last executing test programs: 4.171123907s ago: executing program 2 (id=4673): add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8", 0x6, 0xfffffffffffffffe) 4.043291884s ago: executing program 2 (id=4675): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") 3.749175341s ago: executing program 2 (id=4677): syz_emit_ethernet(0xca, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@noop, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0xffffffff, 0x0, 0x0]}]}}}}}}}, 0x0) 3.574265471s ago: executing program 2 (id=4679): syz_usb_connect(0x2, 0x63, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xdd, 0x6f, 0x3e, 0x20, 0x46d, 0x990, 0xa1bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x5, 0x7, 0x20, 0x43, [{{0x9, 0x4, 0x1, 0xff, 0x3, 0x1, 0x1, 0x38, 0x60, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2d0}, {0xd, 0x24, 0xf, 0x1, 0x20000, 0x0, 0xf4af, 0x1}, {0x6, 0x24, 0x1a, 0x800, 0x4}}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x79, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xa54}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xb2, 0xa, 0xef}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x2, 0x6}}]}}]}}]}}, 0x0) 2.628895827s ago: executing program 1 (id=4690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @generic={0x25}, @initr0, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.393601441s ago: executing program 1 (id=4693): syz_usb_connect(0x2, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xe0, 0x58, 0x71, 0x40, 0xccd, 0x10b2, 0xc71b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x7, 0x0, 0x73, 0x8, 0x7f, 0x80}}]}}]}}, 0x0) 2.365088522s ago: executing program 3 (id=4695): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@cgroup, 0xffffffffffffffff, 0x24, 0x10}, 0x20) 2.209288671s ago: executing program 3 (id=4696): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x33, 0x7d, 0x46, 0x10, 0x4e8, 0x8001, 0x689f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x80, 0x5, [{{0x9, 0x4, 0x6c, 0x5, 0x0, 0xff, 0x2, 0x72, 0x6}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 1.927889278s ago: executing program 2 (id=4697): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) 955.638594ms ago: executing program 0 (id=4698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) 901.077128ms ago: executing program 0 (id=4699): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x8091, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc2299feec75ae06d3eafa38e22c3acf88"], 0x2, 0x1213, &(0x7f00000002c0)="$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") 788.863724ms ago: executing program 1 (id=4700): futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xc5000002) 733.302938ms ago: executing program 3 (id=4701): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 672.862511ms ago: executing program 1 (id=4702): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 618.764564ms ago: executing program 0 (id=4703): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) 579.426316ms ago: executing program 3 (id=4704): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x60000000}, [@generic={0x81, 0x1, 0x1, 0x66}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 577.823447ms ago: executing program 1 (id=4705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, 0x40000000}, [@alu={0x7, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 478.957052ms ago: executing program 1 (id=4706): syz_read_part_table(0x104a, &(0x7f0000000100)="$eJzsz7ENwjAUBNAjEDANDEHBRCxAwRpULMEITMFkGKEEZwKEIr3X/LN9tuTwV11qrXX1XZack+dmOj8shrnrS982h/q2pSTXdXJ8JbnfpstlnMt0n3Z7dn8Zw+nxgy8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOy8AwAA//92/Anj") 436.216075ms ago: executing program 2 (id=4707): syz_usb_connect(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x86, 0xa5, 0xb5, 0x8, 0x403, 0xfad0, 0x142, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x3, 0xa0, 0x6, [{{0x9, 0x4, 0xda, 0x58, 0x2, 0xa1, 0x82, 0xe0, 0x4c, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x5, 0x5, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x1, 0xf0, 0x8}}]}}]}}]}}, 0x0) 435.641305ms ago: executing program 3 (id=4708): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 377.170598ms ago: executing program 0 (id=4709): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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") 294.037553ms ago: executing program 3 (id=4710): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") 200.504448ms ago: executing program 0 (id=4711): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000011c0)) 0s ago: executing program 0 (id=4712): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d302c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7"], 0x1, 0x5517, &(0x7f00000079c0)="$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") kernel console output (not intermixed with test programs): onnected [ 604.589357][T15348] gfs2: fsid=commit: Now mounting FS (format 1802)... [ 604.598884][T15389] loop3: detected capacity change from 0 to 256 [ 604.606292][T15389] exfat: Deprecated parameter 'namecase' [ 604.645943][T15389] exfat: Deprecated parameter 'utf8' [ 604.654020][T15389] exfat: Deprecated parameter 'utf8' [ 604.659420][T15389] exfat: Deprecated parameter 'namecase' [ 604.673109][T15389] exfat: Deprecated parameter 'codepage' [ 604.688247][T15389] exfat: Bad value for 'codepage' [ 604.721014][T15348] gfs2: fsid=commit.0: journal 0 mapped with 7 extents in 0ms [ 604.741294][ T9] gfs2: fsid=commit.0: jid=0, already locked for use [ 604.758487][ T9] gfs2: fsid=commit.0: jid=0: Looking at journal... [ 604.769383][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 604.781716][ T9] kworker/0:1: attempt to access beyond end of device [ 604.781716][ T9] loop2: rw=0, sector=19193135816, nr_sectors = 8 limit=32768 [ 604.895437][ T9] gfs2: fsid=commit.0: jid=0: Failed [ 604.915464][T15348] gfs2: fsid=commit.0: error recovering journal 0: -5 [ 604.978544][T15392] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 604.994563][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 605.004030][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 605.021364][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.042604][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 605.063915][ T8] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 605.085889][ T8] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 605.116622][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.132143][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.157220][ T8] usb 1-1: Product: syz [ 605.167679][ T8] usb 1-1: Manufacturer: syz [ 605.194892][ T8] usb 1-1: SerialNumber: syz [ 605.303921][T15396] loop1: detected capacity change from 0 to 764 [ 605.338646][T15396] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 605.534861][ T8] usb 1-1: USB disconnect, device number 39 [ 605.587851][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 605.644189][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.809088][ T9] usb 4-1: config 2 has an invalid interface number: 219 but max is 0 [ 605.823639][ T9] usb 4-1: config 2 has no interface number 0 [ 605.830461][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 605.843024][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.864263][ T9] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 605.891639][ T5837] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 606.091523][ T9] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 606.105471][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 606.126181][ T9] pac7311: probe of 4-1:2.219 failed with error -71 [ 606.141913][ T9] usb 4-1: USB disconnect, device number 15 [ 606.151363][ T5837] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 606.180807][ T5837] usb 2-1: config 0 has no interface number 0 [ 606.197681][ T5837] usb 2-1: config 0 interface 23 has no altsetting 0 [ 606.205702][ T5837] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 606.215748][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.241722][ T5837] usb 2-1: config 0 descriptor?? [ 606.314779][T15414] loop0: detected capacity change from 0 to 4096 [ 606.332618][T15414] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 606.439296][T15414] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 606.463472][T15414] ntfs3: loop0: Failed to load root (-22). [ 606.493567][ T5837] usb 2-1: string descriptor 0 read error: -71 [ 606.510904][ T5837] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 606.530873][ T5837] gspca_mr97310a: reg write [21] error -8 [ 606.539424][ T5837] mr97310a: probe of 2-1:0.23 failed with error -8 [ 606.572182][ T5837] usb 2-1: USB disconnect, device number 31 [ 606.788138][T15416] loop0: detected capacity change from 0 to 8 [ 606.836284][T15416] SQUASHFS error: Unable to read inode 0x11f [ 606.855260][T15413] loop2: detected capacity change from 0 to 32768 [ 606.893148][T15413] JBD2: Unknown checksum type [ 606.904738][T15413] (syz.2.4200,15413,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 606.938073][T15413] (syz.2.4200,15413,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 606.981112][T15413] (syz.2.4200,15413,1):ocfs2_check_volume:2488 ERROR: status = -22 [ 607.045022][T15413] (syz.2.4200,15413,1):ocfs2_mount_volume:1820 ERROR: status = -22 [ 607.090964][T15423] loop3: detected capacity change from 0 to 1024 [ 607.102441][T15413] (syz.2.4200,15413,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 607.146601][T15423] EXT4-fs error (device loop3): __ext4_iget:5071: inode #2: block 127754: comm syz.3.4204: invalid block [ 607.198606][T15423] EXT4-fs (loop3): get root inode failed [ 607.204357][T15423] EXT4-fs (loop3): mount failed [ 607.658592][T15439] loop3: detected capacity change from 0 to 4096 [ 607.672769][T15439] __ntfs_error: 8 callbacks suppressed [ 607.672791][T15439] ntfs: (device loop3): parse_options(): Unrecognized mount option giíòm+ºi“ö¨ó‰‰$QF¨$3¦}yHÒ^^³_Ÿøw–SI)ä. [ 607.690675][ T1188] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 607.705624][T15439] ntfs: (device loop3): parse_options(): Unrecognized mount option ØM¬CŒ°Âa”_0x000000000000ee00. [ 607.773153][ T7651] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 607.894030][ T1188] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 607.912138][ T1188] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.922339][ T1188] usb 2-1: config 0 has no interface number 0 [ 607.954167][ T1188] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.975956][ T1188] usb 2-1: config 0 interface 200 has no altsetting 0 [ 608.009461][ T1188] usb 2-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 608.018635][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.044092][ T7651] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 608.061307][ T7651] usb 1-1: config 0 has no interface number 0 [ 608.071244][ T1188] usb 2-1: Product: syz [ 608.088103][ T1188] usb 2-1: Manufacturer: syz [ 608.092807][ T1188] usb 2-1: SerialNumber: syz [ 608.097148][ T7651] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 608.122414][ T1188] usb 2-1: config 0 descriptor?? [ 608.129762][ T7651] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 608.140297][ T7651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.157561][ T7651] usb 1-1: Product: syz [ 608.168675][ T7651] usb 1-1: Manufacturer: syz [ 608.173941][ T7651] usb 1-1: SerialNumber: syz [ 608.191369][ T7651] usb 1-1: config 0 descriptor?? [ 608.205944][T15437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 608.243048][ T7651] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 608.293552][ T27] audit: type=1326 audit(973078599.429:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15451 comm="syz.3.4217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bea99aeb9 code=0x0 [ 608.409258][ T1188] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 608.447454][ T7651] usb 1-1: USB disconnect, device number 40 [ 608.463232][ T1188] usb 2-1: USB disconnect, device number 32 [ 608.476857][T12279] usb 1-1: Failed to submit usb control message: -71 [ 608.494026][T12279] usb 1-1: unable to send the bmi data to the device: -71 [ 608.518725][T12279] usb 1-1: unable to get target info from device [ 608.534874][T12279] usb 1-1: could not get target info (-71) [ 608.551840][T12279] usb 1-1: could not probe fw (-71) [ 609.120153][ T5865] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 609.163065][ T1188] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 609.319908][T15476] loop0: detected capacity change from 0 to 4096 [ 609.341792][T15476] ntfs3: loop0: Failed to load $Bitmap (-2). [ 609.369965][ T5865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 609.380628][ T1188] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 609.385282][ T5865] usb 4-1: not running at top speed; connect to a high speed hub [ 609.409925][ T5865] usb 4-1: config 5 has an invalid interface number: 121 but max is 0 [ 609.410285][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.419969][ T5865] usb 4-1: config 5 has no interface number 0 [ 609.445068][ T5865] usb 4-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=b3.a2 [ 609.458451][ T1188] usb 3-1: config 0 descriptor?? [ 609.465162][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.478863][ T5865] usb 4-1: Product: syz [ 609.485842][ T5865] usb 4-1: Manufacturer: syz [ 609.490749][ T5865] usb 4-1: SerialNumber: syz [ 609.498105][ T1188] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 609.538957][ T1188] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 609.559440][ T5837] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 609.749868][ T7651] usb 3-1: USB disconnect, device number 38 [ 609.761852][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 609.788614][ T5865] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 609.800633][ T5865] pctv452e: pctv452e_power_ctrl: 1 [ 609.800633][ T5865] [ 609.813863][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.833005][ T5837] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 609.852763][ T5865] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 609.852763][ T5865] [ 609.864639][ T5865] dvb-usb: bulk message failed: -22 (5/0) [ 609.873282][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.883930][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.895310][ T5837] usb 2-1: Product: syz [ 609.899559][ T5837] usb 2-1: Manufacturer: syz [ 609.905841][ T5865] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 609.917529][ T5837] usb 2-1: SerialNumber: syz [ 609.926954][ T5865] dvb-usb: PCTV HDTV USB error while loading driver (-19) [ 609.954782][ T5865] usb 4-1: USB disconnect, device number 16 [ 610.152857][T15487] loop0: detected capacity change from 0 to 256 [ 610.170419][ T5837] usb 2-1: 0:2 : does not exist [ 610.170643][T15487] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 610.193549][ T5837] usb 2-1: unknown interface protocol 0xff, assuming v1 [ 610.210403][ T5837] usb 2-1: cannot find UAC_HEADER [ 610.241296][ T5837] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 610.254053][ T5837] usb 2-1: USB disconnect, device number 33 [ 610.348800][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.504584][T15492] loop3: detected capacity change from 0 to 512 [ 610.530589][T15492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 610.572384][T15492] EXT4-fs error (device loop3): ext4_init_orphan_info:584: inode #3: comm syz.3.4237: iget: special inode unallocated [ 610.615921][T15493] loop2: detected capacity change from 0 to 4096 [ 610.624377][T15493] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 610.643850][T15492] EXT4-fs (loop3): Remounting filesystem read-only [ 610.659682][T15493] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 610.677103][T15492] EXT4-fs (loop3): get orphan inode failed [ 610.683508][ T8] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 610.686121][T15493] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 610.707744][T15492] EXT4-fs (loop3): mount failed [ 610.708902][T15493] ntfs: (device loop2): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 610.724881][T15493] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 610.745938][T15493] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 610.760018][T15493] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 610.773172][T15493] ntfs: volume version 3.1. [ 610.917501][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 610.936522][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 610.990385][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 611.011332][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 611.049186][ T8] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 611.067043][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.075126][ T8] usb 1-1: Product: syz [ 611.079438][ T8] usb 1-1: Manufacturer: syz [ 611.084099][ T8] usb 1-1: SerialNumber: syz [ 611.098610][ T8] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 611.352782][ T9] usb 1-1: USB disconnect, device number 41 [ 611.483097][ T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 611.579084][ T1188] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 611.696657][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 611.717725][T15509] loop1: detected capacity change from 0 to 32768 [ 611.726787][T15509] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.4244 (15509) [ 611.746487][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 611.759277][T15509] BTRFS: Invalid seeding and uuid-changed device detected [ 611.763944][ T8] usb 3-1: config 2 has an invalid interface number: 147 but max is 0 [ 611.786465][ T8] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 611.799387][ T8] usb 3-1: config 2 has no interface number 0 [ 611.807035][ T1188] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 611.818567][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161 [ 611.827138][ T8] usb 3-1: config 2 interface 147 has no altsetting 0 [ 611.834172][ T1188] usb 4-1: Product: syz [ 611.839411][ T1188] usb 4-1: Manufacturer: syz [ 611.849473][ T1188] usb 4-1: SerialNumber: syz [ 611.854398][ T8] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 611.863939][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.875055][ T1188] usb 4-1: config 0 descriptor?? [ 611.885639][ T8] usb 3-1: Product: syz [ 611.892532][ T8] usb 3-1: Manufacturer: syz [ 611.915480][ T8] usb 3-1: SerialNumber: syz [ 611.922925][ T1188] usb 4-1: interface 1 not found [ 611.950396][ T8] ims_pcu 3-1:2.147: Zero length descriptor [ 611.967162][ T8] ims_pcu: probe of 3-1:2.147 failed with error -22 [ 612.044060][ T7207] udevd[7207]: incorrect btrfs checksum on /dev/loop1 [ 612.082721][T15513] loop0: detected capacity change from 0 to 512 [ 612.130993][T15513] EXT4-fs (loop0): Invalid log block size: 32768 [ 612.170492][ T5837] usb 3-1: USB disconnect, device number 39 [ 612.219180][ T9] usb 4-1: USB disconnect, device number 17 [ 612.381041][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 612.584037][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 612.600156][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 612.613776][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 612.626075][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 612.637798][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 612.647838][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 612.657291][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.678036][ T8] usb 2-1: config 0 descriptor?? [ 612.691215][T15511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.843131][T15527] loop0: detected capacity change from 0 to 8 [ 612.864950][T15527] SQUASHFS error: lzo decompression failed, data probably corrupt [ 612.879097][T15527] SQUASHFS error: Failed to read block 0x91: -5 [ 612.890226][T15527] SQUASHFS error: Unable to read metadata cache entry [8f] [ 612.915421][T15527] SQUASHFS error: Unable to read inode 0x11f [ 612.962509][ T8] usb 2-1: string descriptor 0 read error: -71 [ 613.017033][ T8] usb 2-1: USB disconnect, device number 34 [ 613.136621][T15534] loop2: detected capacity change from 0 to 512 [ 613.201632][T15534] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 613.251624][T15534] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.4256: casefold flag without casefold feature [ 613.294096][T15534] EXT4-fs (loop2): Remounting filesystem read-only [ 613.329124][T15534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.415126][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.876029][T15550] loop1: detected capacity change from 0 to 4096 [ 613.959770][T15553] loop3: detected capacity change from 0 to 4096 [ 613.970595][T15550] __ntfs_error: 4 callbacks suppressed [ 613.970614][T15550] ntfs: (device loop1): ntfs_read_locked_inode(): Resident data attribute is corrupt (size exceeds allocation). [ 614.037051][T15550] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 614.074585][T15553] ntfs3: loop3: $Secure::$SDH is corrupted. [ 614.075513][T15550] ntfs: (device loop1): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 614.095115][T15550] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 614.102613][T15553] ntfs3: loop3: Failed to initialize $Secure (-22). [ 614.348242][ T5837] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 614.541749][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 614.559793][ T5837] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 614.569274][ T5837] usb 1-1: config 162 has no interface number 1 [ 614.587880][ T5837] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.615759][ T5837] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 614.632097][ T5837] usb 1-1: config 162 interface 2 altsetting 1 has an invalid endpoint with address 0x7B, skipping [ 614.670891][ T5837] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 614.716402][ T5837] usb 1-1: config 162 interface 84 has no altsetting 0 [ 614.739682][ T5837] usb 1-1: config 162 interface 2 has no altsetting 0 [ 614.755826][ T5837] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 614.767112][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.775225][ T5837] usb 1-1: Product: syz [ 614.784513][ T5837] usb 1-1: Manufacturer: syz [ 614.797554][ T5837] usb 1-1: SerialNumber: syz [ 614.871831][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 615.074982][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 615.087719][ T23] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 615.128338][ T23] usb 4-1: config 0 has no interface number 0 [ 615.141406][ T5837] usb 1-1: USB disconnect, device number 42 [ 615.147603][ T23] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 615.196900][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.238416][ T23] usb 4-1: config 0 descriptor?? [ 615.474517][ T23] snd-usb-audio: probe of 4-1:0.255 failed with error -71 [ 615.504513][ T23] usb 4-1: USB disconnect, device number 18 [ 615.556179][ T1188] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 615.629104][T15584] loop1: detected capacity change from 0 to 40427 [ 615.642039][T15584] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 615.661743][T15584] F2FS-fs (loop1): invalid crc value [ 615.669392][T15584] F2FS-fs (loop1): invalid crc value [ 615.683456][T15584] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 615.749677][ T1188] usb 3-1: Using ep0 maxpacket: 16 [ 615.783821][ T1188] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 615.802344][ T1188] usb 3-1: config 4 has no interface number 0 [ 615.808566][ T1188] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 615.833873][ T1188] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 615.855491][ T1188] usb 3-1: config 4 interface 51 has no altsetting 0 [ 615.879796][ T1188] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 615.898323][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.908504][ T1188] usb 3-1: Product: syz [ 615.915526][ T1188] usb 3-1: Manufacturer: syz [ 615.922744][ T1188] usb 3-1: SerialNumber: syz [ 615.938035][T15586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.948944][T15586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.065509][T15588] loop0: detected capacity change from 0 to 8192 [ 616.141426][T15588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 616.154821][T15588] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 616.164147][T15588] REISERFS (device loop0): using ordered data mode [ 616.170949][T15588] reiserfs: using flush barriers [ 616.208049][T15588] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 616.213597][ T1188] cdc_eem: probe of 3-1:4.51 failed with error -71 [ 616.243563][T15588] REISERFS (device loop0): checking transaction log (loop0) [ 616.334565][ T1188] usb 3-1: USB disconnect, device number 40 [ 616.343312][T15588] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.6* [1 2 0x900000000000000 IND], item_len 0, item_location 4052, free_space(entry_count) 7 [ 616.403022][T15588] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 616.431589][T15588] REISERFS (device loop0): Remounting filesystem read-only [ 616.442282][T15588] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 616.462885][T15588] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 616.559247][T15599] loop1: detected capacity change from 0 to 8 [ 616.579316][T15599] unable to read fragment index table [ 616.592997][ T5837] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 616.666076][ T5765] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 616.832189][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.855142][ T5837] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 616.893018][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.901127][ T5837] usb 4-1: Product: syz [ 616.932083][ T5837] usb 4-1: Manufacturer: syz [ 616.957406][ T5837] usb 4-1: SerialNumber: syz [ 616.976696][ T5837] usb 4-1: config 0 descriptor?? [ 617.042509][ T5837] usb 4-1: no audio or video endpoints found [ 617.139938][T15613] loop1: detected capacity change from 0 to 512 [ 617.167736][T15613] EXT4-fs (loop1): invalid inodes per group: 48269 [ 617.167736][T15613] [ 617.278274][T15611] loop0: detected capacity change from 0 to 4096 [ 617.292232][ T5837] usb 4-1: USB disconnect, device number 19 [ 617.305783][T15611] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 617.315986][T15611] ntfs: (device loop0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 617.335194][T15611] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 618.308153][T15645] loop3: detected capacity change from 0 to 1024 [ 618.326129][T15645] EXT4-fs: Ignoring removed mblk_io_submit option [ 618.342855][T15645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 618.369313][T15645] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.4311: bad orphan inode 11 [ 618.392530][T15647] loop2: detected capacity change from 0 to 512 [ 618.416469][T15645] ext4_test_bit(bit=10, block=4) = 1 [ 618.422752][T15647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 618.429507][T15645] is_bad_inode(inode)=0 [ 618.442893][T15645] NEXT_ORPHAN(inode)=3254779904 [ 618.450185][T15647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 618.464284][T15645] max_ino=32 [ 618.467566][T15645] i_nlink=0 [ 618.484613][T15645] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.4311: lblock 2 mapped to illegal pblock 2 (length 1) [ 618.533732][T15647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 618.563665][T15653] loop1: detected capacity change from 0 to 2048 [ 618.583931][T15645] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 618.626013][T15647] System zones: 0-2, 18-18, 34-34 [ 618.631461][T15645] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.4311: lblock 0 mapped to illegal pblock 48 (length 1) [ 618.648288][T15645] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 618.657841][T15647] EXT4-fs error (device loop2): ext4_quota_enable:7140: inode #4: comm syz.2.4312: iget: immutable or append flags not allowed on symlinks [ 618.677331][T15645] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.4311: Failed to acquire dquot type 0 [ 618.678329][T15647] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.4312: Bad quota inode: 4, type: 1 [ 618.701387][T15645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 618.716635][T15653] loop1: p1 < > p4 < > [ 618.734935][T15653] loop1: partition table partially beyond EOD, truncated [ 618.738667][T15645] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.4311: mark_inode_dirty error [ 618.766904][T15647] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 618.784600][T15653] loop1: p4 start 42180 is beyond EOD, truncated [ 618.805056][T15645] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 618.827584][T15647] EXT4-fs (loop2): mount failed [ 618.834331][T15645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.061702][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.105627][T15657] dccp_invalid_packet: P.Data Offset(224) too large [ 619.139206][ T5774] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 619.169133][ T7207] udevd[7207]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 619.192867][ T5774] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 619.216045][ T5774] EXT4-fs error (device loop3): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 619.521873][T15649] loop0: detected capacity change from 0 to 32768 [ 619.589462][T15649] lmLogInit: exit(-22) [ 619.593666][T15649] lmLogOpen: exit(-22) [ 619.918764][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 620.127686][T15683] loop0: detected capacity change from 0 to 8 [ 620.142856][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 620.162520][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 620.179450][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 620.189981][T15683] SQUASHFS error: zlib decompression failed, data probably corrupt [ 620.210666][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 620.222290][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.230576][T15683] SQUASHFS error: Failed to read block 0x9b: -5 [ 620.236936][T15683] SQUASHFS error: Unable to read metadata cache entry [99] [ 620.245847][ T23] usb 4-1: Product: syz [ 620.256387][ T23] usb 4-1: Manufacturer: syz [ 620.298198][T15683] SQUASHFS error: Unable to read inode 0x127 [ 620.302203][ T23] usb 4-1: SerialNumber: syz [ 620.317424][ T23] usb 4-1: config 0 descriptor?? [ 620.582429][ T23] usb 4-1: USB disconnect, device number 20 [ 620.815843][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 621.019010][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 621.029648][ T8] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 621.044737][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 621.053891][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.062157][ T9] usb 1-1: Product: syz [ 621.070461][ T9] usb 1-1: Manufacturer: syz [ 621.075454][ T9] usb 1-1: SerialNumber: syz [ 621.082459][ T9] usb 1-1: config 0 descriptor?? [ 621.094909][ T9] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 621.104322][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 621.110131][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 621.122072][ T9] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 621.128103][ T23] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 621.133704][ T9] usb 1-1: media controller created [ 621.163151][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.183640][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 621.189613][ T9] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 621.206658][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 621.220205][ T9] dvb-usb: schedule remote query interval to 50 msecs. [ 621.231969][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 621.240148][ T9] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 621.251137][ T8] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 621.262106][ T8] usb 2-1: config 65 has no interface number 0 [ 621.272546][ T8] usb 2-1: string descriptor 0 read error: -22 [ 621.279381][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 621.291294][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 621.299650][ T5818] dvb-usb: error while querying for an remote control event. [ 621.324803][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.339746][ T8] usbtest 2-1:65.95: Linux gadget zero [ 621.345306][ T8] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt) [ 621.362145][ T23] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 621.386831][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 621.392686][ T8] dvb-usb: error while querying for an remote control event. [ 621.414648][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 48, using maximum allowed: 30 [ 621.459770][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 621.500431][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 621.508552][ T23] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 621.511779][ T8] dvb-usb: error while querying for an remote control event. [ 621.532037][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.552311][ T23] usb 3-1: Product: syz [ 621.570681][ T8] usb 1-1: USB disconnect, device number 43 [ 621.573949][ T7651] usb 2-1: USB disconnect, device number 35 [ 621.595768][ T23] usb 3-1: Manufacturer: syz [ 621.608879][ T23] usb 3-1: SerialNumber: syz [ 621.627396][ T23] usb 3-1: config 0 descriptor?? [ 621.687619][ T8] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 621.907259][ T23] usb 3-1: USB disconnect, device number 41 [ 621.963575][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.037146][T15714] loop3: detected capacity change from 0 to 1764 [ 622.120455][T15714] ISOFS: Unable to identify CD-ROM format. [ 622.375012][T15720] loop1: detected capacity change from 0 to 128 [ 622.401557][T15720] ufs: You didn't specify the type of your ufs filesystem [ 622.401557][T15720] [ 622.401557][T15720] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 622.401557][T15720] [ 622.401557][T15720] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 622.526417][T15720] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 622.874137][T15738] loop2: detected capacity change from 0 to 128 [ 622.892938][T15738] hpfs: bad mount options. [ 622.916854][T15737] loop0: detected capacity change from 0 to 2048 [ 622.999630][ T27] audit: type=1326 audit(973078613.189:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.4356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26e739aeb9 code=0x0 [ 623.627548][ T23] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 623.659685][ T5865] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 623.801480][T15746] loop1: detected capacity change from 0 to 32768 [ 623.825686][T15746] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.4359 (15746) [ 623.846606][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 623.863983][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.877496][T15746] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 623.897165][ T5865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 623.907789][ T23] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 623.920372][ T5865] usb 3-1: not running at top speed; connect to a high speed hub [ 623.928592][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.932494][T15746] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 623.938038][ T23] usb 1-1: Product: syz [ 623.952157][ T5865] usb 3-1: config 136 has an invalid interface number: 30 but max is 0 [ 623.962766][ T5865] usb 3-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 623.974674][ T23] usb 1-1: Manufacturer: syz [ 623.979384][ T23] usb 1-1: SerialNumber: syz [ 623.992914][T15746] BTRFS info (device loop1): setting nodatacow, compression disabled [ 623.998991][ T23] usb 1-1: config 0 descriptor?? [ 624.001139][T15746] BTRFS info (device loop1): force clearing of disk cache [ 624.006250][ T5865] usb 3-1: config 136 has no interface number 0 [ 624.028745][ T5865] usb 3-1: config 136 interface 30 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 624.037192][T15746] BTRFS info (device loop1): enabling ssd optimizations [ 624.047304][ T23] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 624.065708][ T5865] usb 3-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.079130][T15746] BTRFS info (device loop1): using spread ssd allocation scheme [ 624.079169][T15746] BTRFS info (device loop1): not using spread ssd allocation scheme [ 624.079212][T15746] BTRFS info (device loop1): using spread ssd allocation scheme [ 624.079233][T15746] BTRFS info (device loop1): not using ssd optimizations [ 624.079251][T15746] BTRFS info (device loop1): not using spread ssd allocation scheme [ 624.079270][T15746] BTRFS info (device loop1): using free space tree [ 624.227807][T15746] BTRFS info (device loop1): rebuilding free space tree [ 624.263425][ T5865] usb 3-1: New USB device found, idVendor=0499, idProduct=1a0e, bcdDevice=f0.f4 [ 624.289102][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.319199][ T5865] usb 3-1: Product: syz [ 624.323833][ T5865] usb 3-1: Manufacturer: syz [ 624.328510][ T5865] usb 3-1: SerialNumber: syz [ 624.404883][ T23] usb 1-1: USB disconnect, device number 44 [ 624.449688][ T5772] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 624.722599][ T5865] usb 3-1: USB disconnect, device number 42 [ 624.729925][T15756] loop3: detected capacity change from 0 to 40427 [ 624.761048][T15756] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 624.793628][T15756] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 624.811026][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.812360][T15756] F2FS-fs (loop3): invalid crc value [ 624.892958][T15756] F2FS-fs (loop3): Found nat_bits in checkpoint [ 625.114049][T15756] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 625.128738][T15756] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 625.413438][T15783] loop1: detected capacity change from 0 to 64 [ 625.455025][T15783] hfs: get root inode failed [ 625.519734][ T9] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 625.722890][ T5865] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 625.740799][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 625.786877][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.808401][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.847095][ T9] usb 1-1: string descriptor 0 read error: -22 [ 625.872688][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.892908][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.935708][ T9] usb 1-1: cannot find UAC_HEADER [ 625.937522][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 625.956696][ T5865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 625.970847][ T5865] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.987701][ T5865] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 626.011769][ T5865] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 626.021854][ T5865] usb 3-1: config 1 interface 0 has no altsetting 0 [ 626.037306][ T5865] usb 3-1: string descriptor 0 read error: -22 [ 626.047765][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.060157][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 626.064458][ T5865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.081364][ T23] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 626.092168][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.117279][T15785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 626.151564][T15785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 626.172526][ T5865] usb 3-1: bad CDC descriptors [ 626.218851][ T5865] usb 1-1: USB disconnect, device number 45 [ 626.292549][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 626.304021][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 626.317211][ T23] usb 2-1: config 5 has an invalid interface number: 19 but max is 0 [ 626.327782][ T23] usb 2-1: config 5 has no interface number 0 [ 626.334174][ T23] usb 2-1: config 5 interface 19 altsetting 7 bulk endpoint 0x8A has invalid maxpacket 1023 [ 626.345191][ T23] usb 2-1: config 5 interface 19 has no altsetting 0 [ 626.355695][ T23] usb 2-1: New USB device found, idVendor=0b05, idProduct=420f, bcdDevice= b.bd [ 626.367128][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.376347][ T23] usb 2-1: Product: syz [ 626.380862][ T23] usb 2-1: Manufacturer: syz [ 626.385773][ T23] usb 2-1: SerialNumber: syz [ 626.403067][T15791] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 626.423469][ T5837] usb 3-1: USB disconnect, device number 43 [ 626.585500][T15793] loop3: detected capacity change from 0 to 40427 [ 626.600937][T15793] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 626.608279][T15793] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 626.632113][T15793] F2FS-fs (loop3): Found nat_bits in checkpoint [ 626.692776][ T23] usb 2-1: USB disconnect, device number 36 [ 626.748376][T15793] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 626.758107][T15793] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 627.004250][T15799] loop0: detected capacity change from 0 to 1024 [ 627.064662][T15799] EXT4-fs: Ignoring removed mblk_io_submit option [ 627.085981][T15799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 627.164680][T15799] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.4375: bad orphan inode 11 [ 627.195127][T15799] ext4_test_bit(bit=10, block=4) = 1 [ 627.216425][T15799] is_bad_inode(inode)=0 [ 627.234336][T15799] NEXT_ORPHAN(inode)=3254779904 [ 627.239302][T15799] max_ino=32 [ 627.275964][T15799] i_nlink=0 [ 627.282039][T15799] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.4375: lblock 2 mapped to illegal pblock 2 (length 1) [ 627.297074][T15799] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 627.306796][T15799] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.4375: lblock 0 mapped to illegal pblock 48 (length 1) [ 627.323997][T15799] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 627.333948][T15799] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.4375: Failed to acquire dquot type 0 [ 627.379203][T15799] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 627.408346][T15799] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.4375: mark_inode_dirty error [ 627.419979][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 627.450744][T15799] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 627.471314][T15799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.612650][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.625778][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 627.633490][ T9] usb 4-1: config 2 has an invalid interface number: 86 but max is 0 [ 627.646811][ T5778] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 627.654616][ T9] usb 4-1: config 2 has no interface number 0 [ 627.677882][ T9] usb 4-1: config 2 interface 86 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 627.700729][ T5778] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 627.711263][ T9] usb 4-1: New USB device found, idVendor=1b3d, idProduct=018f, bcdDevice=92.aa [ 627.720386][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.722581][ T5778] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 627.804323][T15803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.037335][ T9] usb 4-1: string descriptor 0 read error: -71 [ 628.053811][ T9] ftdi_sio 4-1:2.86: FTDI USB Serial Device converter detected [ 628.091465][ T9] ftdi_sio ttyUSB0: unknown device type: 0x92aa [ 628.121190][ T9] usb 4-1: USB disconnect, device number 21 [ 628.144108][ T9] ftdi_sio 4-1:2.86: device disconnected [ 628.244989][T15807] loop2: detected capacity change from 0 to 32768 [ 628.332073][ T7207] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 628.439179][T15817] loop0: detected capacity change from 0 to 2048 [ 628.449915][T15809] loop1: detected capacity change from 0 to 32768 [ 629.210272][T15829] loop2: detected capacity change from 0 to 2048 [ 629.274762][T15829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.581274][T15836] loop0: detected capacity change from 0 to 1024 [ 629.598319][T15837] loop2: detected capacity change from 0 to 1024 [ 629.644747][T15837] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.671030][T15836] hfsplus: invalid btree flag [ 629.683781][T15836] hfsplus: failed to load catalog file [ 629.708394][T15837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 629.784426][T15837] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.4391: bad orphan inode 11 [ 629.841210][T15837] ext4_test_bit(bit=10, block=4) = 1 [ 629.846775][T15837] is_bad_inode(inode)=0 [ 629.851630][T15837] NEXT_ORPHAN(inode)=3254779904 [ 629.856631][T15837] max_ino=32 [ 629.860484][T15837] i_nlink=0 [ 629.909157][T15843] loop3: detected capacity change from 0 to 1024 [ 629.928920][T15837] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.4391: lblock 2 mapped to illegal pblock 2 (length 1) [ 629.969203][T15837] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 629.977843][T15837] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.4391: lblock 0 mapped to illegal pblock 48 (length 1) [ 630.014584][T15843] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 630.067601][T15843] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 630.086180][T15837] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 630.127592][T15843] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.4393: Failed to acquire dquot type 0 [ 630.142290][T15837] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.4391: Failed to acquire dquot type 0 [ 630.156230][T15837] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 630.167890][T15843] EXT4-fs error (device loop3): mb_free_blocks:1954: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 630.177377][T15837] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.4391: mark_inode_dirty error [ 630.205860][T15837] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 630.222514][T15837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.234691][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 630.245571][T15843] EXT4-fs (loop3): 1 truncate cleaned up [ 630.250115][T15827] loop1: detected capacity change from 0 to 40427 [ 630.270996][T15827] F2FS-fs (loop1): heap/no_heap options were deprecated [ 630.279360][T15843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.288258][T15827] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 630.313585][T15827] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1dff [ 630.322783][T15827] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off [ 630.427570][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 630.450889][ T9] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 630.480097][ T9] usb 1-1: config 0 has no interface number 0 [ 630.486333][ T9] usb 1-1: config 0 interface 16 has no altsetting 0 [ 630.518288][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.530954][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=1b.e7 [ 630.553812][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.564258][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.573999][ T9] usb 1-1: Product: syz [ 630.579167][ T5773] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 630.592467][ T9] usb 1-1: Manufacturer: syz [ 630.597185][ T9] usb 1-1: SerialNumber: syz [ 630.639186][ T5773] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 630.693914][ T9] usb 1-1: config 0 descriptor?? [ 630.700148][ T5773] EXT4-fs error (device loop2): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 630.975541][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 631.007334][T15856] loop1: detected capacity change from 0 to 8 [ 631.092924][T15856] SQUASHFS error: xz decompression failed, data probably corrupt [ 631.111215][T15856] SQUASHFS error: Failed to read block 0x108: -5 [ 631.122585][T15856] SQUASHFS error: Unable to read metadata cache entry [106] [ 631.130079][T15856] SQUASHFS error: Unable to read inode 0x11f [ 631.234384][ T9] usb 1-1: USB disconnect, device number 46 [ 631.269553][ T7207] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.605035][T15863] loop1: detected capacity change from 0 to 8 [ 631.626604][T15863] SQUASHFS error: lzo decompression failed, data probably corrupt [ 631.642047][T15863] SQUASHFS error: Failed to read block 0x91: -5 [ 631.650684][T15863] SQUASHFS error: Unable to read metadata cache entry [8f] [ 631.662727][T15863] SQUASHFS error: Unable to read inode 0x11f [ 632.212980][T15858] (syz.3.4408,15858,1):ocfs2_initialize_super:2075 ERROR: Invalid number of node slots (0) [ 632.247502][T15858] (syz.3.4408,15858,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 632.441902][T15860] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 632.459236][T15860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 632.501200][T15860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 632.663568][T15888] ISOFS: Unable to identify CD-ROM format. [ 632.691985][T15886] SQUASHFS error: xz decompression failed, data probably corrupt [ 632.714360][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 632.727029][T15886] SQUASHFS error: Failed to read block 0x108: -5 [ 632.733457][T15886] SQUASHFS error: Unable to read metadata cache entry [106] [ 632.743329][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 632.757328][T15886] SQUASHFS error: Unable to read inode 0x11f [ 632.769105][T15860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 632.779752][T15860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 632.930542][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 632.958214][ T8] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 632.977813][ T8] usb 2-1: config 0 has no interface number 0 [ 633.009897][ T8] usb 2-1: config 0 interface 23 has no altsetting 0 [ 633.038789][ T8] usb 2-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice= d.09 [ 633.068695][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.096845][ T8] usb 2-1: Product: syz [ 633.113528][T15891] SQUASHFS error: xz decompression failed, data probably corrupt [ 633.124111][ T8] usb 2-1: Manufacturer: syz [ 633.129466][ T8] usb 2-1: SerialNumber: syz [ 633.140557][T15891] SQUASHFS error: Failed to read block 0x108: -5 [ 633.151833][T15891] SQUASHFS error: Unable to read metadata cache entry [106] [ 633.161272][ T8] usb 2-1: config 0 descriptor?? [ 633.167183][T15891] SQUASHFS error: Unable to read inode 0x11f [ 633.431174][ T8] safe_serial 2-1:0.23: safe_serial converter detected [ 633.449567][ T8] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 633.483489][ T8] usb 2-1: USB disconnect, device number 37 [ 633.514982][ T8] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 633.525756][ T8] safe_serial 2-1:0.23: device disconnected [ 633.641160][T15897] set_capacity_and_notify: 5 callbacks suppressed [ 633.641179][T15897] loop0: detected capacity change from 0 to 512 [ 633.661077][T15895] loop3: detected capacity change from 0 to 4096 [ 633.676059][T15897] EXT4-fs: journaled quota format not specified [ 633.750729][T15895] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 633.768314][T15895] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 633.805753][T15895] ntfs: (device loop3): ntfs_read_locked_inode(): Mapping pairs decompression failed. [ 633.833907][T15895] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 633.857391][T15895] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 633.872018][T15895] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 633.885396][T15895] ntfs: volume version 3.1. [ 634.125784][ T7651] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 634.196535][T15901] 9pnet: Could not find request transport: f [ 634.341908][ T7651] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 634.361465][ T7651] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 634.387864][ T7651] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 634.393520][ T1188] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 634.398829][ T7651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.412983][ T7651] usb 3-1: Product: syz [ 634.418329][ T7651] usb 3-1: Manufacturer: syz [ 634.422997][ T7651] usb 3-1: SerialNumber: syz [ 634.436091][ T7651] rtl8150 3-1:1.0: couldn't find required endpoints [ 634.443225][ T7651] rtl8150: probe of 3-1:1.0 failed with error -5 [ 634.553286][ T23] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 634.567924][T15914] loop0: detected capacity change from 0 to 4096 [ 634.583597][T15914] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 634.603129][T15914] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 634.624873][ T1188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.640518][ T1188] usb 4-1: not running at top speed; connect to a high speed hub [ 634.675837][ T1188] usb 4-1: config 3 has an invalid interface number: 39 but max is 0 [ 634.686153][ T1188] usb 4-1: config 3 has no interface number 0 [ 634.711630][ T9] usb 3-1: USB disconnect, device number 44 [ 634.717889][ T1188] usb 4-1: config 3 interface 39 has no altsetting 0 [ 634.735415][ T1188] usb 4-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 634.755566][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.765496][ T1188] usb 4-1: Product: syz [ 634.769895][ T1188] usb 4-1: Manufacturer: syz [ 634.774548][ T1188] usb 4-1: SerialNumber: syz [ 634.785261][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.811797][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 634.839034][ T23] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 634.851138][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.863230][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 634.883861][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.894415][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.922751][ T23] usb 2-1: Product: syz [ 634.927048][ T23] usb 2-1: Manufacturer: syz [ 634.936789][ T23] usb 2-1: SerialNumber: syz [ 635.038530][ T1188] go7007: probe of 4-1:3.39 failed with error -12 [ 635.065464][ T1188] usb 4-1: USB disconnect, device number 22 [ 635.196106][ T23] usb 2-1: 0:2 : does not exist [ 635.238825][ T23] usb 2-1: USB disconnect, device number 38 [ 635.264901][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.625722][T15920] loop0: detected capacity change from 0 to 32768 [ 635.645483][T15920] (syz.0.4429,15920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 635.663992][T15920] (syz.0.4429,15920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 635.682068][T15920] (syz.0.4429,15920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xff11756e, computed 0x656d756e. Applying ECC. [ 635.697538][T15920] (syz.0.4429,15920,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xff11756e, computed 0x656d756e [ 635.721373][T15920] (syz.0.4429,15920,0):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 635.732954][T15920] (syz.0.4429,15920,0):ocfs2_read_virt_blocks:1027 ERROR: status = -5 [ 635.742550][T15920] (syz.0.4429,15920,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 635.753869][T15920] (syz.0.4429,15920,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 635.764865][T15920] (syz.0.4429,15920,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 635.777729][T15920] (syz.0.4429,15920,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 635.777774][T15920] (syz.0.4429,15920,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 635.804571][ T1188] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 635.841229][T15920] (syz.0.4429,15920,0):ocfs2_initialize_super:2254 ERROR: status = -22 [ 635.859844][T15920] (syz.0.4429,15920,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 636.017822][ T1188] usb 3-1: Using ep0 maxpacket: 8 [ 636.037756][ T1188] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 636.061119][ T1188] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 636.071074][ T1188] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 636.124290][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.189001][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 636.402799][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 636.412803][ T1188] usb 3-1: string descriptor 0 read error: -71 [ 636.424819][ T1188] hub 3-1:32.0: USB hub found [ 636.435831][ T9] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 636.456477][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.473352][T15936] loop1: detected capacity change from 0 to 4096 [ 636.478069][ T1188] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 636.487743][ T9] usb 4-1: config 0 has no interface number 0 [ 636.509558][T15936] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 636.510347][ T9] usb 4-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.566110][T15936] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 636.594085][T15936] ntfs3: loop1: Failed to load $UpCase (-22). [ 636.599731][ T1188] usb 3-1: USB disconnect, device number 45 [ 636.611282][ T9] usb 4-1: config 0 interface 120 has no altsetting 0 [ 636.651007][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 636.691646][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.699755][ T9] usb 4-1: Product: syz [ 636.734035][ T9] usb 4-1: Manufacturer: syz [ 636.738749][ T9] usb 4-1: SerialNumber: syz [ 636.757403][ T9] usb 4-1: config 0 descriptor?? [ 636.792013][ T9] rndis_wlan 4-1:0.120: skipping garbage [ 636.797876][ T9] usb 4-1: bad CDC descriptors [ 636.834411][ T9] rndis_host 4-1:0.120: skipping garbage [ 636.840178][ T9] usb 4-1: bad CDC descriptors [ 636.882562][ T9] cdc_acm 4-1:0.120: Zero length descriptor references [ 636.899295][ T9] cdc_acm: probe of 4-1:0.120 failed with error -22 [ 637.026658][T15932] loop0: detected capacity change from 0 to 32768 [ 637.046978][T15932] (syz.0.4435,15932,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 637.054613][ T23] usb 4-1: USB disconnect, device number 23 [ 637.067522][T15932] (syz.0.4435,15932,0):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 637.075981][T15932] (syz.0.4435,15932,0):ocfs2_init_global_system_inodes:448 ERROR: status = -12 [ 637.089733][T15932] (syz.0.4435,15932,0):ocfs2_init_global_system_inodes:472 ERROR: status = -12 [ 637.103226][T15932] (syz.0.4435,15932,0):ocfs2_initialize_super:2254 ERROR: status = -12 [ 637.112055][T15932] (syz.0.4435,15932,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 637.248288][ T5865] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 637.324231][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 637.324250][ T27] audit: type=1326 audit(973078626.584:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.2.4442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ffed9aeb9 code=0x0 [ 637.481614][ T5865] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.493319][ T5865] usb 2-1: config 0 has no interface number 0 [ 637.515331][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 637.535380][ T5865] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 637.557280][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.565374][ T5865] usb 2-1: Product: syz [ 637.581138][ T5865] usb 2-1: Manufacturer: syz [ 637.585822][ T5865] usb 2-1: SerialNumber: syz [ 637.610315][ T5865] usb 2-1: config 0 descriptor?? [ 637.651056][ T5865] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 637.682221][ T5865] usb 2-1: selecting invalid altsetting 1 [ 637.690041][ T5865] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 637.710421][ T5865] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 637.727860][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 637.748370][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.779116][ T9] usb 1-1: config 0 descriptor?? [ 637.795500][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 637.869246][ T5865] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 637.900328][ T5865] usb 2-1: USB disconnect, device number 39 [ 638.016718][ T9] gspca_sn9c2028: read1 error -71 [ 638.036103][ T9] gspca_sn9c2028: read1 error -71 [ 638.049956][ T9] gspca_sn9c2028: read1 error -71 [ 638.056974][ T9] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 638.066882][ T9] usb 1-1: USB disconnect, device number 47 [ 638.081101][ T5818] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 638.284793][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 638.293789][ T5818] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.303203][ T5818] usb 3-1: config 0 has no interface number 0 [ 638.309496][ T5818] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 638.322597][ T5818] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 638.333029][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.342517][ T5818] usb 3-1: Product: syz [ 638.346883][ T5818] usb 3-1: Manufacturer: syz [ 638.351987][ T5818] usb 3-1: SerialNumber: syz [ 638.377306][ T5818] usb 3-1: config 0 descriptor?? [ 638.392789][ T5818] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 638.419650][T15967] loop3: detected capacity change from 0 to 512 [ 638.433693][T15967] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 638.485576][ T5818] snd-usb-audio: probe of 3-1:0.1 failed with error -2 [ 638.590113][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.689278][T15969] loop3: detected capacity change from 0 to 2048 [ 638.727968][ T9] usb 3-1: USB disconnect, device number 46 [ 638.795116][T15969] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 638.811569][T15969] loop3: partition table partially beyond EOD, truncated [ 638.833888][T15969] loop3: p2 start 4278190080 is beyond EOD, truncated [ 638.835868][T15975] loop1: detected capacity change from 0 to 16 [ 638.859085][T15975] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000) [ 638.884390][T15969] loop3: p4 size 8192 extends beyond EOD, truncated [ 638.907860][T15969] loop3: p6 size 8192 extends beyond EOD, truncated [ 639.421310][T15981] loop1: detected capacity change from 0 to 512 [ 639.432791][ T7207] udevd[7207]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 639.451332][T15981] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 639.499333][T15981] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.4459: bad orphan inode 15 [ 639.553751][T15987] loop2: detected capacity change from 0 to 256 [ 639.595159][T15981] ext4_test_bit(bit=14, block=18) = 1 [ 639.602071][ T7210] udevd[7210]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 639.616585][T15987] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 639.636854][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 639.654574][T15064] udevd[15064]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 639.665001][T15981] is_bad_inode(inode)=0 [ 639.669219][T15981] NEXT_ORPHAN(inode)=1023 [ 639.673598][T15981] max_ino=32 [ 639.679475][ T7209] udevd[7209]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 639.759651][T15981] i_nlink=0 [ 639.764981][T15981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 639.789257][T15974] loop0: detected capacity change from 0 to 32768 [ 639.858181][T15974] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.4455 (15974) [ 639.945925][T15974] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 639.967453][T15974] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 639.986860][T15989] loop2: detected capacity change from 0 to 1024 [ 639.993488][T15974] BTRFS info (device loop0): setting nodatacow, compression disabled [ 640.024531][T15974] BTRFS info (device loop0): enabling all of the rescue options [ 640.034744][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 640.055160][T15974] BTRFS info (device loop0): ignoring data csums [ 640.070712][T15989] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 640.112074][T15974] BTRFS info (device loop0): ignoring bad roots [ 640.129614][T15974] BTRFS info (device loop0): disabling log replay at mount time [ 640.165118][T15974] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 640.172615][T15989] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.4462: bg 0: block 10: padding at end of block bitmap is not set [ 640.182352][T15974] BTRFS error (device loop0): unrecognized metadata_ratio value 0x0900000000000000 [ 640.264683][T15974] BTRFS error (device loop0): open_ctree failed: -34 [ 640.283797][T15989] Quota error (device loop2): write_blk: dquota write failed [ 640.291287][T15989] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 640.315543][ T5765] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (5765) [ 640.336234][T15989] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 640.371125][T15989] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.4462: Failed to acquire dquot type 0 [ 640.413954][T15989] Quota error (device loop2): write_blk: dquota write failed [ 640.459547][T15989] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 640.477128][T15989] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 640.499993][T15989] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.4462: Failed to acquire dquot type 0 [ 640.541624][T15989] EXT4-fs error (device loop2): ext4_free_blocks:6692: comm syz.2.4462: Freeing blocks not in datazone - block = 0, count = 4096 [ 640.612802][T15989] Quota error (device loop2): write_blk: dquota write failed [ 640.646871][T15989] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 640.656273][T15989] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 640.711525][T15989] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.4462: Failed to acquire dquot type 0 [ 640.747299][T15989] EXT4-fs (loop2): 1 orphan inode deleted [ 640.763809][T15989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.008250][T15989] syz.2.4462 (15989) used greatest stack depth: 20656 bytes left [ 641.048108][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.236285][T15986] loop3: detected capacity change from 0 to 40427 [ 641.258496][T15986] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 641.282566][T15986] F2FS-fs (loop3): invalid crc value [ 641.291138][T15986] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:5, type:0, next_blkoff:0, blkofs:0 [ 641.306068][T15986] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 641.320727][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 641.405876][T16009] loop2: detected capacity change from 0 to 4096 [ 641.504134][ T23] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 641.548440][T16009] ntfs: volume version 3.1. [ 641.549577][ T9] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 641.577657][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.601491][ T9] usb 2-1: config 0 descriptor?? [ 641.637353][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 641.652589][ T9] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 641.730558][ T23] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 641.766744][ T23] usb 1-1: config 0 has no interface number 0 [ 641.779269][ T23] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 641.810786][ T23] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 641.856935][ T23] usb 1-1: config 0 interface 11 has no altsetting 0 [ 641.863743][ T23] usb 1-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 641.873394][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.889901][ T23] usb 1-1: config 0 descriptor?? [ 641.895919][T16008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 641.924966][ T23] keyspan 1-1:0.11: Keyspan 4 port adapter converter detected [ 641.939178][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 641.955080][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 641.978181][ T9] usb 2-1: USB disconnect, device number 40 [ 641.991831][ T23] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 642.027606][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 642.035633][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 642.087820][ T23] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 642.164907][ T5818] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 642.177591][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 642.185543][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 642.220427][ T23] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 642.260679][T16019] loop3: detected capacity change from 0 to 8192 [ 642.269780][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 642.297515][T16019] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 642.316057][ T23] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 642.342875][T16019] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 642.353343][T16019] REISERFS (device loop3): using ordered data mode [ 642.362010][T16019] reiserfs: using flush barriers [ 642.366890][ T23] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 642.378060][T16019] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 642.398247][T16019] REISERFS (device loop3): checking transaction log (loop3) [ 642.405762][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 642.413966][ T5818] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 642.424306][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.432610][T16019] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 642.450408][ T5818] usb 3-1: config 0 descriptor?? [ 642.455610][ T23] usb 1-1: USB disconnect, device number 48 [ 642.493744][ T23] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 642.510226][ T5818] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 642.529582][ T5818] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 642.555006][ T23] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 642.605241][ T23] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 642.652261][ T23] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 642.693014][ T23] keyspan 1-1:0.11: device disconnected [ 642.748318][T16023] loop1: detected capacity change from 0 to 8 [ 642.774512][T16023] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 642.800911][ T7651] usb 3-1: USB disconnect, device number 47 [ 642.805990][T16024] loop3: detected capacity change from 0 to 128 [ 642.926883][ T7207] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.309026][ T23] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 643.368687][T16039] loop1: detected capacity change from 0 to 256 [ 643.381781][T16039] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 643.409998][T16039] exFAT-fs (loop1): Filesystem has been set read-only [ 643.437135][T16039] exFAT-fs (loop1): failed to count the number of clusters in root [ 643.466978][T16039] exFAT-fs (loop1): failed to recognize exfat type [ 643.524651][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 643.552754][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.595266][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.644892][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.661511][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.688388][ T23] usb 1-1: Product: syz [ 643.696161][ T23] usb 1-1: Manufacturer: syz [ 643.700916][ T23] usb 1-1: SerialNumber: syz [ 643.918209][T16054] MINIX-fs: bad superblock [ 644.005388][ T23] usb 1-1: 0:2 : does not exist [ 644.029791][ T23] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 644.080218][ T23] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 644.116809][ T23] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 644.148280][ T23] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 644.172368][ T23] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 644.203761][ T23] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 644.250122][ T23] usb 1-1: USB disconnect, device number 49 [ 644.288336][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.490396][T16050] JFS: co.tinue is an invalid error handler [ 644.622399][T16066] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 644.837383][T16056] set_capacity_and_notify: 2 callbacks suppressed [ 644.837413][T16056] loop3: detected capacity change from 0 to 40427 [ 644.880808][ T5818] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 644.902020][T16056] F2FS-fs (loop3): Invalid log sectorsize (131081) [ 644.921096][T16056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 645.094362][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 645.101509][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.135687][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 645.193613][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 645.225802][ T5818] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 645.247296][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.282191][ T5818] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 645.307908][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.342571][ T5818] usb 2-1: config 0 descriptor?? [ 645.628408][ T5818] usb 2-1: USB disconnect, device number 41 [ 645.721937][T16091] loop0: detected capacity change from 0 to 128 [ 645.786033][T16070] loop2: detected capacity change from 0 to 40427 [ 645.789806][T16091] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 645.815307][T16070] F2FS-fs (loop2): build fault injection attr: rate: 16, type: 0x7ffff [ 645.826978][T16070] F2FS-fs (loop2): invalid crc value [ 645.836773][T16070] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x742/0x4730 [ 645.840920][T16091] qnx6: wrong signature (magic) in superblock #1. [ 645.858260][T16091] qnx6: unable to read the first superblock [ 645.861651][T16070] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 645.880274][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 645.961899][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 645.968927][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 646.095474][T16095] loop2: detected capacity change from 0 to 1024 [ 646.105573][ T8] usb 4-1: config 10 has an invalid interface number: 92 but max is 1 [ 646.120433][ T8] usb 4-1: config 10 has no interface number 1 [ 646.139375][ T8] usb 4-1: config 10 interface 92 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 646.142312][T16095] hfsplus: failed to load catalog file [ 646.167552][ T8] usb 4-1: too many endpoints for config 10 interface 0 altsetting 255: 56, using maximum allowed: 30 [ 646.185949][ T8] usb 4-1: config 10 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 646.199939][ T8] usb 4-1: config 10 interface 92 has no altsetting 0 [ 646.221324][ T8] usb 4-1: config 10 interface 0 has no altsetting 1 [ 646.248716][ T8] usb 4-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=a0.36 [ 646.257834][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.462951][ T7651] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 646.521712][ T8] usb 4-1: string descriptor 0 read error: -71 [ 646.596166][ T8] usb 4-1: USB disconnect, device number 24 [ 646.644402][ T23] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 646.656337][ T7651] usb 1-1: Using ep0 maxpacket: 16 [ 646.681864][ T7651] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 646.703153][ T7651] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 646.723272][ T7651] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.752255][ T7651] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.767017][ T7651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 646.775879][ T7651] usb 1-1: SerialNumber: syz [ 646.785479][T16097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 646.793058][T16097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 646.837777][T16108] loop2: detected capacity change from 0 to 8192 [ 646.854795][T16108] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 646.868982][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 646.896623][ T23] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 646.906300][ T23] usb 2-1: config 0 has no interface number 1 [ 646.921414][ T23] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 646.951292][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.986741][ T23] usb 2-1: Product: syz [ 646.991071][ T23] usb 2-1: Manufacturer: syz [ 646.995793][ T23] usb 2-1: SerialNumber: syz [ 647.041333][ T23] usb 2-1: config 0 descriptor?? [ 647.101075][ T7651] usb 1-1: USB disconnect, device number 50 [ 647.169390][ T23] viperboard 2-1:0.61: version 0.00 found at bus 002 address 042 [ 647.224915][ T23] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 647.265474][ T23] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 647.336302][ T23] viperboard 2-1:0.0: version 0.00 found at bus 002 address 042 [ 647.368360][ T23] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 647.389956][ T23] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 647.430999][ T23] usb 2-1: USB disconnect, device number 42 [ 647.595776][ T5837] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 647.769616][T16123] loop0: detected capacity change from 0 to 512 [ 647.788969][ T5837] usb 4-1: too many configurations: 227, using maximum allowed: 8 [ 647.798269][T16123] EXT4-fs (loop0): orphan cleanup on readonly fs [ 647.807362][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.4524: ea_inode with extended attributes [ 647.829787][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.4524: error while reading EA inode 11 err=-117 [ 647.847696][T16123] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 647.861048][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.4524: ea_inode with extended attributes [ 647.876642][T16123] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.4524: error while reading EA inode 11 err=-117 [ 647.894024][T16123] EXT4-fs (loop0): 1 orphan inode deleted [ 647.902919][T16123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 647.906389][ T5837] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 647.950730][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.984206][ T5837] usb 4-1: config 0 descriptor?? [ 648.003955][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.019373][ T5837] pwc: Samsung MPC-C10 USB webcam detected. [ 648.034033][ T5837] pwc: Warning: more than 1 configuration available. [ 648.240236][T16131] loop1: detected capacity change from 0 to 512 [ 648.250633][ T5837] pwc: send_video_command error -71 [ 648.255975][ T5837] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 648.274972][ T5837] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 648.285786][ T5837] usb 4-1: USB disconnect, device number 25 [ 648.307669][ T7207] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 648.431972][T16135] loop1: detected capacity change from 0 to 512 [ 648.487692][T16135] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 648.658289][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 648.658305][ T27] audit: type=1326 audit(973078637.168:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16138 comm="syz.2.4531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ffed9aeb9 code=0x0 [ 648.844392][T16145] loop2: detected capacity change from 0 to 512 [ 648.874725][T16145] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 648.915963][T16145] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 648.967332][T16145] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 648.993924][T16145] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 649.008200][T16145] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0020] [ 649.016223][T16145] EXT4-fs (loop2): failed to initialize system zone (-117) [ 649.024490][T16145] EXT4-fs (loop2): mount failed [ 649.263466][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 649.333962][T16155] loop2: detected capacity change from 0 to 4096 [ 649.351941][T16155] ntfs3: loop2: Failed to load $Volume (-22). [ 649.479142][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 649.486808][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.516106][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.530546][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 649.549185][ T8] usb 2-1: SerialNumber: syz [ 649.559311][ T8] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 649.582387][ T8] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 649.590910][ T8] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 649.808515][ T5865] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 649.887260][ T7651] usb 2-1: USB disconnect, device number 43 [ 650.085746][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 650.103777][ T5865] usb 4-1: config 105 has an invalid interface number: 212 but max is 0 [ 650.127070][ T5865] usb 4-1: config 105 has no interface number 0 [ 650.145900][ T5865] usb 4-1: config 105 interface 212 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 650.156962][T16173] Invalid option length (0) for dns_resolver key [ 650.171547][ T5865] usb 4-1: config 105 interface 212 altsetting 0 endpoint 0x5 has invalid maxpacket 431, setting to 64 [ 650.205195][ T5865] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=72.73 [ 650.225613][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.253169][ T5865] usb 4-1: Product: syz [ 650.257552][ T5865] usb 4-1: Manufacturer: syz [ 650.265421][ T5865] usb 4-1: SerialNumber: syz [ 650.289208][T16157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 650.566790][ T5865] port100 4-1:105.212: NFC: Could not find bulk-in or bulk-out endpoint [ 650.602910][ T5865] usb 4-1: USB disconnect, device number 26 [ 650.802512][T16178] loop0: detected capacity change from 0 to 32768 [ 650.830729][T16178] JBD2: Ignoring recovery information on journal [ 650.845218][T16178] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has bad extent record (0, 304, 0) [ 650.856445][ T5818] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 650.868631][T16178] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 650.884410][T16178] OCFS2: File system is now read-only. [ 650.891163][T16178] (syz.0.4550,16178,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 650.900488][T16178] (syz.0.4550,16178,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 650.909954][T16178] (syz.0.4550,16178,1):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 32 [ 650.936862][T16178] (syz.0.4550,16178,1):ocfs2_bmap:488 ERROR: status = -30 [ 650.944374][T16178] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 650.953456][T16178] JBD2: bad block at offset 32 [ 650.965752][T16178] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 651.029188][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 651.059487][ T5837] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 651.112919][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 651.124815][ T5818] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 651.138936][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.148357][ T5818] usb 3-1: Product: syz [ 651.152622][ T5818] usb 3-1: Manufacturer: syz [ 651.172103][ T5818] usb 3-1: SerialNumber: syz [ 651.198718][ T5818] usb 3-1: config 0 descriptor?? [ 651.233902][T16195] loop0: detected capacity change from 0 to 256 [ 651.242479][T16195] exfat: Deprecated parameter 'utf8' [ 651.247848][T16195] exfat: Deprecated parameter 'namecase' [ 651.254327][T16195] exfat: Bad value for 'namecase' [ 651.261392][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 651.273045][ T5837] usb 2-1: not running at top speed; connect to a high speed hub [ 651.293856][ T5837] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 651.313672][ T5837] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 651.330447][ T7207] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 651.348449][ T5837] usb 2-1: config 4 has no interface number 0 [ 651.364431][ T5837] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 651.374130][T16197] loop3: detected capacity change from 0 to 128 [ 651.407032][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.425665][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.444352][ T5837] usb 2-1: Product: syz [ 651.451136][ T5837] usb 2-1: Manufacturer: syz [ 651.459457][ T5837] usb 2-1: SerialNumber: syz [ 651.575379][ T5865] usb 3-1: USB disconnect, device number 48 [ 651.674973][T16201] loop3: detected capacity change from 0 to 512 [ 651.706767][ T5837] usb 2-1: USB disconnect, device number 44 [ 651.717716][T16201] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 651.734705][T16201] EXT4-fs (loop3): mount failed [ 652.082132][T16212] loop0: detected capacity change from 0 to 4096 [ 652.112975][T16212] ntfs3: loop0: Failed to load $MFT (-22). [ 652.301159][T16216] loop0: detected capacity change from 0 to 8 [ 652.341898][T16216] SQUASHFS error: lzo decompression failed, data probably corrupt [ 652.377662][T16216] SQUASHFS error: Failed to read block 0x91: -5 [ 652.383996][T16216] SQUASHFS error: Unable to read metadata cache entry [8f] [ 652.417255][T16216] SQUASHFS error: Unable to read inode 0x11f [ 652.457152][ T27] audit: type=1326 audit(973078640.732:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16219 comm="syz.1.4569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26e739aeb9 code=0x0 [ 652.491486][T16206] loop3: detected capacity change from 0 to 32768 [ 652.545738][T16206] (syz.3.4562,16206,0):ocfs2_verify_volume:2370 ERROR: bad root_blkno: 0 [ 652.569554][T16206] (syz.3.4562,16206,0):ocfs2_verify_volume:2387 ERROR: status = -22 [ 652.598907][T16206] (syz.3.4562,16206,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 652.607779][T16206] (syz.3.4562,16206,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 652.771796][T16226] tmpfs: Bad value for 'mpol' [ 653.078038][T16230] loop3: detected capacity change from 0 to 4096 [ 653.145049][T16230] ntfs3: loop3: Primary boot: invalid sectors per cluster 4294967274. [ 653.169933][T16230] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 653.345617][T16240] loop1: detected capacity change from 0 to 4096 [ 653.379304][T16240] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 653.410529][T16240] ntfs3: loop1: Failed to load $Bitmap (-22). [ 653.614538][ T5837] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 653.833482][T16262] PKCS7: Unknown OID: [4] 0.38.35.0.8907.1032(bad) [ 653.842519][T16261] loop3: detected capacity change from 0 to 128 [ 653.850801][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.861271][T16262] PKCS7: Only support pkcs7_signedData type [ 653.870351][ T5837] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 653.880144][T16261] hpfs: Bad magic ... probably not HPFS [ 653.920445][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.941090][T16264] EXT4-fs (loop1): orphan cleanup on readonly fs [ 653.958299][ T5837] usb 3-1: config 0 descriptor?? [ 653.995817][ T5837] usb 3-1: bad CDC descriptors [ 654.006615][T16264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.4591: ea_inode with extended attributes [ 654.041122][T16264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4591: error while reading EA inode 11 err=-117 [ 654.060300][T16264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.4591: ea_inode with extended attributes [ 654.079015][T16264] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4591: error while reading EA inode 11 err=-117 [ 654.099433][T16264] EXT4-fs (loop1): 1 orphan inode deleted [ 654.124348][T16264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.188152][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.253256][ T5837] usb 3-1: USB disconnect, device number 49 [ 654.266131][T16271] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 654.273000][T16271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 654.315081][T16271] vhci_hcd vhci_hcd.0: Device attached [ 654.322644][T16269] ntfs: (device loop3): parse_options(): The show_sys_files option requires a boolean argument. [ 654.343066][T16272] vhci_hcd: connection closed [ 654.345731][ T1315] vhci_hcd: stop threads [ 654.361875][ T1315] vhci_hcd: release socket [ 654.367574][ T1315] vhci_hcd: disconnect device [ 654.394986][ T5818] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 654.500979][T16277] ISOFS: unable to read i-node block [ 654.513964][T16277] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 654.593254][ T5818] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 654.606927][ T5818] usb 1-1: config 1 has no interface number 1 [ 654.630794][ T5818] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.640008][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.650826][ T5818] usb 1-1: Product: syz [ 654.659921][ T5818] usb 1-1: Manufacturer: syz [ 654.665291][ T5818] usb 1-1: SerialNumber: syz [ 654.919376][ T1188] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 654.936896][ T5818] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 654.983089][ T5818] usb 1-1: USB disconnect, device number 51 [ 655.024084][T16283] hfs: get root inode failed [ 655.072877][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.137801][ T1188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 655.156873][ T1188] usb 4-1: not running at top speed; connect to a high speed hub [ 655.177177][ T1188] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.189451][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.197542][ T1188] usb 4-1: Product: syz [ 655.201735][ T1188] usb 4-1: Manufacturer: syz [ 655.206364][ T1188] usb 4-1: SerialNumber: syz [ 655.239504][ T23] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 655.249597][T16285] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 655.272051][T16285] ntfs: (device loop1): parse_options(): The errors option requires an argument. [ 655.464321][ T1188] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 655.469188][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 655.495682][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.527809][ T23] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 655.537883][ T1188] usb 4-1: USB disconnect, device number 27 [ 655.562266][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.594547][ T23] usb 3-1: Product: syz [ 655.599657][ T23] usb 3-1: Manufacturer: syz [ 655.628019][ T23] usb 3-1: SerialNumber: syz [ 655.651203][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.661323][ T23] usb 3-1: config 0 descriptor?? [ 655.690626][T16281] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 655.701031][ T23] option 3-1:0.0: GSM modem (1-port) converter detected [ 655.930208][ T23] usb 3-1: USB disconnect, device number 50 [ 655.958874][ T23] option 3-1:0.0: device disconnected [ 656.262737][T16309] set_capacity_and_notify: 6 callbacks suppressed [ 656.262749][T16309] loop1: detected capacity change from 0 to 8192 [ 656.276764][ T1188] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 656.292663][T16309] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 656.305940][T16309] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 656.315337][T16309] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 656.328567][T16309] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 656.342160][T16309] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 656.490334][ T1188] usb 1-1: Using ep0 maxpacket: 8 [ 656.501253][ T23] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 656.509105][ T1188] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 656.523737][ T1188] usb 1-1: config 0 has no interface number 0 [ 656.541842][ T1188] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 656.558598][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.566891][ T1188] usb 1-1: Product: syz [ 656.571412][ T1188] usb 1-1: Manufacturer: syz [ 656.576554][ T1188] usb 1-1: SerialNumber: syz [ 656.585564][ T1188] usb 1-1: config 0 descriptor?? [ 656.601523][ T1188] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 656.629137][ T1188] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 656.690923][T16318] loop2: detected capacity change from 0 to 1764 [ 656.720754][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 656.735731][ T23] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 656.744543][ T23] usb 4-1: config 95 has no interface number 0 [ 656.758273][ T23] usb 4-1: config 95 interface 1 has no altsetting 0 [ 656.770490][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 656.774731][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 656.791106][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.799131][ T23] usb 4-1: Product: syz [ 656.808981][ T23] usb 4-1: Manufacturer: syz [ 656.820041][ T7651] usb 1-1: USB disconnect, device number 52 [ 656.835534][ T23] usb 4-1: SerialNumber: syz [ 656.843688][ T7651] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 656.869053][T16320] loop1: detected capacity change from 0 to 512 [ 656.891962][ T7651] kobil_sct 1-1:0.148: device disconnected [ 656.938603][T16320] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4617: invalid indirect mapped block 256 (level 2) [ 656.961469][T16320] EXT4-fs (loop1): 2 truncates cleaned up [ 656.968778][T16320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.087967][T16324] loop2: detected capacity change from 0 to 4096 [ 657.105572][T16324] ntfs: (device loop2): parse_options(): Invalid dmask option argument: 0000000ÿ [ 657.206990][ T23] usb 4-1: USB disconnect, device number 28 [ 657.223989][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.406322][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.505288][T16330] loop1: detected capacity change from 0 to 8 [ 657.708420][T16329] loop2: detected capacity change from 0 to 8192 [ 657.761346][T16329] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 657.784239][T16329] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 657.831335][T16329] REISERFS (device loop2): using ordered data mode [ 657.856301][T16329] reiserfs: using flush barriers [ 657.903358][T16329] REISERFS warning (device loop2): sh-463 check_advise_trans_params: bad transaction max batch (1). FSCK? [ 657.938149][T16339] loop0: detected capacity change from 0 to 8 [ 657.988954][T16339] SQUASHFS error: lzo decompression failed, data probably corrupt [ 658.006822][T16339] SQUASHFS error: Failed to read block 0x144: -5 [ 658.040550][ T5865] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 658.065333][T16339] SQUASHFS error: Unable to read metadata cache entry [142] [ 658.083341][T16339] SQUASHFS error: Unable to read inode 0x11f [ 658.269898][ T5865] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 658.300462][ T5865] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 658.329263][ T5865] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 658.360659][ T5865] usb 2-1: config 8 has no interface number 0 [ 658.367534][ T5865] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 658.379096][ T5865] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 658.395471][ T5865] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 658.405394][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.413432][ T5865] usb 2-1: Product: syz [ 658.418387][ T5865] usb 2-1: Manufacturer: syz [ 658.423018][ T5865] usb 2-1: SerialNumber: syz [ 658.683119][ T5865] usb 2-1: USB disconnect, device number 45 [ 658.830882][T16359] loop2: detected capacity change from 0 to 1764 [ 658.874839][ T23] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 659.080235][ T23] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 659.098818][ T23] usb 1-1: config 0 has no interface number 0 [ 659.109178][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 659.140095][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.158101][T16369] loop3: detected capacity change from 0 to 8192 [ 659.172716][ T23] usb 1-1: config 0 descriptor?? [ 659.188507][T16369] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 659.211085][T16369] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 659.218157][ T23] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 659.224368][T16369] REISERFS (device loop3): using ordered data mode [ 659.233824][T16369] reiserfs: using flush barriers [ 659.240864][T16369] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(8,0): -16 [ 659.254181][T16369] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 659.275635][ T23] usb 1-1: setting power ON [ 659.280246][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 659.485071][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 659.615343][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 659.630322][ T23] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 659.639700][ T23] dvb_usb_cxusb: probe of 1-1:0.30 failed with error -22 [ 659.651030][ T23] usb 1-1: USB disconnect, device number 53 [ 659.697631][ T7651] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 659.772334][ T1188] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 659.871845][T12183] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 659.900588][ T7651] usb 2-1: Using ep0 maxpacket: 16 [ 659.907708][ T7651] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.916671][ T7651] usb 2-1: config 200 has an invalid interface number: 170 but max is 0 [ 659.925094][ T7651] usb 2-1: config 200 has no interface number 0 [ 659.931421][ T7651] usb 2-1: config 200 interface 170 has no altsetting 0 [ 659.940532][ T7651] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=ed.86 [ 659.951345][ T7651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.959399][ T7651] usb 2-1: Product: syz [ 659.967986][ T7651] usb 2-1: Manufacturer: syz [ 659.971329][ T1188] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 659.972613][ T7651] usb 2-1: SerialNumber: syz [ 659.993410][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.004210][ T1188] usb 4-1: Product: syz [ 660.010465][ T1188] usb 4-1: Manufacturer: syz [ 660.015758][ T1188] usb 4-1: SerialNumber: syz [ 660.029895][ T1188] usb 4-1: config 0 descriptor?? [ 660.050491][ T1188] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 660.058478][ T1188] pctv452e: pctv452e_power_ctrl: 1 [ 660.058478][ T1188] [ 660.091237][T12183] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 660.099729][ T1188] usb 4-1: selecting invalid altsetting 3 [ 660.106105][T12183] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 660.114295][ T1188] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 660.114295][ T1188] [ 660.119427][T16384] loop0: detected capacity change from 0 to 128 [ 660.131110][T12183] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 660.140566][ T1188] dvb-usb: bulk message failed: -22 (5/0) [ 660.146744][T12183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 660.155318][T16384] affs: Error parsing options [ 660.173228][ T1188] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 660.184498][T12183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 660.205725][T12183] usb 3-1: language id specifier not provided by device, defaulting to English [ 660.223519][ T1188] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 660.245274][ T7651] usb 2-1: unknown interface protocol 0x37, assuming v1 [ 660.268275][ T1188] usb 4-1: USB disconnect, device number 29 [ 660.283009][ T7651] usb 2-1: cannot find UAC_HEADER [ 660.284091][T12183] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 660.317998][T12183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.330242][T12183] usb 3-1: Manufacturer: 牢 [ 660.344021][T12183] usb 3-1: config 0 descriptor?? [ 660.375000][T12183] hub 3-1:0.0: bad descriptor, ignoring hub [ 660.378975][ T7651] snd-usb-audio: probe of 2-1:200.170 failed with error -22 [ 660.380971][T12183] hub: probe of 3-1:0.0 failed with error -5 [ 660.405686][ T7651] usb 2-1: USB disconnect, device number 46 [ 660.419699][T12183] input: 牢 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 660.434937][ T7207] udevd[7207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:200.170/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.635968][ T23] usb 3-1: USB disconnect, device number 51 [ 660.675305][ T7207] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 661.440785][ T7651] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 661.516681][T16396] F2FS-fs (loop1): build fault injection attr: rate: 29, type: 0x7ffff [ 661.557898][T16396] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x76 [ 661.572730][T16396] F2FS-fs (loop1): invalid crc value [ 661.593921][T16396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 661.600296][T16396] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4575/0x6be0 [ 661.636994][T16396] F2FS-fs (loop1): Failed to initialize F2FS node manager (-12) [ 661.687345][ T7651] usb 4-1: Using ep0 maxpacket: 8 [ 661.706985][ T7651] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.744411][ T7651] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 661.764269][ T7651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.777826][ T7651] usb 4-1: Product: syz [ 661.789825][ T7651] usb 4-1: Manufacturer: syz [ 661.794707][ T7651] usb 4-1: SerialNumber: syz [ 661.801692][ T7651] usb 4-1: config 0 descriptor?? [ 661.813100][ T7651] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 661.876858][T16424] set_capacity_and_notify: 2 callbacks suppressed [ 661.876873][T16424] loop0: detected capacity change from 0 to 512 [ 661.945770][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 662.086509][ T23] usb 4-1: USB disconnect, device number 30 [ 662.209949][ T7651] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 662.338782][T16412] loop2: detected capacity change from 0 to 32768 [ 662.363193][T16412] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 662.391648][T16412] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1801)... [ 662.421197][T16412] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no journals! [ 662.462725][ T7651] usb 2-1: config 11 has an invalid interface number: 28 but max is 0 [ 662.491317][ T7651] usb 2-1: config 11 has no interface number 0 [ 662.515684][ T7651] usb 2-1: config 11 interface 28 altsetting 0 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 662.556363][ T7651] usb 2-1: config 11 interface 28 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 662.590963][ T7651] usb 2-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=f8.12 [ 662.605465][ T7651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.613506][ T7651] usb 2-1: Product: syz [ 662.638424][ T7651] usb 2-1: Manufacturer: syz [ 662.643068][ T7651] usb 2-1: SerialNumber: syz [ 662.680860][ T7651] rndis_wlan 2-1:11.28: skipping garbage [ 662.686566][ T7651] usb 2-1: bad CDC descriptors [ 662.747354][ T7651] rndis_host 2-1:11.28: skipping garbage [ 662.753081][ T7651] usb 2-1: bad CDC descriptors [ 662.787530][ T7651] cdc_acm 2-1:11.28: skipping garbage [ 662.885079][T16444] loop2: detected capacity change from 0 to 8 [ 663.000228][ T7651] usb 2-1: USB disconnect, device number 47 [ 663.312571][T16437] loop0: detected capacity change from 0 to 40427 [ 663.337718][T16437] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 663.348689][T16437] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 663.358766][T16437] F2FS-fs (loop0): invalid crc value [ 663.374913][T16437] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 663.401017][T16437] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 663.466007][T16457] loop3: detected capacity change from 0 to 512 [ 663.505360][T16457] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 663.535462][T16457] EXT4-fs (loop3): can't mount with both data=journal and dax [ 663.620998][ T23] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 663.726505][T16459] loop0: detected capacity change from 0 to 4096 [ 663.765829][T16464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 663.831209][ T23] usb 3-1: config 5 has an invalid interface number: 1 but max is 0 [ 663.845707][ T23] usb 3-1: config 5 has no interface number 0 [ 663.851862][ T23] usb 3-1: config 5 interface 1 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 663.876046][ T23] usb 3-1: config 5 interface 1 has no altsetting 0 [ 663.888974][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=a1.bd [ 663.924138][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.955344][ T23] usb 3-1: Product: syz [ 663.960126][ T23] usb 3-1: Manufacturer: syz [ 663.985809][ T23] usb 3-1: SerialNumber: syz [ 664.255075][ T23] usb 3-1: unknown interface protocol 0x38, assuming v1 [ 664.262205][ T23] usb 3-1: cannot find UAC_HEADER [ 664.333536][ T23] snd-usb-audio: probe of 3-1:5.1 failed with error -22 [ 664.382123][ T23] usb 3-1: USB disconnect, device number 52 [ 664.407909][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.829055][ T5865] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 664.861243][T12183] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 664.903884][ T7651] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 665.021478][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 665.028332][ T5865] usb 1-1: config 0 has an invalid interface number: 102 but max is 0 [ 665.037047][ T5865] usb 1-1: config 0 has no interface number 0 [ 665.045551][ T5865] usb 1-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 665.055806][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.063820][ T5865] usb 1-1: Product: syz [ 665.069385][ T5865] usb 1-1: Manufacturer: syz [ 665.074157][ T5865] usb 1-1: SerialNumber: syz [ 665.080757][ T5865] usb 1-1: config 0 descriptor?? [ 665.091354][ T5865] usb-storage 1-1:0.102: USB Mass Storage device detected [ 665.098687][ T7651] usb 4-1: Using ep0 maxpacket: 16 [ 665.100307][T12183] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 665.113105][ T7651] usb 4-1: unable to get BOS descriptor or descriptor too short [ 665.124125][ T7651] usb 4-1: config 4 has an invalid interface number: 108 but max is 0 [ 665.133601][ T5865] usb-storage 1-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 665.141010][T12183] usb 2-1: config 0 has no interface number 0 [ 665.145598][ T7651] usb 4-1: config 4 has no interface number 0 [ 665.153668][T12183] usb 2-1: config 0 interface 49 has no altsetting 0 [ 665.153734][T12183] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=c7.1b [ 665.162627][ T5865] usb-storage 1-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 665.162627][ T5865] Please send a copy of this message to and [ 665.180428][T12183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.203645][ T7651] usb 4-1: config 4 interface 108 has no altsetting 0 [ 665.209717][T12183] usb 2-1: config 0 descriptor?? [ 665.219617][ T7651] usb 4-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 665.233062][ T7651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.243209][ T7651] usb 4-1: Product: syz [ 665.247555][ T7651] usb 4-1: Manufacturer: syz [ 665.252312][ T7651] usb 4-1: SerialNumber: syz [ 665.275684][ T42] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 665.313717][ T5865] usb 1-1: USB disconnect, device number 54 [ 665.438828][T12183] usb 2-1: string descriptor 0 read error: -71 [ 665.457597][T12183] usb 2-1: USB disconnect, device number 48 [ 665.481175][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 665.489171][ T7651] usb 4-1: active config #4 != 1 ?? [ 665.499599][ T42] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 665.511153][ T7651] usb 4-1: USB disconnect, device number 31 [ 665.517204][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.536583][ T42] usb 3-1: Product: syz [ 665.540905][ T42] usb 3-1: Manufacturer: syz [ 665.546528][ T42] usb 3-1: SerialNumber: syz [ 665.553922][ T42] usb 3-1: config 0 descriptor?? [ 665.570451][ T42] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 665.580674][ T42] usb 3-1: Detected FT-X [ 665.783914][ T42] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 665.791473][ T42] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 665.799577][ T42] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 665.808807][ T42] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 665.819702][ T42] usb 3-1: USB disconnect, device number 53 [ 665.839734][ T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 665.850004][ T42] ftdi_sio 3-1:0.0: device disconnected [ 666.017467][T16498] loop0: detected capacity change from 0 to 8192 [ 666.089826][ T7207] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.505178][T16517] loop0: detected capacity change from 0 to 512 [ 666.528456][T16517] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 666.559578][T16517] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 666.609109][T16512] loop1: detected capacity change from 0 to 8192 [ 666.684122][T16512] loop1: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 666.686783][T16512] loop1: p1 start 108986368 is beyond EOD, truncated [ 666.800656][T16512] loop1: p3 start 150995456 is beyond EOD, truncated [ 666.817530][T16512] loop1: p5 start 108986368 is beyond EOD, truncated [ 666.824283][T16512] loop1: p6 start 108986368 is beyond EOD, truncated [ 666.833648][T16512] loop1: p7 start 108986368 is beyond EOD, truncated [ 666.849523][ T5865] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 666.881740][T16512] loop1: p8 start 108986368 is beyond EOD, truncated [ 666.896230][T16512] loop1: p9 start 108986368 is beyond EOD, truncated [ 666.924493][T16512] loop1: p10 start 108986368 is beyond EOD, truncated [ 666.942216][T16512] loop1: p11 start 108986368 is beyond EOD, truncated [ 666.963813][T16512] loop1: p12 start 108986368 is beyond EOD, truncated [ 666.985389][T16512] loop1: p13 start 108986368 is beyond EOD, truncated [ 667.004642][T16512] loop1: p14 start 108986368 is beyond EOD, truncated [ 667.022422][T16512] loop1: p15 start 108986368 is beyond EOD, truncated [ 667.029238][T16512] loop1: p16 start 108986368 is beyond EOD, truncated [ 667.057664][T16512] loop1: p17 start 108986368 is beyond EOD, truncated [ 667.074050][T16512] loop1: p18 start 108986368 is beyond EOD, truncated [ 667.079805][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 667.086339][T16512] loop1: p19 start 108986368 is beyond EOD, truncated [ 667.097491][ T5865] usb 3-1: config 6 has an invalid interface number: 218 but max is 0 [ 667.104649][T16512] loop1: p20 start 108986368 is beyond EOD, truncated [ 667.120959][ T5865] usb 3-1: config 6 has no interface number 0 [ 667.123645][T16512] loop1: p21 start 108986368 is beyond EOD, [ 667.135165][ T5865] usb 3-1: config 6 interface 218 altsetting 88 endpoint 0x9 has invalid wMaxPacketSize 0 [ 667.138013][T16512] truncated [ 667.156964][ T5865] usb 3-1: config 6 interface 218 has no altsetting 0 [ 667.164068][T16512] loop1: p22 start 108986368 is beyond EOD, truncated [ 667.180946][T16512] loop1: p23 start 108986368 is beyond EOD, truncated [ 667.191870][T16512] loop1: p24 start 108986368 is beyond EOD, truncated [ 667.194487][ T5865] usb 3-1: New USB device found, idVendor=0403, idProduct=fad0, bcdDevice= 1.42 [ 667.210148][T16512] loop1: p25 start 108986368 is beyond EOD, truncated [ 667.223697][T16512] loop1: p26 start 108986368 is beyond EOD, truncated [ 667.232567][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.240660][T16512] loop1: p27 start 108986368 is beyond EOD, truncated [ 667.245131][ T5865] usb 3-1: Product: syz [ 667.251635][ T5865] usb 3-1: Manufacturer: syz [ 667.255959][T16512] loop1: p28 start 108986368 is beyond EOD, truncated [ 667.273979][T16512] loop1: p29 start 108986368 is beyond EOD, truncated [ 667.277203][ T5865] usb 3-1: SerialNumber: syz [ 667.291927][T16512] loop1: p30 start 108986368 is beyond EOD, truncated [ 667.307928][T16512] loop1: p31 start 108986368 is beyond EOD, truncated [ 667.323559][T16512] loop1: p32 start 108986368 is beyond EOD, truncated [ 667.363806][T16512] loop1: p33 start 108986368 is beyond EOD, truncated [ 667.370631][T16512] loop1: p34 start 108986368 is beyond EOD, truncated [ 667.433071][T16512] loop1: p35 start 108986368 is beyond EOD, truncated [ 667.448217][T16512] loop1: p36 start 108986368 is beyond EOD, truncated [ 667.458892][T16512] loop1: p37 start 108986368 is beyond EOD, truncated [ 667.465831][T16512] loop1: p38 start 108986368 is beyond EOD, truncated [ 667.490938][T16512] loop1: p39 start 108986368 is beyond EOD, truncated [ 667.497785][T16512] loop1: p40 start 108986368 is beyond EOD, truncated [ 667.516513][T16520] loop3: detected capacity change from 0 to 40427 [ 667.525303][T16520] F2FS-fs (loop3): build fault injection attr: rate: 6, type: 0x7ffff [ 667.544523][T16512] loop1: p41 start 108986368 is beyond EOD, truncated [ 667.551358][T16512] loop1: p42 start 108986368 is beyond EOD, truncated [ 667.561121][T16520] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77fd1 [ 667.568494][ T5865] ftdi_sio 3-1:6.218: FTDI USB Serial Device converter detected [ 667.585429][T16520] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 667.596011][ T5865] usb 3-1: Detected SIO [ 667.612457][T16512] loop1: p43 start 108986368 is beyond EOD, truncated [ 667.619523][ T5865] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 667.639843][T16512] loop1: p44 start 108986368 is beyond EOD, truncated [ 667.646774][T16520] F2FS-fs (loop3): invalid crc value [ 667.646807][T16520] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 667.659681][ T5865] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 667.668784][ T9] ================================================================== [ 667.676885][ T9] BUG: KASAN: slab-use-after-free in f2fs_commit_super+0x77b/0x9b0 [ 667.684814][ T9] Read of size 8 at addr ffff88805a2c0000 by task kworker/0:1/9 [ 667.687011][T16512] loop1: p45 start 108986368 is beyond EOD, [ 667.692452][ T9] [ 667.692461][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 667.692481][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.718035][ T9] Workqueue: events f2fs_record_error_work [ 667.723870][ T9] Call Trace: [ 667.726993][ T5865] usb 3-1: USB disconnect, device number 54 [ 667.727159][ T9] [ 667.735775][T16512] truncated [ 667.735971][ T9] dump_stack_lvl+0x18c/0x250 [ 667.743811][ T9] ? __lock_acquire+0x7d40/0x7d40 [ 667.748869][ T9] ? show_regs_print_info+0x20/0x20 [ 667.753985][T16512] loop1: p46 start 108986368 is beyond EOD, [ 667.754086][ T9] ? load_image+0x400/0x400 [ 667.764635][ T9] ? __virt_addr_valid+0x469/0x540 [ 667.769780][ T9] print_report+0xa8/0x210 [ 667.774227][ T9] ? f2fs_commit_super+0x77b/0x9b0 [ 667.779373][ T9] kasan_report+0x117/0x150 [ 667.783913][ T9] ? f2fs_commit_super+0x77b/0x9b0 [ 667.784770][T16512] truncated [ 667.789040][ T9] f2fs_commit_super+0x77b/0x9b0 [ 667.797124][ T9] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 667.799095][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 667.803034][ T9] ? f2fs_sanity_check_ckpt+0x2a50/0x2a50 [ 667.803065][ T9] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 667.822755][T16512] loop1: p47 start 108986368 is beyond EOD, [ 667.824066][ T9] ? f2fs_record_error_work+0x11f/0x1d0 [ 667.824095][ T9] f2fs_record_error_work+0x138/0x1d0 [ 667.830069][T16512] truncated [ 667.835608][ T9] ? process_scheduled_works+0x96f/0x15d0 [ 667.835635][ T9] process_scheduled_works+0xa5d/0x15d0 [ 667.845933][ T5865] ftdi_sio 3-1:6.218: device disconnected [ 667.849845][ T9] ? assign_work+0x430/0x430 [ 667.865799][ T9] ? assign_work+0x3d0/0x430 [ 667.870425][ T9] worker_thread+0xa55/0xfc0 [ 667.872653][T16512] loop1: p48 start 108986368 is beyond EOD, [ 667.875056][ T9] kthread+0x2fa/0x390 [ 667.875082][ T9] ? pr_cont_work+0x560/0x560 [ 667.889827][ T9] ? kthread_blkcg+0xd0/0xd0 [ 667.894444][ T9] ret_from_fork+0x48/0x80 [ 667.898901][ T9] ? kthread_blkcg+0xd0/0xd0 [ 667.903516][ T9] ret_from_fork_asm+0x11/0x20 [ 667.908314][ T9] [ 667.911360][ T9] [ 667.913701][ T9] Allocated by task 16520: [ 667.918139][T16512] truncated [ 667.918139][ T9] kasan_set_track+0x4e/0x70 [ 667.925869][ T9] __kasan_kmalloc+0x8f/0xa0 [ 667.930490][ T9] f2fs_fill_super+0xca/0x6be0 [ 667.931475][T16512] loop1: p49 start 108986368 is beyond EOD, [ 667.935255][ T9] mount_bdev+0x221/0x2d0 [ 667.935275][ T9] legacy_get_tree+0xea/0x180 [ 667.950277][ T9] vfs_get_tree+0x8c/0x280 [ 667.954726][ T9] do_new_mount+0x24b/0xa40 [ 667.959266][ T9] __se_sys_mount+0x2e7/0x3d0 [ 667.963975][ T9] do_syscall_64+0x55/0xa0 [ 667.965795][T16512] truncated [ 667.968438][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.968460][ T9] [ 667.968464][ T9] Freed by task 16520: [ 667.968473][ T9] kasan_set_track+0x4e/0x70 [ 667.968490][ T9] kasan_save_free_info+0x2e/0x50 [ 667.968511][ T9] ____kasan_slab_free+0x126/0x1e0 [ 667.968529][ T9] slab_free_freelist_hook+0x130/0x1a0 [ 667.968545][ T9] __kmem_cache_free+0xba/0x1e0 [ 667.968567][ T9] f2fs_fill_super+0x41b1/0x6be0 [ 667.968581][ T9] mount_bdev+0x221/0x2d0 [ 667.968597][ T9] legacy_get_tree+0xea/0x180 [ 667.968617][ T9] vfs_get_tree+0x8c/0x280 [ 667.968631][ T9] do_new_mount+0x24b/0xa40 [ 667.968646][ T9] __se_sys_mount+0x2e7/0x3d0 [ 667.968660][ T9] do_syscall_64+0x55/0xa0 [ 667.968682][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.968699][ T9] [ 667.968703][ T9] Last potentially related work creation: [ 667.968709][ T9] kasan_save_stack+0x3e/0x60 [ 667.968726][ T9] __kasan_record_aux_stack+0xaf/0xc0 [ 667.968746][ T9] insert_work+0x3d/0x310 [ 667.968764][ T9] __queue_work+0xc39/0x1020 [ 667.968779][ T9] queue_work_on+0x128/0x1f0 [ 667.968793][ T9] f2fs_submit_page_bio+0x1c3/0x650 [ 667.968815][ T9] __get_meta_page+0x1c1/0x5d0 [ 667.968832][ T9] get_checkpoint_version+0x3c/0x330 [ 667.968851][ T9] validate_checkpoint+0x153/0x250 [ 667.968870][ T9] f2fs_get_valid_checkpoint+0x25e/0x940 [ 667.968889][ T9] f2fs_fill_super+0x3c5e/0x6be0 [ 667.968903][ T9] mount_bdev+0x221/0x2d0 [ 667.968917][ T9] legacy_get_tree+0xea/0x180 [ 667.968936][ T9] vfs_get_tree+0x8c/0x280 [ 667.968951][ T9] do_new_mount+0x24b/0xa40 [ 667.968965][ T9] __se_sys_mount+0x2e7/0x3d0 [ 667.968980][ T9] do_syscall_64+0x55/0xa0 [ 667.969001][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.969018][ T9] [ 667.969022][ T9] Second to last potentially related work creation: [ 667.969028][ T9] kasan_save_stack+0x3e/0x60 [ 667.969044][ T9] __kasan_record_aux_stack+0xaf/0xc0 [ 667.969065][ T9] insert_work+0x3d/0x310 [ 667.969082][ T9] __queue_work+0xc39/0x1020 [ 667.969097][ T9] queue_work_on+0x128/0x1f0 [ 667.969111][ T9] sg_release+0x1b6/0x2b0 [ 667.969131][ T9] __fput+0x234/0x970 [ 667.969154][ T9] task_work_run+0x1d4/0x260 [ 667.990663][T16512] loop1: p50 start 108986368 is beyond EOD, [ 667.994274][ T9] exit_to_user_mode_loop+0xe6/0x110 [ 667.994310][ T9] exit_to_user_mode_prepare+0xee/0x180 [ 668.008291][T16512] truncated [ 668.009762][ T9] syscall_exit_to_user_mode+0x1a/0x50 [ 668.009787][ T9] do_syscall_64+0x61/0xa0 [ 668.031384][T16512] loop1: p51 start 108986368 is beyond EOD, [ 668.032624][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.032649][ T9] [ 668.032653][ T9] The buggy address belongs to the object at ffff88805a2c0000 [ 668.032653][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 668.050762][T16512] truncated [ 668.055707][ T9] The buggy address is located 0 bytes inside of [ 668.055707][ T9] freed 8192-byte region [ffff88805a2c0000, ffff88805a2c2000) [ 668.055731][ T9] [ 668.055737][ T9] The buggy address belongs to the physical page: [ 668.095431][T16512] loop1: p52 start 108986368 is beyond EOD, [ 668.099692][ T9] page:ffffea000168b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a2c0 [ 668.126780][T16524] loop0: detected capacity change from 0 to 40427 [ 668.128208][ T9] head:ffffea000168b000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 668.128227][ T9] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 668.133187][T16512] truncated [ 668.137306][ T9] page_type: 0xffffffff() [ 668.137324][ T9] raw: 00fff00000000840 ffff888017c42280 0000000000000000 dead000000000001 [ 668.137340][ T9] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 668.169847][T16512] loop1: p53 start 108986368 is beyond EOD, [ 668.171094][ T9] page dumped because: kasan: bad access detected [ 668.171115][ T9] page_owner tracks the page as allocated [ 668.171122][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15141, tgid 15140 (syz.1.4100), ts 590719562991, free_ts 568899813826 [ 668.182207][T16524] F2FS-fs (loop0): Corrupted extension count (720933 + 1 > 64) [ 668.184028][ T9] post_alloc_hook+0x1c1/0x200 [ 668.203367][T16512] truncated [ 668.205468][ T9] get_page_from_freelist+0x1951/0x19e0 [ 668.205492][ T9] __alloc_pages+0x1f0/0x460 [ 668.211396][T16524] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 668.214068][ T9] alloc_slab_page+0x5d/0x160 [ 668.214092][ T9] new_slab+0x87/0x2d0 [ 668.221267][T16512] loop1: p54 start 108986368 is beyond EOD, [ 668.224493][ T9] ___slab_alloc+0xc5d/0x12f0 [ 668.224527][ T9] __kmem_cache_alloc_node+0x19e/0x250 [ 668.242019][T16512] truncated [ 668.246781][ T9] kmalloc_trace+0x2a/0xe0 [ 668.246810][ T9] ocfs2_fill_super+0x124a/0x5010 [ 668.330383][T16512] loop1: p55 start 108986368 is beyond EOD, [ 668.336842][ T9] mount_bdev+0x221/0x2d0 [ 668.336865][ T9] legacy_get_tree+0xea/0x180 [ 668.336890][ T9] vfs_get_tree+0x8c/0x280 [ 668.371120][T16512] truncated [ 668.377911][ T9] do_new_mount+0x24b/0xa40 [ 668.377936][ T9] __se_sys_mount+0x2e7/0x3d0 [ 668.434466][T16512] loop1: p56 start 108986368 is beyond EOD, [ 668.436519][ T9] do_syscall_64+0x55/0xa0 [ 668.446094][T16512] truncated [ 668.449139][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.449164][ T9] page last free stack trace: [ 668.449171][ T9] free_unref_page_prepare+0x7b2/0x8c0 [ 668.489826][T16512] loop1: p57 start 108986368 is beyond EOD, [ 668.491331][ T9] free_unref_page+0x32/0x2e0 [ 668.499994][T16512] truncated [ 668.500373][ T9] __slab_free+0x35a/0x400 [ 668.525881][T16512] loop1: p58 start 108986368 is beyond EOD, [ 668.528779][ T9] qlist_free_all+0x75/0xd0 [ 668.528812][ T9] kasan_quarantine_reduce+0x143/0x160 [ 668.528840][ T9] __kasan_slab_alloc+0x22/0x80 [ 668.550047][ T9] slab_post_alloc_hook+0x6e/0x4b0 [ 668.550382][T16512] truncated [ 668.555191][ T9] kmem_cache_alloc+0x11a/0x2d0 [ 668.558323][T16512] loop1: p59 start 108986368 is beyond EOD, [ 668.563167][ T9] getname_flags+0xbb/0x500 [ 668.563196][ T9] vfs_fstatat+0x111/0x1b0 [ 668.563218][ T9] __x64_sys_newfstatat+0x149/0x1f0 [ 668.582808][T16512] truncated [ 668.583346][ T9] do_syscall_64+0x55/0xa0 [ 668.590954][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.591978][T16512] loop1: p60 start 108986368 is beyond EOD, [ 668.596866][ T9] [ 668.596873][ T9] Memory state around the buggy address: [ 668.596886][ T9] ffff88805a2bff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 668.596901][ T9] ffff88805a2bff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 668.613672][T16512] truncated [ 668.618923][ T9] >ffff88805a2c0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 668.618936][ T9] ^ [ 668.618947][ T9] ffff88805a2c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 668.618961][ T9] ffff88805a2c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 668.654526][T16512] loop1: p61 start 108986368 is beyond EOD, [ 668.658437][ T9] ================================================================== [ 668.710814][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 668.718072][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 668.725303][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.735398][ T9] Workqueue: events f2fs_record_error_work [ 668.741250][ T9] Call Trace: [ 668.744585][ T9] [ 668.747566][ T9] dump_stack_lvl+0x18c/0x250 [ 668.752294][ T9] ? show_regs_print_info+0x20/0x20 [ 668.757537][ T9] ? load_image+0x400/0x400 [ 668.762086][ T9] panic+0x2dc/0x730 [ 668.766027][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 668.770568][ T9] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 668.776588][ T9] ? _raw_spin_unlock+0x40/0x40 [ 668.781561][ T9] ? print_memory_metadata+0x314/0x400 [ 668.786837][T16512] truncated [ 668.786865][T16512] loop1: p62 start 108986368 is beyond EOD, truncated [ 668.786918][T16512] loop1: p63 start 108986368 is beyond EOD, truncated [ 668.786967][T16512] loop1: p64 start 108986368 is beyond EOD, truncated [ 668.787012][T16512] loop1: p65 start 108986368 is beyond EOD, truncated [ 668.787052][T16512] loop1: p66 start 108986368 is beyond EOD, truncated [ 668.787076][T16512] loop1: p67 start 108986368 is beyond EOD, truncated [ 668.787134][T16512] loop1: p68 start 108986368 is beyond EOD, truncated [ 668.787169][T16512] loop1: p69 start 108986368 is beyond EOD, truncated [ 668.787234][T16512] loop1: p70 start 108986368 is beyond EOD, truncated [ 668.787285][T16512] loop1: p71 start 108986368 is beyond EOD, truncated [ 668.787327][T16512] loop1: p72 start 108986368 is beyond EOD, truncated [ 668.787376][T16512] loop1: p73 start 108986368 is beyond EOD, truncated [ 668.787418][T16512] loop1: p74 start 108986368 is beyond EOD, truncated [ 668.787459][T16512] loop1: p75 start 108986368 is beyond EOD, truncated [ 668.787500][T16512] loop1: p76 start 108986368 is beyond EOD, truncated [ 668.787541][T16512] loop1: p77 start 108986368 is beyond EOD, truncated [ 668.787581][T16512] loop1: p78 start 108986368 is beyond EOD, truncated [ 668.787622][T16512] loop1: p79 start 108986368 is beyond EOD, truncated [ 668.787664][T16512] loop1: p80 start 108986368 is beyond EOD, truncated [ 668.787704][T16512] loop1: p81 start 108986368 is beyond EOD, truncated [ 668.787746][T16512] loop1: p82 start 108986368 is beyond EOD, truncated [ 668.787787][T16512] loop1: p83 start 108986368 is beyond EOD, truncated [ 668.787901][T16512] loop1: p84 start 108986368 is beyond EOD, truncated [ 668.787943][T16512] loop1: p85 start 108986368 is beyond EOD, truncated [ 668.787986][T16512] loop1: p86 start 108986368 is beyond EOD, truncated [ 668.788027][T16512] loop1: p87 start 108986368 is beyond EOD, truncated [ 668.788068][T16512] loop1: p88 start 108986368 is beyond EOD, truncated [ 668.788108][T16512] loop1: p89 start 108986368 is beyond EOD, truncated [ 668.788150][T16512] loop1: p90 start 108986368 is beyond EOD, truncated [ 668.788195][T16512] loop1: p91 start 108986368 is beyond EOD, truncated [ 668.788236][T16512] loop1: p92 start 108986368 is beyond EOD, truncated [ 668.788277][T16512] loop1: p93 start 108986368 is beyond EOD, truncated [ 668.788318][T16512] loop1: p94 start 108986368 is beyond EOD, truncated [ 668.788364][T16512] loop1: p95 start 108986368 is beyond EOD, truncated [ 668.788406][T16512] loop1: p96 start 108986368 is beyond EOD, truncated [ 668.788456][T16512] loop1: p97 start 108986368 is beyond EOD, truncated [ 668.788496][T16512] loop1: p98 start 108986368 is beyond EOD, truncated [ 668.788551][T16512] loop1: p99 start 108986368 is beyond EOD, truncated [ 668.788605][T16512] loop1: p100 start 108986368 is beyond EOD, truncated [ 668.788659][T16512] loop1: p101 start 108986368 is beyond EOD, truncated [ 668.788700][T16512] loop1: p102 start 108986368 is beyond EOD, truncated [ 668.788747][T16512] loop1: p103 start 108986368 is beyond EOD, truncated [ 668.788788][T16512] loop1: p104 start 108986368 is beyond EOD, truncated [ 668.788830][T16512] loop1: p105 start 108986368 is beyond EOD, truncated [ 668.788872][T16512] loop1: p106 start 108986368 is beyond EOD, truncated [ 668.788915][T16512] loop1: p107 start 108986368 is beyond EOD, truncated [ 668.788955][T16512] loop1: p108 start 108986368 is beyond EOD, truncated [ 668.788996][T16512] loop1: p109 start 108986368 is beyond EOD, truncated [ 668.789038][T16512] loop1: p110 start 108986368 is beyond EOD, truncated [ 668.789079][T16512] loop1: p111 start 108986368 is beyond EOD, truncated [ 668.789120][T16512] loop1: p112 start 108986368 is beyond EOD, truncated [ 668.789172][T16512] loop1: p113 start 108986368 is beyond EOD, truncated [ 668.789222][T16512] loop1: p114 start 108986368 is beyond EOD, truncated [ 668.789266][T16512] loop1: p115 start 108986368 is beyond EOD, truncated [ 668.789315][T16512] loop1: p116 start 108986368 is beyond EOD, truncated [ 668.789356][T16512] loop1: p117 start 108986368 is beyond EOD, truncated [ 668.789397][T16512] loop1: p118 start 108986368 is beyond EOD, truncated [ 668.789439][T16512] loop1: p119 start 108986368 is beyond EOD, truncated [ 668.789481][T16512] loop1: p120 start 108986368 is beyond EOD, truncated [ 668.789522][T16512] loop1: p121 start 108986368 is beyond EOD, truncated [ 668.789563][T16512] loop1: p122 start 108986368 is beyond EOD, truncated [ 668.789603][T16512] loop1: p123 start 108986368 is beyond EOD, truncated [ 668.789646][T16512] loop1: p124 start 108986368 is beyond EOD, truncated [ 668.789686][T16512] loop1: p125 start 108986368 is beyond EOD, truncated [ 668.789734][T16512] loop1: p126 start 108986368 is beyond EOD, truncated [ 668.789774][T16512] loop1: p127 start 108986368 is beyond EOD, truncated [ 668.789815][T16512] loop1: p128 start 108986368 is beyond EOD, truncated [ 668.789856][T16512] loop1: p129 start 108986368 is beyond EOD, truncated [ 668.789897][T16512] loop1: p130 start 108986368 is beyond EOD, truncated [ 668.789946][T16512] loop1: p131 start 108986368 is beyond EOD, truncated [ 668.789986][T16512] loop1: p132 start 108986368 is beyond EOD, truncated [ 668.790034][T16512] loop1: p133 start 108986368 is beyond EOD, truncated [ 668.790076][T16512] loop1: p134 start 108986368 is beyond EOD, truncated [ 668.790117][T16512] loop1: p135 start 108986368 is beyond EOD, truncated [ 668.790159][T16512] loop1: p136 start 108986368 is beyond EOD, truncated [ 668.790187][T16512] loop1: p137 start 108986368 is beyond EOD, truncated [ 668.790232][T16512] loop1: p138 start 108986368 is beyond EOD, truncated [ 668.790293][T16512] loop1: p139 start 108986368 is beyond EOD, truncated [ 668.790350][T16512] loop1: p140 start 108986368 is beyond EOD, truncated [ 668.790398][T16512] loop1: p141 start 108986368 is beyond EOD, truncated [ 668.790439][T16512] loop1: p142 start 108986368 is beyond EOD, truncated [ 668.790479][T16512] loop1: p143 start 108986368 is beyond EOD, truncated [ 668.790527][T16512] loop1: p144 start 108986368 is beyond EOD, truncated [ 668.790567][T16512] loop1: p145 start 108986368 is beyond EOD, truncated [ 668.790608][T16512] loop1: p146 start 108986368 is beyond EOD, truncated [ 668.790649][T16512] loop1: p147 start 108986368 is beyond EOD, truncated [ 668.790690][T16512] loop1: p148 start 108986368 is beyond EOD, truncated [ 668.790731][T16512] loop1: p149 start 108986368 is beyond EOD, truncated [ 668.790773][T16512] loop1: p150 start 108986368 is beyond EOD, truncated [ 668.790814][T16512] loop1: p151 start 108986368 is beyond EOD, truncated [ 668.790856][T16512] loop1: p152 start 108986368 is beyond EOD, truncated [ 668.790903][T16512] loop1: p153 start 108986368 is beyond EOD, truncated [ 668.790937][T16512] loop1: p154 start 108986368 is beyond EOD, truncated [ 668.790977][T16512] loop1: p155 start 108986368 is beyond EOD, truncated [ 668.791025][T16512] loop1: p156 start 108986368 is beyond EOD, truncated [ 668.791065][T16512] loop1: p157 start 108986368 is beyond EOD, truncated [ 668.791106][T16512] loop1: p158 start 108986368 is beyond EOD, truncated [ 668.791180][T16512] loop1: p159 start 108986368 is beyond EOD, truncated [ 668.791230][T16512] loop1: p160 start 108986368 is beyond EOD, truncated [ 668.791277][T16512] loop1: p161 start 108986368 is beyond EOD, truncated [ 668.791311][T16512] loop1: p162 start 108986368 is beyond EOD, truncated [ 668.791430][T16512] loop1: p163 start 108986368 is beyond EOD, truncated [ 668.791478][T16512] loop1: p164 start 108986368 is beyond EOD, truncated [ 668.791520][T16512] loop1: p165 start 108986368 is beyond EOD, truncated [ 668.791563][T16512] loop1: p166 start 108986368 is beyond EOD, truncated [ 668.791606][T16512] loop1: p167 start 108986368 is beyond EOD, truncated [ 668.791656][T16512] loop1: p168 start 108986368 is beyond EOD, truncated [ 668.791717][T16512] loop1: p169 start 108986368 is beyond EOD, truncated [ 668.791772][T16512] loop1: p170 start 108986368 is beyond EOD, truncated [ 668.791814][T16512] loop1: p171 start 108986368 is beyond EOD, truncated [ 668.791861][T16512] loop1: p172 start 108986368 is beyond EOD, truncated [ 668.791896][T16512] loop1: p173 start 108986368 is beyond EOD, truncated [ 668.791944][T16512] loop1: p174 start 108986368 is beyond EOD, truncated [ 668.791978][T16512] loop1: p175 start 108986368 is beyond EOD, truncated [ 668.792019][T16512] loop1: p176 start 108986368 is beyond EOD, truncated [ 668.792066][T16512] loop1: p177 start 108986368 is beyond EOD, truncated [ 668.792107][T16512] loop1: p178 start 108986368 is beyond EOD, truncated [ 668.792160][T16512] loop1: p179 start 108986368 is beyond EOD, truncated [ 668.792194][T16512] loop1: p180 start 108986368 is beyond EOD, truncated [ 668.792235][T16512] loop1: p181 start 108986368 is beyond EOD, truncated [ 668.792283][T16512] loop1: p182 start 108986368 is beyond EOD, truncated [ 668.792323][T16512] loop1: p183 start 108986368 is beyond EOD, truncated [ 668.792364][T16512] loop1: p184 start 108986368 is beyond EOD, truncated [ 668.792405][T16512] loop1: p185 start 108986368 is beyond EOD, truncated [ 668.792456][T16512] loop1: p186 start 108986368 is beyond EOD, truncated [ 668.792497][T16512] loop1: p187 start 108986368 is beyond EOD, truncated [ 668.792537][T16512] loop1: p188 start 108986368 is beyond EOD, truncated [ 668.792585][T16512] loop1: p189 start 108986368 is beyond EOD, truncated [ 668.792626][T16512] loop1: p190 start 108986368 is beyond EOD, truncated [ 668.792667][T16512] loop1: p191 start 108986368 is beyond EOD, truncated [ 668.792707][T16512] loop1: p192 start 108986368 is beyond EOD, truncated [ 668.792749][T16512] loop1: p193 start 108986368 is beyond EOD, truncated [ 668.792789][T16512] loop1: p194 start 108986368 is beyond EOD, truncated [ 668.792830][T16512] loop1: p195 start 108986368 is beyond EOD, truncated [ 668.792871][T16512] loop1: p196 start 108986368 is beyond EOD, truncated [ 668.792912][T16512] loop1: p197 start 108986368 is beyond EOD, truncated [ 668.792959][T16512] loop1: p198 start 108986368 is beyond EOD, truncated [ 668.793000][T16512] loop1: p199 start 108986368 is beyond EOD, truncated [ 668.793042][T16512] loop1: p200 start 108986368 is beyond EOD, truncated [ 668.793083][T16512] loop1: p201 start 108986368 is beyond EOD, truncated [ 668.793124][T16512] loop1: p202 start 108986368 is beyond EOD, truncated [ 668.793188][T16512] loop1: p203 start 108986368 is beyond EOD, truncated [ 668.793242][T16512] loop1: p204 start 108986368 is beyond EOD, truncated [ 668.793277][T16512] loop1: p205 start 108986368 is beyond EOD, truncated [ 668.793317][T16512] loop1: p206 start 108986368 is beyond EOD, truncated [ 668.793358][T16512] loop1: p207 start 108986368 is beyond EOD, truncated [ 668.793399][T16512] loop1: p208 start 108986368 is beyond EOD, truncated [ 668.793442][T16512] loop1: p209 start 108986368 is beyond EOD, truncated [ 668.793489][T16512] loop1: p210 start 108986368 is beyond EOD, truncated [ 668.793530][T16512] loop1: p211 start 108986368 is beyond EOD, truncated [ 668.793572][T16512] loop1: p212 start 108986368 is beyond EOD, truncated [ 668.793614][T16512] loop1: p213 start 108986368 is beyond EOD, truncated [ 668.793656][T16512] loop1: p214 start 108986368 is beyond EOD, truncated [ 668.793696][T16512] loop1: p215 start 108986368 is beyond EOD, truncated [ 668.793731][T16512] loop1: p216 start 108986368 is beyond EOD, truncated [ 668.793778][T16512] loop1: p217 start 108986368 is beyond EOD, truncated [ 668.793819][T16512] loop1: p218 start 108986368 is beyond EOD, truncated [ 668.793861][T16512] loop1: p219 start 108986368 is beyond EOD, truncated [ 668.793902][T16512] loop1: p220 start 108986368 is beyond EOD, truncated [ 668.793943][T16512] loop1: p221 start 108986368 is beyond EOD, truncated [ 668.793978][T16512] loop1: p222 start 108986368 is beyond EOD, truncated [ 668.794020][T16512] loop1: p223 start 108986368 is beyond EOD, truncated [ 668.794056][T16512] loop1: p224 start 108986368 is beyond EOD, truncated [ 668.794099][T16512] loop1: p225 start 108986368 is beyond EOD, truncated [ 668.794142][T16512] loop1: p226 start 108986368 is beyond EOD, truncated [ 668.794184][T16512] loop1: p227 start 108986368 is beyond EOD, truncated [ 668.794219][T16512] loop1: p228 start 108986368 is beyond EOD, truncated [ 668.794261][T16512] loop1: p229 start 108986368 is beyond EOD, truncated [ 668.794302][T16512] loop1: p230 start 108986368 is beyond EOD, truncated [ 668.794343][T16512] loop1: p231 start 108986368 is beyond EOD, truncated [ 668.794384][T16512] loop1: p232 start 108986368 is beyond EOD, truncated [ 668.794435][T16512] loop1: p233 start 108986368 is beyond EOD, truncated [ 668.794475][T16512] loop1: p234 start 108986368 is beyond EOD, truncated [ 668.794530][T16512] loop1: p235 start 108986368 is beyond EOD, truncated [ 668.794585][T16512] loop1: p236 start 108986368 is beyond EOD, truncated [ 668.794640][T16512] loop1: p237 start 108986368 is beyond EOD, truncated [ 668.794689][T16512] loop1: p238 start 108986368 is beyond EOD, truncated [ 668.794730][T16512] loop1: p239 start 108986368 is beyond EOD, truncated [ 668.794771][T16512] loop1: p240 start 108986368 is beyond EOD, truncated [ 668.794811][T16512] loop1: p241 start 108986368 is beyond EOD, truncated [ 668.794852][T16512] loop1: p242 start 108986368 is beyond EOD, truncated [ 668.794892][T16512] loop1: p243 start 108986368 is beyond EOD, truncated [ 668.794955][T16512] loop1: p244 start 108986368 is beyond EOD, truncated [ 668.794996][T16512] loop1: p245 start 108986368 is beyond EOD, truncated [ 668.795038][T16512] loop1: p246 start 108986368 is beyond EOD, truncated [ 668.795079][T16512] loop1: p247 start 108986368 is beyond EOD, truncated [ 668.833951][T16512] loop1: p248 start 108986368 is beyond EOD, truncated [ 668.834022][T16512] loop1: p249 start 108986368 is beyond EOD, truncated [ 668.834065][T16512] loop1: p250 start 108986368 is beyond EOD, truncated [ 668.834107][T16512] loop1: p251 start 108986368 is beyond EOD, truncated [ 668.834148][T16512] loop1: p252 start 108986368 is beyond EOD, truncated [ 668.834184][T16512] loop1: p253 start 108986368 is beyond EOD, truncated [ 668.834226][T16512] loop1: p254 start 108986368 is beyond EOD, truncated [ 668.834268][T16512] loop1: p255 start 108986368 is beyond EOD, truncated [ 670.116415][ T9] ? f2fs_commit_super+0x77b/0x9b0 [ 670.121563][ T9] check_panic_on_warn+0x84/0xa0 [ 670.126527][ T9] ? f2fs_commit_super+0x77b/0x9b0 [ 670.131662][ T9] end_report+0x6f/0x130 [ 670.135929][ T9] kasan_report+0x128/0x150 [ 670.140460][ T9] ? f2fs_commit_super+0x77b/0x9b0 [ 670.145600][ T9] f2fs_commit_super+0x77b/0x9b0 [ 670.150575][ T9] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 670.156488][ T9] ? f2fs_sanity_check_ckpt+0x2a50/0x2a50 [ 670.162233][ T9] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 670.168250][ T9] ? f2fs_record_error_work+0x11f/0x1d0 [ 670.173819][ T9] f2fs_record_error_work+0x138/0x1d0 [ 670.179213][ T9] ? process_scheduled_works+0x96f/0x15d0 [ 670.184975][ T9] process_scheduled_works+0xa5d/0x15d0 [ 670.190563][ T9] ? assign_work+0x430/0x430 [ 670.195172][ T9] ? assign_work+0x3d0/0x430 [ 670.199786][ T9] worker_thread+0xa55/0xfc0 [ 670.204923][ T9] kthread+0x2fa/0x390 [ 670.209024][ T9] ? pr_cont_work+0x560/0x560 [ 670.213722][ T9] ? kthread_blkcg+0xd0/0xd0 [ 670.218373][ T9] ret_from_fork+0x48/0x80 [ 670.222813][ T9] ? kthread_blkcg+0xd0/0xd0 [ 670.227434][ T9] ret_from_fork_asm+0x11/0x20 [ 670.232250][ T9] [ 670.235984][ T9] Kernel Offset: disabled [ 670.240316][ T9] Rebooting in 86400 seconds..