][ T4713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.14858 (4713) [ 1132.416552][ T4713] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1132.437447][ T4713] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1132.458679][ T4750] IPv6: sit1: Disabled Multicast RS [ 1132.470123][ T4713] BTRFS info (device loop2): using free space tree [ 1132.547635][T27479] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1132.691002][ T4713] BTRFS info (device loop2): enabling ssd optimizations [ 1132.785656][T27479] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.812226][T27479] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1132.840747][T27479] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1132.885489][T27479] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1132.944943][T27479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.991667][T27479] usb 1-1: Product: syz [ 1132.996070][T27479] usb 1-1: Manufacturer: syz [ 1133.018581][T27479] usb 1-1: SerialNumber: syz [ 1133.049497][ T4280] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1133.063473][T27479] usblp0: Disabling reads from problematic bidirectional printer [ 1133.263584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.286038][T27479] usblp 1-1:4.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1133.318295][T27479] usb 1-1: USB disconnect, device number 58 [ 1133.400285][T27479] usblp0: removed [ 1133.664320][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.083738][ T4803] netlink: 'syz.4.14893': attribute type 5 has an invalid length. [ 1134.596899][ T4818] netlink: 'syz.2.14899': attribute type 6 has an invalid length. [ 1134.685047][ T4820] loop4: detected capacity change from 0 to 136 [ 1134.712074][ T4822] device ipip1 entered promiscuous mode [ 1134.773431][ T4820] Attempt to read inode for relocated directory [ 1134.896699][ T4826] xt_nat: multiple ranges no longer supported [ 1135.461915][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14914'. [ 1135.611665][ T4852] sg_write: data in/out 8454107/16 bytes for SCSI command 0xf0-- guessing data in; [ 1135.611665][ T4852] program syz.0.14916 not setting count and/or reply_len properly [ 1135.633860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.964239][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14921'. [ 1136.017205][ T26] audit: type=1326 audit(1136.450:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.2.14923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1136.017918][ T4864] device hsr0 left promiscuous mode [ 1136.096870][ T26] audit: type=1326 audit(1136.450:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.2.14923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1136.152694][ T4864] bridge0: port 5(hsr0) entered disabled state [ 1136.170130][ T26] audit: type=1326 audit(1136.510:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.2.14923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1136.213555][ T4864] device dummy0 left promiscuous mode [ 1136.228694][ T4864] bridge0: port 4(dummy0) entered disabled state [ 1136.256401][ T26] audit: type=1326 audit(1136.510:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.2.14923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1136.281094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.295770][ T4864] device team0 left promiscuous mode [ 1136.304998][ T4864] device team_slave_0 left promiscuous mode [ 1136.312221][ T4872] loop4: detected capacity change from 0 to 1024 [ 1136.338723][ T4864] device team_slave_1 left promiscuous mode [ 1136.344856][ T4864] device wlan1 left promiscuous mode [ 1136.387989][ T4864] bridge0: port 3(team0) entered disabled state [ 1136.414893][ T26] audit: type=1326 audit(1136.510:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.2.14923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7ffc0000 [ 1136.486276][ T4864] device bridge_slave_0 left promiscuous mode [ 1136.492617][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.511651][ T4878] loop2: detected capacity change from 0 to 256 [ 1136.604482][ T4878] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1136.685700][ T4878] loop2: Can't mount, would change RO state [ 1137.038879][ T4892] netlink: 'syz.0.14936': attribute type 3 has an invalid length. [ 1137.082320][ T4895] IPv6: NLM_F_CREATE should be specified when creating new route [ 1137.259080][ T4900] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14940'. [ 1137.375255][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14943'. [ 1137.411597][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14943'. [ 1137.749437][ T4921] netlink: 'syz.0.14950': attribute type 32 has an invalid length. [ 1137.793552][ T4924] loop3: detected capacity change from 0 to 16 [ 1137.851906][ T4924] erofs: (device loop3): mounted with root inode @ nid 36. [ 1137.904044][ T4928] xt_bpf: check failed: parse error [ 1137.914281][ T4924] syz.3.14952: attempt to access beyond end of device [ 1137.914281][ T4924] loop3: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 1138.001712][ T4924] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1138.015033][ T4931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14955'. [ 1138.589574][ T4952] loop3: detected capacity change from 0 to 256 [ 1138.629374][ T4952] exfat: Deprecated parameter 'namecase' [ 1138.635343][ T4952] exfat: Deprecated parameter 'utf8' [ 1138.689676][ T4952] /dev/loop3: Can't open blockdev [ 1139.422325][ T4981] usb usb8: usbfs: process 4981 (syz.2.14979) did not claim interface 0 before use [ 1139.457159][ T4944] loop4: detected capacity change from 0 to 32768 [ 1139.505430][ T4944] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1140.336922][ T5008] loop5: detected capacity change from 0 to 1024 [ 1140.984031][ T5030] loop3: detected capacity change from 0 to 256 [ 1141.031875][ T4541] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1141.491889][ T5036] loop3: detected capacity change from 0 to 8192 [ 1141.574841][ T4541] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1142.017511][ T5055] loop3: detected capacity change from 0 to 2048 [ 1142.034346][ T5060] tipc: Enabling of bearer rejected, failed to enable media [ 1142.035350][ T5027] loop4: detected capacity change from 0 to 32768 [ 1142.096932][ T4541] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1142.119635][ T5027] read_mapping_page failed! [ 1142.152278][ T5027] ERROR: (device loop4): txCommit: [ 1142.152278][ T5027] [ 1142.798844][ T5079] loop4: detected capacity change from 0 to 4096 [ 1142.875756][ T5084] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1144.004300][ T5112] loop4: detected capacity change from 0 to 4096 [ 1144.121055][ T5112] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1144.177048][ T5097] loop5: detected capacity change from 0 to 32768 [ 1144.209025][ T5097] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.15032 (5097) [ 1144.249667][ T5112] overlayfs: upper fs does not support tmpfile. [ 1144.293978][ T5112] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1144.309051][ T5097] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1144.320525][ T5112] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 1144.359563][ T5097] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1144.369920][ T5112] overlayfs: failed to verify upper root origin [ 1144.400615][ T5097] BTRFS info (device loop5): using free space tree [ 1144.457008][T26907] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1144.520893][ T5103] loop3: detected capacity change from 0 to 32768 [ 1144.557145][ T5103] /dev/loop3: Can't open blockdev [ 1144.578388][ T9] ntfs3: loop4: ntfs3_write_inode r=9 failed, -22. [ 1144.626723][ T4282] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 1144.658433][T26907] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1144.667153][ T4282] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 1144.677212][T26907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.744236][ T5097] BTRFS info (device loop5): enabling ssd optimizations [ 1144.785301][T26907] usb 1-1: config 0 has no interface number 0 [ 1144.825435][T26907] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1144.871798][T26907] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.945752][T26907] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1144.983539][T26907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.006706][ T1998] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1145.022412][T26907] usb 1-1: Product: syz [ 1145.032562][T26907] usb 1-1: Manufacturer: syz [ 1145.046580][T27481] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1145.061608][T26907] usb 1-1: SerialNumber: syz [ 1145.097192][T26907] usb 1-1: config 0 descriptor?? [ 1145.241871][T27481] usb 4-1: Using ep0 maxpacket: 32 [ 1145.249779][T27481] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 1145.292306][T27481] usb 4-1: config 0 has no interface number 0 [ 1145.313542][T27481] usb 4-1: config 0 interface 153 has no altsetting 0 [ 1145.371745][T27481] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1145.406439][T27481] usb 4-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1145.435281][T27481] usb 4-1: Product: syz [ 1145.440127][T27481] usb 4-1: Manufacturer: syz [ 1145.444786][T27481] usb 4-1: SerialNumber: syz [ 1145.485643][T27481] usb 4-1: config 0 descriptor?? [ 1145.712236][T26907] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 1145.740382][T27481] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1145.769858][T26907] usb 1-1: USB disconnect, device number 59 [ 1145.968382][ T5150] loop2: detected capacity change from 0 to 8192 [ 1145.997062][ T5150] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1146.012963][ T5150] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1146.023345][ T5150] REISERFS (device loop2): using ordered data mode [ 1146.030647][ T5150] reiserfs: using flush barriers [ 1146.044817][ T5150] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1146.062610][ T5150] REISERFS (device loop2): checking transaction log (loop2) [ 1146.071397][ T5150] REISERFS (device loop2): Using r5 hash to sort names [ 1146.083569][ T5150] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1146.104005][ T5150] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1146.112586][ T5157] loop4: detected capacity change from 0 to 256 [ 1146.141617][ T5157] exfat: Deprecated parameter 'utf8' [ 1146.176667][T10687] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1146.190030][ T5157] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1146.404117][T10687] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.437465][T10687] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1146.447145][T27481] usb 4-1: reset high-speed USB device number 76 using dummy_hcd [ 1146.492729][T10687] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1146.516316][T10687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.545899][T10687] usb 6-1: config 0 descriptor?? [ 1146.569087][T10687] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1146.586460][T10687] dvb-usb: bulk message failed: -22 (3/0) [ 1146.604886][T10687] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1146.614772][T10687] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1146.623487][T10687] usb 6-1: media controller created [ 1146.631436][T10687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.673845][T10687] dvb-usb: bulk message failed: -22 (6/0) [ 1146.693644][T10687] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1146.723703][T10687] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62 [ 1146.739419][T10687] dvb-usb: schedule remote query interval to 150 msecs. [ 1146.747059][T10687] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1146.799484][ T5153] dvb-usb: bulk message failed: -22 (2/0) [ 1146.809455][ T5151] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1146.825906][T10687] usb 6-1: USB disconnect, device number 4 [ 1146.906168][T10687] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1146.921049][T27481] usb 4-1: failed to restore interface 153 altsetting 198 (error=-71) [ 1146.952867][T27481] ueagle-atm 4-1:0.153: usbatm_usb_probe: bind failed: -19! [ 1146.963789][T27481] usb 4-1: USB disconnect, device number 76 [ 1146.998175][ T5151] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.017377][ T5151] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.028072][ T5151] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1147.046582][ T5151] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1147.069812][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.143750][ T5172] loop4: detected capacity change from 0 to 2048 [ 1147.227118][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1147.279487][ T5172] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1147.382240][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1147.520187][ T5151] elo 0003:04E7:0009.0002: item fetching failed at offset 4/5 [ 1147.538016][ T5151] elo 0003:04E7:0009.0002: parse failed [ 1147.545210][ T5151] elo: probe of 0003:04E7:0009.0002 failed with error -22 [ 1147.753779][ T5151] usb 1-1: USB disconnect, device number 60 [ 1147.962721][ T5192] bridge_slave_0: default FDB implementation only supports local addresses [ 1148.157362][ T5198] loop2: detected capacity change from 0 to 256 [ 1148.220877][ T26] audit: type=1800 audit(1148.650:656): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15068" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048730 res=0 errno=0 [ 1148.616859][ T5210] futex_wake_op: syz.5.15073 tries to shift op by -1; fix this program [ 1149.107410][ T5229] loop4: detected capacity change from 0 to 256 [ 1149.156008][ T5229] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1149.369359][ T5235] device macvlan0 entered promiscuous mode [ 1149.410763][ T5239] loop3: detected capacity change from 0 to 256 [ 1149.467609][ T5239] exfat: Deprecated parameter 'utf8' [ 1149.473172][ T5239] exfat: Deprecated parameter 'namecase' [ 1149.555761][ T5239] exfat: Deprecated parameter 'namecase' [ 1149.581258][ T5239] exfat: Deprecated parameter 'namecase' [ 1149.636546][ T5239] /dev/loop3: Can't open blockdev [ 1149.802264][ T5247] : renamed from vlan0 [ 1150.341834][ T5916] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1150.542342][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1150.560904][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1150.575532][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1150.604895][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1150.623966][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1150.655193][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.674566][ T5916] usb 3-1: config 0 descriptor?? [ 1150.876688][T27481] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1150.890081][ T5916] hdpvr 3-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 1151.087537][T27481] usb 1-1: Using ep0 maxpacket: 8 [ 1151.104325][T27481] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1151.167921][T27481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 1151.212990][T27481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1151.281659][T27481] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1151.332381][T27481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.373229][T27481] usb 1-1: config 0 descriptor?? [ 1151.426589][ T5916] hdpvr 3-1:0.0: Could not setup controls [ 1151.433110][ T5916] hdpvr 3-1:0.0: registering videodev failed [ 1151.472249][ T5916] hdpvr: probe of 3-1:0.0 failed with error -71 [ 1151.528840][ T5916] usb 3-1: USB disconnect, device number 72 [ 1151.829770][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1151.853267][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1151.886495][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1151.917064][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1151.924125][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1151.976457][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1152.013690][T27481] elecom 0003:056E:010D.0003: unknown main item tag 0x0 [ 1152.042304][T27481] elecom 0003:056E:010D.0003: unbalanced collection at end of report description [ 1152.092135][ T5303] loop4: detected capacity change from 0 to 4096 [ 1152.099992][T27481] elecom: probe of 0003:056E:010D.0003 failed with error -22 [ 1152.136571][T27481] usb 1-1: USB disconnect, device number 61 [ 1152.227591][ T5311] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1152.982069][ T5334] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15121'. [ 1153.286363][ T4322] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1153.469701][ T4322] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1153.496334][ T4322] usb 4-1: config 0 has no interface number 0 [ 1153.502987][ T4322] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1153.576347][ T4322] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1153.592357][ T5353] loop2: detected capacity change from 0 to 512 [ 1153.640752][ T5353] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1153.641612][ T4322] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1153.686601][ T5353] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.15130: inode has both inline data and extents flags [ 1153.716890][ T5353] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.15130: couldn't read orphan inode 15 (err -117) [ 1153.738949][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.792102][ T5353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1153.792192][ T4322] usb 4-1: Product: syz [ 1153.835976][ T5353] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.15130: invalid size [ 1153.876367][ T4322] usb 4-1: Manufacturer: syz [ 1153.881146][ T4322] usb 4-1: SerialNumber: syz [ 1153.936588][ T4322] usb 4-1: config 0 descriptor?? [ 1153.943597][ T5333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1153.977713][ T4322] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1154.003651][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 1154.018944][ T4322] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1154.077335][ T5367] xt_socket: unknown flags 0x40 [ 1154.389924][ T5621] usb 4-1: USB disconnect, device number 77 [ 1154.402643][ T5378] loop4: detected capacity change from 0 to 256 [ 1154.418886][ T5376] netlink: 'syz.5.15139': attribute type 16 has an invalid length. [ 1154.447073][ T5621] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1154.463586][ T5378] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 1154.473530][ T5621] cyberjack 4-1:0.69: device disconnected [ 1154.477968][ T5376] netlink: 'syz.5.15139': attribute type 17 has an invalid length. [ 1154.496387][T27481] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1154.575543][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1154.616637][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1154.693746][T27481] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1154.701851][ T5376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1154.712209][T27481] usb 3-1: config 0 has no interface number 0 [ 1154.738870][T27481] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1154.765172][T27481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.792152][ T5380] netlink: 'syz.4.15142': attribute type 6 has an invalid length. [ 1154.796380][T27481] usb 3-1: Product: syz [ 1154.805975][T27481] usb 3-1: Manufacturer: syz [ 1154.810922][T27481] usb 3-1: SerialNumber: syz [ 1154.828752][T27481] usb 3-1: config 0 descriptor?? [ 1154.850058][T27481] usb 3-1: selecting invalid altsetting 1 [ 1154.868027][T27481] dvb_ttusb_budget: ttusb_init_controller: error [ 1154.877969][T27481] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1155.215236][T27481] DVB: Unable to find symbol stv0299_attach() [ 1155.344855][ T5395] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15147'. [ 1155.373290][ T5390] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15147'. [ 1155.415290][T27481] DVB: Unable to find symbol tda8083_attach() [ 1155.430073][T27481] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1155.478439][T27481] usb 3-1: USB disconnect, device number 73 [ 1155.699885][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15150'. [ 1155.908321][ T5411] netlink: 'syz.2.15153': attribute type 2 has an invalid length. [ 1156.048608][ T5418] Bluetooth: MGMT ver 1.22 [ 1156.409830][ T5428] loop5: detected capacity change from 0 to 2048 [ 1156.537182][ T4276] Bluetooth: hci0: link tx timeout [ 1156.543961][ T4276] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1156.892428][ T5446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15169'. [ 1157.392026][ T5459] loop2: detected capacity change from 0 to 8 [ 1157.424752][ T5459] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1157.454447][ T5459] SQUASHFS error: Failed to read block 0x91: -5 [ 1157.507100][ T5459] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1157.514656][ T5459] SQUASHFS error: Unable to read inode 0x11f [ 1158.373945][ T5462] loop5: detected capacity change from 0 to 32768 [ 1158.456527][ T4322] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1158.464711][ T5462] XFS (loop5): Mounting V5 Filesystem [ 1158.616625][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 1158.628591][ T5462] XFS (loop5): Ending clean mount [ 1158.661082][ T4322] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1158.680328][ T5462] XFS (loop5): Quotacheck needed: Please wait. [ 1158.697457][ T4322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1158.730810][ T5474] loop3: detected capacity change from 0 to 32768 [ 1158.735610][ T4322] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1158.766516][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.795541][ T4322] usb 1-1: config 0 descriptor?? [ 1158.801865][ T4541] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1158.805847][ T5478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1158.892048][ T5462] XFS (loop5): Quotacheck: Done. [ 1159.121770][ T1998] XFS (loop5): Unmounting Filesystem [ 1159.166844][ T5476] loop2: detected capacity change from 0 to 32768 [ 1159.220240][ T5476] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.15185 (5476) [ 1159.274697][ T4322] wacom 0003:056A:00BB.0004: unknown main item tag 0x1 [ 1159.291129][ T4322] wacom 0003:056A:00BB.0004: ignoring exceeding usage max [ 1159.323646][ T4322] wacom 0003:056A:00BB.0004: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 1159.408731][ T4322] wacom 0003:056A:00BB.0004: hidraw0: USB HID v0.c1 Device [HID 056a:00bb] on usb-dummy_hcd.0-1/input0 [ 1159.442270][ T4322] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BB.0004/input/input64 [ 1159.512052][ T5476] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1159.536462][ T5476] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1159.565944][ T4322] usb 1-1: USB disconnect, device number 62 [ 1159.586466][ T5476] BTRFS info (device loop2): enabling disk space caching [ 1159.593891][ T5476] BTRFS info (device loop2): force clearing of disk cache [ 1159.657218][ T5476] BTRFS info (device loop2): force zlib compression, level 3 [ 1159.664880][ T5476] BTRFS info (device loop2): disk space caching is enabled [ 1159.733339][ T5468] loop4: detected capacity change from 0 to 65536 [ 1159.852732][ T5468] XFS (loop4): Mounting V5 Filesystem [ 1159.941809][ T5468] XFS (loop4): Ending clean mount [ 1159.949534][ T5468] XFS (loop4): Quotacheck needed: Please wait. [ 1159.972867][ T5476] BTRFS info (device loop2): enabling ssd optimizations [ 1159.981776][T27481] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 1160.001638][ T5476] BTRFS info (device loop2): rebuilding free space tree [ 1160.014565][ T5489] fido_id[5489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1160.036842][ T5476] BTRFS info (device loop2): disabling free space tree [ 1160.055323][ T5476] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1160.056432][T27481] XFS (loop4): Unmount and run xfs_repair [ 1160.097012][ T5476] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1160.116392][T27481] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1160.124136][T27481] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1160.226771][T27481] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1160.256307][T27481] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1160.265406][T27481] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1160.367279][T27481] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1160.401190][T27481] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1160.442203][T27481] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1160.476741][ T4280] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1160.483018][T27481] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1160.606795][ T4297] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2a7/0x630" at daddr 0x1 len 1 error 74 [ 1160.696924][ T5468] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1160.722774][ T5488] loop3: detected capacity change from 0 to 32768 [ 1161.112472][ T4264] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1161.191369][ T4282] XFS (loop4): Unmounting Filesystem [ 1161.904246][ T5526] loop3: detected capacity change from 0 to 64 [ 1162.241246][ T5528] loop5: detected capacity change from 0 to 2048 [ 1162.286943][ T5531] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1162.286943][ T5531] The task syz.3.15195 (5531) triggered the difference, watch for misbehavior. [ 1162.346471][ T5532] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1162.460831][ T5528] NILFS (loop5): error -2 truncating bmap (ino=16) [ 1162.480256][ T5532] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 1162.523739][ T5532] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 1162.584327][ T5532] Remounting filesystem read-only [ 1162.737258][ T1998] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1163.185514][ T5556] loop5: detected capacity change from 0 to 256 [ 1163.222898][ T5557] loop4: detected capacity change from 0 to 512 [ 1163.254798][ T5557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1163.324782][ T5557] EXT4-fs (loop4): 1 truncate cleaned up [ 1163.336551][ T5557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1163.359886][ T5557] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.15204: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1163.387170][ T5557] EXT4-fs (loop4): Remounting filesystem read-only [ 1163.393965][ T5557] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 1163.437484][ T5557] EXT4-fs (loop4): Remounting filesystem read-only [ 1163.629436][ T4276] Bluetooth: hci0: link tx timeout [ 1163.637428][ T4276] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1163.767758][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1163.887694][ T5577] binder: 5576:5577 ioctl c018620c 200000000240 returned -22 [ 1163.972320][ T5581] loop4: detected capacity change from 0 to 164 [ 1164.296725][ T4322] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1164.439969][ T5594] loop2: detected capacity change from 0 to 1024 [ 1164.496474][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 1164.504908][ T4322] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 1164.520496][ T5594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1164.536474][ T4322] usb 1-1: config 0 has no interface number 0 [ 1164.546755][ T4322] usb 1-1: config 0 interface 153 has no altsetting 0 [ 1164.556105][ T4322] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1164.565783][ T4322] usb 1-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1164.574412][ T4322] usb 1-1: Product: syz [ 1164.579158][ T4322] usb 1-1: Manufacturer: syz [ 1164.583836][ T4322] usb 1-1: SerialNumber: syz [ 1164.627786][ T4322] usb 1-1: config 0 descriptor?? [ 1164.808567][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 1164.842162][ T5601] loop5: detected capacity change from 0 to 2048 [ 1164.850366][ T4322] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1164.969019][ T5585] loop3: detected capacity change from 0 to 32768 [ 1164.977997][ T5601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1165.053951][ T1998] EXT4-fs (loop5): unmounting filesystem. [ 1165.076560][ T5605] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.126484][ T5605] binder: 5604:5605 ioctl 40046207 0 returned -16 [ 1165.536661][ T4322] usb 1-1: reset high-speed USB device number 63 using dummy_hcd [ 1165.613415][ T5628] loop3: detected capacity change from 0 to 256 [ 1165.956354][ T4322] usb 1-1: failed to restore interface 153 altsetting 198 (error=-71) [ 1165.993292][ T4322] ueagle-atm 1-1:0.153: usbatm_usb_probe: bind failed: -19! [ 1166.026331][ T4322] usb 1-1: USB disconnect, device number 63 [ 1166.558744][ T5656] loop3: detected capacity change from 0 to 64 [ 1167.036918][ T5667] loop3: detected capacity change from 0 to 4096 [ 1167.045444][ T5667] /dev/loop3: Can't open blockdev [ 1168.481792][ T5721] loop5: detected capacity change from 0 to 1024 [ 1168.692146][ T5151] kernel read not supported for file /usbmon0 (pid: 5151 comm: kworker/0:20) [ 1168.966394][ T5621] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1169.127371][ T5151] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1169.159606][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.182115][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.203883][ T5621] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1169.223576][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.252013][ T5621] usb 1-1: config 0 descriptor?? [ 1169.329630][ T5151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.356473][ T5151] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1169.385896][ T5151] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1169.414235][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.437905][ T5151] usb 3-1: config 0 descriptor?? [ 1169.457617][ T5151] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1169.474776][ T5151] dvb-usb: bulk message failed: -22 (3/0) [ 1169.518973][ T5151] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1169.540156][ T5745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15293'. [ 1169.557721][ T5151] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1169.586602][ T5151] usb 3-1: media controller created [ 1169.593569][ T5151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.643753][ T5151] dvb-usb: bulk message failed: -22 (6/0) [ 1169.665958][ T5731] dvb-usb: bulk message failed: -22 (2/0) [ 1169.672545][ T5151] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1169.702885][ T5621] pyra 0003:1E7D:2CF6.0005: ignoring exceeding usage max [ 1169.717625][ T5151] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input67 [ 1169.734448][ T5621] pyra 0003:1E7D:2CF6.0005: usage index exceeded [ 1169.745479][ T5730] loop5: detected capacity change from 0 to 32768 [ 1169.758755][ T5621] pyra 0003:1E7D:2CF6.0005: item 0 0 2 0 parsing failed [ 1169.769251][ T5151] dvb-usb: schedule remote query interval to 150 msecs. [ 1169.788450][ T5621] pyra 0003:1E7D:2CF6.0005: parse failed [ 1169.795208][ T5151] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1169.814674][ T5621] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -22 [ 1169.832223][ T5151] usb 3-1: USB disconnect, device number 74 [ 1169.866722][ T5730] XFS (loop5): Mounting V5 Filesystem [ 1169.894717][ T5151] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1169.979095][T27481] usb 1-1: USB disconnect, device number 64 [ 1170.078096][ T5730] XFS (loop5): Ending clean mount [ 1170.157652][ T5763] vivid-003: disconnect [ 1170.163562][ T5762] vivid-003: reconnect [ 1170.319741][ T1998] XFS (loop5): Unmounting Filesystem [ 1171.028075][ T5779] loop2: detected capacity change from 0 to 64 [ 1171.401918][ T5783] sp0: Synchronizing with TNC [ 1171.444757][ T5782] [U] [ 1172.645622][ T5820] loop5: detected capacity change from 0 to 512 [ 1172.755567][ T5801] loop3: detected capacity change from 0 to 40427 [ 1172.803682][ T4265] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1173.094628][ T26] audit: type=1326 audit(1173.520:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.2.15323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac39de59 code=0x7fc00000 [ 1173.146350][ T5921] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1173.367155][ T5921] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1173.388947][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.408290][ T5921] usb 1-1: Product: syz [ 1173.412531][ T5921] usb 1-1: Manufacturer: syz [ 1173.435362][ T5921] usb 1-1: SerialNumber: syz [ 1173.450732][ T5921] usb 1-1: config 0 descriptor?? [ 1173.483076][ T5921] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1173.529702][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1173.567033][ T5921] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1173.586326][ T5921] usb 1-1: media controller created [ 1173.606082][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1173.670034][ T5824] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1173.706306][ T5824] dvb-usb: bulk message failed: -22 (7/0) [ 1173.861224][ T5921] DVB: Unable to find symbol mt352_attach() [ 1174.080349][ T5921] DVB: Unable to find symbol nxt6000_attach() [ 1174.097494][ T5921] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1174.138534][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input68 [ 1174.163887][ T5835] loop5: detected capacity change from 0 to 32768 [ 1174.175686][ T5921] dvb-usb: schedule remote query interval to 1000 msecs. [ 1174.193903][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1174.225993][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 1174.249810][ T26] audit: type=1800 audit(1174.680:658): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15333" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 1174.269612][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 1174.321738][ T5921] usb 1-1: USB disconnect, device number 65 [ 1174.395408][ T5836] loop4: detected capacity change from 0 to 32768 [ 1174.439027][ T5836] (syz.4.15334,5836,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1174.505541][ T5836] (syz.4.15334,5836,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1174.528018][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1174.600997][ T5836] JBD2: Ignoring recovery information on journal [ 1174.666772][ T5836] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1174.970549][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 1175.366311][T27481] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1175.531623][ T5873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1175.550597][ T5873] overlayfs: maximum fs stacking depth exceeded [ 1175.579502][T27481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.594712][T27481] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1175.646449][T27481] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1175.656919][T27481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.688058][T27481] usb 5-1: config 0 descriptor?? [ 1175.708664][T27481] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1175.750166][T27481] dvb-usb: bulk message failed: -22 (3/0) [ 1175.779647][T27481] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1175.808984][T27481] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1175.836357][T27481] usb 5-1: media controller created [ 1175.848091][T27481] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1175.880590][T27481] dvb-usb: bulk message failed: -22 (6/0) [ 1175.910468][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 1175.917121][T27481] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1175.947952][T27481] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input69 [ 1175.997855][T27481] dvb-usb: schedule remote query interval to 150 msecs. [ 1176.004980][T27481] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1176.076615][T27481] usb 5-1: USB disconnect, device number 67 [ 1176.149681][T27481] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1176.603034][ T5872] loop2: detected capacity change from 0 to 40427 [ 1176.658372][ T5872] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1176.665779][ T5872] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1176.732391][ T5872] F2FS-fs (loop2): invalid crc value [ 1176.745508][ T5872] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 1176.778714][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.804688][ T5900] tmpfs: Bad value for 'mpol' [ 1176.839608][ T5872] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1176.955849][ T5884] loop5: detected capacity change from 0 to 32768 [ 1177.013455][ T5884] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.15355 (5884) [ 1177.082429][ T5907] loop3: detected capacity change from 0 to 2048 [ 1177.095167][ T5884] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1177.120379][ T5872] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1177.162119][ T5884] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1177.166986][ T5872] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1177.261192][ T5884] BTRFS info (device loop5): using free space tree [ 1177.437436][ T5872] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 1177.724784][ T5884] BTRFS info (device loop5): enabling ssd optimizations [ 1177.785334][ T4280] syz-executor: attempt to access beyond end of device [ 1177.785334][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1177.944276][ T1998] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1178.079858][ T5920] loop4: detected capacity change from 0 to 32768 [ 1179.099127][ T5953] loop3: detected capacity change from 0 to 64 [ 1179.174056][ T5957] loop5: detected capacity change from 0 to 764 [ 1179.193282][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1179.233439][ T5957] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1179.349037][ T5959] loop4: detected capacity change from 0 to 128 [ 1179.413502][ T5959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1179.693961][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1180.402013][ T5921] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1180.587716][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 1180.599990][ T5921] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1180.616435][ T8700] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1180.629980][ T5969] loop5: detected capacity change from 0 to 32768 [ 1180.643956][ T5921] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1180.675204][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1180.689587][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1180.701427][ T26] audit: type=1800 audit(1181.140:659): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15385" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1180.729495][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.744314][ T5921] usb 5-1: config 0 descriptor?? [ 1180.803909][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15397'. [ 1180.833871][ T5995] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15397'. [ 1180.843343][ T8700] usb 1-1: Using ep0 maxpacket: 8 [ 1180.851668][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.882283][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1180.927795][ T8700] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1180.949444][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.995089][ T8700] usb 1-1: config 0 descriptor?? [ 1181.175372][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x2 [ 1181.184641][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.192702][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.210412][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.235513][ T5997] loop2: detected capacity change from 0 to 2048 [ 1181.242232][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.250203][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.270816][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.279256][ T5921] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 1181.293852][ T5997] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1181.313861][ T5997] NILFS (loop2): mounting unchecked fs [ 1181.334179][ T5987] loop3: detected capacity change from 0 to 40427 [ 1181.354067][ T5921] logitech 0003:046D:C24F.0006: hidraw0: USB HID v0.04 Device [HID 046d:c24f] on usb-dummy_hcd.4-1/input0 [ 1181.389747][ T5921] logitech 0003:046D:C24F.0006: no inputs found [ 1181.409649][ T5997] NILFS (loop2): recovery complete [ 1181.430833][ T8700] hid (null): unknown global tag 0xd [ 1181.443450][ T8700] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0xd [ 1181.452507][ T5998] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1181.484060][ T5921] usb 5-1: USB disconnect, device number 68 [ 1181.490243][ T8700] hid-u2fzero 0003:10C4:8ACF.0007: collection stack underflow [ 1181.506309][ T8700] hid-u2fzero 0003:10C4:8ACF.0007: item 0 2 0 12 parsing failed [ 1181.534790][ T8700] hid-u2fzero: probe of 0003:10C4:8ACF.0007 failed with error -22 [ 1181.572047][ T4266] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1181.678854][ T8700] usb 1-1: USB disconnect, device number 66 [ 1181.850549][ T6001] fido_id[6001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1182.598269][ T6021] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1183.162327][ T6036] loop3: detected capacity change from 0 to 1764 [ 1183.562494][ T6044] loop3: detected capacity change from 0 to 1024 [ 1183.653622][ T6024] loop4: detected capacity change from 0 to 32768 [ 1183.853975][ T6024] XFS (loop4): Mounting V5 Filesystem [ 1184.072781][ T6024] XFS (loop4): Ending clean mount [ 1184.114899][ T6024] XFS (loop4): Quotacheck needed: Please wait. [ 1184.178331][ T6065] loop5: detected capacity change from 0 to 64 [ 1184.282285][ T6024] XFS (loop4): Quotacheck: Done. [ 1184.494975][ T4282] XFS (loop4): Unmounting Filesystem [ 1184.987866][ T6078] loop5: detected capacity change from 0 to 512 [ 1185.055304][ T6080] loop2: detected capacity change from 0 to 512 [ 1185.121765][ T6078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1185.157022][ T6080] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1185.198661][ T6066] loop3: detected capacity change from 0 to 32768 [ 1185.221990][ T6066] (syz.3.15425,6066,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1185.248090][ T6066] (syz.3.15425,6066,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1185.251440][ T6080] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1185.304392][ T6066] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1185.326713][ T6080] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 1185.347676][ T6080] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 1185.377263][ T6066] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 1185.388386][ T6080] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.15434: Failed to acquire dquot type 1 [ 1185.437332][ T6080] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.15434: bg 0: block 40: padding at end of block bitmap is not set [ 1185.482154][ T1998] EXT4-fs (loop5): unmounting filesystem. [ 1185.520877][ T6080] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1185.569164][ T6080] EXT4-fs (loop2): 1 truncate cleaned up [ 1185.599431][ T6080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1185.635096][ T4283] INFO: trying to register non-static key. [ 1185.641695][ T4283] The code is fine but needs lockdep annotation, or maybe [ 1185.648955][ T4283] you didn't initialize this object before use? [ 1185.655255][ T4283] turning off the locking correctness validator. [ 1185.661630][ T4283] CPU: 0 PID: 4283 Comm: syz-executor Not tainted syzkaller #0 [ 1185.669233][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.679426][ T4283] Call Trace: [ 1185.682924][ T4283] [ 1185.685914][ T4283] dump_stack_lvl+0x188/0x24e [ 1185.690663][ T4283] ? show_regs_print_info+0x12/0x12 [ 1185.695923][ T4283] ? load_image+0x410/0x410 [ 1185.700488][ T4283] ? _find_next_bit+0x11e/0x130 [ 1185.705490][ T4283] ? __is_module_percpu_address+0x279/0x3b0 [ 1185.711506][ T4283] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1185.717390][ T4283] assign_lock_key+0x201/0x230 [ 1185.722231][ T4283] ? SOFTIRQ_verbose+0x10/0x10 [ 1185.727164][ T4283] register_lock_class+0x21d/0x870 [ 1185.732354][ T4283] ? mark_lock+0x94/0x320 [ 1185.736747][ T4283] ? is_dynamic_key+0x260/0x260 [ 1185.741671][ T4283] ? __lock_acquire+0x13e3/0x7bd0 [ 1185.746791][ T4283] __lock_acquire+0x16f/0x7bd0 [ 1185.751704][ T4283] ? is_bpf_text_address+0x22/0x2a0 [ 1185.756966][ T4283] ? kernel_text_address+0x9c/0xd0 [ 1185.762190][ T4283] ? __kernel_text_address+0x9/0x30 [ 1185.767430][ T4283] ? verify_lock_unused+0x140/0x140 [ 1185.772667][ T4283] ? arch_stack_walk+0xf2/0x140 [ 1185.777571][ T4283] ? verify_lock_unused+0x140/0x140 [ 1185.782814][ T4283] ? stack_trace_save+0xa6/0xf0 [ 1185.787733][ T4283] ? __stack_depot_save+0x35/0x480 [ 1185.792899][ T4283] lock_acquire+0x1bb/0x4a0 [ 1185.797443][ T4283] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1185.803421][ T4283] ? memset+0x1e/0x40 [ 1185.807438][ T4283] ? read_lock_is_recursive+0x10/0x10 [ 1185.812971][ T4283] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1185.820170][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 1185.825523][ T4283] _raw_spin_lock_irqsave+0xb0/0x100 [ 1185.831311][ T4283] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1185.837727][ T4283] ? _raw_spin_lock+0x40/0x40 [ 1185.842548][ T4283] ? ktime_get+0x247/0x270 [ 1185.847011][ T4283] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1185.852773][ T4283] ? ocfs2_dlm_shutdown+0x230/0x230 [ 1185.858042][ T4283] ? slab_free_freelist_hook+0x133/0x1b0 [ 1185.863739][ T4283] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 1185.869401][ T4283] ? ocfs2_journal_init+0xd40/0xd40 [ 1185.874663][ T4283] ocfs2_dlm_shutdown+0x33/0x230 [ 1185.879642][ T4283] ocfs2_dismount_volume+0x479/0x940 [ 1185.885024][ T4283] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 1185.890358][ T4283] ? clear_inode+0x150/0x150 [ 1185.894989][ T4283] ? dput+0x37/0x1d0 [ 1185.898954][ T4283] ? ocfs2_free_inode+0x20/0x20 [ 1185.903855][ T4283] generic_shutdown_super+0x130/0x340 [ 1185.909281][ T4283] kill_block_super+0x7c/0xe0 [ 1185.914007][ T4283] deactivate_locked_super+0x93/0xf0 [ 1185.919352][ T4283] cleanup_mnt+0x471/0x4f0 [ 1185.923896][ T4283] task_work_run+0x1d0/0x260 [ 1185.928533][ T4283] ? task_work_cancel+0x220/0x220 [ 1185.933599][ T4283] ? exit_to_user_mode_loop+0x3b/0x110 [ 1185.939140][ T4283] exit_to_user_mode_loop+0xe6/0x110 [ 1185.944469][ T4283] exit_to_user_mode_prepare+0xee/0x180 [ 1185.950146][ T4283] syscall_exit_to_user_mode+0x16/0x40 [ 1185.955667][ T4283] do_syscall_64+0x58/0xa0 [ 1185.960404][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 1185.965179][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 1185.969897][ T4283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.976028][ T4283] RIP: 0033:0x7f416ed9f097 [ 1185.980475][ T4283] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1186.003167][ T4283] RSP: 002b:00007ffde25d8c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1186.011714][ T4283] RAX: 0000000000000000 RBX: 00007f416ee332ca RCX: 00007f416ed9f097 [ 1186.020427][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde25d8d10 [ 1186.028982][ T4283] RBP: 00007ffde25d8d10 R08: 00007ffde25d9d10 R09: 00000000ffffffff [ 1186.038133][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde25d9da0 [ 1186.046189][ T4283] R13: 00007f416ee332ca R14: 000000000012188c R15: 00007ffde25d9de0 [ 1186.054211][ T4283] [ 1186.082907][ T6080] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.15434: bad symlink. [ 1186.101463][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 1186.130354][ T6092] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.15434: bad symlink. [ 1186.236484][ T4280] EXT4-fs (loop2): unmounting filesystem.