last executing test programs: 4.082231963s ago: executing program 1 (id=5905): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e042107259c0102030109022200010000000009040000000e010000082402010102002008"], 0x0) 3.831263747s ago: executing program 4 (id=5908): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000069001a000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 3.470011073s ago: executing program 4 (id=5914): socket(0x9, 0x4, 0x6) 3.349049435s ago: executing program 4 (id=5916): syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03"], 0x0) 2.826834044s ago: executing program 0 (id=5919): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063014000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 2.751065955s ago: executing program 0 (id=5921): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x25, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) 2.535311839s ago: executing program 1 (id=5922): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000cfc2d321b702000008000000b703000000000000850000006400000095"], &(0x7f0000000b00)='GPL\x00', 0x5, 0xaf, &(0x7f00000006c0)=""/175}, 0x94) 2.42200578s ago: executing program 1 (id=5923): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00b3fab11020e36e4d8e72de7b97cd429f8ec60861bc6fc445b85a407b5d3951bfa7125306e7fb9478ff4db4701460f8fa530e1b2efda13e59146d5e1592474c6bd956e0ee9445f31f3f34686cf9142b5696ea3f1460fa6dc693cd3c9719f9bc367c8fd95716afe10ce0cdf529b5a839218db05034448302000000000000002c1098f8eaaf4e0387ad842b01289380886bfd8a3e145afabe8790bbc429f4f03accf914fd2ecc1a07c7fc54396b6498193d6996c873f6b7c88b66dc9dfbc2805d54f7caafe06311eddc00000000"], 0x1, 0x235, &(0x7f0000000040)="$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") 2.201610134s ago: executing program 1 (id=5924): close(0xffffffffffffffff) 2.132193875s ago: executing program 3 (id=5925): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) 2.018055357s ago: executing program 1 (id=5926): syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) 1.782134811s ago: executing program 4 (id=5928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1ad0fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.679577173s ago: executing program 4 (id=5929): syz_usb_connect$uac1(0x0, 0xb6, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x8, 0x0, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x0, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x8, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x3, 0x2, 0x6, 0x33, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0x2, 0x81}}}}}}}]}}, 0x0) 1.589973594s ago: executing program 0 (id=5930): syz_emit_ethernet(0xffffffd9, 0x0, 0x0) 1.517110815s ago: executing program 0 (id=5931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000008006500000000000000180000000000000000000000000000009500000000000000740300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.474175386s ago: executing program 0 (id=5932): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x1000002, &(0x7f0000000540)={[{@nointegrity}, {@errors_remount}, {@gid}, {@uid}, {@gid}, {@discard_size={'discard', 0x3d, 0x426}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard_size={'discard', 0x3d, 0x401}}]}, 0x1, 0x60b9, &(0x7f000000c400)="$eJzs3cuOHFcZB/Cv+jaXkMTKIgoWQpPEXEKIr8EYAsRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFBWKVQz54xrOt3ucYbp6pnz+0njqq9P1fQp/7v6MlXVJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+OEPfnyuioirv0o3nIj4XPQjehErTb0WEStrJ/Lyg4h4Ibab4/mIGC5FNOtv//NsxOsR8dEzEQ8e3l1vbj6/z358/8//+MNPnvrR3/80PPPfv9zuvzFtuTt3fvufv9472DYDAABAaeq6rqv0Mf9k+nzf67pTAMBc5Nf/Osm3qxeu3lyw/qjVarX6CNZt9WT32kVEbLbXad4zOBwPAEfMZnzcdRfokPyLNoiIp7ruBLDQqq47wKF48PDuepXyrdqvB2s77flckD35b1a713dMm84yfo7JvB5fW9GP56b0Z2VOfVgkOf/eeP5Xd9pHabnDzn9epuU/2rn0qTg5//54/mOOT/69ifmXKuc/eKL8+/IHAAAAAIAFlv/+f6Lj479LB9+UfZl2/K96tMkAAAAAAAAAcOQcdPy/Xcb/AwAAgIXVfFZv/O6ZR7dN+y625vYrVcTTY8sDhUkXy6x23Q8AAAAAAAAAAAAAKMlg5xzeK1XEMCKeXl2t67r5aRuvn9RB1z/qSt9+KFnXT/IAALDjo2fGruWvIpYj4kr6rr/h6upqXS+vrNar9cpSfj87WlquV1qfa/O0uW1ptI83xINR3fyy5dZ6bbM+L89qH/99zX2N6v4+OjYfHQYOABGx82r0wCvSMVPXz0bX73I4Guz/x4/9n/3o+nEKAAAAHL66rusqfZ33yXTMv9d1pwCAuciv/+PHBdRqtVqtVh+/uq2e7F67iIjN9jrNewbD8QPAEbMZH3fdBTok/6INIuKFrjsBLLSq6w5wKB48vLtepXyr9utBGt89nwuyJ//Nanu9vP6k6Szj55jM6/G1Ff14bkp/np9THxZJzr83nv/VnfZRWu6w85+Xafk323mig/50LeffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PLNTx39Fn3ZyZHnf8d+3Q7hUAAAAAAAAADteDh3fX83Wv+fj/FyYs5/rP4ynnX8m/SDn/3lj+Xx1brt+av//Wo/z//fDu+h9v/+vzebrf/JfyTJUeWVV6RFTpnqpBmh5k6z5ta9gfNfc0rHr9QTrnpx6+E9fjRmzE2T3L9tL/x6P2c3vam54Ot9vr/k77+T3tg932vP6FPe3DdKZTvZLbT8d6/DxuxNvb7U3b0oztX57RXs9oz/n37f9FyvkPWj9N/qupvRqbNu5/2PvUft+eTrqfy9e/+Juzh785M21Ff3fb2prte6mD/mz/nzw1il/e2rh5+s6127dvnos02XPr+UiT/7Oc/zD97D7/v7zTnp/32/vr/Q9HT5z/otiKwdT8X27NN9v7ypz71oWc/yj95PzfTu2T9/+jnP/0/f/VDvoDAAAAAAAAAAAAAAAAj1PX9fYlopcj4mK6/qerazMBgPm6nL5yo07y7fOq+3O+P7X6iNfVgvVnrvUn9WL1R60+inVbPdmb7SIi/tZe52JE/HrSLwMAFtknEfHPrjtBZ+RfsPx9f830VNedAebq1vsf/PTajRsbN2913RMAAAAAAAAA4LPK43+utcZ/PlXX9b2x5faM//pWrB10/M9BntkdYHTKQNX9J9+mx9nqjfq91nDjL8a08b+Hu3OPG/97MOP+hjPaRzPal2a0L89on3ihR0vO/8XWeOenIuLk2PDrJYz/Oj7mfQly/i+1Hs9N/l8ZW66df/37o5x/b0/+Z26/94szt97/4LXr7117d+PdjZ9dOHfu7IWLFy9dunTmnes3Ns7u/Nthjw9Xzj+Pfe080LLk/HPm8i9Lzv9LqZZ/WXL+X061/MuS88/v9+Rflpx//uwj/7Lk/F9JtfzLkvP/WqrlX5ac/6upln9Zcv5fT7X8y5Lzfy3V8i9Lzv90quVflpz/mVTvM/+Vw+4X85Hzz0e47P9lyfnnMxvkX5ac//lUy78sOf8LqZZ/WXL+r6da/mXJ+X8j1fIvS87/YqrlX5ac/zdTLf+y5PwvpVr+Zcn5fyvV8i9Lzv/bqZZ/WXL+b6Ra/mXJ+X8n1fIvS87/u6mWf1ly/t9LtfzLkvN/M9XyL8uj7/83Y8aMmTzT9TMTAAAAAAAAAAAAADBuHqcTd72NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4GevXjs3AyF/J38Da8cY42yy60t8oXUx4dpwK7mV9BLb9a6dBd/itUuSRrKjQImEUVFF2/CiLaCozZsKq8oLWgWUF6hVpUqkfUHfICpUXkRVQAGpUluFbDVnnufZmdmzM7v2xJ455/OR4p935sycM2fOnN3vOt8ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARhveP/PFgSzLav/lf6zNsmtrf189vja/7D1XewsBAACAy/XL/M9Xb0gX7F/GjRqW+ce3f//5+fn5+ezTQ38y8tX5+XTFeJaNrMqy/Lro4o8fHGhcJngqGxsYbPh6sMPqhzpcP9zh+pEO1492uH5Vh+vHOly/aAcssrr++5j8zjblf11b36XZjdlIft2mgls9NbBqcDD+Lic3kN9mfuRINpsdy2ayqabl68sO5Mu/sKG2ro9kcV2DDetaXztCfv7E4bgNA2Efb2pa18J9Rj99Xzb+i58/cfivzrxyc9HsuBua7q++nVs21rbz8+GS+rYOZKvSPonbOdiwnesLnpOhpu0cyG9X+3vrdr66zO0cWtjMK6r1OR/LBvO/v5Tvp+HGX+ul/bQ+XPbft2ZZdn5hs1uXWbSubDBb03TJ4MLzM1Y/Imv3UTuU3pwNr+g43bCM47Q2pzc1H6etr4n4/G8ItxteYhsan6afPjna8Ly/Nn8px2lUe9RLvVZaj8Fuv1Z65RiMx8VL+YN+uvAY3BQe/xOblz4GC4+dgmMwPe6GY3Bjp2NwcHQo3+b0JAzkt1k4Brc1LT+Ur2kgny9vbn8MTp45fmpy7rHHb589fujozNGZEzu2bZvasWvXnj17Jo/MHpuZqv95iXu7963JBtNrYGPYd/E18K6WZRsP1flvjC46/17q63Cszetwbcuy3X4dDrc+uIEr84JcfEzXXxv31Xb62IXBbInXWP78bL3812F63A2vw+GG12Hh95SC1+HwMl6HtWVObV3ezyzDDf8VbcPS3wsu7xhc23AMtv480noMdvvnkV45BsfCcfHDrUt/L1gftvfpiZX+PDK06BhMDzece2qXpJ/3x/bko+i4vKV2xTWj2dm5mdN3PHrozJnT27Iwroi3NBwrrcfrmobHlC06XgdXfLzun33707cUXL427Kux22t/jC35XNWW2XlH++cq/+5WvD+bLt2ehdFlV3p/Fn03r+3P0Sz72veevOc7T3zt/Uvuz1re/Pzk5f8snnJpw/l3ZInzb8z9r9fXl+7qqaGR4frrdyjtnZGm83HzUzWcn7sG8nW/Orm88/FI+O9Kn49vbHM+XteybLfPxyOtDy6ejwc6/bbj8rQ+n2PhODk21f58XFtm3faVHpPDbc/Ht4Y5EPb/u0NSSLmo4dhZ6rhN6xoeHgmPaziuofk43dG0/EjIZrV1Pbf90o7TLbfW72soPboFV+o4HW9ZttvHafrd11LH6UCn375dmtbncywcFzfuaH+c1pZ5ceflnztXx782nDtHOx2DI0OjtW0eSQdhfr7P5lfHY/CO7HB2MjuWTefXjubH00C+rok7l3cMjob/rvS5cl2bY3BLy7LdPgbT97Gljr2B4cUPvgtan8+xcFw8c2f7Y7C2zAd2d/dn1y3hkrRMw8+urb9fW+p3Xre07KY36lgZDtv5vd3tfzdbW+bYnpXmzPb76bZwyTUF+6n19bvUa2o6uzL7aV3Yzlf2LL2fattTW+are5d5PO3PsuzcI3flv+8N/77yt2d/8HzTv7sU/ZvOuUfu+tl1R/5hJdsPQP97vT7W1L/XNfzL1HL+/R8AAADoCzH3D4aZyP8AAABQGjH3x/8rPJH/AQAAoDRi7h8OM6lI/l/3gVdmXz+XpWb+fBCvT7vh7vpyseM6Fb4en19Qu/yuZ2f+6+/PLW/dg1mWvXb3HxQuv+7uuF1142E7L36w+fJFnr99Wes+eP+5tN7G/vrXw/3Hx7Pcw6CogjuVZdkLN3w5X8/4gxfy+eLdB/N5z/mnn6ot8+re+tfx9i+/pb78n4fy7/4jh5pu/3LYDz8Jc+qjxfsj3u5bF969fvcDC+uLtxvYeH3+sJ95qH6/8X1yvvJUffm4n5fa/u986blv1ZZ/9J3F239usHj7nwv3+2yY//O2+vKNz0Ht63i7L4Ttj+uLt7vjm98t3P6LX6wvf+pD9eUOhhnXvyV8velDr8w27q9HBw41Pa7sw/Xl4vqnfvBH+fXx/uL9t27/2IELTfuj9fh48V/r9zPZsny8PK4n+ruW9dfup/H4jOt/7g8PNu3nTuu/eM/Lb6vdb+v6b2tZ7tQjW/P1L9xf8zs2/cUXvly4vrg9+//mVNPj2f+p8DoO63/moXA8huv/92L9/lrfXeHgp5rPP3H5r6891/R4oo/8or7+i+89ms9VY6vXXHPtddeff0dt32XZS6vq99dp/Uf/8mTT9n/jpvr+iNfHjn7r+pcS13/6cxMnTs6dnZ1Oe/WJG/L3zvlYfXvi9t4Qzq2tXx84eebhmdPjU+NTWTZe3rfQu2TfDPNn9XG+/dLzi86gW+8Pz+ctf/bCms3/8qV4+b/dV7/8wkfr37feFZb7Srh8bXj+Vrb+xZ7ZcFP++h54MWzh/OL3C74c6zf9555lLRgef+vPBfF4P/XWh/P9ULsu/74RX9eXuf0/mq7fz7fDfp0P78y88aaF9TUuH98b4cK99df7Ze+/cJqLz+tfh+f74z+p33/crvh4fxR+jvnuuubzXTw+vn1usPX+83fxOB/OJ9n5+vVxqbi/L7x6U+Hmxfchyc7fnH/9x+l+bl7Rw1zK3GNzk8dmT5x9dPLMzNyZybnHHj9w/OTZE2cO5O/leeAznW6/cH5ak5+fpmd27czys9XJ+niDXe3tP3X/4endU5unZ44cOnvkzP2nZk4fPTw3d3hmem7zoSNHZj7X6faz0/u2bd+7Y/f2iaOz0/v27N27Y+/E7ImTtc2ob1QHu6Y+O3Hi9IH8JnP7du7dduedO6cmjp+cntm3e2pq4myn2+ffmyZqt/79idMzxw6dmT0+MzE3+/jMvm17d+3a3vHdAI+fOjI3Pnn67InJs3Mzpyfrj2X8TH5x7Xtfp9tTTnP/Xv95ttVA/Y34sk/etiu9P2vNs08ueVf1RVreQPSV8F40//SmU3uW83XM/SNhJhXJ/wAAAFAFMfePhpnI/wAAAFAaMfevCjOR/wEAAKA0Yu4fCzOpSP4vXf9/3bllrV//X/+/cX/p/1es/39vr/X/6+cL/f/uuNz+vf5/oP+v/6//r/+v/08X9Fr/P+b+1VlWyfwPAAAAVRBz/5owE/kfAAAASiPm/mvCTOR/AAAAKI2Y+68NM6lI/tf/1//X/9f/1/8vXr/+f3/S/29P/78D/f/JrFr9//Pd3H79f/1/Fuu1/n/M/deFmVQk/wMAAEAVxNx/fZiJ/A8AAAClEXP/DWEm8j8AAACURsz9a8NMKpL/9f/1//X/9f/1/4vXr//fn/T/29P/70D/3+f/6//r/9NVvdb/j7n/TWEmFcn/AAAAUAUx9785zET+BwAAgN4zfGk3i7n/LWEmi/L/Ja4AAAAAuOpi7r8xaymCV+Tf//X/9f/1//X/9f+L17/8/v9Qpv/fO/T/29P/70D/X/9f/1//n67qtf5/nvuzseytYSYVyf8AAABQBTH33xRmIv8DAABAacTc///CTOR/AAAAKI2Y+9eFmVQk/+v/6//r/+v/6/8Xr9/n//cn/f/29P870P/X/9f/1/+nq3qt/x9z/81hJhXJ/wAAAFAFMfffEmYi/wMAAEBpxNz//8NM5H8AAAAojZj714eZVCT/6//3eP8/Nkf1//X/9f/1//X/l0X/vz39/w70//X/9f/1/+mqXuv/x9z/tjCTiuR/AAAAqIKY+98eZiL/AwAAQGnE3P+OMBP5HwAAAEoj5v7xMJOK5H/9/x7v//v8f/1//X/9f/3/FdH/b0//vwP9f/1//X/9f7qq1/r/MfdvCDOpSP4HAACAKoi5f2OYifwPAAAApRFz/61hJvI/AAAAlEbM/ZvCTCqS//X/9f/1//X/9f+L16//35/0/9vT/+9A/1//X/9f/5+u6rX+f8z97wwzqUj+BwAAgCqIuX9zmIn8DwAAAKURc/+7wkzkfwAAACiNmPu3hJlUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+98dZlKR/A8AAABVEHP/1jAT+R8AAABKI+b+28JM5H8AAAAojZj7J8JMKpL/9f/1//X/9f/1/4vXr//fn/T/29P/70D/X/9f/1//n67qtf5/zP23h5lUJP8DAABAFcTcf0eYifwPAAAApRFz/2SYifwPAAAApRFz/1SYSUXyv/6//r/+v/7/ivr/71i4X/3/Ov3/3qL/357+fwf6//r/V73/P6L/T6n0Wv8/5v5tYSYVyf8AAABQBTH3bw8zkf8BAACgNGLu3xFmIv8DAABAacTcvzPMpCL5X/9f/1//X//f5/8Xr1//vz/p/7fX/f5/fIj6//r/+v8+/1//n8V6rf8fc/+dYSYVyf8AAABQBTH37wozkf8BAACgNGLu3x1mIv8DAABAacTcvyfMpCL5X/9f/1//X/9f/794/fr//Un/vz2f/9+B/r/+v/6//j9d1Wv9/5j794aZVCT/AwAAQBXE3P+eMBP5HwAAAEoj5v5fCTOR/wEAAKA0Yu7/1TCTiuR//X/9f/1//X/9/+L16//3J/3/9vT/O9D/1//X/9f/p6t6rf8fc/++MJOK5H8AAACogpj7fy3MRP4HAACA0oi5/71hJvI/AAAAlEbM/fvDTCqS//X/9f/1//X/9f+L16//35/0/9vT/+9A/1//X/9f/5+u6rX+f8z97wszqUj+BwAAgCqIuf+uMBP5HwAAAEoj5v73h5nI/wAAAFAaMfd/IMykIvlf/1//X/9f/1//v3j9+v/9Sf+/Pf3/DvT/9f/1//X/6ape6//H3P/BMJOK5H8AAACogpj7PxRmIv8DAABAacTc/+EwE/kfAAAASiPm/o+EmVQk/+v/6//r/+v/6/8Xr1//vz/p/7en/9+B/n/J+v/j1+n/6//zRilKQItdWv//2teWXOFl9v9j7v/1MJOK5H8AAACogpj77w4zkf8BAACgNGLu/2iYifwPAAAApRFz/8fCTCqS//X/9f/1//X/9f+L16//35/0/9vrs/7/L68Pl+v/1+n/9/b292T//8dL9f/nV7XeXv+fN8Kl9f8LdaX/H3P/x8NMKpL/AQAAoApi7v9EmIn8DwAAAKURc/8nw0zkfwAAACiNmPt/I8ykIvlf/7+2HQvtZf1//f/8Av1//X/9/76l/99en/X/ff5/C/3/3t7+nuz/+/x/rrJe6//H3P+pMJOK5H8AAACogpj77wkzkf8BAACgNGLuvzfMRP4HAACA0oi5/74wk4rkf/1/n/+v/6//r/9fvH79//6k/9+e/n8H+v/6/73W//8P/X/6W6/1/2Puvz/MpCL5HwAAAKog5v4HwkzkfwAAACiNmPt/M8xE/gcAAIDSiLn/02EmFcn/+v/90v8f1//X/9f/b3k8+v/6/0X0/9vT/+9A/1//v9f6/z7/nz7Xa/3/mPsfDDNZfv4fW/aSAAAAwFURc/9vhZlU5N//AQAAoApi7v/tMBP5HwAAAEoj5v7fCTOpSP7X/++X/r/P/8/0//X/Wx6P/r/+f5Er1/+PZx79f/1//f9I/1//X/+fVr3W/4+5/3fDTCqS/wEAAKAKYu5/KMxE/gcAAIC+UPT/ZLeKuf9AmIn8DwAAAKURc//BMJOK5H/9f/1//f8e7f//6cZ//uH3P3Fwm/6//r/+/4pc0c//r734ff6//r/+f6L/r/+v/0+rXuv/x9x/KMykIvkfAAAAqiDm/t8LM5H/AQAAoDRi7j8cZiL/AwAAQGnE3D8dZlKR/K//r/+v/9+j/f8+/vz/uD/0/5t1rf8fT7r6/4WuaP//gYWeuP7/Svv/o4WX6v/r//fz9uv/6/+zWK/1/2PunwkzqUj+BwAAgCoIuX/wSH0uXCH/AwAAQGnE3H80zET+BwAAgNKIuf/hMJOK5H/9f/1//X/9f5//X7z+nu3/+/z/tvT/2+ud/n8x/X/9/37efv1//X8W67X+f8z9s2EmFcn/AAAAUAUx938mzET+BwAAgNKIuf+zYSbyPwAAAJRGzP3Hwkwqkv/1//X/9f/1//X/i9ev/9+f9P/b0//vQP9f/1//X/+fruq1/n/M/cfDTCqS/wEAAKAKYu4/EWYi/wMAAEBpxNx/MsxE/gcAAIDSiLn/VJjJ/7F3H8171eUfx+/8/2FMhgfgwg17HwILXesDcOHGhc44LnQUeyPYK/ZesHcsoIgNewMbil3sXbFgR504Tq7rSn7J+Z07iXeSc77X67W5NBhPdBjwI7zn22T/6//1/8P2/3fT/+/3ff2//n9k+v95+v8t9P/6f/2//p+dWlr/n7v/wXFLk/0PAAAAHeTuf0jcYv8DAADAMHL3Xxa32P8AAAAwjNz9D41bmuz/k/r/A5ue/X9mvPr/kfp/7//v+339v/5/ZOe3/7/iv3/k0//r//X/Qf+v/9f/c7Kl9f+5+x8WtzTZ/wAAANBB7v6Hxy32PwAAAAwjd/8j4hb7HwAAAIaRu/+RcUuT/e/9f+//6//1//r/6e/r/9fJ+//zOvX/l91y8QNvv+4u15/J9/X/+n/9v/6f3Vpa/5+7/1FxS5P9DwAAAB3k7n903GL/AwAAwDBy9z8mbrH/AQAAYBi5+x8btzTZ//p//b/+X/+v/5/+vv5/nfT/8zr1/2fzff2//l//r/9nt5bW/+fuf1zc0mT/AwAAQAe5+x8ft9j/AAAAMIzc/ZfHLfY/AAAADCN3/5G4pcn+1/+f+/7/3/p//X9c/b/+X/9/7un/5+n/t9D/6//1//p/dmpp/X/u/ivilib7HwAAADrI3f+EuMX+BwAAgGHk7n9i3GL/AwAAwDBy9z8pbmmy//X/3v/X/+v/9f/T39f/r5P+f9757/+n/gy5P/3/6vv/i/T/+n/9Pyc6w/7/jpk/bO+k/8/d/+S4pcn+BwAAgA5y9z8lbrH/AQAAYBi5+58at9j/AAAAMIzc/U+LW5rsf/2//l//r//X/09/X/+/Tvr/eYt5///Awckf1v+vvv/3/r/+X//PHkt7/z93/9Pjlib7HwAAADrI3f+MuMX+BwAAgGHk7n9m3GL/AwAAwDBy9z8rbmmy//X/+n/9v/5f/z/9/bn+//oTfn36/2XR/89bTP+/D/2//n/Nv379v/6fUy2t/8/d/+y4pcn+BwAAgA5y918Zt9j/AAAAMIzc/c+JW+x/AAAAGEbu/ufGLU32/3T/f/y36/9Pj/5/769f/z/9+8eu+v/8d9T/z/b/d/f+f0/6/3n6/y30//p//f9+/f/hbT9f/8+UpfX/ufufF7c02f8AAADQQe7+58ct9j8AAAAMI3f/C+IW+x8AAACGkbv/hXFLk/3v/X/9v/5/ff2/9/+PuZDv/2/Oe/9/UP9/mvT/8/T/W+j/9f/6f+//s1NL6/9z978obmmy/wEAAKCD3P0vjlvsfwAAAFiHE//egZP/htKQu/8lcYv9DwAAAMPI3f/SuKXJ/tf/6//1//r/3v3/oZX0/97/P136/3n6/y0ubP9/YND+/+Bg/f9V+/38JfT/l+v/WZg9/f8Nx3/8QvX/uftfFrc02f8AAADQQe7+l8ct9j8AAAAMI3f/K+IW+x8AAACGkbv/lXFLk/1/zvv/w/t/W/+v/9f/6/8vfP+/lvf/9f+nS/8/T/+/hff/vf/v/X/9Pzu1p/8/wYXq/3P3vypuabL/AQAAoIPc/a+OW+x/AAAAGEbu/qviFvsfAAAAhpG7/zVxS5P97/1//b/+X/+v/5/+vv5/nfT/8/T/W+j/9f/6f/0/O7W0/j93/2vjlib7HwAAADrI3f+6uMX+BwAAgGHk7n993GL/AwAAwDBy978hbmmy//X/57b/zx/X/+v/N/p//b/+/7xo2/8fmPoz0an26f9vuv+Re+79Ef2//l//r//X/7MDi+j/jx7/X5e5+98YtzTZ/wAAANBB7v43xS32PwAAAAwjd/+b4xb7HwAAAIaRu/8tccsg+//Qlt+u//f+v/5f/6//n/6+/n+d2vb/p8n7/1vo//X/+n/9Pzu1iP7/hH+eu/+tccsg+x8AAADY1O5/W9xi/wMAAMAwcve/PW6x/wEAAGAYufvfEbc02f/6f/2//l//r/+f/r7+f530//P0/1vo//X/+n/9Pzu1tP4/d//VcUuT/Q8AAAAd5O5/Z9xi/wMAAMAwcve/K26x/wEAAGAYufvfHbc02f/6f/2//l//r/+f/r7+f530//P0/5vN5pqZX8BU/3/0Tvp//b/+X//PWVpa/5+7/z1xS5P9DwAAAB3k7r8mbrH/AQAAYBi5+6+NW+x/AAAAGEbu/vfGLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Ft7/1//r//X/7NTS+v/c/e+LW5rsfwAAAOggd/91cYv9DwAAAMPI3f/+uMX+BwAAgGHk7r8+bmmy//X/+n/9v/5f/z/9ff3/Op27/n+j/9f/6/+30P/r//X/nGxp/X/u/g/ELU32PwAAAHSQu/+DcYv9DwAAAMPI3f+huMX+BwAAgGHk7v9w3NJk/+v/9f/6f/2//n/6+/r/dfL+/zz9/xb6f/2//l//z04trf/P3f+RuKXJ/gcAAIAOcvffELfY/wAAADCM3P0fjVvsfwAAABhG7v6PxS1N9r/+X/+/t//fbPT/+n/9/zHnof8/tNH/75z+f57+fwv9/5j9//9tBur/D+/78/X/LNHS+v/c/R+PW5rsfwAAAOggd/8n4hb7HwAAAIaRu/+TcYv9DwAAAMPI3f+puKXJ/tf/6/+9/6//1/9Pf9/7/+uk/5+n/99C/z9m/+/9f/0/F8zS+v/c/Z+OW5rsfwAAAOggd/9n4hb7HwAAAIaRu/+zcYv9DwAAAMPI3f+5uKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+z8ftzTZ/wAAANBB7v4b4xb7HwAAAIaRu/+muMX+BwAAgGHk7v9C3NJk/+v/9f/6/3X2/4f0//p//f+kpfT/l156j5v1//p//b/+X/+v/+9uaf1/7v4vxi1N9j8AAAB0kLv/S3GL/Q8AAADDyN3/5bjF/gcAAIBh5O7/StzSZP+f2v9ftDlWqB4z1f9Ho6b/P4H+f++vX/8//fuH9//1//r/c28p/b/3/8/u16//1/+v+dd/Rv3/Jaf+fP0/I1pa/5+7/+a4pcn+BwAAgA5y9381brH/AQAAYBi5+78Wt9j/AAAAMIzc/bfELU32v/f/9f/6f/2//n/6+/r/ddL/z9P/b6H/1/97//9B9/1//T+7s7T+P3f/1+OWJvsfAAAAOsjd/424xf4HAACAYeTu/2bcYv8DAADAMHL3fytuabL/9f/6f/2//l//P/19/f866f/n6f+30P/r//X/3v9np5bW/+fu/3bc0mT/AwAAQAe5+78Tt9j/AAAAMIzc/d+NW+x/AAAAGEbu/u/FLU32/+77/0v0/0H/v5T+/z76/5O+r//X/49M/59/Rp+m/99C/6//1//r/9mppfX/uftvjVua7H8AAADoIHf/9+MW+x8AAACGkbv/B3GL/Q8AAADDyN3/w7ilyf73/n+v/v/ApmP/7/1//b/+vxP9/zz9/xb6f/2//l//z04trf/P3f+juKXJ/gcAAIC1utddH3Dr6f5rc/f/OG6x/wEAAGAYuft/ErfY/wAAADCM3P0/jVua7H/9f6/+v+f7//p//b/+vxP9/zz9/xb6f/2//l//z04trf/P3f+zuOWE4XfwjP9TAgAAAEuSu//ncUuTv/4PAAAAHeTu/0Xccsr+P3qaf1c7AAAAsDS5+38ZtzT56//6/4X3/5vx+//bNvp//f8x+n/9/y7o/+f9j/3/0QP6f/3/DP2//l//z8mW1v/n7v9V3NJk/wMAAMCg9vw/Crn7fx232P8AAAAwjNz9v4lb7H8AAAAYRu7+38YtTfa//n/h/f9Zvf9/uP7RGvp/7/+fw/7/ykOT39f/6/9Hpv+f5/3/LfT/+n/9v/6fnVpa/5+7/7a4pcn+BwAAgA5y9/8ubrH/AQAAYBi5+38ft9j/AAAAMIzc/X+IW5rsf/3/iP3/ut7/1/97///s+/87X3zkxnvf79qr9f8cdz77//x9Qf+v/9f/H6P/1//r/znZ0vr/3P1/jFua7H8AAADoIHf/7XGL/Q8AAADDyN3/p7jF/gcAAIBh5O7/c9zSZP/r//X/S+n/87/rC9D/H1lf/59Ncff+3/v/+v9Tef9/nv5/C/2//l//r/9np5bW/+fu/0vc0mT/AwAAQAe5+/8at9j/AAAAMIzc/X+LW+x/AAAAGEbu/r/HLU32v/5f/7+U/j95///4z/P+/zH6f/3/mdD/z9P/b6H/1//r//X/7NTS+v/c/f+IW5rsfwAAAOggd/8dcYv9DwAAAMPI3f/PuMX+BwAAgGHk7v9X3NJk/+v/9f/6f/2//n/6+/r/ddL/z9P/b6H/1//r//X/7NTS+v/c/f8JAAD//2kodCA=") 964.524905ms ago: executing program 2 (id=5933): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 889.699256ms ago: executing program 2 (id=5934): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x8}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000300)=""/242, 0x2c, 0xf2, 0x1}, 0x28) 767.790288ms ago: executing program 2 (id=5935): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 719.502869ms ago: executing program 0 (id=5936): syz_usb_connect(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xaa, 0x3a, 0x37, 0x40, 0xb48, 0x2003, 0x3961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x3, 0x27, 0xa1, 0x41, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x0, 0xa, 0x2, 0xfe}}, {{0x9, 0x5, 0x8b, 0x2, 0x200, 0x44, 0xb7, 0x3}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x4, 0x9, 0x6}}]}}]}}]}}, 0x0) 689.380149ms ago: executing program 1 (id=5937): syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f0000004900)='./file0\x00', 0x0, &(0x7f0000000280)={[{@usrquota}, {@coherency_full}, {@nouser_xattr}, {@commit={'commit', 0x3d, 0x6}}, {@usrquota}, {@commit={'commit', 0x3d, 0xfbfffffffffffffe}}, {@barrier={'barrier', 0x3d, 0x4000000002}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}'}}, {@permit_directio}]}, 0x1, 0x48c1, &(0x7f000000dac0)="$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") 617.90144ms ago: executing program 2 (id=5938): syz_emit_ethernet(0x47, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x11, 0x84, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], "a5ba94534d2be385673cdf59a401738fbb"}}}}}, 0x0) 526.032352ms ago: executing program 3 (id=5939): rmdir(&(0x7f0000000080)='.\x00') 449.290113ms ago: executing program 2 (id=5940): brk(0x55d55ede6004) 429.694023ms ago: executing program 3 (id=5941): syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) 290.038345ms ago: executing program 2 (id=5942): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4b, 0x9c, 0xfc, 0x8, 0x52b, 0x1803, 0x1617, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xb5, 0x94, 0x85}}]}}]}}, 0x0) 225.873327ms ago: executing program 3 (id=5943): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200004, 0x1ffffd, 0x0, 0x9, 0x1}) 154.373608ms ago: executing program 3 (id=5944): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2, 0x6a9, &(0x7f0000000440)="$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") 128.142368ms ago: executing program 4 (id=5945): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 3 (id=5946): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0xc}, {0x6, 0x3}]}, @func_proto, @enum={0x0, 0x0, 0x0, 0x13}]}}, &(0x7f0000000900)=""/252, 0x56, 0xfc, 0x1}, 0x28) kernel console output (not intermixed with test programs): ][ T6737] usb 3-1: config 0 descriptor?? [ 603.084575][ T6737] usb 3-1: selecting invalid altsetting 3 [ 603.090494][ T4964] usb 1-1: Using ep0 maxpacket: 16 [ 603.097185][ T4964] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 603.114997][ T6737] comedi comedi5: could not set alternate setting 3 in high speed [ 603.123300][ T4964] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 603.143337][T16634] loop3: detected capacity change from 0 to 760 [ 603.154249][ T6737] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 603.169252][ T4964] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 603.185462][T16634] isofs_fill_super: root inode is not a directory. Corrupted media? [ 603.206456][ T6737] usbdux: probe of 3-1:0.0 failed with error -22 [ 603.215551][ T4964] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 603.252855][ T4964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.265345][ T4964] usb 1-1: Product: syz [ 603.288076][ T4964] usb 1-1: Manufacturer: syz [ 603.302746][ T4964] usb 1-1: SerialNumber: syz [ 603.314421][ T4965] usb 3-1: USB disconnect, device number 26 [ 603.335961][ T4964] usb 1-1: config 0 descriptor?? [ 603.371221][ T4964] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 603.506762][T16646] loop3: detected capacity change from 0 to 512 [ 603.528919][T16646] EXT4-fs (loop3): orphan cleanup on readonly fs [ 603.550152][ T4965] usb 1-1: USB disconnect, device number 23 [ 603.556411][T16646] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.5436: corrupted inode contents [ 603.577304][T16646] EXT4-fs (loop3): Remounting filesystem read-only [ 603.588887][T16649] loop4: detected capacity change from 0 to 512 [ 603.611862][T16646] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 603.626330][T16646] EXT4-fs (loop3): Remounting filesystem read-only [ 603.632905][T16646] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.5436: corrupted inode contents [ 603.654034][ T6303] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 603.742155][T16646] EXT4-fs (loop3): Remounting filesystem read-only [ 603.768477][T16655] loop4: detected capacity change from 0 to 64 [ 603.804182][T16646] EXT4-fs error (device loop3): ext4_evict_inode:327: inode #15: comm syz.3.5436: mark_inode_dirty error [ 603.842557][T16646] EXT4-fs (loop3): Remounting filesystem read-only [ 603.859348][T16646] EXT4-fs (loop3): 1 orphan inode deleted [ 603.898453][T16646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 604.028744][ T4986] EXT4-fs (loop3): unmounting filesystem. [ 604.472291][ T8532] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 604.545049][T16682] loop1: detected capacity change from 0 to 4096 [ 604.586299][T16682] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 604.651152][ T8532] usb 1-1: Using ep0 maxpacket: 8 [ 604.656254][ T27] audit: type=1326 audit(1762476663.980:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.3.5460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbb78f6c9 code=0x0 [ 604.689869][ T8532] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.707305][ T8532] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 604.716361][ T8532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.726163][ T4965] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 604.727999][ T8532] usb 1-1: config 0 descriptor?? [ 604.895808][ T4964] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 604.935630][ T4962] usb 1-1: USB disconnect, device number 24 [ 604.942981][ T4965] usb 5-1: Using ep0 maxpacket: 16 [ 604.949762][ T4965] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 604.966335][ T4965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.977634][ T4965] usb 5-1: config 0 has no interface number 0 [ 604.998416][ T4965] usb 5-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 605.011270][ T4965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.021591][ T4965] usb 5-1: Product: syz [ 605.025776][ T4965] usb 5-1: Manufacturer: syz [ 605.033588][ T4965] usb 5-1: SerialNumber: syz [ 605.051458][ T4965] usb 5-1: config 0 descriptor?? [ 605.064097][ T4965] rndis_wlan 5-1:0.195: More than one union descriptor, skipping ... [ 605.072585][ T4965] usb 5-1: bad CDC descriptors [ 605.083471][ T4965] rndis_host 5-1:0.195: More than one union descriptor, skipping ... [ 605.092313][ T4964] usb 3-1: Using ep0 maxpacket: 16 [ 605.099915][ T4965] usb 5-1: bad CDC descriptors [ 605.103681][ T8532] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 605.105211][ T4965] cdc_acm 5-1:0.195: More than one union descriptor, skipping ... [ 605.121927][ T4964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 605.151321][ T4964] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.158263][T16696] loop1: detected capacity change from 0 to 40427 [ 605.170039][ T4964] usb 3-1: config 1 interface 0 has no altsetting 0 [ 605.192574][T16696] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x3ffff [ 605.202642][ T4964] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 605.204104][T16696] F2FS-fs (loop1): invalid crc value [ 605.214699][ T4964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.225837][ T4964] usb 3-1: Product: syz [ 605.231167][ T4964] usb 3-1: Manufacturer: syz [ 605.236957][ T4964] usb 3-1: SerialNumber: syz [ 605.237383][T16696] F2FS-fs (loop1) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x2aed/0x7160 [ 605.252276][T16696] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 605.283974][ T4909] usb 5-1: USB disconnect, device number 122 [ 605.293212][ T8532] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 605.312307][ T8532] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.333512][ T8532] usb 4-1: config 0 has no interface number 0 [ 605.347867][ T8532] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 605.367111][ T8532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.387237][ T8532] usb 4-1: config 0 descriptor?? [ 605.397809][ T8532] qmi_wwan 4-1:0.154: bogus CDC Union: master=0, slave=0 [ 605.414005][ T8532] qmi_wwan: probe of 4-1:0.154 failed with error -22 [ 605.466805][ T4964] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input52 [ 605.494832][ T3622] bcm5974 3-1:1.0: could not read from device [ 605.514406][T16706] loop1: detected capacity change from 0 to 512 [ 605.557812][ T4964] usb 3-1: USB disconnect, device number 27 [ 605.601203][ T4967] usb 4-1: USB disconnect, device number 23 [ 605.604822][T16706] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 605.615506][T16706] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.5464: bad orphan inode 15 [ 605.627066][T16706] ext4_test_bit(bit=14, block=4) = 1 [ 605.633799][T16706] is_bad_inode(inode)=0 [ 605.637970][T16706] NEXT_ORPHAN(inode)=0 [ 605.643087][T16706] max_ino=32 [ 605.646299][T16706] i_nlink=1 [ 605.649616][T16706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 605.693769][ T4989] EXT4-fs (loop1): unmounting filesystem. [ 605.922047][T16712] loop1: detected capacity change from 0 to 8192 [ 605.945359][T16712] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 605.966309][T16712] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 605.974565][T16716] loop4: detected capacity change from 0 to 8192 [ 605.985858][T16712] REISERFS (device loop1): using journaled data mode [ 605.994024][T16712] reiserfs: using flush barriers [ 606.044783][T16712] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 606.062121][ T4909] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 606.076521][T16712] REISERFS (device loop1): checking transaction log (loop1) [ 606.090855][T16712] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.5*[1 1 0(1) DIR], item_len 0, item_location 4004, free_space(entry_count) 192 [ 606.106275][ T4997] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 606.116460][ T4997] Bluetooth: hci4: Injecting HCI hardware error event [ 606.125451][ T4992] Bluetooth: hci4: hardware error 0x00 [ 606.149670][T16712] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 606.161703][T16719] loop2: detected capacity change from 0 to 256 [ 606.215506][T16712] REISERFS (device loop1): Remounting filesystem read-only [ 606.234980][T16712] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 606.249464][T16712] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 606.254005][T16719] exFAT-fs (loop2): bogus number of FAT structure [ 606.277467][ T4909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 606.310546][ T4909] usb 1-1: not running at top speed; connect to a high speed hub [ 606.337958][T16719] exFAT-fs (loop2): failed to read boot sector [ 606.344876][T16719] exFAT-fs (loop2): failed to recognize exfat type [ 606.357648][ T4909] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 606.385611][ T4909] usb 1-1: config 2 has no interface number 0 [ 606.426084][ T4909] usb 1-1: New USB device found, idVendor=0572, idProduct=1324, bcdDevice=d4.a1 [ 606.477656][ T4909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.500874][ T4909] usb 1-1: Product: syz [ 606.505074][ T4909] usb 1-1: Manufacturer: syz [ 606.549006][ T4909] usb 1-1: SerialNumber: syz [ 606.553497][T16731] loop3: detected capacity change from 0 to 1024 [ 606.639971][ T4964] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 606.785977][ T4909] usb 1-1: USB disconnect, device number 25 [ 606.843115][T16733] loop1: detected capacity change from 0 to 8192 [ 606.855775][ T4964] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 606.873757][ T4964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.891970][ T4964] usb 5-1: Product: syz [ 606.898008][ T4964] usb 5-1: Manufacturer: syz [ 606.898258][T16733] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 606.911292][T16735] loop2: detected capacity change from 0 to 4096 [ 606.922890][ T4964] usb 5-1: SerialNumber: syz [ 606.929296][ T4964] usb 5-1: config 0 descriptor?? [ 606.937894][ T4964] disable ehci-hcd to run US-144 [ 606.938889][T16735] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 606.969145][T16733] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 606.978499][T16733] REISERFS (device loop1): using ordered data mode [ 606.985112][T16733] reiserfs: using flush barriers [ 606.996234][T16733] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 607.013667][T16733] REISERFS (device loop1): checking transaction log (loop1) [ 607.071835][T16733] REISERFS (device loop1): Using rupasov hash to sort names [ 607.080325][T16733] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 607.087418][T16735] ntfs3: loop2: volume is dirty and "force" flag is not set! [ 607.128462][ T4964] usb 5-1: USB disconnect, device number 123 [ 607.572484][T16746] loop2: detected capacity change from 0 to 4096 [ 607.605043][T16752] loop0: detected capacity change from 0 to 64 [ 607.607223][T16746] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (131072) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 607.702166][T16746] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 607.725286][T16745] loop1: detected capacity change from 0 to 8192 [ 607.772416][T16745] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 607.822596][T16745] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 607.832069][T16745] REISERFS (device loop1): using ordered data mode [ 607.838587][T16745] reiserfs: using flush barriers [ 607.925346][T16745] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 608.039483][T16745] REISERFS (device loop1): checking transaction log (loop1) [ 608.048562][ T4992] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 608.059551][T16763] loop2: detected capacity change from 0 to 760 [ 608.089404][T16745] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.5*[1 2 2147483520(127) DIR], item_len 65535, item_location 0, free_space(entry_count) 65535 [ 608.114335][T16745] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 608.133594][T16745] REISERFS (device loop1): Remounting filesystem read-only [ 608.140996][T16745] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 608.195619][T16763] isofs_fill_super: root inode is not a directory. Corrupted media? [ 608.366799][T16771] loop0: detected capacity change from 0 to 2048 [ 608.422278][T16773] loop2: detected capacity change from 0 to 2048 [ 608.472342][T16773] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 608.509900][T16773] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 608.539882][T16773] UDF-fs: Scanning with blocksize 512 failed [ 608.570988][T16773] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 608.589935][T16773] UDF-fs: Scanning with blocksize 1024 failed [ 608.627429][T16773] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 608.675481][T16773] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 608.697374][T16773] UDF-fs: Scanning with blocksize 2048 failed [ 608.723244][T16773] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 608.752335][T16773] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 608.762452][T16770] loop3: detected capacity change from 0 to 8192 [ 608.771506][ T4964] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 608.784241][T16770] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 608.808605][T16773] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 608.830619][T16773] UDF-fs: Scanning with blocksize 4096 failed [ 608.847991][T16773] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 608.883246][T16770] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 608.924049][T16770] ntfs3: loop3: Failed to load $Extend. [ 608.963275][ T4964] usb 2-1: config 3 has an invalid interface number: 56 but max is 0 [ 608.971617][ T4964] usb 2-1: config 3 has no interface number 0 [ 608.983088][ T4964] usb 2-1: config 3 interface 56 has no altsetting 0 [ 609.010281][ T4964] usb 2-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=80.cc [ 609.012665][ T4909] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 609.025608][ T4964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.042986][ T4964] usb 2-1: Product: syz [ 609.047298][ T4964] usb 2-1: Manufacturer: syz [ 609.053776][ T4964] usb 2-1: SerialNumber: syz [ 609.251126][ T4909] usb 5-1: config 0 has an invalid interface number: 118 but max is 0 [ 609.258475][ T4964] safe_serial 2-1:3.56: safe_serial converter detected [ 609.283171][ T4909] usb 5-1: config 0 has no interface number 0 [ 609.289678][ T4964] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 609.308751][ T4909] usb 5-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=72.c5 [ 609.327685][ T4964] usb 2-1: USB disconnect, device number 29 [ 609.346811][ T4964] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 609.351491][ T4909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.380262][ T4964] safe_serial 2-1:3.56: device disconnected [ 609.390037][ T4909] usb 5-1: Product: syz [ 609.396257][T16797] loop3: detected capacity change from 0 to 64 [ 609.405739][ T4909] usb 5-1: Manufacturer: syz [ 609.408502][T16793] loop0: detected capacity change from 0 to 8192 [ 609.415087][ T4909] usb 5-1: SerialNumber: syz [ 609.440662][ T4909] usb 5-1: config 0 descriptor?? [ 609.471368][T16793] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 609.583695][T16793] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 609.651240][ T4909] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 609.680478][T16793] REISERFS (device loop0): using ordered data mode [ 609.698225][ T4909] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 609.722068][T16793] reiserfs: using flush barriers [ 609.726330][ T4909] dib0700: firmware download failed at 7 with -22 [ 609.738662][T16793] REISERFS (device loop0): journal params: device loop0, size 4294967294, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 609.787238][ T4909] usb 5-1: USB disconnect, device number 124 [ 609.838135][T16793] REISERFS warning (device loop0): journal-2004 journal_init: Journal cnode memory allocation failed (-288 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 610.068833][T16818] trusted_key: encrypted_key: master key parameter '' is invalid [ 610.258434][T16823] loop2: detected capacity change from 0 to 64 [ 610.276515][T16823] Unable to read inode block [ 610.281188][T16823] MINIX-fs: get root inode failed [ 610.587326][T16832] loop4: detected capacity change from 0 to 8192 [ 610.613950][T16832] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 610.632155][T16832] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 610.643417][T16832] REISERFS (device loop4): using ordered data mode [ 610.666543][T16832] reiserfs: using flush barriers [ 610.683559][T16838] loop0: detected capacity change from 0 to 4096 [ 610.706199][T16832] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 610.722320][ T4965] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 610.728193][T16832] REISERFS (device loop4): checking transaction log (loop4) [ 610.761706][T16832] REISERFS (device loop4): Using r5 hash to sort names [ 610.769948][T16832] REISERFS (device loop4): using 3.5.x disk format [ 610.776806][T16832] REISERFS warning (device loop4): jdm-2005 xattr_mount_check: xattrs/ACLs not supported on pre-v3.6 format filesystems. Failing mount. [ 610.783735][T16838] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 610.834468][T16845] loop2: detected capacity change from 0 to 65 [ 610.836772][T16841] loop1: detected capacity change from 0 to 4096 [ 610.864684][T16841] ntfs: (device loop1): parse_options(): Unrecognized mount option ÿ0x000000000000ee00. [ 610.887334][T16838] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 610.903463][T16845] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 610.910878][ T4965] usb 4-1: Using ep0 maxpacket: 16 [ 610.918120][ T4965] usb 4-1: config 3 has an invalid interface number: 155 but max is 0 [ 610.926652][ T4997] Bluetooth: hci0: command 0x201b tx timeout [ 610.945082][ T4965] usb 4-1: config 3 has no interface number 0 [ 610.951361][T16845] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 610.960573][T16841] ntfs: (device loop1): parse_options(): The case_sensitive option requires a boolean argument. [ 610.973526][ T4965] usb 4-1: config 3 interface 155 has no altsetting 0 [ 610.979641][T16838] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 610.983951][ T4965] usb 4-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 611.068548][ T4965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.092790][T16838] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 611.112548][ T4965] usb 4-1: Product: syz [ 611.127299][T16838] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 611.147156][ T4965] usb 4-1: Manufacturer: syz [ 611.160380][ T4965] usb 4-1: SerialNumber: syz [ 611.184119][T16838] ntfs: volume version 3.1. [ 611.198524][T16838] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 611.403823][ T4965] usb 4-1: USB disconnect, device number 24 [ 611.874534][ T4964] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 611.976451][T16849] loop2: detected capacity change from 0 to 32768 [ 612.054483][ T4965] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 612.074801][ T4964] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 612.086991][ T4964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.116651][ T4964] usb 1-1: config 0 has no interface number 0 [ 612.136481][ T4964] usb 1-1: config 0 interface 119 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.187117][ T4964] usb 1-1: config 0 interface 119 has no altsetting 0 [ 612.195517][ T4964] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=51.96 [ 612.229674][T16877] loop3: detected capacity change from 0 to 1024 [ 612.231108][ T4964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.253259][ T4965] usb 2-1: Using ep0 maxpacket: 16 [ 612.259783][T16877] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 612.262120][ T4965] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 612.284289][ T4964] usb 1-1: config 0 descriptor?? [ 612.303619][ T4964] usb 1-1: NFC: intf ffff888078048000 id ffffffff8d3fc6e0 [ 612.334162][ T4965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.349879][ T4965] usb 2-1: Product: syz [ 612.354089][ T4965] usb 2-1: Manufacturer: syz [ 612.367206][ T4965] usb 2-1: SerialNumber: syz [ 612.394325][ T4965] usb 2-1: config 0 descriptor?? [ 612.420431][ T4965] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 612.449120][ T4965] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 612.486967][ T6737] usb 1-1: USB disconnect, device number 26 [ 612.557335][ T4965] peak_usb: probe of 2-1:0.0 failed with error -22 [ 612.628284][T16883] loop3: detected capacity change from 0 to 4096 [ 612.629046][ T4965] usb 2-1: USB disconnect, device number 30 [ 612.648060][T16883] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 612.657401][ T4885] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 612.665243][ T4967] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 612.832165][T16885] loop3: detected capacity change from 0 to 8192 [ 612.851259][ T4967] usb 3-1: Using ep0 maxpacket: 8 [ 612.857988][ T4885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 612.861695][T16885] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 612.873210][ T4967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 612.876849][T16885] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 612.893114][T16885] loop3: unable to read partition table [ 612.895340][ T4885] usb 5-1: not running at top speed; connect to a high speed hub [ 612.899289][T16885] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 612.928493][ T4885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.944692][ T4967] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=7c.07 [ 612.967891][ T4967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.987722][ T4885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.005041][ T4967] usb 3-1: Product: syz [ 613.009336][ T4967] usb 3-1: Manufacturer: syz [ 613.019081][ T4967] usb 3-1: SerialNumber: syz [ 613.026789][ T4885] usb 5-1: string descriptor 0 read error: -22 [ 613.040499][ T4967] usb 3-1: config 0 descriptor?? [ 613.045707][ T4885] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.066196][ T4885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.081143][ T4885] usb 5-1: 0:2 : does not exist [ 613.256610][ T4909] usb 3-1: USB disconnect, device number 28 [ 613.256651][ T4997] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 613.279217][ T4885] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 613.292783][T16891] loop3: detected capacity change from 0 to 2048 [ 613.311781][ T4885] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 613.314487][T16891] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 613.332954][ T4885] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 613.347118][ T4885] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 613.372552][ T4885] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 613.393866][ T4885] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 613.413717][ T4885] usb 5-1: USB disconnect, device number 125 [ 613.445623][ T5512] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 613.579205][T16901] loop1: detected capacity change from 0 to 764 [ 613.616047][T16901] rock: directory entry would overflow storage [ 613.625477][T16901] rock: sig=0x5245, size=8, remaining=5 [ 613.726059][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.153610][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 614.153624][ T27] audit: type=1326 audit(1762476674.020:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16924 comm="syz.4.5569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a6b8f6c9 code=0x0 [ 614.197185][T16927] loop2: detected capacity change from 0 to 1024 [ 614.210116][T16927] hfsplus: invalid btree flag [ 614.230357][T16927] hfsplus: failed to load catalog file [ 614.284292][ T4885] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 614.291972][ T4967] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 614.408273][ T4965] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 614.477890][T16935] loop2: detected capacity change from 0 to 2048 [ 614.486922][ T4967] usb 1-1: Using ep0 maxpacket: 16 [ 614.492154][ T4885] usb 2-1: Using ep0 maxpacket: 32 [ 614.505201][ T4885] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 614.518775][ T4967] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 614.530863][ T4885] usb 2-1: config 0 has no interface number 0 [ 614.536982][ T4885] usb 2-1: config 0 interface 150 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 614.548085][ T4967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 614.556322][ T4967] usb 1-1: SerialNumber: syz [ 614.562937][T16935] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 614.580462][ T4967] usb 1-1: config 0 descriptor?? [ 614.586884][T16935] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 614.597900][ T4965] usb 4-1: Using ep0 maxpacket: 16 [ 614.607228][ T4885] usb 2-1: config 0 interface 150 has no altsetting 0 [ 614.614492][ T4965] usb 4-1: config 0 has an invalid interface number: 14 but max is 0 [ 614.634009][ T4965] usb 4-1: config 0 has no interface number 0 [ 614.642052][ T4967] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 614.649652][T16935] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 614.649676][T16935] EXT4-fs (loop2): group descriptors corrupted! [ 614.667108][ T4885] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=b0.4f [ 614.682626][ T4885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.692764][ T4965] usb 4-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=c3.c9 [ 614.711651][ T4965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.719666][ T4965] usb 4-1: Product: syz [ 614.723940][ T4885] usb 2-1: Product: syz [ 614.728114][ T4885] usb 2-1: Manufacturer: syz [ 614.744445][ T4967] usb 1-1: Detected FT232A [ 614.749234][ T4885] usb 2-1: SerialNumber: syz [ 614.754846][ T4965] usb 4-1: Manufacturer: syz [ 614.761379][ T4967] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 614.779837][ T4885] usb 2-1: config 0 descriptor?? [ 614.784966][ T4965] usb 4-1: SerialNumber: syz [ 614.792476][ T4885] s2255 2-1:0.150: Could not find bulk-in endpoint [ 614.802274][ T4965] usb 4-1: config 0 descriptor?? [ 614.807605][ T4885] Sensoray 2255 driver load failed: 0xfffffff4 [ 614.814181][ T4885] s2255: probe of 2-1:0.150 failed with error -12 [ 614.825781][ T4965] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 614.865339][ T7108] usb 1-1: USB disconnect, device number 27 [ 614.885644][ T7108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 614.897581][ T7108] ftdi_sio 1-1:0.0: device disconnected [ 615.004379][ T4967] usb 2-1: USB disconnect, device number 31 [ 615.018916][ T4965] gspca_sn9c20x: Write register 1000 failed -71 [ 615.042144][ T4965] gspca_sn9c20x: Device initialization failed [ 615.061668][ T4965] gspca_sn9c20x: probe of 4-1:0.14 failed with error -71 [ 615.074158][ T4965] usb 4-1: USB disconnect, device number 25 [ 615.114701][T16941] loop4: detected capacity change from 0 to 32768 [ 615.133790][T16941] (syz.4.5578,16941,0):ocfs2_verify_heartbeat:835 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 615.167487][T16941] (syz.4.5578,16941,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 615.243672][ T4885] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 615.436970][T16950] loop0: detected capacity change from 0 to 8 [ 615.442209][ T4885] usb 3-1: Using ep0 maxpacket: 16 [ 615.449712][ T4885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.467775][T16950] SQUASHFS error: zlib decompression failed, data probably corrupt [ 615.475886][T16950] SQUASHFS error: Failed to read block 0x9b: -5 [ 615.480634][ T7108] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 615.482344][ T4885] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.495225][T16950] SQUASHFS error: Unable to read metadata cache entry [99] [ 615.502017][ T4885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.507231][T16950] SQUASHFS error: Unable to read inode 0x127 [ 615.526406][ T4885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.535744][ T4885] usb 3-1: Product: syz [ 615.544114][ T4885] usb 3-1: Manufacturer: syz [ 615.549976][ T4885] usb 3-1: SerialNumber: syz [ 615.674667][ T27] audit: type=1326 audit(1762476675.621:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.3.5584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbb78f6c9 code=0x0 [ 615.706978][ T7108] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 615.721403][ T7108] usb 5-1: config 8 has no interface number 0 [ 615.729149][ T7108] usb 5-1: config 8 interface 206 altsetting 1 has an invalid endpoint descriptor of length 2, skipping [ 615.744560][ T7108] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 615.768737][ T7108] usb 5-1: config 8 interface 206 has no altsetting 0 [ 615.777273][ T4885] usb 3-1: cannot find UAC_HEADER [ 615.798580][ T7108] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 615.811943][ T4885] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 615.831665][ T7108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.834731][ T4885] usb 3-1: USB disconnect, device number 29 [ 615.869849][ T7108] usb 5-1: Product: syz [ 615.883594][ T5512] udevd[5512]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 615.888911][ T7108] usb 5-1: Manufacturer: syz [ 615.894229][ T4967] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 615.927028][ T7108] usb 5-1: SerialNumber: syz [ 615.927174][ T5512] udevd[5512]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 616.090216][ T4967] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 616.100431][ T4967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.140336][ T4967] usb 2-1: config 0 descriptor?? [ 616.172112][ T7108] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 616.200344][ T7108] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 616.200879][ T4967] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 616.217933][ T7108] garmin_gps: probe of ttyUSB0 failed with error -22 [ 616.234461][ T5512] udevd[5512]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.237450][ T7108] usb 5-1: USB disconnect, device number 126 [ 616.258139][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.264543][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 616.304145][ T7108] garmin_gps 5-1:8.206: device disconnected [ 616.333622][ T4997] Bluetooth: hci0: unexpected event for opcode 0x1409 [ 616.417532][ T4885] usb 2-1: USB disconnect, device number 32 [ 616.426258][T16974] loop0: detected capacity change from 0 to 1024 [ 616.472556][T16974] hfsplus: bad catalog file entry [ 616.483889][T16974] hfsplus: failed to load root directory [ 616.645145][T16982] loop2: detected capacity change from 0 to 64 [ 616.670945][T16982] hfs: unable to change codepage [ 616.685425][T16982] hfs: unable to parse mount options [ 616.810187][T16986] loop0: detected capacity change from 0 to 2048 [ 617.118975][T17000] loop2: detected capacity change from 0 to 1024 [ 617.162823][T17000] hfsplus: wrong filesystem version [ 617.200118][ T5512] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 617.227315][T17007] loop4: detected capacity change from 0 to 1024 [ 617.238388][ T4885] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 617.279232][T17007] hfsplus: bad catalog entry used to create inode [ 617.298305][T17007] hfsplus: failed to load root directory [ 617.439971][ T4885] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 617.456839][ T4885] usb 4-1: config 0 has no interface number 0 [ 617.463296][ T4885] usb 4-1: config 0 interface 11 has no altsetting 0 [ 617.525535][ T4885] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 617.567576][ T4885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.579896][T17016] loop4: detected capacity change from 0 to 512 [ 617.593798][ T4885] usb 4-1: config 0 descriptor?? [ 617.610167][ T4885] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 617.629621][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 7 [ 617.639224][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 617.660770][T17016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 617.678753][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 617.690771][T17016] System zones: 1-12 [ 617.727863][T17016] EXT4-fs (loop4): orphan cleanup on readonly fs [ 617.755423][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 617.803781][T17016] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5615: bg 0: block 328: padding at end of block bitmap is not set [ 617.818666][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 617.832632][T17016] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 617.846536][T17023] loop2: detected capacity change from 0 to 8192 [ 617.859866][T17016] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5615: invalid indirect mapped block 65280 (level 0) [ 617.881431][T17023] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 617.888322][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 617.903705][T17023] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 617.913190][T17016] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.5615: attempt to clear invalid blocks 33619980 len 1 [ 617.931945][T17023] REISERFS (device loop2): using ordered data mode [ 617.936766][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 617.938447][T17023] reiserfs: using flush barriers [ 617.957566][T17023] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 617.966069][ T4885] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 617.973996][T17016] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5615: invalid indirect mapped block 1819239214 (level 0) [ 617.983987][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 618.011597][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 618.023168][T17023] REISERFS (device loop2): checking transaction log (loop2) [ 618.042518][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 618.043694][T17016] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5615: invalid indirect mapped block 1819239214 (level 1) [ 618.062244][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 618.064829][ T4909] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 618.097155][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 618.122971][T17016] EXT4-fs (loop4): 1 orphan inode deleted [ 618.124279][ T4885] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 618.128733][T17016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 618.177698][ T4885] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 618.234138][T17023] REISERFS (device loop2): Using rupasov hash to sort names [ 618.242517][T17023] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 618.256972][ T4885] usb 4-1: USB disconnect, device number 26 [ 618.269522][ T4909] usb 1-1: Using ep0 maxpacket: 16 [ 618.276283][ T4909] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 618.294367][ T4885] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 618.340830][ T4909] usb 1-1: config 0 has no interface number 0 [ 618.341284][ T4885] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 618.354511][ T4909] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 618.398834][ T4885] keyspan 4-1:0.11: device disconnected [ 618.409274][ T4909] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 618.429514][T17014] loop1: detected capacity change from 0 to 32768 [ 618.436635][ T4993] EXT4-fs (loop4): unmounting filesystem. [ 618.446413][ T4909] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 618.479671][ T4909] usb 1-1: Product: syz [ 618.497681][ T4909] usb 1-1: SerialNumber: syz [ 618.504472][T17014] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 618.526822][ T4909] usb 1-1: config 0 descriptor?? [ 618.552353][T17014] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 618.563680][ T4909] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 618.590791][T17014] BTRFS info (device loop1): turning off barriers [ 618.597234][T17014] BTRFS info (device loop1): turning on flush-on-commit [ 618.640290][T17014] BTRFS error (device loop1): unrecognized commit_interval value 0x0000000080000000 [ 618.675301][T17014] BTRFS error (device loop1): open_ctree failed: -22 [ 618.739093][ T4902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4902) [ 618.757207][ T8531] usb 1-1: USB disconnect, device number 28 [ 618.906105][ T4909] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 618.966880][T17032] loop3: detected capacity change from 0 to 4096 [ 618.998800][T17032] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 619.021671][T17032] ntfs3: loop3: volume is dirty and "force" flag is not set! [ 619.091640][ T4909] usb 5-1: Using ep0 maxpacket: 16 [ 619.098311][ T4909] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 619.130338][ T4909] usb 5-1: config 0 has no interface number 0 [ 619.153778][ T4909] usb 5-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 619.186681][ T4909] usb 5-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e [ 619.210809][ T4909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.229241][ T4909] usb 5-1: Product: syz [ 619.233428][ T4909] usb 5-1: Manufacturer: syz [ 619.248986][ T4909] usb 5-1: SerialNumber: syz [ 619.276252][ T4909] usb 5-1: config 0 descriptor?? [ 619.311031][T17028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.382167][ T4885] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 619.408485][T17045] futex_wake_op: syz.0.5628 tries to shift op by -1; fix this program [ 619.526518][ T7108] usb 5-1: USB disconnect, device number 127 [ 619.567033][T17047] loop3: detected capacity change from 0 to 4096 [ 619.603666][ T4885] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 619.614413][ T4885] usb 2-1: config 179 has no interface number 0 [ 619.621093][ T4885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 619.645496][ T4885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 619.667129][T17047] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 47) do not match. Run ntfsfix or chkdsk. [ 619.689063][ T4885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 619.700435][T17047] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 619.719014][ T4885] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 619.737825][T17037] loop2: detected capacity change from 0 to 32768 [ 619.745945][ T4885] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 619.773501][T17047] ntfs: volume version 3.1. [ 619.779459][T17037] (syz.2.5622,17037,1):ocfs2_verify_volume:2360 ERROR: found superblock with bad version: found 0.2, should be 0.90 [ 619.792152][ T4885] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 619.801542][T17037] (syz.2.5622,17037,1):ocfs2_verify_volume:2388 ERROR: status = -22 [ 619.809884][ T4885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.818391][T17037] (syz.2.5622,17037,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 619.855017][T17041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 619.872226][T17037] (syz.2.5622,17037,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 619.877056][ T4885] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 619.946784][ T4885] xpad: probe of 2-1:179.65 failed with error -5 [ 620.143151][ T4885] usb 2-1: USB disconnect, device number 33 [ 620.495900][T17049] loop0: detected capacity change from 0 to 40427 [ 620.498678][ T4962] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 620.525995][T17049] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 620.564570][T17063] loop2: detected capacity change from 0 to 4096 [ 620.577761][T17049] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 620.596351][T17063] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 620.660608][T17049] F2FS-fs (loop0): SIT is corrupted data# 5 7 vs 11 [ 620.670763][T17049] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 620.715588][ T4962] usb 4-1: config 0 has an invalid interface number: 118 but max is 0 [ 620.732374][ T4962] usb 4-1: config 0 has no interface number 0 [ 620.762867][ T4962] usb 4-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=72.c5 [ 620.831732][ T4962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.860565][ T4962] usb 4-1: Product: syz [ 620.864776][ T4962] usb 4-1: Manufacturer: syz [ 620.869384][ T4962] usb 4-1: SerialNumber: syz [ 620.895312][T17067] loop4: detected capacity change from 0 to 8192 [ 620.915066][T17076] loop0: detected capacity change from 0 to 64 [ 620.921800][ T4962] usb 4-1: config 0 descriptor?? [ 621.006690][T17076] MINIX-fs: bad superblock or unable to read bitmaps [ 621.062786][T17074] loop1: detected capacity change from 0 to 4096 [ 621.144090][ T4962] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 621.166926][ T4962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 621.211199][ T4962] dib0700: firmware download failed at 7 with -22 [ 621.255443][ T4962] usb 4-1: USB disconnect, device number 27 [ 621.582867][ T4997] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 621.834221][ T1043] block nbd3: Attempted send on invalid socket [ 621.840792][ T1043] I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 621.850506][T17095] VFS: unable to read V7 FS superblock on device nbd3. [ 621.906651][ T4909] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 621.934680][T17095] VFS: could not find a valid V7 on nbd3. [ 622.096810][ T4909] usb 5-1: Using ep0 maxpacket: 16 [ 622.103596][ T4909] usb 5-1: config 184 has an invalid interface number: 240 but max is 0 [ 622.122296][ T4909] usb 5-1: config 184 has no interface number 0 [ 622.132102][ T4909] usb 5-1: config 184 interface 240 altsetting 6 bulk endpoint 0x84 has invalid maxpacket 8 [ 622.162805][ T4909] usb 5-1: config 184 interface 240 has no altsetting 0 [ 622.182088][ T4909] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=cf.e7 [ 622.219841][T17079] loop2: detected capacity change from 0 to 32768 [ 622.229776][ T4909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.238453][ T4909] usb 5-1: Product: syz [ 622.253159][ T4909] usb 5-1: Manufacturer: syz [ 622.257780][ T4909] usb 5-1: SerialNumber: syz [ 622.307833][T17091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.324122][T17079] JBD2: Invalid start block of journal: 0 [ 622.353502][ T4962] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 622.367541][T17079] (syz.2.5643,17079,1):ocfs2_journal_addressable:1992 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 622.367574][T17079] (syz.2.5643,17079,1):ocfs2_check_volume:2489 ERROR: status = -27 [ 622.392396][T17079] (syz.2.5643,17079,1):ocfs2_mount_volume:1821 ERROR: status = -27 [ 622.424318][T17079] (syz.2.5643,17079,1):ocfs2_fill_super:1176 ERROR: status = -27 [ 622.475627][T17113] loop3: detected capacity change from 0 to 128 [ 622.509042][T17113] FAT-fs (loop3): bogus sectors per cluster 0 [ 622.517781][T17113] FAT-fs (loop3): Can't find a valid FAT filesystem [ 622.530683][ T4909] kvaser_usb 5-1:184.240: Cannot get usb endpoint(s) [ 622.572208][ T4962] usb 2-1: Using ep0 maxpacket: 8 [ 622.587456][ T4962] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 622.601162][ T4909] usb 5-1: USB disconnect, device number 2 [ 622.641300][ T4962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.673161][ T4962] usb 2-1: Product: syz [ 622.677470][ T4962] usb 2-1: Manufacturer: syz [ 622.705248][ T4962] usb 2-1: SerialNumber: syz [ 622.737363][ T4962] usb 2-1: config 0 descriptor?? [ 622.763201][ T4962] (null): radio-mr800 - initialization failed [ 622.784524][ T4962] radio-mr800: probe of 2-1:0.0 failed with error -22 [ 622.814799][ T4962] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 622.948354][ T4962] usb 2-1: USB disconnect, device number 34 [ 623.295165][ T4909] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 623.346390][T17138] loop3: detected capacity change from 0 to 128 [ 623.354915][T17118] loop2: detected capacity change from 0 to 32768 [ 623.374618][T17118] jfs_mount: Mount Failure: superblock is corrupt! [ 623.383621][T17138] affs: No valid root block on device loop3 [ 623.383758][T17118] Mount JFS Failure: -22 [ 623.489313][ T4909] usb 1-1: Using ep0 maxpacket: 8 [ 623.501364][ T4909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 623.541676][ T4909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.570363][ T4909] usb 1-1: Product: syz [ 623.579740][ T4909] usb 1-1: Manufacturer: syz [ 623.596229][ T4909] usb 1-1: SerialNumber: syz [ 623.614123][ T8531] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 623.631375][ T4909] usb 1-1: config 0 descriptor?? [ 623.808762][ T8531] usb 5-1: Using ep0 maxpacket: 16 [ 623.816949][ T8531] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.838242][ T8531] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 623.853802][ T4909] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 623.861184][ T8531] usb 5-1: config 1 has no interface number 1 [ 623.872717][ T4909] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 623.880280][ T8531] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 623.896690][ T4909] usb 1-1: USB disconnect, device number 29 [ 623.903292][ T8531] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 623.920469][ T8531] usb 5-1: config 1 interface 2 has no altsetting 0 [ 623.940384][ T8531] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.950150][ T8531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.958946][ T8531] usb 5-1: Product: syz [ 623.968022][ T8531] usb 5-1: Manufacturer: syz [ 623.972959][ T8531] usb 5-1: SerialNumber: syz [ 623.989578][ T4885] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 623.999312][ T4962] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 624.033484][T17146] loop2: detected capacity change from 0 to 32768 [ 624.063575][T17146] JBD2: Ignoring recovery information on journal [ 624.093093][T17146] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 624.103385][T17146] (syz.2.5676,17146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x9b155e95, computed 0xe39bcacc. Applying ECC. [ 624.117770][T17146] (syz.2.5676,17146,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x9b155e95, computed 0xe39bcacc [ 624.132231][T17146] (syz.2.5676,17146,1):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 624.146939][T17146] (syz.2.5676,17146,1):ocfs2_read_quota_block:150 ERROR: status = -5 [ 624.155782][T17146] (syz.2.5676,17146,1):ocfs2_local_check_quota_file:209 ERROR: status = -5 [ 624.166084][T17146] (syz.2.5676,17146,1):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=0) [ 624.178240][T17146] (syz.2.5676,17146,1):ocfs2_enable_quotas:939 ERROR: status = -22 [ 624.186476][ T4962] usb 2-1: Using ep0 maxpacket: 16 [ 624.192686][T17146] (syz.2.5676,17146,1):ocfs2_fill_super:1143 ERROR: status = -22 [ 624.202517][ T4885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 624.209425][ T8531] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 624.211960][ T4962] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 624.232195][ T4962] usb 2-1: config 0 has no interface number 0 [ 624.239434][ T4885] usb 4-1: not running at top speed; connect to a high speed hub [ 624.248830][ T4962] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 624.251054][T17146] ocfs2: Unmounting device (7,2) on (node local) [ 624.258548][ T4885] usb 4-1: config 1 has an invalid interface number: 65 but max is 0 [ 624.270023][ T8531] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 624.280161][ T4962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 624.294376][ T4885] usb 4-1: config 1 has no interface number 0 [ 624.294599][ T8531] usb 5-1: selecting invalid altsetting 0 [ 624.310525][ T4962] usb 2-1: SerialNumber: syz [ 624.312298][ T8531] usb 5-1: selecting invalid altsetting 0 [ 624.316222][ T4885] usb 4-1: config 1 interface 65 has no altsetting 0 [ 624.345643][ T4962] usb 2-1: config 0 descriptor?? [ 624.375712][ T4885] usb 4-1: New USB device found, idVendor=62f6, idProduct=17bf, bcdDevice=10.d3 [ 624.395110][ T4885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.404298][ T8531] usb 5-1: USB disconnect, device number 3 [ 624.423051][ T4885] usb 4-1: Product: syz [ 624.446888][ T4885] usb 4-1: Manufacturer: syz [ 624.471837][ T4885] usb 4-1: SerialNumber: syz [ 624.560334][ T4965] usb 2-1: USB disconnect, device number 35 [ 624.694044][ T4885] usbtmc 4-1:1.65: bulk endpoints not found [ 624.735819][ T4885] usb 4-1: USB disconnect, device number 28 [ 624.961304][T17166] loop4: detected capacity change from 0 to 4096 [ 624.969035][T17166] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 624.983852][T17166] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 624.995184][T17166] ntfs3: loop4: volume is dirty and "force" flag is not set! [ 625.017467][ T4962] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 625.083834][ T8531] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 625.198051][ T4962] usb 3-1: Using ep0 maxpacket: 32 [ 625.210798][ T4962] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 625.240527][ T4962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.274977][ T4962] usb 3-1: config 0 descriptor?? [ 625.288371][ T8531] usb 1-1: Using ep0 maxpacket: 32 [ 625.297869][ T4962] gspca_main: sunplus-2.14.0 probing 041e:400b [ 625.305231][ T8531] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 625.305257][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.324155][ T8531] usb 1-1: config 0 descriptor?? [ 625.349823][ T8531] as10x_usb: device has been detected [ 625.362047][T17174] Process accounting resumed [ 625.369601][ T8531] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 625.417228][ T8531] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 625.443052][ T8531] as10x_usb: error during firmware upload part1 [ 625.469918][ T8531] Registered device nBox DVB-T Dongle [ 625.484295][ T4962] gspca_sunplus: reg_w_riv err -71 [ 625.505937][T17182] loop4: detected capacity change from 0 to 2048 [ 625.541653][T17182] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 625.544448][ T4962] sunplus: probe of 3-1:0.0 failed with error -71 [ 625.572732][ T7108] usb 1-1: USB disconnect, device number 30 [ 625.609935][ T4962] usb 3-1: USB disconnect, device number 30 [ 625.627008][ T7108] Unregistered device nBox DVB-T Dongle [ 625.631610][ T7108] as10x_usb: device has been disconnected [ 626.095238][T17206] loop1: detected capacity change from 0 to 128 [ 626.175683][ T5512] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 626.232990][T17204] loop4: detected capacity change from 0 to 4096 [ 626.261511][T17212] loop0: detected capacity change from 0 to 128 [ 626.292592][T17204] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 626.310471][T17208] loop2: detected capacity change from 0 to 4096 [ 626.345163][T17208] ntfs: (device loop2): parse_options(): The mft_zone_multiplier option requires an argument. [ 626.369807][T17212] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. [ 626.834901][ T4962] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 626.882246][ T7108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 626.951006][ T4965] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 627.019047][ T4962] usb 4-1: Using ep0 maxpacket: 16 [ 627.039402][ T4962] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 627.061715][ T4962] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 627.070681][ T4962] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 627.072574][ T7108] usb 5-1: Using ep0 maxpacket: 16 [ 627.080916][ T4962] usb 4-1: config 0 has no interface number 0 [ 627.102824][ T7108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.109727][ T4962] usb 4-1: config 0 interface 104 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0 [ 627.122453][ T7108] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 627.127519][ T4962] usb 4-1: config 0 interface 104 has no altsetting 1 [ 627.137383][ T7108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.138726][ T4965] usb 3-1: Using ep0 maxpacket: 16 [ 627.156241][ T4965] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 627.162122][ T8531] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 627.167924][ T4962] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 627.177887][ T7108] usb 5-1: Product: syz [ 627.185640][ T7108] usb 5-1: Manufacturer: syz [ 627.186857][ T4965] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.195100][ T7108] usb 5-1: SerialNumber: syz [ 627.205879][ T4962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.218960][ T4965] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 627.221204][ T7108] usb 5-1: config 0 descriptor?? [ 627.235466][ T4962] usb 4-1: Product: syz [ 627.236146][ T7108] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 627.253417][ T4962] usb 4-1: Manufacturer: syz [ 627.260212][ T4962] usb 4-1: SerialNumber: syz [ 627.260849][ T7108] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 627.265005][ T4965] usb 3-1: config 1 interface 0 has no altsetting 0 [ 627.302351][ T4997] Bluetooth: hci0: unexpected event for opcode 0x202a [ 627.309713][ T4962] usb 4-1: config 0 descriptor?? [ 627.316460][ T4965] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.327125][ T4965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.337331][ T4965] usb 3-1: Product: syz [ 627.342296][ T4965] usb 3-1: Manufacturer: syz [ 627.347054][ T4965] usb 3-1: SerialNumber: syz [ 627.377710][ T8531] usb 2-1: Using ep0 maxpacket: 16 [ 627.384888][ T8531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 627.394905][ T8531] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 627.405164][ T8531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 627.416137][ T8531] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 627.437801][ T8531] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 627.464811][ T8531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.491656][ T8531] usb 2-1: Product: syz [ 627.495904][ T8531] usb 2-1: Manufacturer: syz [ 627.500501][ T8531] usb 2-1: SerialNumber: syz [ 627.507482][ T8531] usb 2-1: config 0 descriptor?? [ 627.515886][ T8531] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 627.521752][ T4885] usb 5-1: USB disconnect, device number 4 [ 627.530234][ T8531] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 627.532159][ T4962] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 627.560815][ T4965] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 627.579176][ T4962] asix: probe of 4-1:0.104 failed with error -71 [ 627.591290][ T4965] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 627.610963][ T4962] usb 4-1: USB disconnect, device number 29 [ 627.625574][ T4965] usb 3-1: USB disconnect, device number 31 [ 627.715658][ T6737] usb 2-1: USB disconnect, device number 36 [ 627.725064][ T6737] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 627.735510][ T6737] iuu_phoenix 2-1:0.0: device disconnected [ 627.777353][ T4967] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 627.844461][ T5512] udevd[5512]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.957833][ T4967] usb 1-1: Using ep0 maxpacket: 16 [ 627.964710][ T4967] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.975823][ T4967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 627.984189][ T4967] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 627.993410][ T4967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.001453][ T4967] usb 1-1: Product: syz [ 628.005813][ T4967] usb 1-1: Manufacturer: syz [ 628.010419][ T4967] usb 1-1: SerialNumber: syz [ 628.017399][ T4967] usb 1-1: config 0 descriptor?? [ 628.241833][ T4967] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input53 [ 628.315028][ T4967] imon:send_packet: packet tx failed (-71) [ 628.357826][ T4967] imon 1-1:0.0: panel buttons/knobs setup failed [ 628.358292][ T8531] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 628.485551][T17265] loop3: detected capacity change from 0 to 2048 [ 628.521892][T17265] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4096, location=4096 [ 628.541791][T17265] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 628.569655][ T8531] usb 5-1: Using ep0 maxpacket: 8 [ 628.571666][T17265] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 628.579466][ T8531] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.595125][ T4967] rc_core: IR keymap rc-imon-pad not found [ 628.601039][ T4967] Registered IR keymap rc-empty [ 628.623741][T17265] UDF-fs: Scanning with blocksize 512 failed [ 628.627470][ T8531] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 628.642558][ T4967] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 628.671813][ T4967] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 628.689445][T17265] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 628.702907][ T8531] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 628.719119][T17265] UDF-fs: Scanning with blocksize 1024 failed [ 628.729724][ T4967] imon:send_packet: packet tx failed (-71) [ 628.733482][ T8531] usb 5-1: config 8 interface 0 has no altsetting 0 [ 628.744456][T17269] loop1: detected capacity change from 0 to 64 [ 628.761368][T17265] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 628.771488][ T4967] imon 1-1:0.0: remote input dev register failed [ 628.773139][ T8531] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 628.779245][ T4967] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 628.808701][T17265] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 628.843621][T17269] MINIX-fs: bad superblock or unable to read bitmaps [ 628.858390][ T8531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.858982][T17265] UDF-fs: Scanning with blocksize 2048 failed [ 628.878649][ T4967] imon 1-1:0.0: unable to initialize intf0, err 0 [ 628.888046][ T8531] usb 5-1: Product: syz [ 628.899017][ T4967] imon:imon_probe: failed to initialize context! [ 628.910961][ T8531] usb 5-1: Manufacturer: syz [ 628.914201][ T4967] imon 1-1:0.0: unable to register, err -19 [ 628.921912][T17265] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 628.930375][ T8531] usb 5-1: SerialNumber: syz [ 628.966103][T17265] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 628.985704][ T4967] usb 1-1: USB disconnect, device number 31 [ 629.038851][T17265] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 629.047022][T17265] UDF-fs: Scanning with blocksize 4096 failed [ 629.062543][T17265] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 629.093669][T17271] loop0: detected capacity change from 0 to 4096 [ 629.128657][T17271] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 629.178027][ T8531] usb 5-1: selecting invalid altsetting 0 [ 629.278673][ T8531] usb 5-1: USB disconnect, device number 5 [ 629.519960][T17260] loop2: detected capacity change from 0 to 32768 [ 629.522902][T17275] loop1: detected capacity change from 0 to 4096 [ 629.538810][T17281] loop3: detected capacity change from 0 to 64 [ 629.552409][T17281] syz.3.5742: attempt to access beyond end of device [ 629.552409][T17281] loop3: rw=0, sector=1280, nr_sectors = 1 limit=64 [ 629.566721][T17281] Buffer I/O error on dev loop3, logical block 1280, async page read [ 629.576967][T17260] XFS (loop2): stripe width (1) must be a multiple of the stripe unit (64) [ 629.592407][ T4887] udevd[4887]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.601591][T17279] loop0: detected capacity change from 0 to 4096 [ 629.613855][T17281] syz.3.5742: attempt to access beyond end of device [ 629.613855][T17281] loop3: rw=0, sector=1281, nr_sectors = 1 limit=64 [ 629.628720][T17275] ntfs: (device loop1): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 629.647577][T17275] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 629.660814][T17275] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 629.670865][T17281] Buffer I/O error on dev loop3, logical block 1281, async page read [ 629.690281][T17279] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 629.705778][T17281] syz.3.5742: attempt to access beyond end of device [ 629.705778][T17281] loop3: rw=0, sector=1282, nr_sectors = 1 limit=64 [ 629.728758][T17279] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 629.742060][ T4902] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 629.743839][T17281] Buffer I/O error on dev loop3, logical block 1282, async page read [ 629.851963][T17281] syz.3.5742: attempt to access beyond end of device [ 629.851963][T17281] loop3: rw=0, sector=1283, nr_sectors = 1 limit=64 [ 629.919286][T17281] Buffer I/O error on dev loop3, logical block 1283, async page read [ 629.966697][T17281] hfs: unable to open extent tree [ 629.994460][T17281] hfs: can't find a HFS filesystem on dev loop3 [ 630.381101][T17297] loop1: detected capacity change from 0 to 512 [ 630.398705][T17297] EXT4-fs (loop1): bad geometry: block count 65664 exceeds size of device (128 blocks) [ 630.623214][ T4965] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 630.803559][ T4967] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 630.823952][ T4965] usb 3-1: config 4 has an invalid interface number: 247 but max is 0 [ 630.832295][ T4965] usb 3-1: config 4 has no interface number 0 [ 630.838388][ T4965] usb 3-1: config 4 interface 247 altsetting 119 has an invalid endpoint descriptor of length 2, skipping [ 630.850223][ T4965] usb 3-1: config 4 interface 247 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.864682][ T4965] usb 3-1: config 4 interface 247 has no altsetting 0 [ 630.870048][ T7108] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 630.876652][ T4965] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 630.888346][ T4965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.896447][ T4965] usb 3-1: Product: syz [ 630.901148][ T4965] usb 3-1: Manufacturer: syz [ 630.905846][ T4965] usb 3-1: SerialNumber: syz [ 630.921726][ T4965] comedi comedi5: Wrong number of endpoints [ 630.927816][ T4965] ni6501 3-1:4.247: driver 'ni6501' failed to auto-configure device. [ 630.965586][ T6737] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 630.974757][ T4967] usb 4-1: Using ep0 maxpacket: 32 [ 630.981139][ T4967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.991641][ T4967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.001755][ T4967] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.010821][ T4967] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 631.018959][ T4962] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 631.026547][ T4967] usb 4-1: Manufacturer: syz [ 631.031142][ T4967] usb 4-1: SerialNumber: syz [ 631.051388][ T7108] usb 2-1: Using ep0 maxpacket: 16 [ 631.057972][ T7108] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.069210][ T7108] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.079199][ T7108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 631.085879][ T7108] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 631.095093][ T7108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.105066][ T7108] usb 2-1: config 0 descriptor?? [ 631.133359][ T4965] usb 3-1: USB disconnect, device number 32 [ 631.156825][ T6737] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 631.165192][ T6737] usb 5-1: config 0 has no interface number 0 [ 631.171639][ T6737] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 631.183288][ T6737] usb 5-1: config 0 interface 113 has no altsetting 0 [ 631.191957][ T6737] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 631.201260][ T6737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.209312][ T6737] usb 5-1: Product: syz [ 631.213586][ T4962] usb 1-1: Using ep0 maxpacket: 16 [ 631.218759][ T6737] usb 5-1: Manufacturer: syz [ 631.225535][ T6737] usb 5-1: SerialNumber: syz [ 631.232205][ T4962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 631.243773][ T4967] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 631.253331][ T6737] usb 5-1: config 0 descriptor?? [ 631.264569][ T4962] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06 [ 631.275186][ T6737] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 631.284711][ T4962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.293953][ T4967] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 631.305167][ T4967] usb 4-1: USB disconnect, device number 30 [ 631.311190][ T4962] usb 1-1: Product: syz [ 631.315373][ T4962] usb 1-1: Manufacturer: syz [ 631.316654][ T7108] usb 2-1: USB disconnect, device number 37 [ 631.320950][ T4962] usb 1-1: SerialNumber: syz [ 631.364327][ T4962] usb 1-1: config 0 descriptor?? [ 631.371436][ T4962] HFC-S_USB: probe of 1-1:0.0 failed with error -5 [ 631.463282][ T4962] usb 5-1: USB disconnect, device number 6 [ 631.537193][ T5512] udevd[5512]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.565768][ T7108] usb 1-1: USB disconnect, device number 32 [ 632.116491][T17342] loop2: detected capacity change from 0 to 2 [ 632.149914][T17342] jffs2: rp_size unrepresentable [ 632.164802][T17339] loop4: detected capacity change from 0 to 1764 [ 632.204449][T17339] isofs_fill_super: get root inode failed [ 632.470793][T17354] loop4: detected capacity change from 0 to 1024 [ 632.491297][T17354] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 632.514010][T17354] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 632.518496][T17352] loop3: detected capacity change from 0 to 4096 [ 632.567189][ T4962] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 632.577587][T17352] ntfs: (device loop3): ntfs_read_inode_mount(): Corrupt attribute list attribute. [ 632.622172][T17352] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 632.631167][T17352] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata. [ 632.640864][ T4967] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 632.769726][ T4962] usb 2-1: Using ep0 maxpacket: 16 [ 632.785587][ T4962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 632.813131][ T4962] usb 2-1: config 6 has an invalid interface number: 202 but max is 0 [ 632.831336][ T4962] usb 2-1: config 6 has an invalid interface descriptor of length 2, skipping [ 632.848452][ T4967] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 632.854696][T17366] loop4: detected capacity change from 0 to 512 [ 632.872949][ T4967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 632.892612][ T4962] usb 2-1: config 6 has no interface number 0 [ 632.895370][T17366] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 9 [ 632.907708][ T4962] usb 2-1: config 6 interface 202 altsetting 244 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.923206][ T4967] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 632.947778][ T8532] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 632.955093][ T4967] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 632.963374][ T4967] usb 1-1: Manufacturer: syz [ 632.971431][ T4962] usb 2-1: config 6 interface 202 has no altsetting 0 [ 632.980470][ T4967] usb 1-1: config 0 descriptor?? [ 632.988857][ T4962] usb 2-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d4.1f [ 632.999501][ T4967] igorplugusb 1-1:0.0: endpoint incorrect [ 633.009877][ T4962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.019844][ T4962] usb 2-1: Product: syz [ 633.028973][ T4962] usb 2-1: Manufacturer: syz [ 633.033696][ T4962] usb 2-1: SerialNumber: syz [ 633.130305][ T8532] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 633.144639][ T8532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.159917][ T8532] usb 3-1: Product: syz [ 633.164101][ T8532] usb 3-1: Manufacturer: syz [ 633.169632][ T8532] usb 3-1: SerialNumber: syz [ 633.184345][ T8532] usb 3-1: config 0 descriptor?? [ 633.186095][ T4967] usb 1-1: USB disconnect, device number 33 [ 633.204440][ T8532] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 633.221078][ T7108] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 633.244904][ T4962] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 633.282046][ T4962] usb 2-1: USB disconnect, device number 38 [ 633.392703][ T7108] usb 4-1: Using ep0 maxpacket: 32 [ 633.408092][ T7108] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 633.417945][T17370] loop4: detected capacity change from 0 to 32768 [ 633.427799][ T7108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.435011][T17370] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.5786 (17370) [ 633.458886][ T7108] usb 4-1: Product: syz [ 633.472150][ T7108] usb 4-1: Manufacturer: syz [ 633.477074][ T7108] usb 4-1: SerialNumber: syz [ 633.495867][ T7108] usb 4-1: config 0 descriptor?? [ 633.515032][ T7108] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 633.536719][ T8532] usb 3-1: USB disconnect, device number 33 [ 633.550712][T17370] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 633.570741][T17370] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 633.588533][T17370] BTRFS info (device loop4): trying to use backup root at mount time [ 633.602274][T17370] BTRFS info (device loop4): disabling free space tree [ 633.609218][T17370] BTRFS info (device loop4): setting nodatacow, compression disabled [ 633.630722][T17370] BTRFS info (device loop4): enabling ssd optimizations [ 633.637744][T17370] BTRFS error (device loop4): cannot disable free space tree [ 633.661621][T17370] BTRFS error (device loop4): open_ctree failed: -22 [ 633.699656][ T7108] gspca_sn9c2028: read1 error -71 [ 633.726389][ T7108] gspca_sn9c2028: read1 error -71 [ 633.764143][ T7108] gspca_sn9c2028: read1 error -71 [ 633.769260][ T7108] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 633.806041][ T7108] usb 4-1: USB disconnect, device number 31 [ 634.135024][ T4967] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 634.230580][ T8532] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 634.253520][T17384] loop3: detected capacity change from 0 to 128 [ 634.261527][T17384] ufs: You didn't specify the type of your ufs filesystem [ 634.261527][T17384] [ 634.261527][T17384] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 634.261527][T17384] [ 634.261527][T17384] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 634.300394][T17384] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 634.320940][ T7108] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 634.337260][ T4967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.362766][ T4967] usb 1-1: not running at top speed; connect to a high speed hub [ 634.378349][ T4967] usb 1-1: config 5 has an invalid interface number: 208 but max is 0 [ 634.396683][ T4967] usb 1-1: config 5 has no interface number 0 [ 634.411406][ T4967] usb 1-1: config 5 interface 208 has no altsetting 0 [ 634.421636][ T8532] usb 3-1: Using ep0 maxpacket: 16 [ 634.428403][ T8532] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 634.430670][ T4967] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=2d.b9 [ 634.454863][ T8532] usb 3-1: config 0 has no interface number 0 [ 634.459901][ T4967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.471883][ T8532] usb 3-1: config 0 interface 41 has no altsetting 0 [ 634.477997][ T4967] usb 1-1: Product: syz [ 634.487339][ T4967] usb 1-1: Manufacturer: syz [ 634.492218][ T8532] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 634.497024][ T4967] usb 1-1: SerialNumber: syz [ 634.509342][ T7108] usb 2-1: Using ep0 maxpacket: 16 [ 634.519078][ T7108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.542045][ T8532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.562277][ T7108] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 634.577132][ T8532] usb 3-1: Product: syz [ 634.581325][ T8532] usb 3-1: Manufacturer: syz [ 634.586151][ T7108] usb 2-1: config 1 has no interface number 1 [ 634.598391][ T8532] usb 3-1: SerialNumber: syz [ 634.603944][ T7108] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 634.625558][ T8532] usb 3-1: config 0 descriptor?? [ 634.636414][ T7108] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 634.647737][ T7108] usb 2-1: config 1 interface 2 has no altsetting 0 [ 634.649330][ T8532] CoreChips: probe of 3-1:0.41 failed with error -22 [ 634.660870][T17386] loop3: detected capacity change from 0 to 8192 [ 634.672867][ T7108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.682950][ T7108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.695589][ T7108] usb 2-1: Product: syz [ 634.699972][ T7108] usb 2-1: Manufacturer: syz [ 634.704722][ T7108] usb 2-1: SerialNumber: syz [ 634.709840][T17386] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 634.738679][ T4967] usb 1-1: USB disconnect, device number 34 [ 634.776668][T17377] loop4: detected capacity change from 0 to 65536 [ 634.781102][T17386] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 634.802897][T17386] REISERFS (device loop3): using ordered data mode [ 634.818483][T17386] reiserfs: using flush barriers [ 634.831372][T17386] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 634.848520][T17377] XFS (loop4): Mounting V5 Filesystem [ 634.854912][T17386] REISERFS (device loop3): checking transaction log (loop3) [ 634.872306][T17386] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 634.898619][ T8532] usb 3-1: USB disconnect, device number 34 [ 634.913367][ T7108] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 634.936799][ T7108] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 634.945895][ T7108] usb 2-1: selecting invalid altsetting 0 [ 634.952062][ T7108] usb 2-1: selecting invalid altsetting 0 [ 634.972222][T17377] XFS (loop4): Ending clean mount [ 634.999100][ T7108] usb 2-1: USB disconnect, device number 39 [ 635.113119][ T4993] XFS (loop4): Unmounting Filesystem [ 635.796389][T17417] loop0: detected capacity change from 0 to 256 [ 635.808971][T17417] exfat: Deprecated parameter 'utf8' [ 635.815080][T17417] exfat: Deprecated parameter 'namecase' [ 635.827418][T17417] exfat: Deprecated parameter 'namecase' [ 635.829753][ T8532] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 635.842127][T17417] exfat: Deprecated parameter 'utf8' [ 635.855395][T17417] exFAT-fs (loop0): invalid fs_name [ 635.861264][T17417] exFAT-fs (loop0): failed to read boot sector [ 635.867430][T17417] exFAT-fs (loop0): failed to recognize exfat type [ 635.892854][T17416] loop4: detected capacity change from 0 to 8192 [ 635.925042][ T4962] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 635.951793][T17416] loop4: p1 < > p2 p3 < > p4 < p5 > [ 635.973592][T17416] loop4: partition table partially beyond EOD, truncated [ 635.980861][T17416] loop4: p1 start 30976 is beyond EOD, truncated [ 635.996714][T17416] loop4: p2 size 16128 extends beyond EOD, truncated [ 636.011893][T17416] loop4: p3 start 327168 is beyond EOD, truncated [ 636.019870][ T4967] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 636.024279][ T8532] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 636.028683][T17416] loop4: p5 size 16128 extends beyond EOD, truncated [ 636.055215][ T8532] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 636.095844][ T8532] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 636.105388][ T8532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.106299][T17419] loop0: detected capacity change from 0 to 4096 [ 636.150279][T17419] ntfs: (device loop0): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 636.150448][T17405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 636.172723][ T4962] usb 2-1: Using ep0 maxpacket: 8 [ 636.185523][ T4962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.220275][ T4967] usb 3-1: Using ep0 maxpacket: 16 [ 636.234138][ T4967] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 636.250526][T17419] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 636.265911][ T4962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 636.284398][T17419] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 636.293592][ T4967] usb 3-1: config 252 has no interface number 0 [ 636.301200][ T4962] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.334771][ T4967] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 636.346247][ T4962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.363718][ T4967] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 636.383146][ T4962] usb 2-1: config 0 descriptor?? [ 636.396552][ T4902] udevd[4902]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 636.397391][ T8274] udevd[8274]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 636.420031][ T5512] udevd[5512]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 636.429832][ T4967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.437833][ T4967] usb 3-1: Product: syz [ 636.450723][ T4967] usb 3-1: Manufacturer: syz [ 636.455042][ T8532] usb 4-1: USB disconnect, device number 32 [ 636.455342][ T4967] usb 3-1: SerialNumber: syz [ 636.566408][ T4967] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 636.586077][ T4962] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 636.611306][ T4962] usb 2-1: USB disconnect, device number 40 [ 636.750522][ T46] usb 3-1: Failed to submit usb control message: -71 [ 636.750653][ T4964] usb 3-1: USB disconnect, device number 35 [ 636.763839][ T46] usb 3-1: unable to send the bmi data to the device: -71 [ 636.771133][ T46] usb 3-1: unable to get target info from device [ 636.780063][ T46] usb 3-1: could not get target info (-71) [ 636.786051][ T46] usb 3-1: could not probe fw (-71) [ 636.972301][ T4970] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 636.979987][ T4967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 637.171875][ T4970] usb 1-1: Using ep0 maxpacket: 16 [ 637.177149][ T4967] usb 5-1: Using ep0 maxpacket: 16 [ 637.187424][ T4967] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 637.196220][ T4970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.206534][ T4967] usb 5-1: config 0 has no interface number 0 [ 637.212870][ T4970] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 637.222196][ T4970] usb 1-1: config 1 has no interface number 1 [ 637.228508][ T4970] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 637.238851][ T4970] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 637.258132][ T4970] usb 1-1: config 1 interface 2 has no altsetting 0 [ 637.265243][ T4967] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 637.287846][ T4967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.304632][ T4967] usb 5-1: Product: syz [ 637.310979][ T4970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.324188][ T4967] usb 5-1: Manufacturer: syz [ 637.328836][ T4967] usb 5-1: SerialNumber: syz [ 637.333605][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.341603][ T4970] usb 1-1: Product: syz [ 637.360628][ T4967] usb 5-1: config 0 descriptor?? [ 637.375688][ T4970] usb 1-1: Manufacturer: syz [ 637.385567][ T4970] usb 1-1: SerialNumber: syz [ 637.396554][ T4967] usb 5-1: bad CDC descriptors [ 637.409374][ T4967] usb 5-1: bad CDC descriptors [ 637.585092][ T4965] usb 5-1: USB disconnect, device number 7 [ 637.591328][ T4967] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 637.613444][ T4970] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 637.628733][ T4970] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 637.637206][ T4970] usb 1-1: selecting invalid altsetting 0 [ 637.649046][ T4970] usb 1-1: selecting invalid altsetting 0 [ 637.672627][ T4970] usb 1-1: USB disconnect, device number 35 [ 637.743154][ T8532] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 637.765126][T17449] loop2: detected capacity change from 0 to 32768 [ 637.803008][ T4967] usb 4-1: unable to get BOS descriptor or descriptor too short [ 637.812220][ T4967] usb 4-1: not running at top speed; connect to a high speed hub [ 637.821234][ T4967] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 637.829520][ T4967] usb 4-1: config 0 has no interface number 0 [ 637.835796][ T4967] usb 4-1: config 0 interface 102 has no altsetting 0 [ 637.843661][ T5512] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 637.855457][ T4967] usb 4-1: New USB device found, idVendor=0908, idProduct=01ff, bcdDevice=c0.c8 [ 637.882079][ T4967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.910376][ T4967] usb 4-1: Product: syz [ 637.915482][ T4967] usb 4-1: Manufacturer: syz [ 637.920094][ T4967] usb 4-1: SerialNumber: syz [ 637.924021][ T8532] usb 2-1: Using ep0 maxpacket: 32 [ 637.932474][ T8532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 637.937808][ T4967] usb 4-1: config 0 descriptor?? [ 637.954489][ T8274] udevd[8274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.983763][ T8532] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 637.997975][ T8532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.006942][ T8532] usb 2-1: Product: syz [ 638.014273][ T8532] usb 2-1: Manufacturer: syz [ 638.026098][ T8532] usb 2-1: SerialNumber: syz [ 638.033871][ T8532] usb 2-1: config 0 descriptor?? [ 638.051995][ T8532] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 638.105686][ T8532] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 638.157683][ T8532] usbtouchscreen: probe of 2-1:0.0 failed with error -8 [ 638.158835][ T4967] hub 4-1:0.102: bad descriptor, ignoring hub [ 638.188003][ T4967] hub: probe of 4-1:0.102 failed with error -5 [ 638.219916][ T4967] cp210x 4-1:0.102: cp210x converter detected [ 638.253182][ T8532] usb 2-1: USB disconnect, device number 41 [ 638.262473][ T4967] cp210x 4-1:0.102: failed to get vendor val 0x370b size 1: -71 [ 638.290086][ T4967] cp210x 4-1:0.102: querying part number failed [ 638.310924][ T4967] usb 4-1: cp210x converter now attached to ttyUSB0 [ 638.356455][ T4967] usb 4-1: USB disconnect, device number 33 [ 638.380734][ T4967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 638.398251][ T4967] cp210x 4-1:0.102: device disconnected [ 638.581141][ T4970] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 638.742946][ T8531] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 638.754357][ T4970] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 638.786487][ T4970] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 638.822869][ T4970] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 638.833843][ T4970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.961799][ T8531] usb 5-1: Using ep0 maxpacket: 8 [ 638.968441][ T8531] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 639.005663][ T8531] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 639.010677][T17487] loop3: detected capacity change from 0 to 8 [ 639.036650][ T8531] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 639.058127][ T8531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.061319][ T4970] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 639.104935][ T4970] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input56 [ 639.115183][T17487] SQUASHFS error: xz decompression failed, data probably corrupt [ 639.122945][T17487] SQUASHFS error: Failed to read block 0x108: -5 [ 639.146511][T17487] SQUASHFS error: Unable to read metadata cache entry [106] [ 639.154745][ T4970] input: failed to attach handler kbd to device input56, error: -5 [ 639.171714][T17487] SQUASHFS error: Unable to read inode 0x11f [ 639.203603][ T4970] usb 1-1: USB disconnect, device number 36 [ 639.243558][T17491] loop1: detected capacity change from 0 to 1024 [ 639.251973][T17491] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 639.265423][T17491] hfsplus: invalid catalog btree flag [ 639.279077][T17491] hfsplus: failed to load catalog file [ 639.302134][ T8531] usb 5-1: string descriptor 0 read error: -71 [ 639.328822][ T8531] hub 5-1:32.0: USB hub found [ 639.354328][ T8531] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 639.441284][ T8531] usb 5-1: USB disconnect, device number 8 [ 639.551751][T17495] loop3: detected capacity change from 0 to 2048 [ 639.567816][T17495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.687431][ T6303] udevd[6303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.802272][T17501] dccp_invalid_packet: pskb_may_pull failed [ 639.852862][T17497] loop1: detected capacity change from 0 to 4096 [ 639.890985][T17485] loop2: detected capacity change from 0 to 32768 [ 639.890999][T17497] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 639.984002][T17499] loop3: detected capacity change from 0 to 8192 [ 640.047409][T17499] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 640.060666][T17499] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 640.069976][T17499] REISERFS (device loop3): using ordered data mode [ 640.076658][T17499] reiserfs: using flush barriers [ 640.084857][T17499] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 640.096486][T17497] ntfs3: loop1: Failed to load $Secure. [ 640.103563][T17499] REISERFS (device loop3): checking transaction log (loop3) [ 640.214503][T17499] REISERFS (device loop3): Using rupasov hash to sort names [ 640.234338][T17499] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 640.409089][ T4970] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 640.424956][ T4967] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 640.427786][ T8531] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 640.606805][ T4909] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 640.618305][ T8531] usb 5-1: Using ep0 maxpacket: 32 [ 640.620486][ T4967] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 640.628967][ T8531] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.632697][ T4970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 640.646351][ T8531] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 640.651775][T17516] loop3: detected capacity change from 0 to 4096 [ 640.664180][ T8531] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.665682][ T4967] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 640.687995][ T4967] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 640.704076][ T8531] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.712899][ T4970] usb 1-1: not running at top speed; connect to a high speed hub [ 640.717402][T17516] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 640.727980][ T4970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 640.729752][ T8531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.741367][ T4967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.750060][T17516] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 640.770249][ T4970] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 640.771100][ T8531] usb 5-1: Product: syz [ 640.785276][ T4970] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 640.791817][T17516] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 640.803711][ T4967] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 640.813592][ T4909] usb 2-1: Using ep0 maxpacket: 32 [ 640.819512][ T8531] usb 5-1: Manufacturer: syz [ 640.824525][ T8531] usb 5-1: SerialNumber: syz [ 640.831723][ T4909] usb 2-1: unable to get BOS descriptor or descriptor too short [ 640.838443][T17516] ntfs: volume version 3.1. [ 640.852709][ T4970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.853460][ T4909] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 640.871000][ T8531] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 640.874005][T17516] ntfs: (device loop3): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 640.880495][ T8531] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 640.891289][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.898091][ T4909] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 640.902890][T17516] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 640.914368][ T8531] cdc_ncm 5-1:1.0: bind() failure [ 640.929483][ T4970] usb 1-1: Product: syz [ 640.934175][ T4970] usb 1-1: Manufacturer: syz [ 640.938812][ T4970] usb 1-1: SerialNumber: syz [ 640.942210][ T4909] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 640.944105][T17516] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 640.968884][T17506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 640.976805][T17516] ntfs: (device loop3): load_system_files(): Failed to load $Secure. [ 640.987903][ T4909] usb 2-1: config 128 has no interface number 0 [ 641.001685][ T4967] gspca_sn9c2028: read1 error -71 [ 641.007057][T17516] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 641.007326][ T4909] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 641.016525][ T4967] gspca_sn9c2028: read1 error -71 [ 641.055965][ T4967] gspca_sn9c2028: read1 error -71 [ 641.061669][ T4967] sn9c2028: probe of 3-1:220.0 failed with error -71 [ 641.090104][ T4909] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.100641][ T4967] usb 3-1: USB disconnect, device number 36 [ 641.137338][ T4909] usb 2-1: config 128 interface 127 has no altsetting 0 [ 641.173132][ T4909] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 641.191085][ T4970] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 641.198018][ T4970] cdc_ncm 1-1:1.0: bind() failure [ 641.213831][ T4970] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 641.215523][ T4909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.228820][ T4970] cdc_ncm 1-1:1.1: bind() failure [ 641.239903][ T4970] usb 1-1: USB disconnect, device number 37 [ 641.262087][ T4909] usb 2-1: Product: syz [ 641.273239][ T4909] usb 2-1: Manufacturer: syz [ 641.290231][T17518] loop3: detected capacity change from 0 to 1024 [ 641.300460][ T4909] usb 2-1: SerialNumber: syz [ 641.308056][T17518] hfsplus: invalid uid specified [ 641.313008][T17518] hfsplus: unable to parse mount options [ 641.320147][ T8531] usb 5-1: USB disconnect, device number 9 [ 641.547235][ T4909] usb 2-1: USB disconnect, device number 42 [ 641.592139][T17522] loop2: detected capacity change from 0 to 8 [ 641.608601][T17522] SQUASHFS error: zlib decompression failed, data probably corrupt [ 641.622738][T17522] SQUASHFS error: Failed to read block 0x9b: -5 [ 641.633485][T17522] SQUASHFS error: Unable to read metadata cache entry [99] [ 641.644439][T17522] SQUASHFS error: Unable to read inode 0x127 [ 641.650680][ T4965] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 641.771139][ T5512] udevd[5512]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.855850][ T4965] usb 4-1: Using ep0 maxpacket: 16 [ 641.863787][ T4965] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 641.897623][T17526] loop0: detected capacity change from 0 to 8 [ 641.903980][ T4965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.939762][ T4965] usb 4-1: config 0 descriptor?? [ 641.961945][ T4965] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 641.974819][T17526] unable to read fragment index table [ 642.110930][T17528] loop4: detected capacity change from 0 to 4096 [ 642.152924][T17534] loop1: detected capacity change from 0 to 128 [ 642.155630][ T4965] usb 4-1: Detected FT232A [ 642.171029][T17528] ntfs3: loop4: Failed to load $MFT. [ 642.187541][ T4965] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 642.229055][ T4965] usb 4-1: USB disconnect, device number 34 [ 642.262126][ T4965] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 642.311516][ T4965] ftdi_sio 4-1:0.0: device disconnected [ 642.351053][ T4909] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 642.358515][T17538] Invalid ELF header type: 3 != 1 [ 642.541562][ T4909] usb 3-1: Using ep0 maxpacket: 8 [ 642.552952][ T4909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.586696][ T4909] usb 3-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.ab [ 642.587545][T17548] loop0: detected capacity change from 0 to 128 [ 642.626367][ T4909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.628941][T17548] VFS: could not find a valid V7 on loop0. [ 642.647475][ T4909] usb 3-1: Product: syz [ 642.675420][ T4909] usb 3-1: Manufacturer: syz [ 642.680046][ T4909] usb 3-1: SerialNumber: syz [ 642.720103][ T4909] usb 3-1: config 0 descriptor?? [ 642.764463][ T4909] usb 3-1: bad CDC descriptors [ 642.775789][ T4909] usb 3-1: bad CDC descriptors [ 642.781986][ T4909] option 3-1:0.0: GSM modem (1-port) converter detected [ 642.788820][ T4970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 642.939213][T17550] loop1: detected capacity change from 0 to 8192 [ 642.956457][ T4909] usb 3-1: USB disconnect, device number 37 [ 642.965309][ T4909] option 3-1:0.0: device disconnected [ 642.990751][ T4970] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 643.020233][ T4970] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 643.036364][ T4970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.064759][ T4965] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 643.075234][ T4970] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 643.262108][ T4909] usb 5-1: USB disconnect, device number 10 [ 643.267572][T17569] loop3: detected capacity change from 0 to 128 [ 643.293612][ T4965] usb 1-1: Using ep0 maxpacket: 8 [ 643.300322][ T4965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.311724][ T5999] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.320792][ T4965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.341556][ T4965] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.363352][ T4965] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 643.372783][ T4965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.385589][ T4965] hub 1-1:1.0: bad descriptor, ignoring hub [ 643.392578][ T4965] hub: probe of 1-1:1.0 failed with error -5 [ 643.399147][ T4965] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 643.417104][ T4970] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 643.598303][ T4970] usb 2-1: Using ep0 maxpacket: 32 [ 643.605080][ T4970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.615294][ T4970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.624604][ T4970] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.639192][ T4970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.648527][ T4970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.656554][ T4970] usb 2-1: Product: syz [ 643.660719][ T4970] usb 2-1: Manufacturer: syz [ 643.665375][ T4970] usb 2-1: SerialNumber: syz [ 643.672565][ T4970] cdc_ncm 2-1:1.0: skipping garbage [ 643.677831][ T4970] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 643.684738][ T4970] cdc_ncm 2-1:1.0: bind() failure [ 643.702914][ T4909] usb 1-1: USB disconnect, device number 38 [ 643.908375][T17577] loop2: detected capacity change from 0 to 512 [ 643.915737][ T4909] usb 2-1: USB disconnect, device number 43 [ 643.924021][T17577] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.935305][T17577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 643.977813][T17577] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.5880: bad orphan inode 16 [ 643.994631][T17575] loop4: detected capacity change from 0 to 8192 [ 644.016292][T17577] ext4_test_bit(bit=15, block=4) = 0 [ 644.017723][T17575] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 644.021874][T17577] EXT4-fs (loop2): 1 orphan inode deleted [ 644.041544][T17577] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 644.070770][T17575] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 644.093538][T17575] REISERFS (device loop4): using ordered data mode [ 644.110057][T17575] reiserfs: using flush barriers [ 644.139447][T17575] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 644.176583][T17575] REISERFS (device loop4): checking transaction log (loop4) [ 644.205839][ T4995] EXT4-fs (loop2): unmounting filesystem. [ 644.232030][ T4967] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 644.406534][T17575] REISERFS (device loop4): Using rupasov hash to sort names [ 644.430307][ T4967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.445865][T17575] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 644.466900][ T4967] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=f4.8b [ 644.476440][ T4970] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 644.490057][T17592] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 644.502729][ T4967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.520932][ T4967] usb 4-1: Product: syz [ 644.525269][ T4967] usb 4-1: Manufacturer: syz [ 644.529873][ T4967] usb 4-1: SerialNumber: syz [ 644.546002][ T4967] usb 4-1: config 0 descriptor?? [ 644.575679][ T4967] gspca_main: t613-2.14.0 probing 17a1:0128 [ 644.673934][ T4970] usb 1-1: Using ep0 maxpacket: 8 [ 644.681731][ T4970] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 644.709958][ T4970] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 644.721970][ T8531] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 644.727436][ T4970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.758599][ T4967] gspca_t613: unknown sensor 0000 [ 644.766568][ T4967] t613: probe of 4-1:0.0 failed with error -22 [ 644.780738][ T4967] usb 4-1: USB disconnect, device number 35 [ 644.789431][ T4970] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 644.811101][ T4970] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 644.831348][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.839490][ T4970] usb 1-1: Product: syz [ 644.852085][ T4970] usb 1-1: Manufacturer: syz [ 644.856785][ T4970] usb 1-1: SerialNumber: syz [ 644.875738][ T4970] usb 1-1: config 0 descriptor?? [ 644.886525][ T4970] hub 1-1:0.0: bad descriptor, ignoring hub [ 644.898748][T17598] loop4: detected capacity change from 0 to 4096 [ 644.912136][ T4970] hub: probe of 1-1:0.0 failed with error -5 [ 644.918617][ T8531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 644.940965][ T8531] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 644.943494][T17598] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 644.953467][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.979791][ T8531] usb 3-1: config 0 descriptor?? [ 644.996560][T17598] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 645.183447][ T4967] usb 3-1: USB disconnect, device number 38 [ 645.207623][ T8531] usb 1-1: USB disconnect, device number 39 [ 645.235739][ T8532] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 645.359472][ T4909] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 645.408124][ T8532] usb 2-1: Using ep0 maxpacket: 32 [ 645.419513][ T8532] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 645.430902][ T8532] usb 2-1: config 0 has no interface number 0 [ 645.439017][ T8532] usb 2-1: config 0 interface 231 has no altsetting 0 [ 645.448736][ T8532] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 645.459103][ T8532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.467174][ T8532] usb 2-1: Product: syz [ 645.471713][ T8532] usb 2-1: Manufacturer: syz [ 645.477385][ T8532] usb 2-1: SerialNumber: syz [ 645.483180][ T8532] usb 2-1: config 0 descriptor?? [ 645.540129][ T4909] usb 5-1: Using ep0 maxpacket: 32 [ 645.546782][ T4909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 645.555196][ T4909] usb 5-1: config 0 has no interface number 0 [ 645.561356][ T4909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 645.571148][ T4909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 645.580309][ T4909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.588323][ T4909] usb 5-1: Product: syz [ 645.592477][ T4909] usb 5-1: Manufacturer: syz [ 645.597085][ T4909] usb 5-1: SerialNumber: syz [ 645.606671][ T4909] usb 5-1: config 0 descriptor?? [ 645.614199][ T4909] smsc75xx v1.0.0 [ 645.686251][ T8532] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 645.703701][ T4967] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 645.708354][ T8532] asix: probe of 2-1:0.231 failed with error -71 [ 645.741545][ T8532] usb 2-1: USB disconnect, device number 44 [ 645.820635][ T4909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 645.840079][ T4909] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 645.850551][ T4909] usb 5-1: USB disconnect, device number 11 [ 645.940451][ T4967] usb 4-1: Using ep0 maxpacket: 8 [ 645.947009][ T4967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.964279][ T4967] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 645.980538][ T4967] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 645.994033][ T4967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.003270][ T4967] usb 4-1: Product: syz [ 646.014053][ T4967] usb 4-1: Manufacturer: syz [ 646.018926][T17614] loop0: detected capacity change from 0 to 32768 [ 646.021474][ T4967] usb 4-1: SerialNumber: syz [ 646.040541][T17614] (syz.0.5898,17614,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 646.041924][ T4967] usb 4-1: config 0 descriptor?? [ 646.065264][ T4967] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 646.071873][ T4967] radioshark2: probe of 4-1:0.0 failed with error -22 [ 646.079435][ T4967] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 646.088286][T17614] (syz.0.5898,17614,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 646.112989][T17614] JBD2: Ignoring recovery information on journal [ 646.141491][T17614] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 646.158312][T17614] (syz.0.5898,17614,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xe54c5487, computed 0xe518f7c6. Applying ECC. [ 646.177309][T17614] (syz.0.5898,17614,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xe54c5487, computed 0xfdda60cd [ 646.190229][T17614] (syz.0.5898,17614,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 646.198477][T17614] (syz.0.5898,17614,0):ocfs2_read_quota_block:150 ERROR: status = -5 [ 646.206560][T17614] (syz.0.5898,17614,0):ocfs2_local_check_quota_file:177 ERROR: status = -5 [ 646.215772][T17614] (syz.0.5898,17614,0):ocfs2_local_check_quota_file:179 ERROR: failed to read quota file header (type=0) [ 646.227072][T17614] (syz.0.5898,17614,0):ocfs2_enable_quotas:939 ERROR: status = -22 [ 646.235054][T17614] (syz.0.5898,17614,0):ocfs2_fill_super:1143 ERROR: status = -22 [ 646.272025][T17614] ocfs2: Unmounting device (7,0) on (node local) [ 646.285527][ T4967] usb 4-1: USB disconnect, device number 36 [ 646.652615][T17626] loop0: detected capacity change from 0 to 8192 [ 646.719120][T17626] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 646.740727][T17626] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 646.752420][T17626] REISERFS (device loop0): using ordered data mode [ 646.773486][T17626] reiserfs: using flush barriers [ 646.831509][T17626] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 646.854505][ T4909] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 646.884265][T17626] REISERFS (device loop0): checking transaction log (loop0) [ 647.044712][ T4909] usb 2-1: Using ep0 maxpacket: 16 [ 647.053562][ T4909] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 647.085029][ T4909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.102012][ T4909] usb 2-1: Product: syz [ 647.116669][ T4909] usb 2-1: Manufacturer: syz [ 647.121700][ T4909] usb 2-1: SerialNumber: syz [ 647.151265][T17626] REISERFS (device loop0): Using rupasov hash to sort names [ 647.158838][T17626] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 647.159901][ T4909] usb 2-1: config 0 descriptor?? [ 647.362522][T17649] loop2: detected capacity change from 0 to 8192 [ 647.382339][ T4967] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 647.392803][T17649] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 647.416505][T17649] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 647.420447][ T4909] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 647.426420][T17649] REISERFS (device loop2): using ordered data mode [ 647.437090][ T4909] usb 2-1: No valid video chain found. [ 647.438878][T17649] reiserfs: using flush barriers [ 647.450817][T17649] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 647.468522][T17649] REISERFS (device loop2): checking transaction log (loop2) [ 647.477704][T17649] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.5*[1 2 2147483520(127) DIR], item_len 0, item_location 4052, free_space(entry_count) 0 [ 647.493836][T17649] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 647.504468][T17649] REISERFS (device loop2): Remounting filesystem read-only [ 647.511739][T17649] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 647.523990][ T4909] usb 2-1: USB disconnect, device number 45 [ 647.526000][T17649] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 647.580706][ T4967] usb 4-1: config 109 has an invalid interface number: 163 but max is 0 [ 647.598956][ T4967] usb 4-1: config 109 has no interface number 0 [ 647.615531][ T4967] usb 4-1: config 109 interface 163 has no altsetting 0 [ 647.646738][ T4967] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=9b.c9 [ 647.669010][ T4967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.692400][ T4967] usb 4-1: Product: syz [ 647.696597][ T4967] usb 4-1: Manufacturer: syz [ 647.716012][ T8532] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 647.725379][ T4967] usb 4-1: SerialNumber: syz [ 647.901612][ T8532] usb 5-1: Using ep0 maxpacket: 8 [ 647.908755][ T8532] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 647.917356][ T8532] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 647.927916][ T8532] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.946201][ T8532] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 647.946924][ T4967] quatech2 4-1:109.163: Quatech 2nd gen USB to Serial Driver converter detected [ 647.956347][ T8532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.968829][ T4967] usb 4-1: qt2_attach - failed to power on unit: -71 [ 647.979716][ T4967] quatech2: probe of 4-1:109.163 failed with error -71 [ 648.001165][ T4967] usb 4-1: USB disconnect, device number 37 [ 648.001200][ T8532] usbtmc 5-1:16.0: bulk endpoints not found [ 648.177160][T17668] loop1: detected capacity change from 0 to 8 [ 648.177521][ T4909] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 648.239936][T17668] SQUASHFS error: xz decompression failed, data probably corrupt [ 648.263863][T17668] SQUASHFS error: Failed to read block 0x108: -5 [ 648.270242][T17668] SQUASHFS error: Unable to read metadata cache entry [106] [ 648.283959][ T4967] usb 5-1: USB disconnect, device number 12 [ 648.299988][T17668] SQUASHFS error: Unable to read inode 0x11f [ 648.382399][ T4909] usb 1-1: too many configurations: 37, using maximum allowed: 8 [ 648.422275][ T4909] usb 1-1: string descriptor 0 read error: -71 [ 648.438885][ T4909] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 648.464137][ T4909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.501605][ T4909] usb 1-1: can't set config #1, error -71 [ 648.520781][ T4909] usb 1-1: USB disconnect, device number 40 [ 648.670774][T17662] loop2: detected capacity change from 0 to 65536 [ 648.696613][T17662] XFS (loop2): Mounting V5 Filesystem [ 648.721778][T17662] XFS (loop2): Ending clean mount [ 648.757855][ T4995] XFS (loop2): Unmounting Filesystem [ 648.816444][ T4965] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 648.853875][ T4967] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 649.034589][ T4965] usb 4-1: Using ep0 maxpacket: 16 [ 649.041430][ T4967] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.055295][ T4967] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 649.066209][ T4967] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 649.082423][ T4965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 649.094278][ T4965] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 649.104622][ T4967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.112839][ T4965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 649.123644][ T4965] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 649.156981][ T4965] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 649.176315][ T4965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.195823][ T4965] usb 4-1: Product: syz [ 649.205494][ T4965] usb 4-1: Manufacturer: syz [ 649.215216][ T4965] usb 4-1: SerialNumber: syz [ 649.234990][ T4965] usb 4-1: config 0 descriptor?? [ 649.245802][ T4965] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 649.273684][ T4965] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 649.282324][ T4909] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 649.340492][ T4967] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 649.359809][ T4967] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input58 [ 649.379891][ T4967] input: failed to attach handler kbd to device input58, error: -5 [ 649.407405][ T4967] usb 2-1: USB disconnect, device number 46 [ 649.464313][ T4964] usb 4-1: USB disconnect, device number 38 [ 649.491457][ T4909] usb 5-1: Using ep0 maxpacket: 16 [ 649.497386][ T4964] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 649.498335][ T4909] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 649.519009][T17686] loop2: detected capacity change from 0 to 128 [ 649.529149][ T4964] omninet 4-1:0.0: device disconnected [ 649.539694][ T4909] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.559777][T17686] omfs: Invalid superblock (7b3184f9) [ 649.589433][ T4909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.605847][ T4909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.624070][ T4909] usb 5-1: Product: syz [ 649.628577][ T4909] usb 5-1: Manufacturer: syz [ 649.633270][ T4909] usb 5-1: SerialNumber: syz [ 649.751670][T17694] loop0: detected capacity change from 0 to 32768 [ 649.786943][T17694] read_mapping_page failed! [ 649.792119][T17694] diRead: diIAGRead returned -5 [ 649.865798][ T4909] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 649.892647][ T4909] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 649.922612][ T4909] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 649.976010][ T4909] usb 5-1: USB disconnect, device number 13 [ 650.243846][ T7108] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 650.252472][ T5512] udevd[5512]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.421158][ T7108] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 650.439353][ T7108] usb 1-1: config 0 has no interface number 0 [ 650.470306][ T7108] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 650.501752][ T7108] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 650.520171][ T7108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.546078][ T7108] usb 1-1: config 0 descriptor?? [ 650.553187][T17718] loop3: detected capacity change from 0 to 1024 [ 650.556524][T17720] loop4: detected capacity change from 0 to 512 [ 650.570984][T17718] hfsplus: failed to load catalog file [ 650.601833][ T7108] ttusbir 1-1:0.83: cannot find expected altsetting [ 650.666247][T17720] [ 650.668615][T17720] ====================================================== [ 650.675632][T17720] WARNING: possible circular locking dependency detected [ 650.682659][T17720] syzkaller #0 Not tainted [ 650.687068][T17720] ------------------------------------------------------ [ 650.694084][T17720] syz.4.5945/17720 is trying to acquire lock: [ 650.700147][T17720] ffff8880610dcb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1c0/0x2e50 [ 650.710253][T17720] [ 650.710253][T17720] but task is already holding lock: [ 650.717596][T17720] ffff888046873cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 650.727426][T17720] [ 650.727426][T17720] which lock already depends on the new lock. [ 650.727426][T17720] [ 650.737813][T17720] [ 650.737813][T17720] the existing dependency chain (in reverse order) is: [ 650.746806][T17720] [ 650.746806][T17720] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 650.754347][T17720] down_read+0x42/0x2d0 [ 650.759017][T17720] ext4_setattr+0x92a/0x19f0 [ 650.764116][T17720] notify_change+0xc74/0xf40 [ 650.769209][T17720] chown_common+0x486/0x620 [ 650.774221][T17720] do_fchownat+0x164/0x270 [ 650.779140][T17720] __x64_sys_chown+0x7e/0x90 [ 650.784233][T17720] do_syscall_64+0x4c/0xa0 [ 650.789152][T17720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.795552][T17720] [ 650.795552][T17720] -> #1 (jbd2_handle){++++}-{0:0}: [ 650.802828][T17720] start_this_handle+0x1f49/0x2150 [ 650.808447][T17720] jbd2__journal_start+0x2b7/0x5a0 [ 650.814066][T17720] __ext4_journal_start_sb+0x187/0x3d0 [ 650.820033][T17720] ext4_writepages+0xde7/0x2e50 [ 650.825399][T17720] do_writepages+0x3b7/0x610 [ 650.830512][T17720] filemap_fdatawrite_wbc+0x11e/0x180 [ 650.836398][T17720] file_write_and_wait_range+0x137/0x200 [ 650.842534][T17720] ext4_sync_file+0x23b/0xca0 [ 650.847720][T17720] __x64_sys_fsync+0x1a5/0x1e0 [ 650.852994][T17720] do_syscall_64+0x4c/0xa0 [ 650.857922][T17720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.864329][T17720] [ 650.864329][T17720] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 650.872743][T17720] __lock_acquire+0x2cf8/0x7c50 [ 650.878104][T17720] lock_acquire+0x1b4/0x490 [ 650.883112][T17720] percpu_down_read+0x44/0x1a0 [ 650.888375][T17720] ext4_writepages+0x1c0/0x2e50 [ 650.893733][T17720] do_writepages+0x3b7/0x610 [ 650.898829][T17720] __writeback_single_inode+0x156/0x1160 [ 650.904967][T17720] writeback_single_inode+0x221/0x8b0 [ 650.910842][T17720] write_inode_now+0x15d/0x1d0 [ 650.916109][T17720] iput+0x613/0x980 [ 650.920419][T17720] ext4_xattr_block_set+0x2736/0x32a0 [ 650.926295][T17720] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 650.932694][T17720] __ext4_expand_extra_isize+0x301/0x3e0 [ 650.938832][T17720] __ext4_mark_inode_dirty+0x47f/0x770 [ 650.944801][T17720] ext4_evict_inode+0xa73/0x1100 [ 650.950243][T17720] evict+0x485/0x870 [ 650.954642][T17720] ext4_orphan_cleanup+0xbd3/0x1400 [ 650.960344][T17720] ext4_fill_super+0x7bdf/0x8150 [ 650.965783][T17720] get_tree_bdev+0x3f1/0x610 [ 650.970876][T17720] vfs_get_tree+0x88/0x270 [ 650.975792][T17720] do_new_mount+0x24a/0xa40 [ 650.980798][T17720] __se_sys_mount+0x2d6/0x3c0 [ 650.985976][T17720] do_syscall_64+0x4c/0xa0 [ 650.990899][T17720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.997295][T17720] [ 650.997295][T17720] other info that might help us debug this: [ 650.997295][T17720] [ 651.007502][T17720] Chain exists of: [ 651.007502][T17720] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 651.007502][T17720] [ 651.020862][T17720] Possible unsafe locking scenario: [ 651.020862][T17720] [ 651.028288][T17720] CPU0 CPU1 [ 651.033629][T17720] ---- ---- [ 651.038985][T17720] lock(&ei->xattr_sem); [ 651.043305][T17720] lock(jbd2_handle); [ 651.049883][T17720] lock(&ei->xattr_sem); [ 651.056727][T17720] lock(&sbi->s_writepages_rwsem); [ 651.061913][T17720] [ 651.061913][T17720] *** DEADLOCK *** [ 651.061913][T17720] [ 651.070047][T17720] 3 locks held by syz.4.5945/17720: [ 651.075224][T17720] #0: ffff888068f7e0e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 651.085308][T17720] #1: ffff888068f7e650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 651.094778][T17720] #2: ffff888046873cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 651.105035][T17720] [ 651.105035][T17720] stack backtrace: [ 651.110905][T17720] CPU: 1 PID: 17720 Comm: syz.4.5945 Not tainted syzkaller #0 [ 651.118343][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 651.128381][T17720] Call Trace: [ 651.131646][T17720] [ 651.134562][T17720] dump_stack_lvl+0x168/0x22e [ 651.139225][T17720] ? load_image+0x3b0/0x3b0 [ 651.143727][T17720] ? show_regs_print_info+0x12/0x12 [ 651.148913][T17720] ? print_circular_bug+0x12b/0x1a0 [ 651.154104][T17720] check_noncircular+0x274/0x310 [ 651.159030][T17720] ? add_chain_block+0x940/0x940 [ 651.163949][T17720] ? lockdep_lock+0xdc/0x1e0 [ 651.168523][T17720] ? verify_lock_unused+0x140/0x140 [ 651.173704][T17720] ? _find_first_zero_bit+0xcf/0x100 [ 651.178981][T17720] __lock_acquire+0x2cf8/0x7c50 [ 651.183825][T17720] ? verify_lock_unused+0x140/0x140 [ 651.189006][T17720] ? mark_lock+0x94/0x320 [ 651.193320][T17720] ? __lock_acquire+0x13c0/0x7c50 [ 651.198332][T17720] lock_acquire+0x1b4/0x490 [ 651.202816][T17720] ? ext4_writepages+0x1c0/0x2e50 [ 651.207824][T17720] ? __might_sleep+0xd0/0xd0 [ 651.212399][T17720] ? read_lock_is_recursive+0x10/0x10 [ 651.217753][T17720] ? __lock_acquire+0x12e5/0x7c50 [ 651.222761][T17720] ? mark_lock+0x94/0x320 [ 651.227074][T17720] percpu_down_read+0x44/0x1a0 [ 651.231822][T17720] ? ext4_writepages+0x1c0/0x2e50 [ 651.236825][T17720] ext4_writepages+0x1c0/0x2e50 [ 651.241658][T17720] ? verify_lock_unused+0x140/0x140 [ 651.246842][T17720] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 651.252826][T17720] ? look_up_lock_class+0x75/0x140 [ 651.257923][T17720] ? verify_lock_unused+0x140/0x140 [ 651.263104][T17720] ? register_lock_class+0xb1/0x860 [ 651.268286][T17720] ? mark_lock+0x94/0x320 [ 651.272600][T17720] ? ext4_read_folio+0x370/0x370 [ 651.277519][T17720] ? __lock_acquire+0x13c0/0x7c50 [ 651.282531][T17720] ? __lock_acquire+0x7c50/0x7c50 [ 651.287541][T17720] ? do_raw_spin_lock+0x11d/0x280 [ 651.292552][T17720] ? stack_trace_save+0xe0/0xe0 [ 651.297388][T17720] ? do_raw_spin_unlock+0x11d/0x230 [ 651.302571][T17720] ? ext4_read_folio+0x370/0x370 [ 651.307491][T17720] do_writepages+0x3b7/0x610 [ 651.312066][T17720] ? __writepage+0x130/0x130 [ 651.316638][T17720] ? writeback_single_inode+0x216/0x8b0 [ 651.322167][T17720] ? __lock_acquire+0x7c50/0x7c50 [ 651.327176][T17720] ? do_raw_spin_lock+0x11d/0x280 [ 651.332183][T17720] ? __ext4_expand_extra_isize+0x301/0x3e0 [ 651.337973][T17720] __writeback_single_inode+0x156/0x1160 [ 651.343593][T17720] writeback_single_inode+0x221/0x8b0 [ 651.348950][T17720] ? write_inode_now+0x1d0/0x1d0 [ 651.353874][T17720] write_inode_now+0x15d/0x1d0 [ 651.358628][T17720] ? bdi_split_work_to_wbs+0x890/0x890 [ 651.364071][T17720] ? rcu_is_watching+0x11/0xa0 [ 651.368820][T17720] ? do_raw_spin_unlock+0x11d/0x230 [ 651.374004][T17720] iput+0x613/0x980 [ 651.377798][T17720] ext4_xattr_block_set+0x2736/0x32a0 [ 651.383153][T17720] ? __might_sleep+0xd0/0xd0 [ 651.387732][T17720] ? xattr_find_entry+0x12b/0x2f0 [ 651.392743][T17720] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 651.398187][T17720] ? ext4_xattr_block_find+0x241/0x2b0 [ 651.403628][T17720] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 651.409539][T17720] __ext4_expand_extra_isize+0x301/0x3e0 [ 651.415157][T17720] __ext4_mark_inode_dirty+0x47f/0x770 [ 651.420605][T17720] ext4_evict_inode+0xa73/0x1100 [ 651.425527][T17720] ? _raw_spin_unlock+0x24/0x40 [ 651.430366][T17720] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 651.436247][T17720] ? do_raw_spin_unlock+0x11d/0x230 [ 651.441432][T17720] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 651.447306][T17720] evict+0x485/0x870 [ 651.451200][T17720] ? __lock_acquire+0x7c50/0x7c50 [ 651.456211][T17720] ? proc_nr_inodes+0x2f0/0x2f0 [ 651.461043][T17720] ? do_raw_spin_unlock+0x11d/0x230 [ 651.466229][T17720] ? _raw_spin_unlock+0x24/0x40 [ 651.471069][T17720] ? iput+0x768/0x980 [ 651.475037][T17720] ext4_orphan_cleanup+0xbd3/0x1400 [ 651.480225][T17720] ? ext4_orphan_del+0xb90/0xb90 [ 651.485149][T17720] ? errseq_check_and_advance+0x62/0x120 [ 651.490766][T17720] ext4_fill_super+0x7bdf/0x8150 [ 651.495683][T17720] ? bdev_name+0x2c1/0x3f0 [ 651.500100][T17720] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 651.506326][T17720] ? snprintf+0xd7/0x120 [ 651.510554][T17720] ? preempt_count_add+0x8d/0x190 [ 651.515560][T17720] ? vscnprintf+0x80/0x80 [ 651.519871][T17720] ? set_blocksize+0x1d3/0x350 [ 651.524620][T17720] ? sb_set_blocksize+0xa5/0xe0 [ 651.529455][T17720] get_tree_bdev+0x3f1/0x610 [ 651.534029][T17720] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 651.540252][T17720] vfs_get_tree+0x88/0x270 [ 651.544652][T17720] do_new_mount+0x24a/0xa40 [ 651.549146][T17720] __se_sys_mount+0x2d6/0x3c0 [ 651.553805][T17720] ? __x64_sys_mount+0xc0/0xc0 [ 651.558554][T17720] ? lockdep_hardirqs_on+0x94/0x140 [ 651.563741][T17720] ? __x64_sys_mount+0x1c/0xc0 [ 651.568501][T17720] do_syscall_64+0x4c/0xa0 [ 651.572914][T17720] ? clear_bhb_loop+0x60/0xb0 [ 651.577581][T17720] ? clear_bhb_loop+0x60/0xb0 [ 651.582249][T17720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.588129][T17720] RIP: 0033:0x7fe0a6b90e6a [ 651.592532][T17720] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.612123][T17720] RSP: 002b:00007fe0a7a7ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 651.620522][T17720] RAX: ffffffffffffffda RBX: 00007fe0a7a7aef0 RCX: 00007fe0a6b90e6a [ 651.628478][T17720] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe0a7a7aeb0 [ 651.636433][T17720] RBP: 0000200000000180 R08: 00007fe0a7a7aef0 R09: 0000000000800700 [ 651.644398][T17720] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 651.652351][T17720] R13: 00007fe0a7a7aeb0 R14: 000000000000046f R15: 000000000000002c [ 651.660312][T17720] [ 651.671010][ T4909] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 651.691946][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.5945: iget: bad extra_isize 90 (inode size 256) [ 651.704696][T17706] loop1: detected capacity change from 0 to 32768 [ 651.711489][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.713311][T17706] (syz.1.5937,17706,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 651.741279][ T8531] usb 1-1: USB disconnect, device number 41 [ 651.749023][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5945: error while reading EA inode 11 err=-117 [ 651.766296][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.775116][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.5945: iget: bad extra_isize 90 (inode size 256) [ 651.790143][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.801305][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5945: error while reading EA inode 11 err=-117 [ 651.815240][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.821871][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.5945: iget: bad extra_isize 90 (inode size 256) [ 651.836982][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.844076][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5945: error while reading EA inode 18 err=-117 [ 651.858057][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.864741][ T4909] usb 3-1: Using ep0 maxpacket: 8 [ 651.870101][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.5945: iget: bad extra_isize 90 (inode size 256) [ 651.885890][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.892596][ T4909] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 651.903043][ T4909] usb 3-1: config 0 has no interface number 0 [ 651.907315][T17720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5945: error while reading EA inode 18 err=-117 [ 651.910269][ T4909] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=16.17 [ 651.924159][T17720] EXT4-fs (loop4): Remounting filesystem read-only [ 651.930758][ T4909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.937369][T17720] EXT4-fs (loop4): 1 orphan inode deleted [ 651.951055][T17720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 651.951341][ T4909] usb 3-1: config 0 descriptor?? [ 651.979939][ T4909] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 652.010849][ T4993] EXT4-fs (loop4): unmounting filesystem. [ 652.169031][ T4909] gspca_sunplus: reg_r err -71 [ 652.173948][ T4909] sunplus: probe of 3-1:0.50 failed with error -71 [ 652.184133][ T4909] usb 3-1: USB disconnect, device number 39