last executing test programs: 2.928820409s ago: executing program 3 (id=1460): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.760553264s ago: executing program 3 (id=1462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 2.652075026s ago: executing program 1 (id=1464): mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) 2.544778229s ago: executing program 3 (id=1465): fsetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='btrfs0+]'], 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) 2.477305311s ago: executing program 1 (id=1466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0xa}]}) 2.248550836s ago: executing program 3 (id=1467): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400"], 0x18, 0x10}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000240)=[{0x1, 0x0, 0x3}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/40, 0x28}, 0x400}], 0x1, 0x0, 0x0) 2.206118257s ago: executing program 1 (id=1468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000fcdbdfa52b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 2.07413907s ago: executing program 3 (id=1469): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000000)={{r1}, 0x0, 0x0, 0x2, 0xc, 0x1}) 1.999820012s ago: executing program 1 (id=1470): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1}, &(0x7f0000000080)=0x8) 1.868121675s ago: executing program 1 (id=1471): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x2c, &(0x7f0000000d40)={0x20, 0xf, 0x1, "a3"}, 0x0, 0x0, 0x0, 0x0}) 1.364868727s ago: executing program 2 (id=1474): recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3d6}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 983.438487ms ago: executing program 0 (id=1475): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd9fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 983.255547ms ago: executing program 2 (id=1476): r0 = socket$inet6(0xa, 0x80802, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 821.914711ms ago: executing program 2 (id=1477): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0x87, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 748.891353ms ago: executing program 0 (id=1478): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 567.094807ms ago: executing program 2 (id=1479): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r1, 0x0, '\x00', 0x1ffffffffffffd64, 0x3f}) 509.724428ms ago: executing program 0 (id=1480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x3ff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 475.066649ms ago: executing program 3 (id=1481): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0xf0ff1f00000000) 368.075422ms ago: executing program 2 (id=1482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 367.435162ms ago: executing program 0 (id=1483): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x30, 0x29, 0x15, 0xd, 0x5, 0x5, 0x0, 0xf0}) 173.638927ms ago: executing program 0 (id=1484): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000100), 0x10) 107.505228ms ago: executing program 1 (id=1485): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 60.501759ms ago: executing program 2 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac0000000001058500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 0s ago: executing program 0 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x647}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040844}, 0x4814) kernel console output (not intermixed with test programs): notify: 2 callbacks suppressed [ 163.537590][ T7483] loop1: detected capacity change from 0 to 4096 [ 163.547075][ T7468] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 163.557944][ T7468] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.616975][ T7485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.669216][ T5829] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.687484][ T28] audit: type=1800 audit(1785351375.001:18): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.622" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 163.792529][ T5807] usb 3-1: USB disconnect, device number 7 [ 163.872971][ T5775] syz-executor: attempt to access beyond end of device [ 163.872971][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.895632][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 163.925154][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.953011][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.972873][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 163.974981][ T28] audit: type=1800 audit(1785351375.291:19): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.622" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 164.001059][ T5829] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.010773][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.046831][ T5829] usb 1-1: config 0 descriptor?? [ 164.071174][ T5829] hub 1-1:0.0: USB hub found [ 164.292068][ T5829] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 164.564542][ T7490] loop3: detected capacity change from 0 to 4096 [ 164.580815][ T7490] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 164.685216][ T7490] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 164.714101][ T5829] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 164.731688][ T7490] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 164.745045][ T5829] hid-generic: probe of 0003:046D:C31C.000B failed with error -22 [ 164.811484][ T28] audit: type=1800 audit(1785351376.131:20): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.623" name="file1" dev="loop3" ino=24 res=0 errno=0 [ 164.850159][ T7490] ntfs3: loop3: ino=5, "/" directory corrupted [ 164.961346][ T5775] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 164.974510][ T7488] loop1: detected capacity change from 0 to 40427 [ 165.004247][ T7488] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 165.024307][ T7488] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 165.046330][ T7488] F2FS-fs (loop1): invalid crc value [ 165.054126][ T7488] F2FS-fs (loop1): invalid crc value [ 165.062730][ T7488] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 165.086005][ T5829] usb 1-1: USB disconnect, device number 10 [ 165.189820][ T7499] loop2: detected capacity change from 0 to 2048 [ 165.246192][ T7499] loop2: p1 < > p4 [ 165.246192][ T7499] p4: [ 165.272878][ T7499] loop2: p4 size 722688 extends beyond EOD, truncated [ 165.288810][ T7499] loop2: p6 start 262464109 is beyond EOD, truncated [ 165.301122][ T7499] loop2: p7 size 2304 extends beyond EOD, truncated [ 165.567257][ T7504] loop3: detected capacity change from 0 to 4096 [ 165.695049][ T7509] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.875386][ T7504] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 1882 already freed [ 165.923240][ T7504] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 166.074762][ T7511] loop1: detected capacity change from 0 to 4096 [ 166.115696][ T7511] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 166.128723][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 166.273905][ T7511] ntfs3: loop1: ino=0, attr_set_size [ 166.301372][ T7511] ntfs3: loop1: MFT: r=0, expect seq=0 instead of 1! [ 166.309598][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.749916][ T5774] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 166.760976][ T5774] Bluetooth: hci3: Injecting HCI hardware error event [ 166.761193][ T7533] team0: No ports can be present during mode change [ 166.772372][ T51] Bluetooth: hci3: hardware error 0x00 [ 167.236022][ T5829] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.353704][ T7542] loop3: detected capacity change from 0 to 32768 [ 167.375704][ T7542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.648 (7542) [ 167.395275][ T7542] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.414461][ T7542] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 167.423809][ T7542] BTRFS info (device loop3): using free space tree [ 167.435914][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 167.458518][ T5829] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.478146][ T7542] BTRFS info (device loop3): enabling ssd optimizations [ 167.478647][ T5829] usb 1-1: config 179 has no interface number 0 [ 167.487677][ T7542] BTRFS info (device loop3): auto enabling async discard [ 167.508915][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 167.545466][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 167.575465][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.595767][ T5829] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 167.646584][ T5829] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.680481][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.695607][ T5829] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.704730][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.735002][ T7537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.844140][ T7565] loop2: detected capacity change from 0 to 4096 [ 167.975766][ T7567] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.059378][ T28] audit: type=1800 audit(1785351379.381:21): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 168.191284][ T5829] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 168.299521][ T28] audit: type=1800 audit(1785351379.611:22): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 168.464665][ T5806] usb 1-1: USB disconnect, device number 11 [ 168.464744][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 168.479350][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 168.488662][ T5806] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 168.499567][ T7569] loop3: detected capacity change from 0 to 4096 [ 168.521066][ T7569] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 168.644300][ T7569] ntfs: volume version 3.1. [ 168.704971][ T7569] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 168.730076][ T7569] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 168.825902][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 168.978351][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 169.483442][ T7573] loop1: detected capacity change from 0 to 32768 [ 169.523609][ T7573] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 169.618457][ T7573] XFS (loop1): Ending clean mount [ 169.673628][ T7573] XFS (loop1): User initiated shutdown received. [ 169.695820][ T5806] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.706771][ T7573] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 169.754133][ T7573] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 169.759205][ T7582] loop0: detected capacity change from 0 to 40427 [ 169.802425][ T7582] F2FS-fs (loop0): invalid crc value [ 169.841362][ T7582] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.851776][ T5768] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 169.925967][ T5806] usb 4-1: Using ep0 maxpacket: 8 [ 169.937136][ T5806] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 169.971211][ T5806] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.972989][ T7582] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.012760][ T5806] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.049164][ T5806] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.091300][ T5806] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.125348][ T5806] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.148026][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.216549][ T5772] syz-executor: attempt to access beyond end of device [ 170.216549][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.262379][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 170.369970][ T7610] loop1: detected capacity change from 0 to 512 [ 170.383560][ T7610] EXT4-fs: Ignoring removed i_version option [ 170.386231][ T5806] usb 4-1: GET_CAPABILITIES returned 0 [ 170.406207][ T5806] usbtmc 4-1:16.0: can't read capabilities [ 170.422643][ T7610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.481191][ T7610] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.664: invalid indirect mapped block 4294967295 (level 1) [ 170.504677][ T7610] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.664: invalid indirect mapped block 4294967295 (level 1) [ 170.526394][ T7610] EXT4-fs (loop1): 2 truncates cleaned up [ 170.533526][ T7610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.617029][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.749021][ T5829] usb 4-1: USB disconnect, device number 10 [ 171.031813][ T7620] loop0: detected capacity change from 0 to 4096 [ 171.054187][ T7612] loop2: detected capacity change from 0 to 32768 [ 171.085255][ T7621] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.095010][ T7612] JBD2: Ignoring recovery information on journal [ 171.136450][ T7612] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.186493][ T28] audit: type=1800 audit(1785351382.511:23): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 171.286505][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 171.325583][ T28] audit: type=1800 audit(1785351382.641:24): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 171.690898][ T7632] loop2: detected capacity change from 0 to 256 [ 171.730787][ T7632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 172.161171][ T7648] loop3: detected capacity change from 0 to 8 [ 172.254115][ T7648] SQUASHFS error: zstd decompression error: 10 [ 172.272699][ T7648] SQUASHFS error: zstd decompression failed, data probably corrupt [ 172.295657][ T7648] SQUASHFS error: Failed to read block 0x60: -5 [ 172.306155][ T7648] SQUASHFS error: zstd decompression error: 10 [ 172.312391][ T7648] SQUASHFS error: zstd decompression failed, data probably corrupt [ 172.324440][ T7648] SQUASHFS error: Failed to read block 0x60: -5 [ 172.332056][ T28] audit: type=1800 audit(1785351383.651:25): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.678" name="/" dev="loop3" ino=1 res=0 errno=0 [ 172.351587][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 172.546986][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 172.560156][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 172.575607][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.594246][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.604533][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.613225][ T7656] loop3: detected capacity change from 0 to 16 [ 172.614803][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.639275][ T7656] erofs: (device loop3): mounted with root inode @ nid 36. [ 172.685984][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.705750][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.718525][ T7656] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 172.983925][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 173.007987][ T9] usbtmc 1-1:16.0: can't read capabilities [ 173.037381][ T7664] loop2: detected capacity change from 0 to 8 [ 173.265715][ T7672] syz.3.687 uses obsolete (PF_INET,SOCK_PACKET) [ 173.275931][ T9] usb 1-1: USB disconnect, device number 12 [ 174.099594][ T7683] loop0: detected capacity change from 0 to 4096 [ 174.159194][ T7692] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.205758][ T7683] capability: warning: `syz.0.694' uses deprecated v2 capabilities in a way that may be insecure [ 174.543478][ T7694] loop1: detected capacity change from 0 to 8192 [ 174.874426][ T7688] loop3: detected capacity change from 0 to 32768 [ 174.971858][ T7688] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.125710][ T7688] XFS (loop3): Ending clean mount [ 175.148801][ T7689] loop2: detected capacity change from 0 to 40427 [ 175.224510][ T7689] F2FS-fs (loop2): invalid crc value [ 175.288855][ T7689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.343505][ T7699] loop0: detected capacity change from 0 to 40427 [ 175.404082][ T7699] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 175.413640][ T7710] loop1: detected capacity change from 0 to 164 [ 175.441375][ T7699] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.473988][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.523532][ T7699] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.541030][ T7689] F2FS-fs (loop2): Start checkpoint disabled! [ 175.682182][ T7689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 175.782576][ T7716] loop1: detected capacity change from 0 to 512 [ 175.871151][ T7699] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 175.918213][ T7699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.948920][ T7716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.985821][ T7716] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.138842][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.142761][ T32] kworker/u4:2: attempt to access beyond end of device [ 176.142761][ T32] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 176.173515][ T32] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 176.181879][ T28] audit: type=1800 audit(1785351387.491:26): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.701" name="file3" dev="loop0" ino=10 res=0 errno=0 [ 176.184497][ T32] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 176.528245][ T5772] syz-executor: attempt to access beyond end of device [ 176.528245][ T5772] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 176.574449][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.137551][ T7725] loop3: detected capacity change from 0 to 32768 [ 177.169933][ T7725] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.707 (7725) [ 177.214672][ T7734] loop2: detected capacity change from 0 to 128 [ 177.237742][ T7725] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 177.265976][ T7725] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 177.284458][ T7725] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 177.310134][ T7727] loop1: detected capacity change from 0 to 32768 [ 177.335515][ T7725] BTRFS info (device loop3): use zstd compression, level 3 [ 177.364112][ T7725] BTRFS info (device loop3): using free space tree [ 177.382814][ T7727] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 177.583141][ T7725] BTRFS info (device loop3): enabling ssd optimizations [ 177.591127][ T7725] BTRFS info (device loop3): auto enabling async discard [ 177.592410][ T7727] XFS (loop1): Ending clean mount [ 177.693620][ T28] audit: type=1800 audit(1785351389.011:27): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.707" name="file0" dev="loop3" ino=258 res=0 errno=0 [ 177.719381][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 178.099873][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.150462][ T7768] loop2: detected capacity change from 0 to 64 [ 178.159796][ T6312] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (6312) [ 178.815141][ T7774] EXT4-fs: Ignoring removed oldalloc option [ 178.879979][ T7774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.963901][ T7774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.995695][ T7774] ext4 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.079479][ T7767] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.109438][ T7764] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.127542][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.235257][ T7767] XFS (loop3): Ending clean mount [ 179.248124][ T7764] XFS (loop0): Ending clean mount [ 179.290306][ T7764] XFS (loop0): Quotacheck needed: Please wait. [ 179.441927][ T7764] XFS (loop0): Quotacheck: Done. [ 179.473171][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.569654][ T7772] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.594115][ T5772] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.695559][ T7772] XFS (loop2): Ending clean mount [ 180.014424][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 180.922778][ T7812] set_capacity_and_notify: 4 callbacks suppressed [ 180.922797][ T7812] loop0: detected capacity change from 0 to 512 [ 180.964465][ T7814] loop3: detected capacity change from 0 to 4096 [ 181.042719][ T7812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.059743][ T7820] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.178749][ T28] audit: type=1800 audit(1785351392.501:28): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.720" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 181.291253][ T28] audit: type=1800 audit(1785351392.611:29): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.720" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 181.342722][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.395576][ T5806] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 181.590089][ T5806] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.599801][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.608017][ T5806] usb 2-1: Product: syz [ 181.612582][ T5806] usb 2-1: Manufacturer: syz [ 181.617676][ T5806] usb 2-1: SerialNumber: syz [ 181.627961][ T5806] usb 2-1: config 0 descriptor?? [ 181.688178][ T7830] loop0: detected capacity change from 0 to 128 [ 181.746265][ T7830] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.795581][ T5807] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.804468][ T7830] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.851821][ T5806] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.872251][ T7830] fscrypt (loop0, inode 12): Unsupported encryption flags (0xea) [ 181.933846][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.975785][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 181.984345][ T5807] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.037613][ T5807] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.058289][ T5807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.074335][ T5807] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 182.100563][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.115822][ T5807] usb 4-1: Product: syz [ 182.125437][ T5807] usb 4-1: Manufacturer: syz [ 182.130138][ T5807] usb 4-1: SerialNumber: syz [ 182.157223][ T5807] usb 4-1: config 0 descriptor?? [ 182.181550][ T7838] loop0: detected capacity change from 0 to 4096 [ 182.242852][ T7839] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.246686][ T7838] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 182.353768][ T7838] NILFS (loop0): mounting fs with errors [ 182.480839][ T5806] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 182.500141][ T5806] usb 2-1: USB disconnect, device number 9 [ 182.521130][ T7838] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 159744 [ 182.534211][ T7838] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 182.549504][ T7838] NILFS (loop0): error -5 truncating bmap (ino=15) [ 182.627995][ T5807] gs_usb 4-1:0.0: Configuring for 244 interfaces [ 182.881437][ T7851] loop2: detected capacity change from 0 to 128 [ 182.928341][ T7851] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.945105][ T7851] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.994161][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.062821][ T5807] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 183.107649][ T5807] gs_usb: probe of 4-1:0.0 failed with error -71 [ 183.151840][ T5807] usb 4-1: USB disconnect, device number 11 [ 183.818661][ T7882] loop1: detected capacity change from 0 to 128 [ 183.841034][ T7882] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.857288][ T7882] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.008623][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.407769][ T7897] loop3: detected capacity change from 0 to 4096 [ 184.556251][ T7901] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.618615][ T28] audit: type=1800 audit(1785351395.941:30): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.754" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 184.692829][ T7889] loop2: detected capacity change from 0 to 32768 [ 184.705626][ T7903] serio: Serial port pty20 [ 184.773278][ T28] audit: type=1800 audit(1785351396.091:31): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.754" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 184.833085][ T7889] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.164724][ T7889] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 185.231851][ T7889] XFS (loop2): Starting recovery (logdev: internal) [ 185.299967][ T7889] XFS (loop2): Ending recovery (logdev: internal) [ 185.522671][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.687872][ T7938] loop1: detected capacity change from 0 to 256 [ 185.743856][ T7938] FAT-fs (loop1): Directory bread(block 1285) failed [ 185.770998][ T7940] netlink: 'syz.0.771': attribute type 11 has an invalid length. [ 185.812803][ T7938] FAT-fs (loop1): Directory bread(block 1286) failed [ 185.863526][ T7938] FAT-fs (loop1): Directory bread(block 1287) failed [ 185.906112][ T7938] FAT-fs (loop1): Directory bread(block 1288) failed [ 186.057163][ T7944] loop2: detected capacity change from 0 to 512 [ 186.280264][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.348772][ T7944] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.534857][ T5807] IPVS: starting estimator thread 0... [ 186.562950][ T7964] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 186.639619][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.661649][ T7965] IPVS: using max 23 ests per chain, 55200 per kthread [ 186.823478][ T7977] block nbd1: Unsupported socket: should be TCP or UNIX. [ 187.187853][ T7987] loop2: detected capacity change from 0 to 128 [ 187.228681][ T7987] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 187.260994][ T7987] hpfs: filesystem error: improperly stopped [ 187.279634][ T7987] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 187.316760][ T7987] hpfs: You really don't want any checks? You are crazy... [ 187.324473][ T7987] hpfs: hpfs_map_sector(): read error [ 187.360975][ T7987] hpfs: code page support is disabled [ 187.375758][ T7987] hpfs: hpfs_map_4sectors(): unaligned read [ 187.392234][ T7987] hpfs: hpfs_map_4sectors(): unaligned read [ 187.402547][ T7987] hpfs: filesystem error: unable to find root dir [ 187.468435][ T7987] hpfs: hpfs_map_4sectors(): unaligned read [ 187.622521][ T7999] loop1: detected capacity change from 0 to 512 [ 187.685150][ T7999] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.795: bad orphan inode 15 [ 187.727225][ T7999] ext4_test_bit(bit=14, block=5) = 0 [ 187.739588][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.843232][ T8001] can0: slcan on ptm0. [ 187.854515][ T7999] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.795: reserved inode found cleared - inode=1 [ 187.981140][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.146688][ T8000] can0 (unregistered): slcan off ptm0. [ 188.235946][ T8020] loop3: detected capacity change from 0 to 1024 [ 190.141573][ T5807] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.153141][ T51] block nbd1: Receive control failed (result -32) [ 190.345901][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 190.357651][ T5807] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 190.381699][ T5807] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.412326][ T5807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.431640][ T5807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.457531][ T5807] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.483216][ T5807] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.506334][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.743429][ T8114] loop3: detected capacity change from 0 to 256 [ 190.779103][ T5807] usb 3-1: GET_CAPABILITIES returned 0 [ 190.784994][ T5807] usbtmc 3-1:16.0: can't read capabilities [ 190.801874][ T8114] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.070021][ T5807] usb 3-1: USB disconnect, device number 8 [ 191.224426][ T8128] loop3: detected capacity change from 0 to 4096 [ 191.273389][ T8131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.322886][ T28] audit: type=1800 audit(1785351402.641:32): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.836" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 191.485767][ T28] audit: type=1800 audit(1785351402.811:33): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.836" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 192.106507][ T8143] loop3: detected capacity change from 0 to 4096 [ 192.117053][ T8153] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 192.159481][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 192.180378][ T8143] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 192.199929][ T8143] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 192.388083][ T8155] loop2: detected capacity change from 0 to 4096 [ 192.405719][ T1009] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 192.412729][ T5775] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 192.429634][ T5775] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 192.480106][ T5775] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 192.506365][ T1009] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 192.553359][ T8155] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 192.688410][ T8162] loop3: detected capacity change from 0 to 4096 [ 192.769261][ T8164] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.833166][ T28] audit: type=1800 audit(1785351404.151:34): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.850" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 193.056421][ T8171] sctp: [Deprecated]: syz.2.853 (pid 8171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.056421][ T8171] Use struct sctp_sack_info instead [ 193.073822][ T28] audit: type=1800 audit(1785351404.381:35): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.850" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 193.336600][ T8177] loop2: detected capacity change from 0 to 2048 [ 193.400793][ T8177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.981179][ T8201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.000786][ T8201] bond0: (slave bond1): Enslaving as an active interface with an up link [ 194.031610][ T8204] loop2: detected capacity change from 0 to 4096 [ 194.068891][ T8205] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.135655][ T28] audit: type=1800 audit(1785351405.461:36): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.867" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 194.284379][ T28] audit: type=1800 audit(1785351405.601:37): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.867" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 194.505503][ T55] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.705594][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 194.714424][ T55] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 194.735084][ T55] usb 2-1: config 0 has no interface number 0 [ 194.754702][ T55] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 194.766863][ T55] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 194.795152][ T55] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 194.805118][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.825438][ T55] usb 2-1: Product: syz [ 194.829842][ T55] usb 2-1: Manufacturer: syz [ 194.834459][ T55] usb 2-1: SerialNumber: syz [ 194.850731][ T55] usb 2-1: config 0 descriptor?? [ 194.859633][ T8208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.863575][ T8223] loop3: detected capacity change from 0 to 256 [ 194.872652][ T8208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.898340][ T8223] exfat: Deprecated parameter 'namecase' [ 194.904110][ T8223] exfat: Deprecated parameter 'utf8' [ 194.965250][ T8223] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24d8a7, utbl_chksum : 0xe619d30d) [ 195.122593][ T8208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.137934][ T8208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.334384][ T8220] loop2: detected capacity change from 0 to 32768 [ 195.369151][ T55] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 195.506561][ T8220] UFO tlock:0xffffc90002892168 [ 195.570546][ T55] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 56 [ 195.832630][ T55] usb 2-1: USB disconnect, device number 10 [ 196.036265][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 196.471938][ T8250] netlink: 'syz.2.887': attribute type 12 has an invalid length. [ 196.485029][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.887'. [ 196.651929][ T8256] loop3: detected capacity change from 0 to 4096 [ 196.671860][ T8256] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 196.721012][ T8256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 196.801960][ T28] audit: type=1800 audit(1785351408.121:38): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.891" name="file3" dev="loop3" ino=34 res=0 errno=0 [ 196.822631][ T5806] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.970070][ T8265] vivid-002: disconnect [ 196.980682][ T8266] loop2: detected capacity change from 0 to 128 [ 196.989167][ T8264] vivid-002: reconnect [ 197.029921][ T5806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.040894][ T5806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.047203][ T8266] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.051376][ T5806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.079529][ T5806] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 197.089001][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.097174][ T5806] usb 2-1: Product: syz [ 197.107092][ T5806] usb 2-1: Manufacturer: syz [ 197.111755][ T5806] usb 2-1: SerialNumber: syz [ 197.127934][ T5806] usb 2-1: selecting invalid altsetting 1 [ 197.135036][ T5806] usb 2-1: unit 6 not found! [ 197.163160][ T8266] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.212446][ T8266] fscrypt (loop2, inode 12): Unsupported encryption flags (0x9e) [ 197.274947][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.538678][ T8280] loop2: detected capacity change from 0 to 256 [ 197.595260][ T8278] loop3: detected capacity change from 0 to 2048 [ 197.610777][ T8280] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 197.664321][ T8278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.755708][ T5806] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 197.829106][ T5806] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 197.850799][ T5806] usb 2-1: USB disconnect, device number 11 [ 197.927874][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.149516][ T28] audit: type=1326 audit(1785351409.471:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.219238][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 198.221709][ T28] audit: type=1326 audit(1785351409.471:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.241615][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 198.256835][ T28] audit: type=1326 audit(1785351409.501:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.305374][ T28] audit: type=1326 audit(1785351409.501:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.352106][ T28] audit: type=1326 audit(1785351409.511:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.405629][ T28] audit: type=1326 audit(1785351409.511:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.445396][ T28] audit: type=1326 audit(1785351409.511:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622519df99 code=0x7ffc0000 [ 198.904313][ T8308] loop3: detected capacity change from 0 to 512 [ 198.946889][ T8308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.094554][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.141777][ T8294] loop2: detected capacity change from 0 to 32768 [ 199.164226][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.175424][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.247847][ T55] hid-generic 0005:10CF:0009.000C: unknown main item tag 0x0 [ 199.351781][ T8294] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.376837][ T55] hid-generic 0005:10CF:0009.000C: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 199.490932][ T8294] XFS (loop2): Ending clean mount [ 199.585177][ T28] audit: type=1800 audit(1785351410.901:46): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.907" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 199.734315][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.555444][ T8340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.926'. [ 200.578475][ T8340] netlink: 'syz.0.926': attribute type 12 has an invalid length. [ 200.595822][ T8340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.926'. [ 200.656003][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.686616][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.698192][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.737159][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.767718][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.775195][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.169906][ T8365] xt_hashlimit: size too large, truncated to 1048576 [ 201.273296][ T8368] »»»»»»: renamed from vxcan1 (while UP) [ 201.292945][ T8369] netlink: 76 bytes leftover after parsing attributes in process `syz.3.937'. [ 201.468295][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 201.644933][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.655515][ T55] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.675444][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.682828][ T8345] bridge_slave_0: entered allmulticast mode [ 201.707351][ T8345] bridge_slave_0: entered promiscuous mode [ 201.718151][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.725562][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.733015][ T8345] bridge_slave_1: entered allmulticast mode [ 201.763020][ T8345] bridge_slave_1: entered promiscuous mode [ 201.856398][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.880684][ T8382] loop3: detected capacity change from 0 to 2048 [ 201.882445][ T55] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 201.890796][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.921238][ T8382] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 201.924406][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.943910][ T8382] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 201.974858][ T55] usb-storage 3-1:32.0: USB Mass Storage device detected [ 201.984821][ T8382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.046434][ T55] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 202.096775][ T8345] team0: Port device team_slave_0 added [ 202.158047][ T8345] team0: Port device team_slave_1 added [ 202.258390][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.276904][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.299598][ T55] usb 3-1: USB disconnect, device number 9 [ 202.349836][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.381793][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.395363][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.464277][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.533768][ T8345] hsr_slave_0: entered promiscuous mode [ 202.542831][ T8345] hsr_slave_1: entered promiscuous mode [ 202.549555][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.557369][ T8345] Cannot create hsr debugfs directory [ 202.825582][ T5774] Bluetooth: hci0: command tx timeout [ 202.931477][ T8345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.975807][ T8394] team_slave_0: entered allmulticast mode [ 203.002543][ T8395] team_slave_0: entered promiscuous mode [ 203.119758][ T8345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.186217][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 203.404100][ T8345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.455452][ T5806] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 203.548923][ T8345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.657957][ T5806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.694058][ T5806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.708094][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.778090][ T5806] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 203.803343][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.834924][ T5806] usb 4-1: Product: syz [ 203.868671][ T5806] usb 4-1: Manufacturer: syz [ 203.873330][ T5806] usb 4-1: SerialNumber: syz [ 203.964796][ T5806] usb 4-1: selecting invalid altsetting 1 [ 203.982624][ T5806] usb 4-1: unit 6 not found! [ 204.042279][ T8345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.057746][ T8345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.077380][ T8345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.109297][ T8345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.352194][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.386743][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.401762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.409043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.447136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.454354][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.582452][ T5806] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 204.672375][ T5806] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 204.707147][ T5806] usb 4-1: USB disconnect, device number 12 [ 204.759092][ T6312] udevd[6312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.907536][ T5779] Bluetooth: hci0: command tx timeout [ 205.107535][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.184128][ T8345] veth0_vlan: entered promiscuous mode [ 205.201192][ T8345] veth1_vlan: entered promiscuous mode [ 205.260127][ T8345] veth0_macvtap: entered promiscuous mode [ 205.282443][ T8345] veth1_macvtap: entered promiscuous mode [ 205.333206][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.348966][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.385649][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.413531][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.427530][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.438509][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.453522][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.464992][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.493535][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.513585][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.527604][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.543036][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.564401][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.575981][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.592890][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.610103][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.629532][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.649097][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.665341][ T8423] dummy0: entered allmulticast mode [ 205.703726][ T8345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.715106][ T8345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.727169][ T8345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.743035][ T8345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.762471][ T8422] dummy0: left allmulticast mode [ 205.821416][ T8421] loop2: detected capacity change from 0 to 32768 [ 206.020923][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.067467][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.176793][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.220707][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.320438][ T8429] loop3: detected capacity change from 0 to 256 [ 206.346529][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 206.458490][ T8429] FAT-fs (loop3): Directory bread(block 64) failed [ 206.465118][ T8429] FAT-fs (loop3): Directory bread(block 65) failed [ 206.511753][ T8431] loop1: detected capacity change from 0 to 4096 [ 206.525558][ T8429] FAT-fs (loop3): Directory bread(block 66) failed [ 206.532229][ T8429] FAT-fs (loop3): Directory bread(block 67) failed [ 206.567861][ T8431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.585860][ T8429] FAT-fs (loop3): Directory bread(block 68) failed [ 206.594371][ T8429] FAT-fs (loop3): Directory bread(block 69) failed [ 206.632601][ T8429] FAT-fs (loop3): Directory bread(block 70) failed [ 206.667628][ T8429] FAT-fs (loop3): Directory bread(block 71) failed [ 206.689701][ T8429] FAT-fs (loop3): Directory bread(block 72) failed [ 206.707386][ T8429] FAT-fs (loop3): Directory bread(block 73) failed [ 206.873127][ T8345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.985800][ T51] Bluetooth: hci0: command tx timeout [ 207.274776][ T8451] loop2: detected capacity change from 0 to 512 [ 207.325447][ T8451] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.403432][ T8451] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.967: Allocating blocks 41-42 which overlap fs metadata [ 207.445086][ T8451] EXT4-fs (loop2): Remounting filesystem read-only [ 207.452566][ T8451] Quota error (device loop2): write_blk: dquota write failed [ 207.472301][ T8451] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 207.495712][ T8451] Quota error (device loop2): write_blk: dquota write failed [ 207.503487][ T8451] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 207.524122][ T8451] EXT4-fs (loop2): 1 truncate cleaned up [ 207.531673][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.645650][ T790] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.810754][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.855814][ T790] usb 1-1: Using ep0 maxpacket: 16 [ 207.908368][ T790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.943188][ T790] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.976241][ T790] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.992859][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.002384][ T790] usb 1-1: Product: syz [ 208.012121][ T790] usb 1-1: Manufacturer: syz [ 208.017295][ T790] usb 1-1: SerialNumber: syz [ 208.254417][ T8490] loop1: detected capacity change from 0 to 16 [ 208.267601][ T8490] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 208.281929][ T790] usb 1-1: 0:2 : does not exist [ 208.313808][ T790] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 208.328056][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop1 [ 208.399445][ T790] usb 1-1: USB disconnect, device number 13 [ 208.418518][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop1 [ 208.488284][ T6312] udevd[6312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: Permission denied [ 208.694899][ T8509] cgroup: fork rejected by pids controller in /syz2 [ 208.915200][ T8474] loop3: detected capacity change from 0 to 32768 [ 209.004866][ T8474] ERROR: (device loop3): dtReadFirst: stbl[0] out of bound [ 209.004866][ T8474] [ 209.065565][ T51] Bluetooth: hci0: command tx timeout [ 209.076019][ T8474] ERROR: (device loop3): remounting filesystem as read-only [ 209.177107][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 209.238700][ T8525] loop2: detected capacity change from 0 to 1024 [ 209.360433][ T8530] loop1: detected capacity change from 0 to 1024 [ 209.381630][ T8530] EXT4-fs: Ignoring removed orlov option [ 209.504908][ T8530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.589542][ T8530] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.673137][ T8530] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.987: lblock 3 mapped to illegal pblock 3 (length 3) [ 209.745815][ T8530] EXT4-fs (loop1): Remounting filesystem read-only [ 209.854961][ T8535] EXT4-fs (loop1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -5 [ 210.097317][ T8345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.114860][ T8540] loop3: detected capacity change from 0 to 1764 [ 210.385734][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 211.364560][ T8581] size and base must be multiples of 4 kiB [ 211.397811][ T8581] CPU: 0 PID: 8581 Comm: syz.1.1008 Not tainted syzkaller #0 [ 211.405265][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.415358][ T8581] Call Trace: [ 211.418665][ T8581] [ 211.421703][ T8581] dump_stack_lvl+0x18c/0x250 [ 211.426429][ T8581] ? show_regs_print_info+0x20/0x20 [ 211.431660][ T8581] ? load_image+0x420/0x420 [ 211.436213][ T8581] ? __might_fault+0xaa/0x120 [ 211.441024][ T8581] ? __might_fault+0xc6/0x120 [ 211.445729][ T8581] ? __might_fault+0xaa/0x120 [ 211.450435][ T8581] mtrr_del+0xc3/0xf0 [ 211.454445][ T8581] mtrr_ioctl+0xcb6/0x13a0 [ 211.458897][ T8581] ? mtrr_close+0x200/0x200 [ 211.461535][ T8583] loop2: detected capacity change from 0 to 1024 [ 211.463420][ T8581] ? __fget_files+0x28/0x460 [ 211.474472][ T8581] ? mtrr_close+0x200/0x200 [ 211.479020][ T8581] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 211.484526][ T8581] ? proc_reg_poll+0x290/0x290 [ 211.489340][ T8581] __se_sys_ioctl+0xfd/0x170 [ 211.493957][ T8581] do_syscall_64+0x55/0xb0 [ 211.498194][ T8583] EXT4-fs: Ignoring removed bh option [ 211.498376][ T8581] ? clear_bhb_loop+0x40/0x90 [ 211.508461][ T8581] ? clear_bhb_loop+0x40/0x90 [ 211.513226][ T8581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.519156][ T8581] RIP: 0033:0x7f59bfd9df99 [ 211.523621][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.543265][ T8581] RSP: 002b:00007f59c0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.546448][ T8583] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 211.551731][ T8581] RAX: ffffffffffffffda RBX: 00007f59c0025fa0 RCX: 00007f59bfd9df99 [ 211.569459][ T8581] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 211.577462][ T8581] RBP: 00007f59bfe34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 211.585469][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.593471][ T8581] R13: 00007f59c0026038 R14: 00007f59c0025fa0 R15: 00007ffcb8ca3cf8 [ 211.601496][ T8581] [ 211.693199][ T8583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.728507][ T8583] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.012765][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.156321][ T8597] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 212.465578][ T8608] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 213.039891][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 213.064091][ T8626] ipvlan2: entered allmulticast mode [ 213.074032][ T8626] syz_tun: entered allmulticast mode [ 213.131884][ T8610] loop1: detected capacity change from 0 to 40427 [ 213.165848][ T8610] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 213.173806][ T8610] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 213.185042][ T8610] F2FS-fs (loop1): invalid crc value [ 213.192911][ T8628] tap0: tun_chr_ioctl cmd 1074025677 [ 213.209687][ T8628] tap0: linktype set to 6 [ 213.304534][ T8610] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 213.322911][ T5806] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 213.351977][ T8610] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.385052][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 213.441704][ T8637] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1030'. [ 213.487623][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 213.524951][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.555666][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.595413][ T5806] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 213.623085][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.645046][ T5806] usb 3-1: config 0 descriptor?? [ 213.661213][ T8345] syz-executor: attempt to access beyond end of device [ 213.661213][ T8345] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.711915][ T8345] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 214.078373][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.095655][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.115864][ T5758] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 214.145364][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.153025][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.175030][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.183459][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.200698][ T5806] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 214.214619][ T5806] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 214.300333][ T5806] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 214.337622][ T5758] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.352411][ T5758] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 214.365414][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.394250][ T5758] usb 4-1: Product: syz [ 214.405336][ T5758] usb 4-1: Manufacturer: syz [ 214.410944][ T5758] usb 4-1: SerialNumber: syz [ 214.429166][ T6283] kernel write not supported for file /vcsa1 (pid: 6283 comm: kworker/0:4) [ 214.436543][ T5758] usb 4-1: config 0 descriptor?? [ 214.450691][ T5758] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 214.500830][ T5806] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 214.570134][ T5806] cp2112: probe of 0003:10C4:EA90.000D failed with error -71 [ 214.609786][ T5806] usb 3-1: USB disconnect, device number 10 [ 215.089443][ T8670] loop1: detected capacity change from 0 to 256 [ 215.140483][ T8670] FAT-fs (loop1): Directory bread(block 64) failed [ 215.165450][ T8670] FAT-fs (loop1): Directory bread(block 65) failed [ 215.183751][ T8670] FAT-fs (loop1): Directory bread(block 66) failed [ 215.210648][ T8670] FAT-fs (loop1): Directory bread(block 67) failed [ 215.234940][ T8670] FAT-fs (loop1): Directory bread(block 68) failed [ 215.252554][ T5758] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 215.262463][ T8670] FAT-fs (loop1): Directory bread(block 69) failed [ 215.272604][ T5758] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 215.285739][ T8670] FAT-fs (loop1): Directory bread(block 70) failed [ 215.292337][ T8670] FAT-fs (loop1): Directory bread(block 71) failed [ 215.309841][ T5758] usb 4-1: USB disconnect, device number 13 [ 215.335478][ T8670] FAT-fs (loop1): Directory bread(block 72) failed [ 215.355337][ T8670] FAT-fs (loop1): Directory bread(block 73) failed [ 215.477531][ T55] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.667619][ T55] usb 3-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 215.676971][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.690412][ T55] usb-storage 3-1:1.0: USB Mass Storage device detected [ 215.703923][ T55] usb-storage 3-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 215.712096][ T55] scsi host1: usb-storage 3-1:1.0 [ 215.929458][ T8682] loop3: detected capacity change from 0 to 256 [ 215.931951][ T55] usb 3-1: USB disconnect, device number 11 [ 216.619258][ T5806] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 216.682455][ T8699] loop2: detected capacity change from 0 to 2048 [ 216.703380][ T8699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.835641][ T5806] usb 4-1: Using ep0 maxpacket: 32 [ 216.851845][ T5806] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.865323][ T5806] usb 4-1: config 0 has no interface number 0 [ 216.879119][ T5806] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.895361][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.909801][ T5806] usb 4-1: Product: syz [ 216.919901][ T5806] usb 4-1: Manufacturer: syz [ 216.929537][ T5806] usb 4-1: SerialNumber: syz [ 216.959950][ T5806] usb 4-1: config 0 descriptor?? [ 216.970572][ T5806] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 217.196744][ T5806] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 217.226206][ T5806] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 217.693533][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 217.694016][ T55] usb 4-1: USB disconnect, device number 14 [ 217.725822][ T55] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 217.753636][ T55] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 217.769073][ T55] quatech2 4-1:0.51: device disconnected [ 218.525592][ T5806] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 218.562609][ T27] Process accounting resumed [ 218.735410][ T55] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 218.745424][ T5806] usb 1-1: Using ep0 maxpacket: 8 [ 218.780098][ T5806] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.804974][ T5806] usb 1-1: config 179 has no interface number 0 [ 218.830069][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 218.850848][ T8755] loop3: detected capacity change from 0 to 256 [ 218.857398][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 218.871198][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.901195][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 218.947341][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.955323][ T5806] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.965331][ T55] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 218.994129][ T5806] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.018728][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.042953][ T55] usb 3-1: config 0 descriptor?? [ 219.045256][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.096325][ T55] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 219.114435][ T8734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.159714][ T8758] process 'syz.3.1083' launched './file0' with NULL argv: empty string added [ 219.503748][ T5758] usb 3-1: USB disconnect, device number 12 [ 219.625607][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 219.890242][ T55] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 219.919952][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 219.928351][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 219.945480][ T5758] usb 1-1: USB disconnect, device number 14 [ 219.958572][ T5758] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 220.086218][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 220.099121][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.135779][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.156614][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.169874][ T55] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.189784][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.233494][ T55] usb 2-1: config 0 descriptor?? [ 220.289712][ T8778] loop2: detected capacity change from 0 to 512 [ 220.378393][ T8778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.410352][ T8778] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.509673][ T8778] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.1092: corrupted inode contents [ 220.615412][ T8778] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.1092: mark_inode_dirty error [ 220.670563][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.725989][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.733302][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.741347][ T8778] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.1092: corrupted inode contents [ 220.792945][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.800518][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.821366][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.832078][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.858941][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.880399][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.894048][ T55] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 220.939068][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.967096][ T55] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input9 [ 221.085245][ T55] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 221.180191][ T55] usb 2-1: USB disconnect, device number 12 [ 221.294507][ T8798] fido_id[8798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 221.473645][ T8818] loop2: detected capacity change from 0 to 128 [ 221.532749][ T8818] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 221.797522][ T32] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 221.855441][ T8802] cgroup: fork rejected by pids controller in /syz3 [ 222.309604][ T8855] loop3: detected capacity change from 0 to 512 [ 222.335112][ T8855] EXT4-fs: Ignoring removed i_version option [ 222.355390][ T5758] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 222.366932][ T8855] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.402335][ T8855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 222.430137][ T8855] Quota error (device loop3): write_blk: dquota write failed [ 222.462575][ T8855] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 222.487876][ T8855] Quota error (device loop3): write_blk: dquota write failed [ 222.508128][ T8855] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 222.518466][ T8855] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1107: Failed to acquire dquot type 1 [ 222.531889][ T8855] EXT4-fs (loop3): 1 truncate cleaned up [ 222.543545][ T8855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.558081][ T5758] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.567423][ T5758] usb 3-1: config 0 has no interface number 0 [ 222.576392][ T5758] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 222.595336][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.614915][ T5758] usb 3-1: Product: syz [ 222.626900][ T5758] usb 3-1: Manufacturer: syz [ 222.631569][ T5758] usb 3-1: SerialNumber: syz [ 222.641394][ T8855] Quota error (device loop3): write_blk: dquota write failed [ 222.656240][ T5758] usb 3-1: config 0 descriptor?? [ 222.670504][ T8855] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 222.680947][ T8855] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1107: Failed to acquire dquot type 1 [ 222.776320][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.830739][ T8842] loop1: detected capacity change from 0 to 40427 [ 222.873334][ T8842] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 222.902594][ T8842] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 222.915420][ T5758] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 222.928071][ T8842] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 222.946872][ T8842] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 222.965397][ T8842] F2FS-fs (loop1): Image doesn't support compression [ 222.974091][ T5758] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.994287][ T8842] F2FS-fs (loop1): invalid crc value [ 223.011131][ T8842] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.026394][ T5758] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 223.066405][ T5758] usb 3-1: media controller created [ 223.163387][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.204474][ T8871] loop3: detected capacity change from 0 to 2048 [ 223.234597][ T8871] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.242500][ T8842] F2FS-fs (loop1): Start checkpoint disabled! [ 223.258426][ T8871] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.328478][ T8871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.357540][ T8842] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 223.364862][ T8842] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 223.486655][ T8842] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x399/0x460 [ 223.491356][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.694068][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 223.760091][ T8852] kworker/u4:14: attempt to access beyond end of device [ 223.760091][ T8852] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 223.801298][ T8852] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 223.809809][ T8852] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 224.235656][ T5758] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 224.362061][ T5758] usb 3-1: USB disconnect, device number 13 [ 224.605385][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.725428][ T55] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 224.807553][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.835363][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 224.853301][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.869077][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 224.888029][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 224.921633][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.931097][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.937860][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.939272][ T27] usb 2-1: Product: syz [ 224.956395][ T27] usb 2-1: Manufacturer: syz [ 224.980938][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 224.992327][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.999070][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 225.003001][ T55] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 225.024346][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.032075][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 225.044087][ T55] usb 1-1: config 0 descriptor?? [ 225.056617][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 225.195351][ T5807] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 225.256752][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 225.263414][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 225.276459][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 225.283144][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 225.290652][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 225.297304][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 225.303927][ T27] usb 2-1: USB disconnect, device number 13 [ 225.309980][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 225.310008][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 225.310024][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 225.425258][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 225.432667][ T5807] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 225.445252][ T5807] usb 4-1: config 0 has no interface number 0 [ 225.461401][ T5807] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 225.475230][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.483296][ T5807] usb 4-1: Product: syz [ 225.496506][ T5807] usb 4-1: Manufacturer: syz [ 225.501184][ T5807] usb 4-1: SerialNumber: syz [ 225.508352][ T5807] usb 4-1: config 0 descriptor?? [ 225.509190][ T55] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 6/7 [ 225.516525][ T5807] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 225.536029][ T55] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 225.544628][ T55] hid-thrustmaster: probe of 0003:044F:B65D.000F failed with error -22 [ 225.742127][ T5807] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 225.778482][ T5807] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 225.806751][ T27] usb 1-1: USB disconnect, device number 15 [ 225.833249][ T8920] netlink: 'syz.2.1135': attribute type 2 has an invalid length. [ 225.850513][ T8920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1135'. [ 226.293288][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 226.294988][ T8797] usb 4-1: USB disconnect, device number 15 [ 226.332762][ T8797] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 226.389592][ T8797] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 226.416805][ T8797] quatech2 4-1:0.51: device disconnected [ 227.096323][ T8941] i2c i2c-0: delete_device: Can't parse I2C address [ 228.275626][ T8998] cgroup: fork rejected by pids controller in /syz1 [ 228.323224][ T9002] netlink: 'syz.2.1156': attribute type 9 has an invalid length. [ 228.546995][ T9010] loop2: detected capacity change from 0 to 256 [ 228.595756][ T9010] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.993643][ T9020] loop8: detected capacity change from 0 to 7 [ 229.049769][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.059459][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.073885][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.083283][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.096432][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.105663][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.113842][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.123077][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.132015][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.141413][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.153099][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.162457][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.173449][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.182726][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.190761][ T9020] ldm_validate_partition_table(): Disk read failed. [ 229.197929][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.207215][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.215819][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.225005][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.237071][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.246437][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 229.256807][ T9020] Dev loop8: unable to read RDB block 0 [ 229.295252][ T9020] loop8: unable to read partition table [ 229.302948][ T9020] loop8: partition table beyond EOD, truncated [ 229.372153][ T9020] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 229.622555][ T9034] loop1: detected capacity change from 0 to 2048 [ 229.665374][ T8797] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.698837][ T9034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.742840][ T9041] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 229.803432][ T28] audit: type=1800 audit(1785351441.121:47): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1164" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 229.856585][ T9034] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 229.880344][ T8797] usb 4-1: Using ep0 maxpacket: 32 [ 229.904476][ T8797] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 229.905826][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.928719][ T8797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.937361][ T9034] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 229.953816][ T8797] usb 4-1: config 0 descriptor?? [ 230.001713][ T9034] EXT4-fs (loop1): This should not happen!! Data will be lost [ 230.001713][ T9034] [ 230.027747][ T9034] EXT4-fs (loop1): Total free blocks count 0 [ 230.045450][ T9034] EXT4-fs (loop1): Free/Dirty block details [ 230.051465][ T9034] EXT4-fs (loop1): free_blocks=4096 [ 230.092332][ T9034] EXT4-fs (loop1): dirty_blocks=16 [ 230.115620][ T9034] EXT4-fs (loop1): Block reservation details [ 230.122650][ T9034] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 230.195366][ T8797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 230.219404][ T8797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.231656][ T8345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.237595][ T8797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 230.252676][ T8797] usb 4-1: media controller created [ 230.300982][ T8797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.357618][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 230.395631][ T8797] az6027: usb out operation failed. (-71) [ 230.412785][ T8797] az6027: usb out operation failed. (-71) [ 230.419469][ T8797] stb0899_attach: Driver disabled by Kconfig [ 230.426425][ T8797] az6027: no front-end attached [ 230.426425][ T8797] [ 230.442035][ T8797] az6027: usb out operation failed. (-71) [ 230.448618][ T8797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 230.470577][ T8797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 230.502542][ T8797] dvb-usb: schedule remote query interval to 400 msecs. [ 230.546219][ T8797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 230.573696][ T8797] usb 4-1: USB disconnect, device number 16 [ 230.585324][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 230.597552][ T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 230.617326][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 230.659233][ T8] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 230.694313][ T8] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 230.716570][ T8797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 230.752398][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.771295][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 230.780671][ T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 230.789277][ T8] usb 1-1: Product: syz [ 230.794130][ T8] usb 1-1: Manufacturer: syz [ 230.794498][ T9064] loop2: detected capacity change from 0 to 2048 [ 230.805698][ T8] usb 1-1: SerialNumber: syz [ 230.822689][ T8] usb 1-1: config 0 descriptor?? [ 230.842819][ T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 230.852927][ T9064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.860780][ T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 231.079389][ T6283] usb 1-1: USB disconnect, device number 16 [ 231.092372][ T6283] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 231.316536][ T8797] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 231.506778][ T8797] usb 3-1: Using ep0 maxpacket: 32 [ 231.566711][ T8797] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 231.592794][ T8797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.624727][ T8797] usb 3-1: config 0 descriptor?? [ 231.865457][ T8797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 231.886631][ T8797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.909398][ T8797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 231.925402][ T8797] usb 3-1: media controller created [ 231.967987][ T6283] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 231.980604][ T8797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.060872][ T8797] az6027: usb out operation failed. (-71) [ 232.084946][ T8797] az6027: usb out operation failed. (-71) [ 232.101622][ T8797] stb0899_attach: Driver disabled by Kconfig [ 232.122756][ T8797] az6027: no front-end attached [ 232.122756][ T8797] [ 232.137703][ T8797] az6027: usb out operation failed. (-71) [ 232.157605][ T8797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 232.175362][ T8797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 232.196882][ T6283] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.206863][ T6283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.221234][ T8797] dvb-usb: schedule remote query interval to 400 msecs. [ 232.236499][ T6283] usb 4-1: config 0 descriptor?? [ 232.242136][ T8797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 232.259686][ T6283] cp210x 4-1:0.0: cp210x converter detected [ 232.277332][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 232.291428][ T8797] usb 3-1: USB disconnect, device number 14 [ 232.397396][ T8797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 232.580351][ T9088] loop1: detected capacity change from 0 to 32768 [ 232.612237][ T9088] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.679021][ T6283] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 232.733332][ T6283] usb 4-1: cp210x converter now attached to ttyUSB0 [ 232.769757][ T9088] XFS (loop1): Ending clean mount [ 232.806287][ T9088] XFS (loop1): Quotacheck needed: Please wait. [ 232.954223][ T9088] XFS (loop1): Quotacheck: Done. [ 232.959896][ T6283] usb 4-1: USB disconnect, device number 17 [ 232.971370][ T6283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.021084][ T6283] cp210x 4-1:0.0: device disconnected [ 233.143856][ T8345] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.223523][ T9136] Bluetooth: MGMT ver 1.22 [ 234.598271][ T9142] loop3: detected capacity change from 0 to 4096 [ 234.623392][ T9145] loop2: detected capacity change from 0 to 2048 [ 234.710269][ T9145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.807872][ T9145] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.024752][ T9145] fs-verity: sha512 using implementation "sha512-avx2" [ 235.026462][ T9158] loop9: detected capacity change from 0 to 524287999 [ 235.052569][ T9145] fs-verity (loop2, inode 13): fs-verity keyring is empty, rejecting signed file! [ 235.166618][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.470485][ T9172] loop1: detected capacity change from 0 to 128 [ 235.505023][ T9172] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 235.532977][ T9172] hpfs: filesystem error: improperly stopped [ 235.551817][ T9172] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 235.560694][ T9172] hpfs: You really don't want any checks? You are crazy... [ 235.581990][ T9172] hpfs: hpfs_map_sector(): read error [ 235.606876][ T9172] hpfs: code page support is disabled [ 235.642333][ T9172] hpfs: hpfs_map_4sectors(): unaligned read [ 235.683962][ T9172] hpfs: hpfs_map_4sectors(): unaligned read [ 235.702949][ T9172] hpfs: filesystem error: unable to find root dir [ 235.780262][ T9172] hpfs: hpfs_map_4sectors(): unaligned read [ 235.827793][ T9172] hpfs: hpfs_map_sector(): read error [ 236.205288][ T790] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.221641][ T9195] loop1: detected capacity change from 0 to 8192 [ 236.258317][ T9195] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.420285][ T790] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 236.455184][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.481239][ T790] usb 3-1: Product: syz [ 236.481267][ T790] usb 3-1: Manufacturer: syz [ 236.481284][ T790] usb 3-1: SerialNumber: syz [ 236.484825][ T790] usb 3-1: config 0 descriptor?? [ 236.747914][ T790] usb 3-1: USB disconnect, device number 15 [ 237.105321][ T27] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 237.192235][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 237.201886][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.216167][ T9225] loop1: detected capacity change from 0 to 2048 [ 237.264321][ T9225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.328526][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.366177][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 237.386947][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.389324][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.403763][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 237.437456][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.478940][ T27] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 8.40 [ 237.496766][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.528601][ T9210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.717599][ T8797] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 237.780519][ T27] usb 1-1: string descriptor 0 read error: -71 [ 237.803042][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 237.811316][ T27] usb 1-1: MIDIStreaming interface descriptor not found [ 237.902866][ T27] usb 1-1: USB disconnect, device number 17 [ 237.915225][ T8797] usb 3-1: Using ep0 maxpacket: 16 [ 237.928106][ T8797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.949294][ T8797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.975452][ T9236] loop3: detected capacity change from 0 to 1024 [ 237.984414][ T8797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.055272][ T8797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 238.094121][ T8797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.121008][ T8797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.156465][ T8797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.195773][ T8797] usb 3-1: Manufacturer: syz [ 238.211975][ T8797] usb 3-1: config 0 descriptor?? [ 238.574705][ T8797] rc_core: IR keymap rc-hauppauge not found [ 238.593200][ T8797] Registered IR keymap rc-empty [ 238.606327][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.645303][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.693641][ T8797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 238.733081][ T8797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 238.753098][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.755562][ T790] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.765257][ C0] mceusb 3-1:0.0: long-range (0x8d) receiver active [ 238.785605][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.826348][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.868938][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.905732][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.945770][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.982324][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 238.995557][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 239.017521][ T790] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.025395][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 239.035176][ T790] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.065456][ T790] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.072207][ T790] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 239.085480][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 239.101726][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.125487][ T8797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 239.127835][ T790] usb 2-1: config 0 descriptor?? [ 239.168887][ T8797] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 239.177215][ T8797] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x8d active) [ 239.195481][ T8797] usb 3-1: USB disconnect, device number 16 [ 239.255676][ T27] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 239.435649][ T9263] syz.0.1261 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 239.486705][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.500110][ T27] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 239.511209][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.524241][ T27] usb 4-1: config 0 descriptor?? [ 239.539080][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 239.570761][ T790] hid (null): usage index exceeded [ 239.576812][ T790] hid (null): global environment stack underflow [ 239.583230][ T790] hid (null): unknown global tag 0xc [ 239.595236][ T790] hid (null): bogus close delimiter [ 239.602708][ T790] hid (null): invalid report_count 159310733 [ 239.611059][ T790] hid (null): unknown global tag 0xd [ 239.617351][ T790] hid (null): global environment stack overflow [ 239.925577][ T8797] usb 4-1: USB disconnect, device number 18 [ 239.930749][ T790] usb 2-1: USB disconnect, device number 14 [ 240.099425][ T9281] overlayfs: failed to resolve './file0': -2 [ 240.269856][ T8797] kernel read not supported for file /swradio4 (pid: 8797 comm: kworker/0:5) [ 240.373148][ T9292] loop2: detected capacity change from 0 to 16 [ 240.385611][ T9292] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 240.830510][ T9304] loop2: detected capacity change from 0 to 1024 [ 240.865263][ T9304] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 241.006790][ T9306] loop1: detected capacity change from 0 to 4096 [ 241.014683][ T9306] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 241.067656][ T9306] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 241.242341][ T9306] ntfs: volume version 3.1. [ 241.378628][ T9306] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macinuit. You might want to try to use the mount option nls=utf8. [ 241.435496][ T9306] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 241.761311][ T9318] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 242.036619][ T9316] loop2: detected capacity change from 0 to 40427 [ 242.065539][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.083678][ T9316] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 242.105629][ T9316] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 242.128552][ T9316] F2FS-fs (loop2): invalid crc value [ 242.147471][ T9316] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.242102][ T9316] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 242.257908][ T9316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 242.290989][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.308902][ T27] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 242.330514][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.348494][ T27] usb 2-1: config 0 descriptor?? [ 242.369045][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 242.645271][ T27] usb 2-1: USB disconnect, device number 15 [ 243.380458][ T5807] IPVS: starting estimator thread 0... [ 243.471348][ T9371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 243.475393][ T9369] IPVS: using max 19 ests per chain, 45600 per kthread [ 243.597664][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 243.785610][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 243.800008][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.820040][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.840462][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.865448][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.903598][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.928214][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.184062][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 244.206941][ T27] usbtmc 2-1:16.0: can't read capabilities [ 244.244707][ T9373] loop3: detected capacity change from 0 to 32768 [ 244.275458][ T9373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1307 (9373) [ 244.365436][ T5807] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 244.380712][ T9373] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.412006][ T6283] usb 2-1: USB disconnect, device number 16 [ 244.431897][ T9373] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 244.456540][ T9373] BTRFS info (device loop3): setting nodatacow, compression disabled [ 244.486822][ T9373] BTRFS info (device loop3): turning on flush-on-commit [ 244.493867][ T9373] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 244.514343][ T9373] BTRFS info (device loop3): use lzo compression, level 0 [ 244.532149][ T9373] BTRFS info (device loop3): setting nodatasum [ 244.542234][ T9373] BTRFS info (device loop3): use no compression [ 244.555322][ T9373] BTRFS info (device loop3): trying to use backup root at mount time [ 244.574048][ T9373] BTRFS info (device loop3): max_inline at 0 [ 244.582359][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.595196][ T9373] BTRFS info (device loop3): using free space tree [ 244.617727][ T5807] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 244.633139][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.662179][ T5807] usb 1-1: config 0 descriptor?? [ 244.691077][ T5807] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 244.734517][ T8849] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 244.772112][ T9373] BTRFS warning (device loop3): couldn't read tree root [ 244.781576][ T9373] BTRFS warning (device loop3): try to load backup roots slot 1 [ 244.816664][ T8848] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 244.837655][ T9373] BTRFS warning (device loop3): couldn't read tree root [ 244.844720][ T9373] BTRFS warning (device loop3): try to load backup roots slot 2 [ 244.885502][ T8848] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 244.911707][ T9373] BTRFS warning (device loop3): couldn't read tree root [ 244.945894][ T9373] BTRFS warning (device loop3): try to load backup roots slot 3 [ 244.985332][ T9373] BTRFS info (device loop3): enabling ssd optimizations [ 244.992354][ T9373] BTRFS info (device loop3): auto enabling async discard [ 245.023811][ T6283] usb 1-1: USB disconnect, device number 18 [ 245.031580][ T9373] BTRFS info (device loop3): rebuilding free space tree [ 245.113033][ T9373] BTRFS info (device loop3): checking UUID tree [ 245.442246][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.557574][ T9419] loop1: detected capacity change from 0 to 256 [ 246.147000][ T9435] loop1: detected capacity change from 0 to 128 [ 246.187838][ T9433] loop2: detected capacity change from 0 to 1024 [ 246.249042][ T9433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.300012][ T9433] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.311321][ T9440] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 246.388286][ T9433] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.1326: lblock 3 mapped to illegal pblock 3 (length 2) [ 246.431633][ T9433] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1326: lblock 0 mapped to illegal pblock 0 (length 1) [ 246.498528][ T9433] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1326: lblock 0 mapped to illegal pblock 0 (length 1) [ 246.572184][ T9433] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.1326: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 246.637194][ T9442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1329'. [ 246.652141][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 246.787302][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.922348][ T9447] program syz.1.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.335464][ T6283] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.517502][ T6283] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.528001][ T6283] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 247.545244][ T6283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.566478][ T6283] usb 3-1: config 0 descriptor?? [ 247.614327][ T6283] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 247.742904][ T9468] loop3: detected capacity change from 0 to 4096 [ 247.748849][ T9462] loop1: detected capacity change from 0 to 32768 [ 247.767703][ T9468] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 247.800219][ T9462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1337 (9462) [ 247.841151][ T9462] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.875199][ T9462] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 247.883980][ T9462] BTRFS info (device loop1): turning on sync discard [ 247.896466][ T9468] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 247.908721][ T9462] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 247.931902][ T9462] BTRFS info (device loop1): use lzo compression, level 0 [ 247.949096][ T6283] usb 3-1: USB disconnect, device number 17 [ 247.970293][ T9462] BTRFS info (device loop1): turning on async discard [ 248.006661][ T9462] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 248.032185][ T9462] BTRFS info (device loop1): trying to use backup root at mount time [ 248.045222][ T9462] BTRFS info (device loop1): enabling auto defrag [ 248.051759][ T9462] BTRFS info (device loop1): using free space tree [ 248.214863][ T9022] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 248.230738][ T9488] program syz.3.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.277993][ T9462] BTRFS error (device loop1): failed to load root extent [ 248.298600][ T9462] BTRFS warning (device loop1): try to load backup roots slot 1 [ 248.308762][ T2964] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 248.322361][ T9462] BTRFS warning (device loop1): couldn't read tree root [ 248.329879][ T9462] BTRFS warning (device loop1): try to load backup roots slot 2 [ 248.339561][ T2964] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 248.350666][ T9462] BTRFS warning (device loop1): couldn't read tree root [ 248.360771][ T9462] BTRFS warning (device loop1): try to load backup roots slot 3 [ 248.413245][ T9462] BTRFS info (device loop1): enabling ssd optimizations [ 248.453102][ T9462] BTRFS info (device loop1): rebuilding free space tree [ 248.474815][ T9462] BTRFS info (device loop1): checking UUID tree [ 248.594484][ T28] audit: type=1800 audit(1785351459.911:48): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1337" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 248.768420][ T8345] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.315257][ T5758] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.507546][ T5758] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 249.525302][ T5758] usb 3-1: config 2 has no interface number 0 [ 249.549451][ T5758] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 249.585631][ T5758] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 249.611632][ T5758] usb 3-1: config 2 interface 43 has no altsetting 0 [ 249.654973][ T5758] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 249.670884][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.695725][ T5758] usb 3-1: Product: syz [ 249.699966][ T5758] usb 3-1: Manufacturer: syz [ 249.704595][ T5758] usb 3-1: SerialNumber: syz [ 249.739249][ T9509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.757265][ T9509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.926484][ T9525] pimreg0: tun_chr_ioctl cmd 35111 [ 249.992603][ T9513] loop1: detected capacity change from 0 to 40427 [ 250.024983][ T5758] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 250.036806][ T9513] F2FS-fs (loop1): invalid crc value [ 250.063378][ T5758] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 250.085313][ T9513] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.136225][ T5758] ums-usbat: probe of 3-1:2.43 failed with error -5 [ 250.196384][ T5758] usb 3-1: USB disconnect, device number 18 [ 250.281899][ T9513] F2FS-fs (loop1): Start checkpoint disabled! [ 250.344593][ T9531] loop3: detected capacity change from 0 to 4096 [ 250.368701][ T9513] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 250.460944][ T9533] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.535148][ T28] audit: type=1800 audit(1785351461.851:49): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1358" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 250.853292][ T9542] tun0: tun_chr_ioctl cmd 1074812117 [ 250.855790][ T8852] kworker/u4:14: attempt to access beyond end of device [ 250.855790][ T8852] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.896340][ T8852] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 250.997851][ T9544] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1364'. [ 251.586590][ T9566] loop3: detected capacity change from 0 to 512 [ 251.628951][ T9566] EXT4-fs: Ignoring removed orlov option [ 251.634669][ T9566] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.669028][ T9561] loop1: detected capacity change from 0 to 8192 [ 251.693909][ T9566] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.1373: corrupted in-inode xattr: e_value size too large [ 251.734497][ T9561] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.764604][ T9561] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 251.774344][ T9561] REISERFS (device loop1): using ordered data mode [ 251.781302][ T9561] reiserfs: using flush barriers [ 251.797884][ T9568] loop2: detected capacity change from 0 to 4096 [ 251.799142][ T9566] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1373: couldn't read orphan inode 15 (err -117) [ 251.804481][ T9561] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.846483][ T9566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.935738][ T9561] REISERFS (device loop1): checking transaction log (loop1) [ 251.987378][ T9574] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.058917][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.258132][ T9561] REISERFS (device loop1): Using tea hash to sort names [ 252.270840][ T9561] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 252.291171][ T9580] 9pnet_fd: p9_fd_create_unix (9580): problem connecting socket: ./file0: -111 [ 252.849981][ T9601] loop1: detected capacity change from 0 to 256 [ 252.866652][ T9601] exfat: Deprecated parameter 'utf8' [ 252.872372][ T9601] exfat: Deprecated parameter 'namecase' [ 252.878244][ T9601] exfat: Deprecated parameter 'namecase' [ 252.884378][ T9601] exfat: Deprecated parameter 'namecase' [ 252.911665][ T9601] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 253.085220][ T6283] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 253.267546][ T6283] usb 3-1: Using ep0 maxpacket: 16 [ 253.279559][ T6283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.297075][ T6283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.307418][ T6283] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 253.319036][ T6283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.329787][ T6283] usb 3-1: config 0 descriptor?? [ 253.767793][ T6283] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 253.935332][ T8797] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 253.969755][ T6283] corsair 0003:1B1C:1B02.0011: Read invalid backlight brightness: 57. [ 254.079384][ T9635] netlink: 'syz.1.1399': attribute type 13 has an invalid length. [ 254.134289][ T8797] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 254.162800][ T8797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.183182][ T6283] usb 3-1: USB disconnect, device number 19 [ 254.189539][ T8797] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 254.213028][ T8797] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 254.237760][ T8797] usb 4-1: Manufacturer: syz [ 254.262151][ T8797] usb 4-1: config 0 descriptor?? [ 254.395160][ T8797] rc_core: IR keymap rc-hauppauge not found [ 254.401205][ T8797] Registered IR keymap rc-empty [ 254.408078][ T8797] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 254.422023][ T8797] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 254.735181][ T5807] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.786836][ T9644] rc rc0: two consecutive events of type space [ 254.927672][ T5807] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.942452][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.980262][ T5807] usb 1-1: config 0 descriptor?? [ 254.988196][ T5807] cp210x 1-1:0.0: cp210x converter detected [ 255.004671][ T8797] usb 4-1: USB disconnect, device number 19 [ 255.617989][ T5807] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 255.658886][ T5807] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 255.716982][ T5807] usb 1-1: cp210x converter now attached to ttyUSB0 [ 255.825511][ T5807] usb 1-1: USB disconnect, device number 19 [ 255.877308][ T5807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.942712][ T5807] cp210x 1-1:0.0: device disconnected [ 256.232920][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1416'. [ 256.674816][ T9681] loop3: detected capacity change from 0 to 4096 [ 256.904610][ T9686] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.109309][ T9681] syz.3.1418: attempt to access beyond end of device [ 257.109309][ T9681] loop3: rw=0, sector=67108864, nr_sectors = 2 limit=4096 [ 257.207090][ T9681] syz.3.1418: attempt to access beyond end of device [ 257.207090][ T9681] loop3: rw=0, sector=131070, nr_sectors = 2 limit=4096 [ 257.297544][ T9681] syz.3.1418: attempt to access beyond end of device [ 257.297544][ T9681] loop3: rw=0, sector=65536, nr_sectors = 2 limit=4096 [ 257.406236][ T9681] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=0, cno=0, offset=2, blocknr=0, vblocknr=0 [ 257.487165][ T9681] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 257.552530][ T9668] loop1: detected capacity change from 0 to 262144 [ 257.630010][ T9668] F2FS-fs (loop1): Found nat_bits in checkpoint [ 257.692659][ T9668] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.701507][ T9699] loop2: detected capacity change from 0 to 16 [ 257.735792][ T9699] erofs: (device loop2): mounted with root inode @ nid 36. [ 258.044637][ T9703] loop2: detected capacity change from 0 to 2048 [ 258.198453][ T9703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.210977][ T9703] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.294180][ T9713] loop3: detected capacity change from 0 to 256 [ 258.331248][ T9713] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 258.409417][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.576397][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'. [ 258.634585][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'. [ 259.737794][ T9738] loop2: detected capacity change from 0 to 32768 [ 260.156874][ T9743] loop2: detected capacity change from 0 to 4096 [ 260.205393][ T9743] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 260.591055][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.598801][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.599559][ T9749] loop1: detected capacity change from 0 to 4096 [ 260.662321][ T9749] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 260.714668][ T9749] ntfs3: loop1: Failed to load $Extend (-22). [ 260.727631][ T9749] ntfs3: loop1: Failed to initialize $Extend. [ 260.798176][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 261.083222][ T9766] loop2: detected capacity change from 0 to 1764 [ 261.556519][ T9780] loop2: detected capacity change from 0 to 2048 [ 261.630404][ T9785] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.787226][ T9785] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 261.819182][ T9785] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 261.859286][ T9785] Remounting filesystem read-only [ 261.883306][ T2972] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 261.909358][ T2972] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 261.926389][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 261.945579][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 261.966297][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 261.969511][ T9796] loop3: detected capacity change from 0 to 128 [ 261.985688][ T2972] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 261.999466][ T2972] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 262.013459][ T9796] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.015990][ T2972] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 262.054509][ T2972] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 262.063155][ T9796] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.064488][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.114936][ T2972] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 262.135472][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.144869][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.159554][ T2972] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 262.172535][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.187219][ T2972] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 262.195271][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.229036][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.249013][ T2972] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 262.272674][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.289980][ T2972] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 262.298216][ T2972] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 262.306785][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.315914][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.324864][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.335089][ T2972] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 262.341906][ T2972] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 262.350703][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.372227][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.393298][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.403020][ T2972] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 262.410032][ T2972] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 262.418695][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.455071][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.480452][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.491056][ T2972] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 262.498528][ T2972] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 262.507525][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.516976][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.535225][ T2972] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 262.561103][ T9780] NILFS (loop2): mounting fs with errors [ 262.603650][ T9780] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 262.655576][ T9780] Remounting filesystem read-only [ 262.719138][ T5771] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 262.748029][ T5771] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 262.754792][ T5771] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 262.775900][ T5771] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 262.793530][ T5771] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 262.813787][ T5771] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 262.925133][ T5807] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 263.021168][ T9805] loop3: detected capacity change from 0 to 32768 [ 263.048266][ T9805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1469 (9805) [ 263.090090][ T9805] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.115405][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 263.126874][ T5807] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 263.145868][ T9805] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 263.156514][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 263.166320][ T9805] BTRFS info (device loop3): using free space tree [ 263.179662][ T5807] usb 2-1: Product: syz [ 263.184242][ T5807] usb 2-1: Manufacturer: syz [ 263.194157][ T5807] usb 2-1: SerialNumber: syz [ 263.216191][ T5807] usb 2-1: config 0 descriptor?? [ 263.253242][ T5807] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 263.345827][ T9805] BTRFS info (device loop3): enabling ssd optimizations [ 263.386175][ T9805] BTRFS info (device loop3): auto enabling async discard [ 263.430545][ T5807] gspca_sn9c2028: read1 error -32 [ 263.460843][ T5807] gspca_sn9c2028: read1 error -32 [ 263.692815][ T5758] usb 2-1: USB disconnect, device number 17 [ 263.970545][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.388650][ T9854] [ 264.391121][ T9854] ====================================================== [ 264.398215][ T9854] WARNING: possible circular locking dependency detected [ 264.405356][ T9854] syzkaller #0 Not tainted [ 264.409798][ T9854] ------------------------------------------------------ [ 264.416844][ T9854] syz.1.1485/9854 is trying to acquire lock: [ 264.422833][ T9854] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 264.432363][ T9854] [ 264.432363][ T9854] but task is already holding lock: [ 264.439746][ T9854] ffff88802022b890 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c62/0x2580 [ 264.450241][ T9854] [ 264.450241][ T9854] which lock already depends on the new lock. [ 264.450241][ T9854] [ 264.460674][ T9854] [ 264.460674][ T9854] the existing dependency chain (in reverse order) is: [ 264.469711][ T9854] [ 264.469711][ T9854] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 264.478177][ T9854] down_write+0x97/0x200 [ 264.483012][ T9854] set_blocksize+0x247/0x4b0 [ 264.488130][ T9854] sb_min_blocksize+0xbe/0x190 [ 264.493421][ T9854] ext4_fill_super+0x6e7/0x6870 [ 264.498866][ T9854] get_tree_bdev+0x3e5/0x520 [ 264.504024][ T9854] vfs_get_tree+0x8c/0x280 [ 264.508970][ T9854] do_new_mount+0x24a/0xa40 [ 264.514014][ T9854] init_mount+0xde/0x130 [ 264.518906][ T9854] do_mount_root+0x97/0x230 [ 264.524074][ T9854] mount_root_generic+0x1a6/0x3e0 [ 264.529663][ T9854] prepare_namespace+0xc2/0x100 [ 264.535073][ T9854] kernel_init_freeable+0x41a/0x560 [ 264.540817][ T9854] kernel_init+0x1d/0x1c0 [ 264.545798][ T9854] ret_from_fork+0x48/0x80 [ 264.550810][ T9854] ret_from_fork_asm+0x11/0x20 [ 264.556116][ T9854] [ 264.556116][ T9854] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 264.564722][ T9854] down_write+0x97/0x200 [ 264.569568][ T9854] set_blocksize+0x1ff/0x4b0 [ 264.574677][ T9854] sb_min_blocksize+0xbe/0x190 [ 264.579954][ T9854] ext4_fill_super+0x6e7/0x6870 [ 264.585329][ T9854] get_tree_bdev+0x3e5/0x520 [ 264.590439][ T9854] vfs_get_tree+0x8c/0x280 [ 264.595460][ T9854] do_new_mount+0x24a/0xa40 [ 264.600483][ T9854] init_mount+0xde/0x130 [ 264.605277][ T9854] do_mount_root+0x97/0x230 [ 264.610306][ T9854] mount_root_generic+0x1a6/0x3e0 [ 264.615856][ T9854] prepare_namespace+0xc2/0x100 [ 264.621322][ T9854] kernel_init_freeable+0x41a/0x560 [ 264.627044][ T9854] kernel_init+0x1d/0x1c0 [ 264.631899][ T9854] ret_from_fork+0x48/0x80 [ 264.636863][ T9854] ret_from_fork_asm+0x11/0x20 [ 264.642146][ T9854] [ 264.642146][ T9854] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 264.650546][ T9854] down_read+0x46/0x2e0 [ 264.655238][ T9854] super_lock+0x189/0x390 [ 264.660106][ T9854] fs_bdev_sync+0xa4/0x170 [ 264.665043][ T9854] blkdev_common_ioctl+0x8a9/0x2580 [ 264.670858][ T9854] blkdev_ioctl+0x512/0x730 [ 264.675890][ T9854] __se_sys_ioctl+0xfd/0x170 [ 264.681089][ T9854] do_syscall_64+0x55/0xb0 [ 264.686026][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.692468][ T9854] [ 264.692468][ T9854] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 264.700628][ T9854] __mutex_lock+0x135/0xc80 [ 264.705795][ T9854] bd_finish_claiming+0x229/0x3f0 [ 264.711339][ T9854] blkdev_get_by_dev+0x469/0x610 [ 264.716793][ T9854] bdev_open_by_dev+0x77/0x100 [ 264.722073][ T9854] setup_bdev_super+0x59/0x660 [ 264.727354][ T9854] mount_bdev+0x1ce/0x2c0 [ 264.732285][ T9854] legacy_get_tree+0xea/0x180 [ 264.737475][ T9854] vfs_get_tree+0x8c/0x280 [ 264.742402][ T9854] do_new_mount+0x24a/0xa40 [ 264.747419][ T9854] init_mount+0xde/0x130 [ 264.752176][ T9854] do_mount_root+0x97/0x230 [ 264.757201][ T9854] mount_root_generic+0x1a6/0x3e0 [ 264.762748][ T9854] prepare_namespace+0xc2/0x100 [ 264.768125][ T9854] kernel_init_freeable+0x41a/0x560 [ 264.773835][ T9854] kernel_init+0x1d/0x1c0 [ 264.778682][ T9854] ret_from_fork+0x48/0x80 [ 264.783617][ T9854] ret_from_fork_asm+0x11/0x20 [ 264.789186][ T9854] [ 264.789186][ T9854] -> #0 (bdev_lock){+.+.}-{3:3}: [ 264.796331][ T9854] __lock_acquire+0x37ef/0x7d80 [ 264.801747][ T9854] lock_acquire+0x19e/0x420 [ 264.806796][ T9854] __mutex_lock+0x135/0xc80 [ 264.811818][ T9854] bd_prepare_to_claim+0x1d9/0x4a0 [ 264.817470][ T9854] truncate_bdev_range+0x4e/0x260 [ 264.823062][ T9854] blkdev_common_ioctl+0x1c7a/0x2580 [ 264.828863][ T9854] blkdev_ioctl+0x512/0x730 [ 264.833888][ T9854] __se_sys_ioctl+0xfd/0x170 [ 264.839190][ T9854] do_syscall_64+0x55/0xb0 [ 264.844124][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.850532][ T9854] [ 264.850532][ T9854] other info that might help us debug this: [ 264.850532][ T9854] [ 264.860755][ T9854] Chain exists of: [ 264.860755][ T9854] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 264.860755][ T9854] [ 264.874919][ T9854] Possible unsafe locking scenario: [ 264.874919][ T9854] [ 264.882362][ T9854] CPU0 CPU1 [ 264.887715][ T9854] ---- ---- [ 264.893068][ T9854] lock(mapping.invalidate_lock); [ 264.898172][ T9854] lock(&sb->s_type->i_mutex_key#8); [ 264.906136][ T9854] lock(mapping.invalidate_lock); [ 264.913760][ T9854] lock(bdev_lock); [ 264.917658][ T9854] [ 264.917658][ T9854] *** DEADLOCK *** [ 264.917658][ T9854] [ 264.925787][ T9854] 2 locks held by syz.1.1485/9854: [ 264.930888][ T9854] #0: ffff88802022b700 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1c28/0x2580 [ 264.942140][ T9854] #1: ffff88802022b890 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c62/0x2580 [ 264.953047][ T9854] [ 264.953047][ T9854] stack backtrace: [ 264.959003][ T9854] CPU: 1 PID: 9854 Comm: syz.1.1485 Not tainted syzkaller #0 [ 264.966370][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.976436][ T9854] Call Trace: [ 264.979791][ T9854] [ 264.982899][ T9854] dump_stack_lvl+0x18c/0x250 [ 264.987695][ T9854] ? load_image+0x420/0x420 [ 264.992262][ T9854] ? show_regs_print_info+0x20/0x20 [ 264.997481][ T9854] ? print_circular_bug+0x12b/0x1a0 [ 265.002709][ T9854] check_noncircular+0x2fc/0x400 [ 265.007644][ T9854] ? print_deadlock_bug+0x5d0/0x5d0 [ 265.012835][ T9854] ? lockdep_lock+0xf5/0x230 [ 265.017414][ T9854] ? _find_first_zero_bit+0xd6/0x100 [ 265.022718][ T9854] __lock_acquire+0x37ef/0x7d80 [ 265.027565][ T9854] ? __bfs+0x27a/0x560 [ 265.031627][ T9854] ? verify_lock_unused+0x140/0x140 [ 265.036811][ T9854] ? check_noncircular+0x18a/0x400 [ 265.041938][ T9854] ? __read_once_word_nocheck+0x9/0x10 [ 265.047417][ T9854] ? print_deadlock_bug+0x5d0/0x5d0 [ 265.052625][ T9854] ? lockdep_lock+0x195/0x230 [ 265.057306][ T9854] ? lockdep_unlock+0x146/0x2e0 [ 265.062154][ T9854] ? lockdep_lock+0x230/0x230 [ 265.066823][ T9854] lock_acquire+0x19e/0x420 [ 265.071317][ T9854] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 265.076599][ T9854] ? __might_sleep+0xe0/0xe0 [ 265.081211][ T9854] ? read_lock_is_recursive+0x20/0x20 [ 265.086581][ T9854] __mutex_lock+0x135/0xc80 [ 265.091083][ T9854] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 265.096440][ T9854] ? slab_free_freelist_hook+0x130/0x1a0 [ 265.102069][ T9854] ? __kmem_cache_free+0xba/0x1f0 [ 265.107090][ T9854] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 265.112753][ T9854] ? security_file_ioctl+0x70/0xa0 [ 265.117871][ T9854] ? __se_sys_ioctl+0x48/0x170 [ 265.122640][ T9854] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 265.127923][ T9854] ? mutex_lock_nested+0x20/0x20 [ 265.132865][ T9854] bd_prepare_to_claim+0x1d9/0x4a0 [ 265.137968][ T9854] ? invalidate_bdev+0xc0/0xc0 [ 265.142742][ T9854] ? truncate_bdev_range+0x260/0x260 [ 265.148018][ T9854] ? __might_fault+0xaa/0x120 [ 265.152718][ T9854] ? down_write+0x16e/0x200 [ 265.157252][ T9854] ? down_read_killable+0x340/0x340 [ 265.162483][ T9854] ? __might_fault+0xaa/0x120 [ 265.167176][ T9854] truncate_bdev_range+0x4e/0x260 [ 265.172199][ T9854] blkdev_common_ioctl+0x1c7a/0x2580 [ 265.177495][ T9854] ? blkdev_bszset+0x1f0/0x1f0 [ 265.182256][ T9854] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 265.187739][ T9854] blkdev_ioctl+0x512/0x730 [ 265.192244][ T9854] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 265.197700][ T9854] ? bpf_lsm_file_ioctl+0x9/0x10 [ 265.202682][ T9854] ? security_file_ioctl+0x80/0xa0 [ 265.207789][ T9854] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 265.213282][ T9854] __se_sys_ioctl+0xfd/0x170 [ 265.217889][ T9854] do_syscall_64+0x55/0xb0 [ 265.222316][ T9854] ? clear_bhb_loop+0x40/0x90 [ 265.226987][ T9854] ? clear_bhb_loop+0x40/0x90 [ 265.231662][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.237568][ T9854] RIP: 0033:0x7f59bfd9df99 [ 265.242051][ T9854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.261730][ T9854] RSP: 002b:00007f59c0cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.270198][ T9854] RAX: ffffffffffffffda RBX: 00007f59c0025fa0 RCX: 00007f59bfd9df99 [ 265.278169][ T9854] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 265.286129][ T9854] RBP: 00007f59bfe34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 265.294093][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.302055][ T9854] R13: 00007f59c0026038 R14: 00007f59c0025fa0 R15: 00007ffcb8ca3cf8 [ 265.310113][ T9854]