last executing test programs: 3.767803243s ago: executing program 0 (id=3756): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0x1, 0x587, &(0x7f0000001280)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) 3.385424081s ago: executing program 0 (id=3760): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$l2tp6(r0, 0x0, 0x0) 3.229882726s ago: executing program 0 (id=3763): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000000000)={[{@ssd}, {@space_cache_v2}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"00000000420000000000100000005fff", 0x0, 0x0, {0xfffffffffffffff8, 0x3}, {0x4, 0xb0a}, 0xab3, [0x5, 0x17a, 0x7, 0x5, 0x3, 0x6a, 0x1, 0x5f, 0x2, 0x5, 0xffffffff, 0x7, 0x200000003, 0xffdffffffffffffb, 0x621, 0x7]}) 1.934998136s ago: executing program 3 (id=3787): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000000300)={0x10, 0x1029}, 0x10}], 0x2}, 0x0) 1.887604631s ago: executing program 3 (id=3788): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d302c757466383d302c636f6465706167653d3835372c73686f72746e616d653d77696e39352c757466383d302c757466383d312c696f636861727365743d6d6163726f6d616e69616e2c756e695f786c6174653d302c696f636861727365743d69736f383835392d31342c0064694bf94855e939c33201d96e8ed166245fce538ae288401bee1c36b055f37056573a71f41a114a70f6a5e9889f3ed5199a905bc28441c6e1716a39c94ab127aab8d043cead05271e937ae3b34df518f5a96519f3537994a8d006bf447d4d4a3645ee5970796ed79671bd55ebc35f90cf17a591227584734fefdac96349f8ad045831421110433e77b0a9ae667975546ed08550de6ac3302e3c29"], 0x1, 0x216, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) 1.782897771s ago: executing program 0 (id=3791): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 1.59786535s ago: executing program 3 (id=3792): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x26, 0x1, 0xf}]}}}], 0x18}, 0x4000) 1.348269065s ago: executing program 2 (id=3795): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x200, 0x9, 0x7, {0x1, @vbi={0x3, 0xffffff43, 0x8, 0x43214247, [0xa6], [0x4, 0xc3], 0x1}}, 0x7}) 1.268155813s ago: executing program 1 (id=3797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 1.131367256s ago: executing program 0 (id=3799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) 1.045437485s ago: executing program 2 (id=3801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c011}, 0x0) 990.574591ms ago: executing program 0 (id=3802): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009058389b5"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 990.350051ms ago: executing program 3 (id=3803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@allocspi={0x178, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@multicast1}, {@in6=@mcast1, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {0x0, 0x0, 0x20000}}, 0x0, 0x7}, [@user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x2}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}, @algo_aead={0x4c, 0x12, {{'seqiv(morus1280)\x00'}}}]}, 0x178}}, 0x40010) 989.834831ms ago: executing program 1 (id=3805): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000100)={"40e69ebb518c7708c71a7b943fb975efd9d15ee8af7459df27ddcfbadb62", 0x1, 0x73, 0x8, [0x4, 0x3, 0x2, 0xd0f3, 0x3, 0x5, 0xd, 0x5, 0x4, 0x3, 0x9, 0x754, 0x5, 0x7, 0x2c7, 0x7fffffff, 0xff, 0x7]}) 945.999055ms ago: executing program 1 (id=3806): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x76, 0x67b, &(0x7f0000001780)="$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") lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 943.368715ms ago: executing program 2 (id=3807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x50) 873.904482ms ago: executing program 3 (id=3809): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+/CaxsojyRghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmWhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6qIuPTztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeCMiPn464t792+vNorMH7Md3/vi33/7w2Pf/+vvhqX//6Ub/zUnr3bz5q3/9+c7j7y8AAACUqK7rukof819In+97XXcKAJiL/PpfJ3m5euHqzQXrj1qtVqsPYd1W7+9Ou4iIzfY2zXsGp+MB4JDZjE+67gIdkn/RBhFxrOtOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+00z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LtyIA87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrpx8sm/RdbM3yi1XEU2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYOca3otVxDAinlpdreu6+Wkbrx/Vk25/2JW+/1Cyrv/IAwDAjo+fHruXv4pYjoiL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0ugAb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9A3RsPjoMHAAiYufV6J5XpCOmrp+Jrt/lcDg4/o8exz8H0fXzFAAAAJi9uq7rKn2d9wvpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvb877SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiI57vuBLDQqq47wEzcu397vUr5Vu3XgzS+e74WZE/+m9X2dnn7/abTjF9jMq/n11b049kJ/XluTn1YJDn/3nj+l3baR2m9Wec/L5Pyb/bzeAf96VrOvz+e/5ijk39v3/xLlfMfPFL+ffkDAAAAAMACy//+f3yhzv+OHnd3pnrY+d+1mT0qAAAAAAAAAMzWvfu31/N9r/n8/+f2Wc/9n0dTzr+Sf5Fy/un+/90Lb14ZW6/fmr/7zoP8/3n/9vrvbvzj//P0oPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYGvYHzWPNKx6/UG65qcevhdX4mpsxOk96/bS8fCg/cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/HudnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo27H/X+57hvT/d7nLevfP6Xp2e/O1NtRX9339qa/Xupg/5s/z85disiNq6dvHn5xo1rZyJNjo3iZ9fz0rORJp+xnP8w/eT8X3l5pz3/3W8fr3c/Gj1y/otiKwYT83+5Nd/s76tz7lsXcv6j9JPzfze173/8H+b8Jx//r3XQHwAAAAAAAAAAAAAAAHiYuq63bxF9OyLOp/t/uro3EwCYr/z6Xyd5+bzq/uNu/4e9+9FV/9XqOdfVgvVnrvWn9WL1R72Q9X8WrD8LV7fV+3urXUTEX9rbNO8ZfrHfLwMAFtmnEfH3rjtBZ+RfsPx9f830RNedAebq+oe3fnT56tWNa9e77gkAAAAAAAAA8Ljy+J9rrfGfT9R1fWdsvT3jv74Ta086/ucgz+wOMDphoOr+o+/Tw2z1Rv1ea7jxF2PS+N/D3bmHjf89mPJ4wyntoyntS1Pal6e073ujR0vO/8XWeOcnIuKFseHXSxj/dXzM+xLk/F9qPZ+b/L80tl47//o3hzn/3p78T9344Kenrn946/UrH1x+f+P9jR+fO3Pm9Lnz5y9cuHDqvStXN07v/LfDHs9Wzj+Pfe060LLk/HPm8i9Lzv8LqZZ/WXL+X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9NtfzLkvP/cqrlX5ac/2upln9Zcv5fSbX8y5Lzfz3V8i9Lzv9kquVflpz/qVQfMP+VWfeL+cj55zNcjv+y5PzzlQ3yL0vO/2yq5V+WnP+5VMu/LDn/N1It/7Lk/L+aavmXJed/PtXyL0vO/2upln9Zcv4XUi3/suT8v55q+Zcl5/+NVMu/LDn/N1Mt/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/lWr5l+XB9/+bMWNmRjODw3egdf2XCQAAAAAAAAAAAAAYN4/LibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zN68diA2EFInNWHtGGOcTXZ9iS+0LiZcG24lIRR6wXa9a7PgG167BBrVjgIlEkZFFW3DQ1tAqM1LhVXxQKuA8oBaVapE2gf6gqhQeYiqgAJSVVpBtpo5//9/Z2ZnZ3a9483Zcz4fKfllZ87MOXPmP7P7tfPdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3TX+mlmVZrVbLL9iUZS+pz/VjmxqXvP7FPT4AAABg5X7R+PfzG9MFR5Zwo6Zt/umO73x9bm5uLvvA4J8Of2FuLl0xlmXD67KscV107QcfrDVvEzyWjdYGmr4e6LH7wR7XD/W4frjH9SM9rl/X4/rRHtcvOAELrM9q6c62N/5zU35Ks1uy4cZ12zvc6rHauoH6uUu3zWqN28wNn8xmstPZdDbZsn2+ba2x/VNb6/t6exb3NdC0ry31FfKTR07EY6iFc7y9ZV/z9xn96I3Z2E9/8siJv7743G2dZs/T0HJ/+XHu3FY/zk+FS/JjrWXr0jmJxznQdJxbOjwngy3HWWvcrv7f7cf5/BKPc3D+MFdV+3M+mg00/vuZxnkaqmUdztOWcNnP7syy7Mr8Ybdvs2Bf2UC2oeWSgfnnZzRfkfX7qC+ll2dDy1qnW5ewTutzanvrOm1/TcTnf2u43dAix9D8NP3o0ZGm5/3nc9ezTqP6o17stdK+Bvv9WinKGozr4pnGg3684xrcHh7/IzsWX4Md106HNZged9Ma3NZrDQ6MDDaOOT0JtcZt5tfg7pbtBxt7qjXmszu6r8GJi2fOT8x+4pN3z5w5fmr61PTZvbt3T+7dv//gwYMTJ2dOT0/m/77Os118G7KB9BrYFs5dfA28tm3b5qU69+WRBe+/1/s6HO3yOtzUtm2/X4dD7Q+utjovyIVrOn9tvK9+0kevDmSLvMYaz8+ulb8O0+Nueh0ONb0OO35P6fA6HFrC67C+zfldS/uZZajpn07HsPj3gpWtwU1Na7D955H2Ndjvn0eKsgZHw7r43q7FvxdsCcf7+Phyfx4ZXLAG08MN7z31S9LP+6MHG6PTury9fsVNI9ml2ekL9zx8/OLFC7uzMFbFK5rWSvt63dD0mLIF63Vg2ev1yMwdj9/e4fJN4VyN3l3/1+iiz1V9m333dH+uGt/dOp/Plkv3ZGH02Wqfz07fzevncyTLvvjtRx/45iNffNOi57OeNz81sfKfxVMubXr/HV7k/Tfm/hfy/aW7emxweCh//Q6mszPc8n7c+lQNNd67ao19Pz+xtPfj4fDPar8f39Ll/Xhz27b9fj8ebn9w8f241utPO1am/fkcDevk9GT39+P6Npv3LHdNDnV9P74zzFo4/68LSSHloqa1s9i6TfsaGhoOj2so7qF1ne5t2X44ZLP6vp7cc33rdOed+X0Npkc3b7XW6Vjbtv1ep+nPvhZbp7Vef/p2fdqfz9GwLm7Z232d1rd5et/K3zvXx/9seu8c6bUGhwdH6sc8nBZh4/0+m1sf1+A92YnsXHY6m2pcO9JYT7XGvsbvXdoaHAn/rPZ75eYua3Bn27b9XoPp+9hia682tPDB90H78zka1sUT93Zfg/Vt3nygvz+77gyXpG2afnZt//O1xf7M6/a203Sj1spQOM5vH+j+Z7P1bU4fXG7O7H6e7gqX3NThPLW/fhd7TU1lq3OeNofjfO7g4uepfjz1bb5waInr6UiWZZc/dl/jz3vD36/83aXvfr3l7106/Z3O5Y/d9+OXnvzH5Rw/AGvfC/nYkH+va/qbqaX8/T8AAACwJsTcPxBmIv8DAABAacTcH/+v8ET+BwAAgNKIuX8ozKQi+X/zm5+beeFylpr5c0G8Pp2G+/PtYsd1Mnw9Njevfvl9X53+73+4vLR9D2RZ9vP7/6Dj9pvvj8eVGwvHee0trZcv8PW7l7TvYw9dTvtt7q9/Kdx/fDxLXQadKriTWZY9tfFzjf2MffBqYz59/7HGfODK44/Vt3n+UP51vP2zr8i3/4tQ/j1y8njL7Z8N5+GHYU6+o/P5iLf72tXXbTnw/vn9xdvVtt3ceNhPfCi/3/h7cj7/WL59PM+LHf83P/vk1+rbP/yazsd/eaDz8T8Z7verYf7vq/Ltm5+D+tfxdp8Oxx/3F293z1e+1fH4r30m3/78W/PtjoUZ978zfL39rc/NNJ+vh2vHWx5X9rZ8u7j/ye/+ceP6eH/x/tuPf/To1Zbz0b4+nv63/H4m2raPl8f9RH/ftv/6/TSvz7j/J//oWMt57rX/aw88+6r6/bbv/6627c5/bFdj//P31/obm/7y05/ruL94PEf+9nzL4zny3vA6Dvt/4kNhPYbr/+9afn/tv13h2Htb33/i9l/adLnl8URv/2m+/2tvONWY60bXb7jpJS+9+cqr6+cuy55Zl99fr/2f+qtzLcf/5Vvz8xGvjx399v0vJu7/wsfHz56bvTQzlc7qIxsbvzvnnfnxxOPdGN5b278+eu7ih6cvjE2OTWbZWHl/hd51+0qYP87Hle5bzy14B931UHg+b//zpzbs+NfPxsv//X355VffkX/fem3Y7vPh8k3h+Vve/hd6Yuutjdd37elwhHMLf1/wSmzZ/l8Hl7RhePztPxfE9X7+lR9unIf6dY3vG/F1vcLj//5Ufj/fCOd1Lvxm5m23zu+vefv4uxGuPpi/3ld8/sLbXHxe/yY83+/6YX7/8bji4/1++DnmW5tb3+/i+vjG5YH2+2/8Fo8r4f0ku5JfH7eK5/vq87d2PLz4e0iyK7c1vv6TdD+3LethLmb2E7MTp2fOXnp44uL07MWJ2U988uiZc5fOXjza+F2eRz/S6/bz708bGu9PU9P792WNd6tz+bjBXuzjP//QiakDkzumpk8ev3Ty4kPnpy+cOjE7e2J6anbH8ZMnpz/e6/YzU4d37zm098Ce8VMzU4cPHjq099D4zNlz9cPID6qH/ZMfHT974WjjJrOH9x3afe+9+ybHz5ybmj58YHJy/FKv2ze+N43Xb/374xemTx+/OHNmenx25pPTh3cf2r9/T8/fBnjm/MnZsYkLl85OXJqdvjCRP5axi42L69/7et2ecpr9j/zn2Xa1/BfxZe+5a3/6/ax1X3100bvKN2n7BaLPhd9F888vO39wKV/H3D8cZlKR/A8AAABVEHP/SJiJ/A8AAAClEXP/ujAT+R8AAABKI+b+0TCTiuT/0vX/N19e0v71//X/m8+X/n/F+v8PFq3/n79f6P/3x0r79/r/gf6//r/+v/6//j99ULT+f8z967OskvkfAAAAqiDm/g1hJvI/AAAAlEbM/TeFmcj/AAAAUBox978kzKQi+V//X/9f/1//X/+/8/71/9cm/f/u9P970P+fyKrV/7/Sz+PX/9f/Z6Gi9f9j7n9pmElF8j8AAABUQcz9N4eZyP8AAABQGjH3bwwzkf8BAACgNGLu3xRmUpH8r//ftf/fXkNelP5/6/Hr/3deH/r/+v/6/zee/n93+v896P/7/H/9f/1/+qpo/f+Y+18WZlKR/A8AAABVEHP/y8NM5H8AAAAonqHru1nM/a8IM1mQ/69zBwAAAMCLLub+W7K2InhF/v5f/9/n/xe//78uXaf/r/+fFbL/P5jp/xeH/n93+v896P/r/+v/6//TV0Xr/zdyfzaavTLMpCL5HwAAAKog5v5bw0zkfwAAACiNmPt/KcxE/gcAAIDSiLl/c5hJRfK//r/+f/H7/z7/X/+/6P1/n/9fJPr/3en/96D/r/+v/6//T18Vrf8fc/9tYSYVyf8AAABQBTH33x5mIv8DAABAacTc/8thJvI/AAAAlEbM/VvCTCqS//X/C97/j81R/X/9f/1//X/9/yXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/8dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu4fCzOpSP7X/y94/z/vwY/4/H/9f/1//X/9/6XR/+9O/78H/X/9/770/+cu6//r/5MrWv8/5v6tYSYVyf8AAABQBTH3bwszkf8BAACgNGLuvzPMRP4HAACA0oi5f3uYSUXyv/7/muj/Z/r/+v/6//r/+v9Lo//fnf5/D/r/+v8+/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyPMRP4HAACA0oi5/7VhJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6qmj9/5j7XxdmUpH8DwAAAFUQc/+uMBP5HwAAAEoj5v67wkzkfwAAACiNmPvHw0wqkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8OM6lI/gcAAIAqiLn/njAT+R8AAABKI+b+iTAT+R8AAABKI+b+yTCTiuR//X/9f/1//f9l9f9fPX+/+v85/f9i0f/vTv+/B/1//f8Xvf8/rP9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zvvX/9/bdL/767//f/4EPX/9f/1/33+v/4/CxWt/x9z/71hJhXJ/wAAAFAFMffvDzOR/wEAAKA0Yu4/EGYi/wMAAEBpxNx/MMykIvlf/1//X/9f/1//v/P+9f/XJv3/7nz+fw/6//r/+v/6/6zQg3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/9WEm8j8AAACURsz9vxJmIv8DAABAacTc/6thJhXJ//r/Ld3z+sPV/9f/1//X/2/Q/1+b9P+70//vQf9f/1//X/+fvlq0/x+i92r3/2PuPxxmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/SJhJRfK//r/P/9f/1//X/++8/9Xu/4/E+9X/XxH9/+70/3vQ/9f/1//X/6evivb5/zH3vzHMpCL5HwAAAKog5v77wkzkfwAAACiNmPvfFGYi/wMAAEBpxNz/5jCTiuR//X/9f/1//X/9/8779/n/a5P+f3f6/8GdGzsfgP6//r/+v/4/fVW0/n/M/W8JM6lI/gcAAIAqiLn/rWEm8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//r/+v/09fFa3/H3P/r4eZVCT/AwAAQBXE3H9/mIn8DwAAAKURc/87wkzkfwAAACiNmPvfGWZSkfyv/6//r/+v/6//33n/+v9rk/5/d2us//+Lm8Pl+v85/f9iH/9y+/9DbV/fkP7/Dxbr/8+ta7+9/j83QtH6/zH3vyvMpCL5HwAAAKog5v53h5nI/wAAAFAaMfe/J8xE/gcAAIDSiLn/N8JMKpL/9f/rxzHfXtb/L2v/f0D/X/9f/78i9P+7W2P9f5//30b/v9jH7/P/9f9ZqGj9/5j73xtmUpH8DwAAAFUQc/8DYSbyPwAAAJRGzP0PhpnI/wAAAFAaMfe/L8ykIvlf/9/n/1ej/+/z/zP9f/3/itD/707/vwf9f/3/ovX//1P/n7WtaP3/mPsfCjOpSP4HAACAKoi5//1hJvI/AAAAlEbM/b8ZZiL/AwAAQGnE3P+BMJOK5H/9/7XS/x9bo/3/R/X/b2D//46b8+30//X/maf/353+fw/6//r/Rev/+/x/1rii9f9j7v9gmMnS8//okrcEAAAAXhQx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/7XS//f5/5n+v8//b3s8+v/6/52sXv8/vvPo/+v/6/9H+v/6//r/tCta/z/m/t8NM6lI/gcAAIAqiLn/Q2Em8j8AAACsCZ3+n+x2MfcfDTOR/wEAAKA0Yu4/FmZSkfyv/6//r/9f0P7/n237l+99593Hduv/6//r/y/Lqn7+f/3F7/P/9f/1/xP9f/1//X/aFa3/H3P/8TCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9EmIn8DwAAAKURc/9UmElF8r/+v/6//n9B+/9r+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vn++J6/8vt/8/0vFS/X/9/7V8/Pr/+v8sVLT+f8z902EmFcn/AAAAUAUh9w+czOf8FfI/AAAAlEbM/afCTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuTz/4sq9e9/1nih6P+3KU7/vzP9f/3/tXz8+v/6/yxUtP5/zP0zYSYVyf8AAABQBTH3fyTMRP4HAACA0oi5/6NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f8777+wn/+v/9/VSvv3+v+B/n+1+///o/+v/6//T38Urf8fc/+ZMJOK5H8AAACogv9n706aLKvLPI7f7C66soJe9K4X3YuO6N71S2DRve5+AS7cuDHCcIEKKs4UziOKirMiOA84gCCigvMATiiKA6g4izNOiBJlkPU8T1Vmnjw3s+pm5jn//+ezqEfSSu6VqKjiV1lfT+7+8+MW+x8AAACakbv/UXGL/Q8AAADNyN3/6Lilk/2v/z+b/v9Upaz/3/z+J9H//4/+f6fX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/Y+KWTvY/AAAA9CB3/wVxi/0PAAAAzcjdf2HcYv8DAABAM3L3PzZu6WT/b+n/1xZ99v+Z8Xr+f0v9v+f/7/j6+n/9f8sOtv+/5MGf+fT/+n/9f9D/76r/P7rT5+v/adHU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v6L4hb7HwAAAJqRu/8JcUsn+391z/8/tvHxmfb/Rf+v/9/4gP5f/6//ny3P/x/XU/9/4e3nnn/v9f92w15eX/+v//f8f/0/qzW1/j93/xPjlk72PwAAAPQgd/+T4hb7HwAAAJqRu//JcYv9DwAAAM3I3f+UuKWT/b+6/n/Wz/8v+n/9/8YH9P/6f/3/bOn/x/XU/5/J6+v/9f/6f/0/qzW1/j93/1Pjlk72PwAAAPQgd//T4hb7HwAAAJqRu//iuMX+BwAAgGbk7j8et3Sy//X/+9//P6D/1//H1f/r//X/+0//P07/v4T+X/+v/9f/s1JT6/9z918St3Sy/wEAAKAHufufHrfY/wAAANCM3P3PiFvsfwAAAGhG7v5nxi2d7H/9v+f/6/+X9/8X6P+D/l//P336/3H6/yX0/2fbz5+j/9f/6/853R77//tHftpeSf+fu/9ZcUsn+x8AAAB6kLv/2XGL/Q8AAADNyN3/nLjF/gcAAIBm5O5/btzSyf7X/+v/9f+e/3/G/f/2H3ob9P/D9P8HQ/8/bjL9/9qRwQ/r/2ff/3v+v/5f/88mU3v+f+7+58Utnex/AAAA6EHu/ufHLSP7f8+/mQ8AAAAcqtz9L4hbfP0fAAAAZi+rs9z9L4xbOtn/+n/9v/5f/+/5/8OvP9b/33Da+9P/T4v+f9xk+v8d6P/1/3N+//p//T/bTa3/z93/orilk/0PAAAAPcjdf2ncYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/h/v/U/+9/n939P+b37/+f/jHx6r6//w76v9H+///9fz/Pun/xx18/39U/7/576//30eH/f4b7/+PLft8/T9Dptb/5+6/LG7pZP8DAABAD3L3vzRusf8BAACgGbn7Xxa32P8AAADQjNz9L49bOtn/nv+v/9f/z6//9/z/kw7z+f+LA+//j+j/d0n/P87z/5fQ/+v/9f+e/89KTa3/z91/edzSyf4HAACAHlx+32Jj979isbD/AQAAYI5O/7MDW/9Aacjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrT6v/9/z/3dL/j9P/L6H/349+/khj/f8VO33+FPr/i/X/TMym/v+mUx8/rP4/d/+r45ZO9j8AAAD0IHf/a+IW+x8AAACakbv/tXGL/Q8AAADNyN3/urilk/2/7/3/sZ1fe+b9/6byRP+/+f3r/zfT/8ePB/2//v8A6P/H6f+X0P97/r/n/+v/WalT/f/mnw8Pq//P3f/6uKWT/Q8AAAA9yN3/hrjF/gcAAIBm5O6/Im6x/wEAAKAZufvfGLd0sv89/9/z//X/+n/9//Dr6//nSf8/Tv+/hP5f/6//1/+zUpue/3+aw+r/c/dfGbd0sv8BAACgB7n7r4pb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//n9/+//8uP5f/7/Q/+v/9f8Hotv+f23oV6Ltduj/b33E8f/f/BH9v/5f/6//1/+zApPo/0+c+rfL3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/2+OWPe7/f1npuzo4+n/P/9f/6//1/8Ovr/+fp277/13y/P8l9P/6f/2//p+VmkT/f9pf5+5/R9zi6/8AAADQjNz974xb7H8AAABoRu7+d8Ut9j8AAAA0I3f/u+OWTva//l//r/+fZf9/XnwX/f8E+//1xTD9/8HQ/4/T/y+h/9f/6//1/6zU1Pr/3P1Xxy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//1//Psv/3/P8J9/870f8fDP3/OP3/YrG4ZuQNDPX/J47q//X/+n/9P2doav1/7v73xy2d7H8AAADoQe7+a+IW+x8AAACakbv/2rjF/gcAAIBm5O7/QNzSyf7X/+v/9f/6f/3/8Ovr/+dJ/z9O/7+E5//r//X/+n9Wamr9f+7+6+KWTvY/AAAA9CB3//Vxi/0PAAAAzcjd/8G4xf4HAACAZuTuvyFu6WT/6//1//p//f++9P/H9f9b6f8Pxv71/wv9v/5f/7+E/l//r/9nq4Pq/++Pn++X9f+5+z8Ut3Sy/wEAAKAHuftvjFvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/e/7/8Ovr/+fJ8//H6f+X0P/r//X/+n9W6qD6/516/61/nbv/o3FLJ/sfAAAAepC7/6a4xf4HAACAZuTuvzlusf8BAACgGbn7Pxa3dLL/9f/6/839/2Kh/9f/6/9POoD+f32h/185/f84/f8S+v82+/9/WDTU/x/b8fP1/0zR1Pr/3P0fj1s62f8AAADQg9z9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWlvb/Azunb/Pv/49u+UT9/2KxuPMiz//X/4+8vv5/Mv1//VPV/6+O/n/cv//XPXes7+Y76v/1/y31/57/r//n0Eyt/8/d/+m4paX9DwAAAJ3L3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDNy938ubulk/8+//9/6ifr/xVk9/1//v/EB/b/+X/8/W2fb31+5Hr+mtdv/e/7/GP3/0n5+bYd/71no//X/+n8GTK3/z93/+bilk/0PAAAAPcjdf0vcYv8DAABAM3L33xq32P8AAADQjNz9X4hbOtn/+n/9/5z6/3X9f/X/6/p//b/+f9BUnv9/3nn/d5v+X//fYv8/Rv+v/9f/s9XU+v/c/V+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9v/2/v+cxclC9aSh/j8aNf3/afT/m9+/5/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v//2P75+n9aNLX+P3f/bXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvz1u6WT/e/6//l//r//X/w+/vv5/nvT/4/T/S+j/z76fz59V9f/zff7/P+r/WZ2p9f+5+78et2wMv//85zP8nwkAAABMSO7+b8QtnXz9HwAAAHqQu/+OuMX+BwAAgGbk7v9m3NLJ/tf/6//1//p//f/w6+v/50n/P07/v0Q//f/60AcPu58/W4f9/pvp/z3/nxWaWv+fu/9bcUsn+x8AAADadt/Gt7n7vx232P8AAADQjNz934lb7H8AAABoRu7+O+OWTva//l//337//zD9/5bX1//r/1um/89f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffFbd0sv8BAACgB7n7vxu32P8AAADQjNz934tb7H8AAABoRu7+78ctnex//X9f/f/aosf+3/P/9f/6/57Mp/+/6sjQRz3/X/+v/5/v+9f/6//Zbmr9f+7+u9eOdLn/AQAAYK4e8t+PvGu33/fujW/XFz+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/576P//aeTz9f8MmVr/n7v/x3HLacNv8P+gBwAAADg8Y78pNSB3/0/ilk6+/g8AAAA9yN3/07hl2/4/scs/1Q4AAABMTe7+n8UtnXz9X/8/8f5/sU/9f3w//f9J+n/9/9Dr6//nSf8/7iz7/xNr+n/9/wj9f/v9/xj9P0Om1v/n7r/xukWX+x8AAAAatel3FH6+8e364p64xf4HAACAZuTu/0XcYv8DAABAM3L3/zJu6WT/6/8n3v+f0fP/j9V/8vz/zvv/S9cHX1//r/9vmf5/nOf/L6H/1//r//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/2VHF4t97f938fx//X8f/f8Or99O//+v5x6/5aEPv/Zq/T+nHGT/nz8W9P/6f/3/Sfp//b/+n62m9vz/3P2/i1s62f8AAADQg9z998Yt9j8AAAA0I3f/7+OWB/f/zYf1rgAAAIBVyt3/h7ilk6//6/9bfP7/PPv//Gd9CP3/8fn1/9kU997/e/6//n87z/8fp/9fQv+v/9f/6/9Zqan1/7n7/xi3dLL/AQAAoAe5+/8Ut+T+X9vzb90DAAAAE5O7/89xi6//AwAAQDNy998Xt3Sy//X/+v+p9P/J8/9PfZ7n/5+k/9f/74X+f5z+fwn9v/5f/6//Z6Wm1v/n7v9L3NLJ/gcAAIAe5O6/P26x/wEAAKAZufv/GrfY/wAAANCM3P1/i1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fQ/+v/9f/6f1Zqav1/7v6/BwAA//+l7G5O") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 835.236496ms ago: executing program 2 (id=3810): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@overlay={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "987b1554"}}) 764.832663ms ago: executing program 4 (id=3811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 764.504723ms ago: executing program 1 (id=3812): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x20000000, 0x4) 764.320003ms ago: executing program 2 (id=3813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) 735.888976ms ago: executing program 4 (id=3814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000005ac0)) 676.560642ms ago: executing program 2 (id=3815): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f00000008c0)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@nodecompose}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@force}, {@type={'type', 0x3d, "928fff1b"}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$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") syz_usb_connect(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c9180200090504"], 0x0) 644.494845ms ago: executing program 1 (id=3816): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) 572.798712ms ago: executing program 4 (id=3817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x8, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 553.387764ms ago: executing program 4 (id=3818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@dellink={0x34, 0x11, 0x82d, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc008}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) 547.619915ms ago: executing program 1 (id=3819): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a26f2c6a42c1df48b34291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 336.887136ms ago: executing program 4 (id=3820): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0f95f4", 0x3}], 0x1}, 0x88) 224.489597ms ago: executing program 4 (id=3821): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0502904431000000010902120001000080040904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 0s ago: executing program 3 (id=3822): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x35, 0x2d, 0x31]}}}, 0x64}]}) kernel console output (not intermixed with test programs): onfig 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.837454][ T9437] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 173.860425][ T9437] netlink: 'syz.4.2317': attribute type 3 has an invalid length. [ 173.879972][ T9437] __nla_validate_parse: 6 callbacks suppressed [ 173.879985][ T9437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2317'. [ 173.946110][ T13] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 173.965185][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.985135][ T13] usb 1-1: Product: syz [ 173.990184][ T21] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 173.995620][ T13] usb 1-1: Manufacturer: syz [ 173.997866][ T21] ipheth: probe of 2-1:0.196 failed with error -71 [ 174.002420][ T13] usb 1-1: SerialNumber: syz [ 174.027897][ T13] usb 1-1: config 0 descriptor?? [ 174.042897][ T21] usb 2-1: USB disconnect, device number 17 [ 174.300112][ T5036] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.307840][ T4256] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 174.340255][ T4263] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.520583][ T13] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 174.550291][ T5036] usb 3-1: Using ep0 maxpacket: 32 [ 174.555506][ T4256] usb 4-1: Using ep0 maxpacket: 32 [ 174.562163][ T13] usb 1-1: USB disconnect, device number 14 [ 174.607228][ T9455] loop1: detected capacity change from 0 to 512 [ 174.610231][ T4263] usb 5-1: Using ep0 maxpacket: 8 [ 174.635751][ T9455] EXT4-fs (loop1): Mount option "journal_async_commit" incompatible with ext2 [ 174.670227][ T5036] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.678313][ T5036] usb 3-1: config 0 has no interface number 0 [ 174.684836][ T4256] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 174.693901][ T4256] usb 4-1: config 0 has no interface number 0 [ 174.800259][ T4263] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 174.809274][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.870315][ T5036] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 174.879508][ T4256] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 174.888663][ T5036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.896702][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.904764][ T5036] usb 3-1: Product: syz [ 174.908919][ T5036] usb 3-1: Manufacturer: syz [ 174.913561][ T4256] usb 4-1: Product: syz [ 174.917788][ T4256] usb 4-1: Manufacturer: syz [ 174.920191][ T21] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 174.922432][ T5036] usb 3-1: SerialNumber: syz [ 174.934588][ T4256] usb 4-1: SerialNumber: syz [ 174.940548][ T4256] usb 4-1: config 0 descriptor?? [ 174.948530][ T5036] usb 3-1: config 0 descriptor?? [ 174.970435][ T4263] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 174.979726][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.987795][ T4263] usb 5-1: Product: syz [ 174.991996][ T4263] usb 5-1: Manufacturer: syz [ 174.996586][ T4263] usb 5-1: SerialNumber: syz [ 175.002256][ T4256] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 175.003560][ T4263] usb 5-1: config 0 descriptor?? [ 175.021768][ T5036] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.031009][ T4256] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 175.038075][ T5036] usb 3-1: selecting invalid altsetting 1 [ 175.044331][ T5036] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.054327][ T4263] powermate: probe of 5-1:0.0 failed with error -5 [ 175.066041][ T5036] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.089530][ T5036] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.098269][ T5036] usb 3-1: media controller created [ 175.112889][ T5036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.180219][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 175.230411][ T5036] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 175.239250][ T5036] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 175.249773][ T4256] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 175.281823][ T5043] usb 5-1: USB disconnect, device number 18 [ 175.293999][ T5036] DVB: Unable to find symbol mxl5005s_attach() [ 175.301507][ T21] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 175.309877][ T21] usb 2-1: config 4 has no interface number 0 [ 175.316285][ T21] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 94, changing to 10 [ 175.327973][ T21] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 42958, setting to 1024 [ 175.339352][ T21] usb 2-1: config 4 interface 228 has no altsetting 0 [ 175.346200][ T4263] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.440280][ T4256] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 175.449455][ T5036] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 175.461466][ T4256] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 175.482302][ T4256] usb 4-1: USB disconnect, device number 16 [ 175.488513][ T4256] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 175.512894][ T5036] usb 3-1: USB disconnect, device number 17 [ 175.513095][ T21] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 175.575996][ T21] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 175.586796][ T21] usb 2-1: Product: syz [ 175.596528][ T4263] usb 1-1: Using ep0 maxpacket: 8 [ 175.602023][ T21] usb 2-1: Manufacturer: syz [ 175.606621][ T21] usb 2-1: SerialNumber: syz [ 175.620340][ T5043] Bluetooth: hci2: command 0x0406 tx timeout [ 175.620346][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 175.620381][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 175.637739][ T9455] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 175.639418][ T4297] Bluetooth: hci4: command 0x0406 tx timeout [ 175.651895][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 175.730198][ T4263] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 175.738525][ T4263] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.748656][ T4263] usb 1-1: config 0 has no interface number 0 [ 175.754829][ T4263] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 175.765847][ T4263] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 175.778420][ T4263] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.791355][ T4263] usb 1-1: config 0 interface 52 has no altsetting 0 [ 175.910421][ T4263] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 175.919701][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 175.928121][ T4263] usb 1-1: Product: syz [ 175.934560][ T4263] usb 1-1: SerialNumber: syz [ 175.940569][ T4263] usb 1-1: config 0 descriptor?? [ 176.010452][ T21] usb 2-1: invalid MIDI in EP 0 [ 176.058784][ T21] snd-usb-audio: probe of 2-1:4.228 failed with error -22 [ 176.084584][ T9473] loop2: detected capacity change from 0 to 64 [ 176.099457][ T21] usb 2-1: USB disconnect, device number 18 [ 176.136702][ T9476] loop4: detected capacity change from 0 to 16 [ 176.181031][ T9476] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 176.201671][ T4263] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input15 [ 176.212520][ T3547] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 176.229499][ T3547] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 176.266618][ T9481] netlink: 'syz.3.2339': attribute type 21 has an invalid length. [ 176.279224][ T3547] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 176.309030][ T3547] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 176.314535][ T8677] udevd[8677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.318242][ T9476] cramfs: Error -3 while decompressing! [ 176.364767][ T9476] cramfs: ffffffff961f0f68(453)->ffff88805681d000(4096) [ 176.488093][ T5036] usb 1-1: USB disconnect, device number 15 [ 176.573747][ T9492] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 176.737187][ T9505] loop1: detected capacity change from 0 to 64 [ 176.814140][ T9508] loop3: detected capacity change from 0 to 2048 [ 176.880497][ T21] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 176.939063][ T9517] netlink: 'syz.1.2352': attribute type 21 has an invalid length. [ 176.990778][ T9508] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.092770][ T9523] loop0: detected capacity change from 0 to 16 [ 177.120233][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 177.150734][ T9523] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 177.215531][ T9523] cramfs: Error -3 while decompressing! [ 177.237900][ T9523] cramfs: ffffffff961f0f68(453)->ffff8880562b5000(4096) [ 177.247240][ T21] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 177.268767][ T21] usb 3-1: config 0 has no interface number 0 [ 177.440392][ T21] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 177.459656][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.490027][ T21] usb 3-1: Product: syz [ 177.494314][ T21] usb 3-1: Manufacturer: syz [ 177.520153][ T21] usb 3-1: SerialNumber: syz [ 177.543796][ T21] usb 3-1: config 0 descriptor?? [ 177.578550][ T9562] syz.1.2373 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 177.612282][ T21] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 177.622995][ T21] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 177.840324][ T21] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 178.025295][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 178.052704][ T9600] loop1: detected capacity change from 0 to 256 [ 178.062099][ T21] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 178.079702][ T9595] loop0: detected capacity change from 0 to 4096 [ 178.093506][ T21] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 178.116656][ T21] usb 3-1: USB disconnect, device number 18 [ 178.135928][ T9595] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 178.140020][ T21] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 179.169163][ T9660] loop2: detected capacity change from 0 to 4096 [ 179.253590][ T9660] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 179.563880][ T9704] netlink: 'syz.3.2438': attribute type 32 has an invalid length. [ 179.756450][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 179.828295][ T9723] loop4: detected capacity change from 0 to 256 [ 179.859954][ T9715] loop3: detected capacity change from 0 to 4096 [ 179.916133][ T9729] loop1: detected capacity change from 0 to 4096 [ 179.935782][ T9715] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 179.963504][ T9733] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 180.007472][ T9729] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 180.042492][ T9729] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 180.127845][ T9738] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.160307][ T5036] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 180.179912][ T9729] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 180.233796][ T9729] Remounting filesystem read-only [ 180.362152][ T9749] loop4: detected capacity change from 0 to 256 [ 180.404304][ T9750] loop3: detected capacity change from 0 to 8 [ 180.494857][ T9749] FAT-fs (loop4): Directory bread(block 64) failed [ 180.507510][ T9750] SQUASHFS error: lzo decompression failed, data probably corrupt [ 180.515519][ T9749] FAT-fs (loop4): Directory bread(block 65) failed [ 180.515605][ T9749] FAT-fs (loop4): Directory bread(block 66) failed [ 180.515632][ T9749] FAT-fs (loop4): Directory bread(block 67) failed [ 180.515690][ T9749] FAT-fs (loop4): Directory bread(block 68) failed [ 180.533199][ T9750] SQUASHFS error: Failed to read block 0x1c0: -5 [ 180.565295][ T9749] FAT-fs (loop4): Directory bread(block 69) failed [ 180.605498][ T5036] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 180.618051][ T9749] FAT-fs (loop4): Directory bread(block 70) failed [ 180.624244][ T5036] usb 1-1: config 0 has no interface number 0 [ 180.650078][ T9750] SQUASHFS error: Unable to read metadata cache entry [1be] [ 180.656808][ T9749] FAT-fs (loop4): Directory bread(block 71) failed [ 180.658075][ T5036] usb 1-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 180.679445][ T5036] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 180.711377][ T9749] FAT-fs (loop4): Directory bread(block 72) failed [ 180.712937][ T5036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.731528][ T9749] FAT-fs (loop4): Directory bread(block 73) failed [ 180.750367][ T9759] netlink: 'syz.1.2468': attribute type 32 has an invalid length. [ 180.787534][ T5036] usb 1-1: config 0 descriptor?? [ 180.852284][ T5036] usb 1-1: Found UVC 0.00 device (8086:0b5b) [ 180.859355][ T5036] usb 1-1: No valid video chain found. [ 181.061512][ T4256] usb 1-1: USB disconnect, device number 16 [ 181.110607][ T9776] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 181.317142][ T9790] netlink: 'syz.2.2482': attribute type 32 has an invalid length. [ 181.557152][ T9811] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 181.568451][ T9806] xt_CT: No such helper "netbios-ns" [ 181.746084][ T9825] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2500'. [ 181.778792][ T9825] unsupported nlmsg_type 40 [ 182.126905][ T9855] loop0: detected capacity change from 0 to 256 [ 182.227374][ T9855] FAT-fs (loop0): Directory bread(block 64) failed [ 182.261551][ T9868] loop3: detected capacity change from 0 to 1024 [ 182.267400][ T9855] FAT-fs (loop0): Directory bread(block 65) failed [ 182.288140][ T9855] FAT-fs (loop0): Directory bread(block 66) failed [ 182.326790][ T9855] FAT-fs (loop0): Directory bread(block 67) failed [ 182.333776][ T9868] EXT4-fs (loop3): #clusters per group too big: 24576 [ 182.360357][ T9855] FAT-fs (loop0): Directory bread(block 68) failed [ 182.378856][ T9855] FAT-fs (loop0): Directory bread(block 69) failed [ 182.401090][ T9855] FAT-fs (loop0): Directory bread(block 70) failed [ 182.407643][ T9855] FAT-fs (loop0): Directory bread(block 71) failed [ 182.422403][ T9876] loop4: detected capacity change from 0 to 8 [ 182.455063][ T9855] FAT-fs (loop0): Directory bread(block 72) failed [ 182.467148][ T9855] FAT-fs (loop0): Directory bread(block 73) failed [ 182.500513][ T4297] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 182.529437][ T9876] SQUASHFS error: lzo decompression failed, data probably corrupt [ 182.550674][ T9876] SQUASHFS error: Failed to read block 0x1c0: -5 [ 182.575675][ T9876] SQUASHFS error: Unable to read metadata cache entry [1be] [ 182.608313][ T9885] overlayfs: missing 'workdir' [ 182.822233][ T9895] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2537'. [ 182.860135][ T4263] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 182.870367][ T4297] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 182.886987][ T4297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.913244][ T4297] usb 3-1: config 0 has no interface number 0 [ 182.921953][ T9897] xt_CT: No such helper "netbios-ns" [ 182.949554][ T4297] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 182.972722][ T4297] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.081369][ T9908] loop3: detected capacity change from 0 to 4096 [ 183.110246][ T4263] usb 2-1: Using ep0 maxpacket: 8 [ 183.125311][ T9908] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 183.157712][ T9908] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 183.180343][ T4297] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 183.196379][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.206469][ T4297] usb 3-1: Product: syz [ 183.227905][ T4297] usb 3-1: Manufacturer: syz [ 183.233958][ T9915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.234243][ T4263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.274084][ T4297] usb 3-1: SerialNumber: syz [ 183.281297][ T4297] usb 3-1: config 0 descriptor?? [ 183.287274][ T9908] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 183.297169][ T4263] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.307519][ T4263] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.321292][ T4263] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.327968][ T9908] Remounting filesystem read-only [ 183.371458][ T9918] loop0: detected capacity change from 0 to 8 [ 183.458308][ T9918] SQUASHFS error: lzo decompression failed, data probably corrupt [ 183.490484][ T4263] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 183.499579][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.502782][ T9918] SQUASHFS error: Failed to read block 0x1c0: -5 [ 183.519119][ T9918] SQUASHFS error: Unable to read metadata cache entry [1be] [ 183.526611][ T4263] usb 2-1: Product: syz [ 183.526628][ T4263] usb 2-1: Manufacturer: syz [ 183.555589][ T4263] usb 2-1: SerialNumber: syz [ 183.567937][ T4263] usb 2-1: config 0 descriptor?? [ 183.634936][ T4263] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 183.719803][ T9933] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2549'. [ 183.771639][ T4297] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 183.805220][ T4297] usb 3-1: USB disconnect, device number 19 [ 183.851224][ T4263] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 183.859324][ T4263] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 183.872895][ T4263] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 183.929159][ T9943] syz.4.2568 (9943): drop_caches: 0 [ 184.096735][ T9955] loop0: detected capacity change from 0 to 1024 [ 184.145302][ T5043] usb 2-1: USB disconnect, device number 19 [ 184.197895][ T9955] EXT4-fs (loop0): #clusters per group too big: 24576 [ 184.360968][ T9975] netlink: 'syz.3.2573': attribute type 1 has an invalid length. [ 184.409459][ T9975] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2573'. [ 184.479865][ T9985] loop2: detected capacity change from 0 to 8 [ 184.549761][ T9985] SQUASHFS error: lzo decompression failed, data probably corrupt [ 184.586378][ T9985] SQUASHFS error: Failed to read block 0x1c0: -5 [ 184.608827][ T9985] SQUASHFS error: Unable to read metadata cache entry [1be] [ 185.069363][T10021] syz.2.2596 (10021): drop_caches: 0 [ 185.139611][T10024] loop4: detected capacity change from 0 to 512 [ 185.347325][T10024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.432580][T10024] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.544155][T10024] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 185.571768][T10024] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 185.582201][T10024] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.2599: Failed to acquire dquot type 0 [ 185.659475][T10015] loop0: detected capacity change from 0 to 32768 [ 185.796786][T10015] XFS (loop0): Mounting V5 Filesystem [ 185.831498][T10042] loop1: detected capacity change from 0 to 32768 [ 185.849393][T10042] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 185.862788][T10042] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 185.876617][T10042] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 185.887680][ T5043] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 185.895376][ T5043] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 185.928260][T10015] XFS (loop0): Ending clean mount [ 185.938852][ T5043] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 185.950325][ T5043] gfs2: fsid=syz:syz.0: jid=0: Done [ 185.956937][T10042] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 185.987044][ T4194] XFS (loop0): Unmounting Filesystem [ 186.059500][T10056] loop4: detected capacity change from 0 to 256 [ 186.145101][T10060] syz.3.2611 (10060): drop_caches: 0 [ 186.231021][T10056] FAT-fs (loop4): Directory bread(block 64) failed [ 186.239988][T10056] FAT-fs (loop4): Directory bread(block 65) failed [ 186.275124][T10056] FAT-fs (loop4): Directory bread(block 66) failed [ 186.333599][T10056] FAT-fs (loop4): Directory bread(block 67) failed [ 186.363120][T10056] FAT-fs (loop4): Directory bread(block 68) failed [ 186.369686][T10056] FAT-fs (loop4): Directory bread(block 69) failed [ 186.380328][T10056] FAT-fs (loop4): Directory bread(block 70) failed [ 186.387031][T10056] FAT-fs (loop4): Directory bread(block 71) failed [ 186.440744][T10056] FAT-fs (loop4): Directory bread(block 72) failed [ 186.447312][T10056] FAT-fs (loop4): Directory bread(block 73) failed [ 186.468705][T10071] loop2: detected capacity change from 0 to 1024 [ 186.550811][T10077] loop3: detected capacity change from 0 to 64 [ 186.580927][T10078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.617292][T10071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.688808][T10071] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.746922][T10086] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2624'. [ 187.117208][T10110] loop2: detected capacity change from 0 to 256 [ 187.230305][T10115] loop1: detected capacity change from 0 to 1024 [ 187.238708][T10110] FAT-fs (loop2): Directory bread(block 64) failed [ 187.247110][T10116] loop0: detected capacity change from 0 to 512 [ 187.253469][T10110] FAT-fs (loop2): Directory bread(block 65) failed [ 187.270362][T10110] FAT-fs (loop2): Directory bread(block 66) failed [ 187.276916][T10110] FAT-fs (loop2): Directory bread(block 67) failed [ 187.294171][T10110] FAT-fs (loop2): Directory bread(block 68) failed [ 187.305986][T10120] loop3: detected capacity change from 0 to 256 [ 187.320401][T10110] FAT-fs (loop2): Directory bread(block 69) failed [ 187.334420][T10110] FAT-fs (loop2): Directory bread(block 70) failed [ 187.336574][T10115] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.357533][T10110] FAT-fs (loop2): Directory bread(block 71) failed [ 187.360476][T10115] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.374660][T10116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.390423][T10116] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.401087][T10110] FAT-fs (loop2): Directory bread(block 72) failed [ 187.418256][T10110] FAT-fs (loop2): Directory bread(block 73) failed [ 187.483924][T10120] FAT-fs (loop3): Directory bread(block 64) failed [ 187.527380][ T150] block nbd1: Attempted send on invalid socket [ 187.533726][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.550387][T10126] vxfs: unable to read disk superblock at 1 [ 187.557096][ T1092] block nbd1: Attempted send on invalid socket [ 187.563483][ T1092] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.574898][T10120] FAT-fs (loop3): Directory bread(block 65) failed [ 187.589794][T10126] vxfs: unable to read disk superblock at 8 [ 187.600225][T10126] vxfs: can't find superblock. [ 187.600352][T10116] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 187.605186][T10120] FAT-fs (loop3): Directory bread(block 66) failed [ 187.616778][T10116] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 187.633313][T10116] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.2637: Failed to acquire dquot type 0 [ 187.679887][T10120] FAT-fs (loop3): Directory bread(block 67) failed [ 187.707808][T10120] FAT-fs (loop3): Directory bread(block 68) failed [ 187.787348][T10120] FAT-fs (loop3): Directory bread(block 69) failed [ 187.827021][T10120] FAT-fs (loop3): Directory bread(block 70) failed [ 187.862947][T10120] FAT-fs (loop3): Directory bread(block 71) failed [ 187.869574][T10120] FAT-fs (loop3): Directory bread(block 72) failed [ 187.937308][T10120] FAT-fs (loop3): Directory bread(block 73) failed [ 188.063536][T10105] loop4: detected capacity change from 0 to 32768 [ 188.144626][T10105] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2633 (10105) [ 188.285355][T10105] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 188.355378][T10150] loop0: detected capacity change from 0 to 1024 [ 188.367396][T10105] BTRFS info (device loop4): enabling ssd optimizations [ 188.376655][T10105] BTRFS info (device loop4): turning on sync discard [ 188.385791][T10105] BTRFS info (device loop4): using free space tree [ 188.395046][T10105] BTRFS info (device loop4): has skinny extents [ 188.444480][T10156] loop3: detected capacity change from 0 to 256 [ 188.459823][T10150] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.476986][T10150] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.570279][ T5043] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.613649][T10156] FAT-fs (loop3): Directory bread(block 64) failed [ 188.641767][T10156] FAT-fs (loop3): Directory bread(block 65) failed [ 188.671315][T10156] FAT-fs (loop3): Directory bread(block 66) failed [ 188.678150][T10156] FAT-fs (loop3): Directory bread(block 67) failed [ 188.685673][T10156] FAT-fs (loop3): Directory bread(block 68) failed [ 188.705317][T10156] FAT-fs (loop3): Directory bread(block 69) failed [ 188.706150][T10136] loop1: detected capacity change from 0 to 32768 [ 188.717215][T10156] FAT-fs (loop3): Directory bread(block 70) failed [ 188.744220][T10156] FAT-fs (loop3): Directory bread(block 71) failed [ 188.751276][T10156] FAT-fs (loop3): Directory bread(block 72) failed [ 188.757816][T10156] FAT-fs (loop3): Directory bread(block 73) failed [ 188.848566][T10136] XFS (loop1): Mounting V5 Filesystem [ 188.880149][ T5043] usb 3-1: Using ep0 maxpacket: 8 [ 188.886040][T10105] BTRFS info (device loop4): balance: start -susage=8589934720,drange=7..107,limit=1..3 [ 188.934395][T10105] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 188.943415][T10105] BTRFS info (device loop4): space_info 2 has 0 free, is not full [ 188.951882][T10105] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 188.965598][T10105] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 188.974800][T10105] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 188.982538][T10105] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 188.990256][T10105] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 188.998072][T10105] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 189.010454][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.068510][ T5043] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.096972][T10191] loop3: detected capacity change from 0 to 512 [ 189.106365][T10105] BTRFS info (device loop4): relocating block group 1048576 flags system [ 189.136034][ T5043] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.164228][T10191] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.181290][ T5043] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.206530][T10136] XFS (loop1): Ending clean mount [ 189.257246][T10191] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.370235][ T5043] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 189.372712][T10105] BTRFS info (device loop4): balance: ended with status: 0 [ 189.392887][ T4183] XFS (loop1): Unmounting Filesystem [ 189.400924][ T5043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.411167][ T5043] usb 3-1: Product: syz [ 189.417391][T10191] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 189.428699][ T5043] usb 3-1: Manufacturer: syz [ 189.438558][ T5043] usb 3-1: SerialNumber: syz [ 189.464318][ T5043] usb 3-1: config 0 descriptor?? [ 189.475438][T10191] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 189.496086][T10191] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.2656: Failed to acquire dquot type 0 [ 189.538257][ T5043] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 189.653283][T10202] loop0: detected capacity change from 0 to 64 [ 189.771605][ T5043] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 189.779134][ T5043] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 189.787853][ T5043] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 189.965881][T10211] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.987685][T10209] loop0: detected capacity change from 0 to 256 [ 190.006493][ T4297] usb 3-1: USB disconnect, device number 20 [ 190.095455][T10209] FAT-fs (loop0): Directory bread(block 64) failed [ 190.110326][T10209] FAT-fs (loop0): Directory bread(block 65) failed [ 190.116924][T10209] FAT-fs (loop0): Directory bread(block 66) failed [ 190.167072][T10209] FAT-fs (loop0): Directory bread(block 67) failed [ 190.199749][T10209] FAT-fs (loop0): Directory bread(block 68) failed [ 190.206203][T10217] loop3: detected capacity change from 0 to 4096 [ 190.232991][T10209] FAT-fs (loop0): Directory bread(block 69) failed [ 190.239635][T10209] FAT-fs (loop0): Directory bread(block 70) failed [ 190.253478][T10217] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 190.317801][T10209] FAT-fs (loop0): Directory bread(block 71) failed [ 190.341105][T10209] FAT-fs (loop0): Directory bread(block 72) failed [ 190.380616][T10209] FAT-fs (loop0): Directory bread(block 73) failed [ 190.617176][T10231] loop0: detected capacity change from 0 to 256 [ 190.648356][ T150] block nbd3: Attempted send on invalid socket [ 190.648409][ T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.651363][T10237] vxfs: unable to read disk superblock at 1 [ 190.651607][ T150] block nbd3: Attempted send on invalid socket [ 190.651628][ T150] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.651690][T10237] vxfs: unable to read disk superblock at 8 [ 190.651700][T10237] vxfs: can't find superblock. [ 190.676232][T10231] FAT-fs (loop0): Directory bread(block 64) failed [ 190.676270][T10231] FAT-fs (loop0): Directory bread(block 65) failed [ 190.676334][T10231] FAT-fs (loop0): Directory bread(block 66) failed [ 190.676363][T10231] FAT-fs (loop0): Directory bread(block 67) failed [ 190.676427][T10231] FAT-fs (loop0): Directory bread(block 68) failed [ 190.676457][T10231] FAT-fs (loop0): Directory bread(block 69) failed [ 190.676526][T10231] FAT-fs (loop0): Directory bread(block 70) failed [ 190.676555][T10231] FAT-fs (loop0): Directory bread(block 71) failed [ 190.676639][T10231] FAT-fs (loop0): Directory bread(block 72) failed [ 190.676668][T10231] FAT-fs (loop0): Directory bread(block 73) failed [ 190.950566][T10221] loop4: detected capacity change from 0 to 32768 [ 191.018671][T10247] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.239657][T10221] XFS (loop4): Mounting V5 Filesystem [ 191.259648][T10266] loop1: detected capacity change from 0 to 512 [ 191.296239][T10274] loop2: detected capacity change from 0 to 256 [ 191.428220][T10221] XFS (loop4): Ending clean mount [ 191.463153][T10266] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2687: invalid indirect mapped block 10 (level 1) [ 191.496232][T10274] FAT-fs (loop2): Directory bread(block 64) failed [ 191.513499][T10274] FAT-fs (loop2): Directory bread(block 65) failed [ 191.513562][ T4191] XFS (loop4): Unmounting Filesystem [ 191.531743][T10266] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2687: invalid indirect mapped block 8 (level 1) [ 191.543041][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2697'. [ 191.545725][T10274] FAT-fs (loop2): Directory bread(block 66) failed [ 191.561061][T10274] FAT-fs (loop2): Directory bread(block 67) failed [ 191.567697][T10274] FAT-fs (loop2): Directory bread(block 68) failed [ 191.573079][T10266] EXT4-fs (loop1): 1 truncate cleaned up [ 191.574519][T10274] FAT-fs (loop2): Directory bread(block 69) failed [ 191.586643][T10274] FAT-fs (loop2): Directory bread(block 70) failed [ 191.589126][T10266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.593296][T10274] FAT-fs (loop2): Directory bread(block 71) failed [ 191.593373][T10274] FAT-fs (loop2): Directory bread(block 72) failed [ 191.593401][T10274] FAT-fs (loop2): Directory bread(block 73) failed [ 191.638345][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2697'. [ 191.647544][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2697'. [ 191.727127][T10266] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2687: inode has both inline data and extents flags [ 192.290123][ T5044] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.339454][T10312] loop4: detected capacity change from 0 to 4096 [ 192.428825][T10312] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 192.489995][T10332] loop2: detected capacity change from 0 to 256 [ 192.540251][ T5044] usb 4-1: Using ep0 maxpacket: 16 [ 192.569091][T10332] FAT-fs (loop2): Directory bread(block 64) failed [ 192.578257][T10332] FAT-fs (loop2): Directory bread(block 65) failed [ 192.600738][T10332] FAT-fs (loop2): Directory bread(block 66) failed [ 192.620281][T10332] FAT-fs (loop2): Directory bread(block 67) failed [ 192.655631][T10332] FAT-fs (loop2): Directory bread(block 68) failed [ 192.683416][ T5044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 192.691142][T10342] netlink: 'syz.0.2725': attribute type 1 has an invalid length. [ 192.701359][T10332] FAT-fs (loop2): Directory bread(block 69) failed [ 192.701457][T10332] FAT-fs (loop2): Directory bread(block 70) failed [ 192.701486][T10332] FAT-fs (loop2): Directory bread(block 71) failed [ 192.725765][T10332] FAT-fs (loop2): Directory bread(block 72) failed [ 192.733009][T10332] FAT-fs (loop2): Directory bread(block 73) failed [ 192.756625][T10342] netlink: 'syz.0.2725': attribute type 2 has an invalid length. [ 192.781086][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'. [ 192.860334][ T5044] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 192.880702][ T5044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.913452][ T5044] usb 4-1: Product: syz [ 192.917648][ T5044] usb 4-1: Manufacturer: syz [ 192.926012][T10348] loop0: detected capacity change from 0 to 256 [ 192.940072][ T5044] usb 4-1: SerialNumber: syz [ 192.958650][ T5044] usb 4-1: config 0 descriptor?? [ 193.020856][ T5044] hub 4-1:0.0: bad descriptor, ignoring hub [ 193.026790][ T5044] hub: probe of 4-1:0.0 failed with error -5 [ 193.035908][T10348] FAT-fs (loop0): Directory bread(block 64) failed [ 193.053164][T10348] FAT-fs (loop0): Directory bread(block 65) failed [ 193.059172][ T5044] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 193.067501][T10354] netlink: 'syz.2.2741': attribute type 11 has an invalid length. [ 193.081357][T10348] FAT-fs (loop0): Directory bread(block 66) failed [ 193.123166][T10348] FAT-fs (loop0): Directory bread(block 67) failed [ 193.153611][T10348] FAT-fs (loop0): Directory bread(block 68) failed [ 193.183986][T10348] FAT-fs (loop0): Directory bread(block 69) failed [ 193.210356][T10348] FAT-fs (loop0): Directory bread(block 70) failed [ 193.237725][T10348] FAT-fs (loop0): Directory bread(block 71) failed [ 193.237822][T10348] FAT-fs (loop0): Directory bread(block 72) failed [ 193.237849][T10348] FAT-fs (loop0): Directory bread(block 73) failed [ 193.325157][ T25] audit: type=1800 audit(1763209798.208:4): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2727" name="bus" dev="loop0" ino=1048634 res=0 errno=0 [ 193.517554][T10352] loop1: detected capacity change from 0 to 32768 [ 193.598702][T10352] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2729 (10352) [ 193.680987][T10352] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 193.695754][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'. [ 193.702780][T10376] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 193.718713][T10352] BTRFS info (device loop1): enabling ssd optimizations [ 193.726670][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'. [ 193.740376][T10376] netlink: 'syz.2.2739': attribute type 2 has an invalid length. [ 193.742964][T10375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2740'. [ 193.765106][T10352] BTRFS info (device loop1): turning on sync discard [ 193.772802][ T5044] usb 4-1: USB disconnect, device number 17 [ 193.779516][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'. [ 193.835300][T10352] BTRFS info (device loop1): using free space tree [ 193.851823][T10352] BTRFS info (device loop1): has skinny extents [ 193.927044][T10381] loop0: detected capacity change from 0 to 4096 [ 193.962994][T10381] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 193.979850][T10381] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 193.995570][T10381] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 194.007362][T10381] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 194.040347][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.057302][T10381] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 194.094562][T10381] ntfs: volume version 3.1. [ 194.126501][T10381] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 194.158745][T10381] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 194.197169][T10381] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 194.215644][T10352] BTRFS info (device loop1): balance: start -susage=8589934720,drange=7..107,limit=1..3 [ 194.225526][T10381] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 194.252398][T10352] BTRFS info (device loop1): left=0, need=98304, flags=2 [ 194.307711][T10352] BTRFS info (device loop1): space_info 2 has 0 free, is not full [ 194.315660][T10352] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 194.329287][T10352] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 194.337914][T10352] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 194.345603][T10352] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 194.353274][T10352] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 194.361132][T10352] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 194.654197][T10352] BTRFS info (device loop1): relocating block group 1048576 flags system [ 194.784862][T10352] BTRFS info (device loop1): balance: ended with status: 0 [ 194.895414][T10436] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.2762' sets config #0 [ 195.024578][T10432] loop4: detected capacity change from 0 to 4096 [ 195.235720][T10448] netlink: 'syz.3.2770': attribute type 11 has an invalid length. [ 195.248035][T10432] ntfs: volume version 3.1. [ 195.689946][T10475] netlink: 'syz.2.2780': attribute type 21 has an invalid length. [ 195.728629][T10475] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2780'. [ 195.845909][T10485] loop2: detected capacity change from 0 to 512 [ 196.006929][T10483] loop3: detected capacity change from 0 to 4096 [ 196.134080][T10483] ntfs: volume version 3.1. [ 196.238661][T10502] loop2: detected capacity change from 0 to 256 [ 196.335195][T10502] FAT-fs (loop2): Directory bread(block 64) failed [ 196.373413][T10502] FAT-fs (loop2): Directory bread(block 65) failed [ 196.389823][T10459] loop0: detected capacity change from 0 to 32768 [ 196.397905][T10508] kAFS: unable to lookup cell '.,' [ 196.409919][T10502] FAT-fs (loop2): Directory bread(block 66) failed [ 196.447261][T10502] FAT-fs (loop2): Directory bread(block 67) failed [ 196.474521][T10502] FAT-fs (loop2): Directory bread(block 68) failed [ 196.490831][T10459] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2775 (10459) [ 196.520138][T10502] FAT-fs (loop2): Directory bread(block 69) failed [ 196.540191][T10502] FAT-fs (loop2): Directory bread(block 70) failed [ 196.571111][T10502] FAT-fs (loop2): Directory bread(block 71) failed [ 196.604950][T10502] FAT-fs (loop2): Directory bread(block 72) failed [ 196.621445][T10459] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 196.632028][T10502] FAT-fs (loop2): Directory bread(block 73) failed [ 196.675353][T10459] BTRFS info (device loop0): enabling ssd optimizations [ 196.715159][T10459] BTRFS info (device loop0): turning on sync discard [ 196.760152][T10459] BTRFS info (device loop0): using free space tree [ 196.766733][T10459] BTRFS info (device loop0): has skinny extents [ 196.961037][T10540] loop3: detected capacity change from 0 to 64 [ 197.118544][T10505] loop4: detected capacity change from 0 to 32768 [ 197.159307][T10459] BTRFS info (device loop0): balance: start -susage=8589934720,drange=7..107,limit=1..3 [ 197.179895][T10505] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.2795 (10505) [ 197.208939][T10557] netlink: 'syz.1.2810': attribute type 21 has an invalid length. [ 197.228915][T10557] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2810'. [ 197.260307][T10459] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 197.268006][T10459] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 197.275981][T10459] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 197.289597][T10459] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 197.298454][T10459] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 197.306146][T10459] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 197.313815][T10459] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 197.321659][T10459] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 197.347778][T10505] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 197.420326][T10505] BTRFS info (device loop4): enabling ssd optimizations [ 197.459437][T10505] BTRFS info (device loop4): turning off barriers [ 197.499506][T10505] BTRFS info (device loop4): using free space tree [ 197.506913][T10570] loop1: detected capacity change from 0 to 1024 [ 197.522033][T10459] BTRFS info (device loop0): relocating block group 1048576 flags system [ 197.550224][T10505] BTRFS info (device loop4): has skinny extents [ 197.565955][T10574] loop3: detected capacity change from 0 to 512 [ 197.654791][T10459] BTRFS info (device loop0): balance: ended with status: 0 [ 197.657314][T10580] netlink: 'syz.2.2818': attribute type 16 has an invalid length. [ 197.710202][T10580] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2818'. [ 197.976832][T10598] program syz.1.2824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.013453][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'. [ 198.025421][T10595] loop2: detected capacity change from 0 to 64 [ 198.412436][T10619] syz.2.2831 (10619) used greatest stack depth: 20352 bytes left [ 198.636775][T10628] loop1: detected capacity change from 0 to 2048 [ 198.693885][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2839'. [ 198.719219][T10628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.994184][T10657] netlink: 'syz.0.2845': attribute type 5 has an invalid length. [ 199.017407][T10657] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2845'. [ 199.089567][T10659] overlayfs: workdir and upperdir must be separate subtrees [ 199.116126][T10665] loop1: detected capacity change from 0 to 64 [ 199.173090][ T25] kauditd_printk_skb: 42 callbacks suppressed [ 199.173103][ T25] audit: type=1800 audit(1763209804.058:8): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2842" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 199.432433][T10684] loop3: detected capacity change from 0 to 2048 [ 199.487626][T10684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.630177][T10652] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 199.870231][T10652] usb 1-1: Using ep0 maxpacket: 16 [ 200.001515][T10652] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 200.020117][T10652] usb 1-1: config 0 has no interface number 0 [ 200.026248][T10652] usb 1-1: config 0 interface 94 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 200.093962][T10652] usb 1-1: config 0 interface 94 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 200.130185][T10652] usb 1-1: config 0 interface 94 has no altsetting 0 [ 200.315925][T10652] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=4e.9b [ 200.327198][T10718] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2870'. [ 200.340227][T10652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.362932][T10652] usb 1-1: Product: syz [ 200.381038][T10652] usb 1-1: Manufacturer: syz [ 200.385900][T10652] usb 1-1: SerialNumber: syz [ 200.394096][T10718] 0ªX¹¦À: renamed from caif0 [ 200.418112][T10652] usb 1-1: config 0 descriptor?? [ 200.440940][T10718] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 200.450453][T10683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.498645][T10728] mmap: syz.1.2876 (10728) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 200.692211][T10745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.751200][T10652] keyspan 1-1:0.94: Keyspan 4 port adapter converter detected [ 200.770461][T10652] keyspan 1-1:0.94: found no endpoint descriptor for endpoint 81 [ 200.804559][T10652] keyspan 1-1:0.94: found no endpoint descriptor for endpoint 88 [ 200.845885][T10652] keyspan 1-1:0.94: found no endpoint descriptor for endpoint 1 [ 200.882972][T10652] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 200.911144][T10652] keyspan 1-1:0.94: found no endpoint descriptor for endpoint 2 [ 200.939763][T10652] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 200.971269][T10652] keyspan 1-1:0.94: found no endpoint descriptor for endpoint 4 [ 201.004075][T10652] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 201.033352][T10652] keyspan 1-1:0.94: found no endpoint descriptor for endpoint 6 [ 201.056978][T10652] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 201.092098][T10652] usb 1-1: USB disconnect, device number 17 [ 201.121007][T10652] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 201.157228][T10652] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 201.208107][T10652] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 201.274841][T10652] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 201.318110][T10652] keyspan 1-1:0.94: device disconnected [ 201.407224][T10788] loop3: detected capacity change from 0 to 1764 [ 201.488592][T10796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.720486][T10759] loop2: detected capacity change from 0 to 32768 [ 201.730453][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 201.764654][T10759] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.2893 (10759) [ 201.859814][T10759] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.883874][T10759] BTRFS info (device loop2): enabling ssd optimizations [ 201.897271][T10759] BTRFS info (device loop2): turning off barriers [ 201.927123][T10759] BTRFS info (device loop2): using free space tree [ 201.937944][T10759] BTRFS info (device loop2): has skinny extents [ 201.980247][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 202.120289][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 202.285510][T10844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.323176][ T7] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 202.340208][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.348215][ T7] usb 5-1: Product: syz [ 202.380576][ T7] usb 5-1: Manufacturer: syz [ 202.393777][ T7] usb 5-1: SerialNumber: syz [ 202.410256][ T7] usb 5-1: config 0 descriptor?? [ 202.459704][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 202.481107][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 202.526357][ T7] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 202.634343][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2934'. [ 202.823325][ T7] usb 5-1: USB disconnect, device number 19 [ 202.888819][T10872] loop1: detected capacity change from 0 to 64 [ 203.105524][T10884] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2946'. [ 203.400947][T10907] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.478925][T10914] loop1: detected capacity change from 0 to 16 [ 203.487520][T10917] loop0: detected capacity change from 0 to 128 [ 203.524554][T10917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 203.537460][T10922] loop2: detected capacity change from 0 to 256 [ 203.589957][T10914] erofs: (device loop1): mounted with root inode @ nid 36. [ 203.600539][T10917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.640832][T10922] exfat: Deprecated parameter 'namecase' [ 203.649272][T10914] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.682922][T10922] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d) [ 203.697084][T10928] netlink: 'syz.3.2967': attribute type 21 has an invalid length. [ 203.724037][T10914] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 203.760554][T10922] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 203.860167][T10936] fuse: Bad value for 'group_id' [ 204.041856][T10955] bond0: Error: Cannot enslave bond to itself. [ 204.106280][T10958] loop0: detected capacity change from 0 to 256 [ 204.277807][T10958] FAT-fs (loop0): Directory bread(block 64) failed [ 204.299013][T10958] FAT-fs (loop0): Directory bread(block 65) failed [ 204.330357][T10958] FAT-fs (loop0): Directory bread(block 66) failed [ 204.344120][T10958] FAT-fs (loop0): Directory bread(block 67) failed [ 204.385298][T10958] FAT-fs (loop0): Directory bread(block 68) failed [ 204.397892][T10958] FAT-fs (loop0): Directory bread(block 69) failed [ 204.428706][T10958] FAT-fs (loop0): Directory bread(block 70) failed [ 204.454916][T10958] FAT-fs (loop0): Directory bread(block 71) failed [ 204.458348][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 204.488110][T10958] FAT-fs (loop0): Directory bread(block 72) failed [ 204.507415][T10958] FAT-fs (loop0): Directory bread(block 73) failed [ 204.918478][T10972] loop1: detected capacity change from 0 to 32768 [ 205.014898][T10972] JBD2: Ignoring recovery information on journal [ 205.191251][T10972] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 205.262887][T10972] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 205.262994][T10972] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 205.410795][T10972] OCFS2: Returning error to the calling process. [ 205.452946][T11044] ieee802154 phy1 wpan1: encryption failed: -90 [ 205.471527][T11047] x_tables: ip_tables: osf match: only valid for protocol 6 [ 205.487381][T10972] (syz.1.2989,10972,0):ocfs2_setattr:1302 ERROR: status = -117 [ 205.555361][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3026'. [ 205.657694][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 205.950868][T11070] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3037'. [ 206.537858][T11057] loop1: detected capacity change from 0 to 32768 [ 206.545654][T11064] loop2: detected capacity change from 0 to 32768 [ 206.579092][T11064] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3033 (11064) [ 206.638980][T11064] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 206.674593][T11064] BTRFS info (device loop2): enabling auto defrag [ 206.696395][T11073] loop0: detected capacity change from 0 to 32768 [ 206.713344][T11064] BTRFS info (device loop2): force clearing of disk cache [ 206.730146][T11064] BTRFS info (device loop2): max_inline at 0 [ 206.737600][T11064] BTRFS info (device loop2): turning on sync discard [ 206.762551][T11064] BTRFS info (device loop2): using free space tree [ 206.807047][T11057] XFS (loop1): Mounting V5 Filesystem [ 206.837455][T11064] BTRFS info (device loop2): has skinny extents [ 206.858225][T11073] XFS (loop0): Mounting V5 Filesystem [ 206.932344][T11075] loop4: detected capacity change from 0 to 32768 [ 206.964433][T11077] loop3: detected capacity change from 0 to 32768 [ 206.979112][T11057] XFS (loop1): Ending clean mount [ 206.992728][T11075] XFS: attr2 mount option is deprecated. [ 207.002239][T11077] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.3040 (11077) [ 207.032240][T11073] XFS (loop0): Ending clean mount [ 207.041177][ T4183] XFS (loop1): Unmounting Filesystem [ 207.067531][ T4194] XFS (loop0): Unmounting Filesystem [ 207.146841][T11064] BTRFS info (device loop2): enabling ssd optimizations [ 207.167685][T11077] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 207.179044][T11077] BTRFS info (device loop3): disabling free space tree [ 207.186217][T11077] BTRFS info (device loop3): turning on flush-on-commit [ 207.194416][T11077] BTRFS info (device loop3): enabling auto defrag [ 207.201108][T11077] BTRFS info (device loop3): force clearing of disk cache [ 207.208397][T11077] BTRFS info (device loop3): setting nodatacow, compression disabled [ 207.216745][T11077] BTRFS info (device loop3): turning on async discard [ 207.225226][T11077] BTRFS info (device loop3): has skinny extents [ 207.260684][T11064] BTRFS info (device loop2): clearing free space tree [ 207.267984][T11064] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 207.294024][T11064] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 207.299225][T11075] XFS (loop4): Mounting V5 Filesystem [ 207.506057][T11077] BTRFS info (device loop3): enabling ssd optimizations [ 207.526977][T11064] BTRFS info (device loop2): creating free space tree [ 207.537735][T11064] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 207.547599][T11064] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 207.563385][T11075] XFS (loop4): Ending clean mount [ 207.577564][T11075] XFS (loop4): Quotacheck needed: Please wait. [ 207.761405][T11075] XFS (loop4): Quotacheck: Done. [ 208.072799][ T4191] XFS (loop4): Unmounting Filesystem [ 208.589577][T11141] loop1: detected capacity change from 0 to 32768 [ 208.682120][T11141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3041 (11141) [ 208.721126][T11144] loop0: detected capacity change from 0 to 32768 [ 208.739362][T11141] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.775691][T11141] BTRFS info (device loop1): using free space tree [ 208.783610][T11141] BTRFS info (device loop1): has skinny extents [ 209.079970][T11176] netlink: 'syz.4.3054': attribute type 12 has an invalid length. [ 209.129015][T11176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3054'. [ 209.270162][T11141] BTRFS info (device loop1): enabling ssd optimizations [ 209.446484][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4175) [ 209.725804][T11220] netlink: 'syz.3.3072': attribute type 4 has an invalid length. [ 209.790594][T11220] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3072'. [ 210.136154][T11252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3085'. [ 210.294025][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'. [ 210.351599][T11270] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3093'. [ 210.359782][T11268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3091'. [ 210.417784][T11268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3091'. [ 210.501091][ T4297] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 210.550768][T11268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3091'. [ 210.740394][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 210.759234][T11264] loop3: detected capacity change from 0 to 32768 [ 210.838729][T11264] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 210.857393][T11264] BTRFS info (device loop3): force clearing of disk cache [ 210.867073][ T4297] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 210.880299][ T4297] usb 1-1: config 254 has no interface number 0 [ 210.886615][ T4297] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 210.897625][T11264] BTRFS info (device loop3): force zlib compression, level 3 [ 210.920354][T11264] BTRFS info (device loop3): enabling disk space caching [ 210.936262][T11264] BTRFS info (device loop3): max_inline at 0 [ 210.942803][ T4297] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.965303][T11264] BTRFS info (device loop3): enabling auto defrag [ 210.985875][T11227] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 210.994090][ T4297] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.004787][T11264] BTRFS info (device loop3): disk space caching is enabled [ 211.022508][T11264] BTRFS info (device loop3): has skinny extents [ 211.028912][ T4297] usb 1-1: config 254 interface 235 has no altsetting 0 [ 211.200328][ T4297] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 211.209708][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.218547][ T4297] usb 1-1: Product: syz [ 211.223159][ T4297] usb 1-1: Manufacturer: syz [ 211.227769][ T4297] usb 1-1: SerialNumber: syz [ 211.250368][T11263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.281278][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'. [ 211.319415][T11264] BTRFS info (device loop3): enabling ssd optimizations [ 211.370330][T11227] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 211.389018][T11227] usb 2-1: config 0 has no interface number 0 [ 211.416135][T11227] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.447804][T11227] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.474455][T11263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.491258][ T4297] usbtest 1-1:254.235: Linux gadget zero [ 211.517301][ T4297] usbtest 1-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 211.566034][T11334] netlink: 'syz.2.3116': attribute type 12 has an invalid length. [ 211.623319][T11227] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 211.623372][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3116'. [ 211.642110][T11227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.662837][T11227] usb 2-1: Product: syz [ 211.667058][T11227] usb 2-1: Manufacturer: syz [ 211.698482][T11227] usb 2-1: SerialNumber: syz [ 211.714023][T11227] usb 2-1: config 0 descriptor?? [ 211.720673][ T4297] usb 1-1: USB disconnect, device number 18 [ 211.766302][T11227] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 211.795310][T11227] vmk80xx: probe of 2-1:0.255 failed with error -22 [ 211.805722][T11322] loop4: detected capacity change from 0 to 32768 [ 211.853348][T11338] loop2: detected capacity change from 0 to 512 [ 211.926824][T11322] JBD2: Ignoring recovery information on journal [ 211.934099][T11338] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 211.990695][T11225] usb 2-1: USB disconnect, device number 20 [ 211.999081][T11338] EXT4-fs (loop2): 1 truncate cleaned up [ 212.009549][T11338] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 212.037549][T11322] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.109185][T11322] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 212.109217][T11322] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 212.134117][T11322] OCFS2: Returning error to the calling process. [ 212.140508][T11322] (syz.4.3112,11322,0):ocfs2_setattr:1302 ERROR: status = -117 [ 212.208129][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 212.240135][ T4297] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 212.495421][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 212.520556][ T5031] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 212.583377][T11362] netlink: 'syz.1.3127': attribute type 4 has an invalid length. [ 212.621722][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.729002][T11352] loop0: detected capacity change from 0 to 32768 [ 212.790486][ T4297] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 212.800110][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.808326][ T4297] usb 4-1: Product: syz [ 212.813039][ T4297] usb 4-1: Manufacturer: syz [ 212.817910][ T4297] usb 4-1: SerialNumber: syz [ 212.824609][ T4297] usb 4-1: config 0 descriptor?? [ 212.855527][T11352] XFS (loop0): Mounting V5 Filesystem [ 212.860954][ T4297] usb 4-1: bad CDC descriptors [ 212.861324][ T4297] usb 4-1: unsupported MDLM descriptors [ 212.923444][ T5031] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 212.937644][ T5031] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 212.947775][ T5031] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.956772][T11352] XFS (loop0): Ending clean mount [ 212.961426][ T5031] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.974950][ T5031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.022409][ T4194] XFS (loop0): Unmounting Filesystem [ 213.058456][ T5031] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 213.114496][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.134787][ T5031] usb 4-1: USB disconnect, device number 18 [ 213.265648][ T5521] usb 3-1: USB disconnect, device number 21 [ 213.320608][ T5030] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 213.595114][T11394] loop0: detected capacity change from 0 to 32768 [ 213.627522][T11394] JBD2: Ignoring recovery information on journal [ 213.665827][T11394] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 213.714414][T11394] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 213.714443][T11394] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 213.730287][ T5030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 213.758798][T11394] OCFS2: Returning error to the calling process. [ 213.765588][T11394] (syz.0.3131,11394,0):ocfs2_setattr:1302 ERROR: status = -117 [ 213.867900][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 213.910322][ T5030] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 213.928116][ T5030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.952841][ T5030] usb 5-1: Product: syz [ 213.957132][ T5030] usb 5-1: Manufacturer: syz [ 213.970124][ T5030] usb 5-1: SerialNumber: syz [ 213.989208][ T5030] usb 5-1: config 0 descriptor?? [ 214.051231][ T5030] hub 5-1:0.0: bad descriptor, ignoring hub [ 214.057174][ T5030] hub: probe of 5-1:0.0 failed with error -5 [ 214.092080][ T5030] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 214.618887][T11410] loop2: detected capacity change from 0 to 32768 [ 214.759666][T11410] XFS (loop2): Mounting V5 Filesystem [ 214.830540][T11225] usb 5-1: USB disconnect, device number 20 [ 214.979830][T11410] XFS (loop2): Ending clean mount [ 215.079236][T11469] __nla_validate_parse: 3 callbacks suppressed [ 215.079252][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3171'. [ 215.151386][T11469] openvswitch: netlink: EtherType 0 is less than min 600 [ 215.162954][T11437] loop3: detected capacity change from 0 to 32768 [ 215.166594][T11471] xt_connbytes: Forcing CT accounting to be enabled [ 215.179817][ T4198] XFS (loop2): Unmounting Filesystem [ 215.188736][T11471] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 215.233656][T11471] xt_bpf: check failed: parse error [ 215.340061][T11437] JBD2: Ignoring recovery information on journal [ 215.387892][T11486] netlink: 'syz.0.3180': attribute type 10 has an invalid length. [ 215.404963][T11486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3180'. [ 215.488708][T11486] team0: Port device geneve0 added [ 215.553189][T11437] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 215.664455][T11437] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 215.664486][T11437] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 215.695538][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'. [ 215.760205][T11437] OCFS2: Returning error to the calling process. [ 215.776841][T11437] (syz.3.3157,11437,0):ocfs2_setattr:1302 ERROR: status = -117 [ 215.879850][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 215.938703][T11512] netlink: 'syz.0.3192': attribute type 1 has an invalid length. [ 215.968705][T11512] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3192'. [ 216.155212][T11225] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.165842][T11525] loop2: detected capacity change from 0 to 256 [ 216.210886][T11528] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3200'. [ 216.417226][T11225] usb 5-1: Using ep0 maxpacket: 8 [ 216.471125][T11551] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3210'. [ 216.550373][T11225] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.562678][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 216.568551][T11225] usb 5-1: config 179 has no interface number 0 [ 216.585460][T11225] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 216.625429][T11225] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 216.664401][T11225] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.704231][T11225] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 216.734818][T11225] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 216.798269][T11576] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 216.819795][T11225] usb 5-1: config 179 interface 65 has no altsetting 0 [ 216.853069][T11225] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 216.896194][T11225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.967109][T11578] loop1: detected capacity change from 0 to 4096 [ 217.009455][T11225] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input20 [ 217.100219][T11592] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.260432][T11225] usb 5-1: USB disconnect, device number 21 [ 217.267693][T11225] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 217.543679][T11620] loop2: detected capacity change from 0 to 512 [ 217.603239][T11620] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 217.646778][T11620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 217.667770][T11620] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 217.712772][T11620] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.3242: attempt to clear invalid blocks 2 len 1 [ 217.733233][T11620] EXT4-fs (loop2): Remounting filesystem read-only [ 217.754826][T11636] loop4: detected capacity change from 0 to 8 [ 217.762019][T11620] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 217.787959][T11620] EXT4-fs (loop2): Remounting filesystem read-only [ 217.796089][T11620] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3242: invalid indirect mapped block 1819239214 (level 0) [ 217.811265][T11620] EXT4-fs (loop2): Remounting filesystem read-only [ 217.812536][T11638] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.817834][T11620] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3242: invalid indirect mapped block 1819239214 (level 1) [ 217.854690][T11620] EXT4-fs (loop2): Remounting filesystem read-only [ 217.868902][T11636] SQUASHFS error: lzo decompression failed, data probably corrupt [ 217.894738][T11620] EXT4-fs (loop2): 1 truncate cleaned up [ 217.898938][T11642] loop0: detected capacity change from 0 to 128 [ 217.900622][T11636] SQUASHFS error: Failed to read block 0x144: -5 [ 217.920319][T11620] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 217.938636][T10651] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 217.953053][T11636] SQUASHFS error: Unable to read metadata cache entry [142] [ 217.963738][T11636] SQUASHFS error: Unable to read directory block [142:26] [ 218.317163][T11668] delete_channel: no stack [ 218.358557][T11227] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 218.470433][T10651] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.479517][T10651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.513898][T10651] usb 2-1: Product: syz [ 218.523236][T10651] usb 2-1: Manufacturer: syz [ 218.527856][T10651] usb 2-1: SerialNumber: syz [ 218.584393][T11684] loop2: detected capacity change from 0 to 512 [ 218.596806][T11684] EXT4-fs (loop2): Test dummy encryption mode enabled [ 218.601510][T10651] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.675296][T11684] EXT4-fs error (device loop2): __ext4_iget:4908: inode #11: block 1: comm syz.2.3274: invalid block [ 218.696701][T11684] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3274: couldn't read orphan inode 11 (err -117) [ 218.709170][T11684] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,dioread_lock,max_dir_size_kb=0x0000000000000004,bsddf,errors=continue,sysvgroups,jqfmt=vfsold,nobarrier,test_dummy_encryption,,errors=continue. Quota mode: none. [ 218.733387][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.785949][T11227] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 218.802152][T11227] usb 4-1: config 0 has no interface number 0 [ 218.926052][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 218.936939][ T5036] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 218.963602][T11227] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 218.979931][T11227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.998739][T11227] usb 4-1: Product: syz [ 219.008856][T11227] usb 4-1: Manufacturer: syz [ 219.018990][T11227] usb 4-1: SerialNumber: syz [ 219.037932][T11227] usb 4-1: config 0 descriptor?? [ 219.091308][T11227] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0 [ 219.200108][ T5036] usb 5-1: Using ep0 maxpacket: 16 [ 219.270373][T10651] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.300456][T11227] qmi_wwan: probe of 4-1:0.172 failed with error -22 [ 219.320631][ T5036] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.340932][ T5036] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.478934][T11716] loop0: detected capacity change from 0 to 32768 [ 219.508248][ T4297] usb 4-1: USB disconnect, device number 19 [ 219.530232][ T5036] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.547297][ T5036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.563648][ T5036] usb 5-1: Product: syz [ 219.568084][ T5036] usb 5-1: Manufacturer: syz [ 219.574507][ T5036] usb 5-1: SerialNumber: syz [ 219.585586][T11716] XFS (loop0): Mounting V5 Filesystem [ 219.621458][T11739] loop2: detected capacity change from 0 to 4096 [ 219.636594][T11739] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 219.678059][T11227] usb 2-1: USB disconnect, device number 21 [ 219.681584][T11716] XFS (loop0): Ending clean mount [ 219.736254][ T4194] XFS (loop0): Unmounting Filesystem [ 219.920522][ T5036] usb 5-1: 0:2 : does not exist [ 219.948796][ T5036] usb 5-1: USB disconnect, device number 23 [ 219.978839][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.340321][T10651] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 220.347552][T10651] ath9k_htc: Failed to initialize the device [ 220.364263][T11227] usb 2-1: ath9k_htc: USB layer deinitialized [ 220.465430][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3319'. [ 220.565247][T11793] loop1: detected capacity change from 0 to 128 [ 220.656825][T11793] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 220.722644][T11797] loop3: detected capacity change from 0 to 4096 [ 220.747785][ T4183] sysv_free_block: flc_count > flc_size [ 220.762024][ T4183] sysv_free_block: flc_count > flc_size [ 220.767677][ T4183] sysv_free_block: flc_count > flc_size [ 220.788380][ T4183] sysv_free_block: flc_count > flc_size [ 220.796285][ T4183] sysv_free_block: flc_count > flc_size [ 220.804281][T11797] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 220.812080][ T4183] sysv_free_block: flc_count > flc_size [ 220.831068][ T4183] sysv_free_block: flc_count > flc_size [ 220.842499][ T4183] sysv_free_block: flc_count > flc_size [ 220.880143][T11227] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 220.896068][ T4183] sysv_free_block: flc_count > flc_size [ 220.903863][ T4183] sysv_free_block: flc_count > flc_size [ 220.932405][ T4183] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 220.946708][T11807] netlink: 'syz.2.3331': attribute type 12 has an invalid length. [ 221.081653][T11809] loop1: detected capacity change from 0 to 1024 [ 221.088533][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 221.130525][T11227] usb 5-1: Using ep0 maxpacket: 8 [ 221.159641][T11790] loop0: detected capacity change from 0 to 32768 [ 221.214720][T11809] hfsplus: xattr searching failed [ 221.250321][T11227] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 221.252842][T11790] JBD2: Can't enable checksumming v2 and v3 at the same time! [ 221.280635][T11227] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.282569][T11790] (syz.0.3321,11790,0):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 221.299578][T11790] (syz.0.3321,11790,0):ocfs2_check_volume:2424 ERROR: status = -22 [ 221.311795][T11790] (syz.0.3321,11790,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 221.319716][T11790] (syz.0.3321,11790,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 221.348118][T11790] (syz.0.3321,11790,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 221.363811][T11227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.550464][T11227] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 221.559542][T11227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.587620][T11227] usb 5-1: Product: syz [ 221.606203][T11227] usb 5-1: Manufacturer: syz [ 221.612686][T11832] loop1: detected capacity change from 0 to 8 [ 221.626452][T11227] usb 5-1: SerialNumber: syz [ 221.657331][T11227] usb 5-1: config 0 descriptor?? [ 221.685017][T11838] netlink: 'syz.3.3345': attribute type 12 has an invalid length. [ 221.712990][T11227] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 221.721277][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 221.936123][T11227] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 221.971486][T11227] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 222.004970][T11227] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 222.134395][ T5521] usb 5-1: USB disconnect, device number 24 [ 222.449532][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 222.617005][T11856] loop0: detected capacity change from 0 to 32768 [ 222.666670][T11858] loop1: detected capacity change from 0 to 32768 [ 222.711680][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3367'. [ 222.733023][T11889] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3367'. [ 222.756987][T11856] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 222.847879][T11909] netlink: 'syz.2.3384': attribute type 21 has an invalid length. [ 222.895213][T11858] XFS (loop1): Mounting V5 Filesystem [ 223.044536][ T4194] XFS (loop0): Unmounting Filesystem [ 223.065172][T11928] bond0: Error: Cannot enslave bond to itself. [ 223.093550][T11858] XFS (loop1): Ending clean mount [ 223.189028][T11932] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.241998][ T4183] XFS (loop1): Unmounting Filesystem [ 223.454977][T11946] loop4: detected capacity change from 0 to 16 [ 223.499704][T11946] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.530450][T11946] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.609963][T11946] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 223.792243][T11957] loop3: detected capacity change from 0 to 256 [ 223.850862][T11957] exfat: Deprecated parameter 'namecase' [ 223.895612][T11957] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d) [ 223.989636][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3402'. [ 223.989642][T11957] exFAT-fs (loop3): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 224.186963][T11987] loop4: detected capacity change from 0 to 256 [ 224.293190][T11987] FAT-fs (loop4): Directory bread(block 64) failed [ 224.329426][T11987] FAT-fs (loop4): Directory bread(block 65) failed [ 224.362460][T11987] FAT-fs (loop4): Directory bread(block 66) failed [ 224.369024][T11987] FAT-fs (loop4): Directory bread(block 67) failed [ 224.410641][T11987] FAT-fs (loop4): Directory bread(block 68) failed [ 224.417203][T11987] FAT-fs (loop4): Directory bread(block 69) failed [ 224.450215][T11987] FAT-fs (loop4): Directory bread(block 70) failed [ 224.456772][T11987] FAT-fs (loop4): Directory bread(block 71) failed [ 224.499201][T12013] loop1: detected capacity change from 0 to 256 [ 224.520219][T11987] FAT-fs (loop4): Directory bread(block 72) failed [ 224.520257][T11987] FAT-fs (loop4): Directory bread(block 73) failed [ 224.530854][T12013] exfat: Deprecated parameter 'namecase' [ 224.538634][T12013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d) [ 224.562686][T12013] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 224.943949][T12027] loop2: detected capacity change from 0 to 256 [ 225.061010][T12027] FAT-fs (loop2): Directory bread(block 64) failed [ 225.114032][T12027] FAT-fs (loop2): Directory bread(block 65) failed [ 225.115098][T12039] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 225.135383][T12027] FAT-fs (loop2): Directory bread(block 66) failed [ 225.147970][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 225.157080][T12027] FAT-fs (loop2): Directory bread(block 67) failed [ 225.190935][T12027] FAT-fs (loop2): Directory bread(block 68) failed [ 225.229179][T12039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.229493][T12027] FAT-fs (loop2): Directory bread(block 69) failed [ 225.292506][T12027] FAT-fs (loop2): Directory bread(block 70) failed [ 225.299215][T12027] FAT-fs (loop2): Directory bread(block 71) failed [ 225.310740][T12049] netlink: zone id is out of range [ 225.315881][T12049] netlink: zone id is out of range [ 225.330634][T12027] FAT-fs (loop2): Directory bread(block 72) failed [ 225.337187][T12027] FAT-fs (loop2): Directory bread(block 73) failed [ 225.411984][T12058] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3446'. [ 225.505654][T12065] loop0: detected capacity change from 0 to 128 [ 225.607178][T12075] overlayfs: unrecognized mount option "\" or missing value [ 225.679419][T12065] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. [ 225.785551][T12086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3459'. [ 225.827477][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3460'. [ 226.000235][T12095] device wlan0 entered promiscuous mode [ 226.155639][T12109] loop2: detected capacity change from 0 to 64 [ 226.187594][T12111] loop3: detected capacity change from 0 to 512 [ 226.227100][T12109] attempt to access beyond end of device [ 226.227100][T12109] loop2: rw=0, want=130, limit=64 [ 226.242875][T12111] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 226.248123][T12109] Trying to free block not in datazone [ 226.261367][T12109] Trying to free block not in datazone [ 226.266836][T12109] Trying to free block not in datazone [ 226.272625][T12111] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 226.300443][T12111] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 226.322683][T12109] Trying to free block not in datazone [ 226.331262][T12111] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.341067][T12109] Trying to free block not in datazone [ 226.346607][T12109] Trying to free block not in datazone [ 226.352985][T12109] minix_free_block (loop2:6): bit already cleared [ 226.360905][T11227] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 226.412514][T12111] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.3472: Allocating blocks 41-42 which overlap fs metadata [ 226.413099][T12111] Quota error (device loop3): write_blk: dquota write failed [ 226.413144][T12111] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 226.413299][T12111] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.3472: Allocating blocks 41-42 which overlap fs metadata [ 226.413683][T12111] Quota error (device loop3): write_blk: dquota write failed [ 226.413759][T12111] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 226.413796][T12111] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.3472: Failed to acquire dquot type 1 [ 226.414153][T12111] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 226.419845][T12111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.3472: corrupted inode contents [ 226.435695][T12111] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #12: comm syz.3.3472: mark_inode_dirty error [ 226.436078][T12111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.3472: corrupted inode contents [ 226.436395][T12111] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.3472: mark_inode_dirty error [ 226.436731][T12111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.3472: corrupted inode contents [ 226.437035][T12111] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 226.437342][T12111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.3472: corrupted inode contents [ 226.437651][T12111] EXT4-fs error (device loop3): ext4_truncate:4279: inode #12: comm syz.3.3472: mark_inode_dirty error [ 226.437948][T12111] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 226.439078][T12111] EXT4-fs (loop3): 1 truncate cleaned up [ 226.439101][T12111] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,mblk_io_submit,jqfmt=vfsold,nodelalloc,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 226.467110][T12111] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.3472: Allocating blocks 41-42 which overlap fs metadata [ 226.488662][T12111] Quota error (device loop3): write_blk: dquota write failed [ 226.488820][T12111] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 226.488862][T12111] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.3472: Failed to acquire dquot type 1 [ 226.502799][T12091] loop0: detected capacity change from 0 to 32768 [ 226.546612][T12091] (syz.0.3461,12091,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.613999][T11227] usb 2-1: Using ep0 maxpacket: 16 [ 226.639076][T12091] (syz.0.3461,12091,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.650274][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 226.860500][T11227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.871727][T12122] loop2: detected capacity change from 0 to 16 [ 226.891947][T11227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.943630][T12122] erofs: (device loop2): mounted with root inode @ nid 36. [ 226.957382][T11227] usb 2-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 226.998540][T12091] (syz.0.3461,12091,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 227.012143][T11227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.039198][T12135] program syz.3.3482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.056284][T12091] JBD2: Ignoring recovery information on journal [ 227.056640][T11227] usb 2-1: config 0 descriptor?? [ 227.135704][T11227] hub 2-1:0.0: USB hub found [ 227.177478][T12091] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 227.328295][T12150] netlink: 'syz.2.3489': attribute type 1 has an invalid length. [ 227.360204][T11227] hub 2-1:0.0: 7 ports detected [ 227.380278][T11227] hub 2-1:0.0: insufficient power available to use all downstream ports [ 227.417266][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 227.570329][T11227] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 227.577371][T11227] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 227.652473][T11227] usb 2-1: USB disconnect, device number 22 [ 227.786732][T12141] loop3: detected capacity change from 0 to 32768 [ 227.823976][T12141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3484 (12141) [ 227.889983][T12170] netlink: 'syz.4.3499': attribute type 21 has an invalid length. [ 227.916178][T12141] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 227.927792][T12170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3499'. [ 227.937504][T12170] netlink: 'syz.4.3499': attribute type 1 has an invalid length. [ 227.946751][T12141] BTRFS info (device loop3): using free space tree [ 227.954191][T12141] BTRFS info (device loop3): has skinny extents [ 228.200355][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3504'. [ 228.214271][T12201] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3504'. [ 228.250374][T12141] BTRFS info (device loop3): enabling ssd optimizations [ 228.290427][T12201] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3504'. [ 228.321441][T12201] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3504'. [ 228.507488][T12205] x_tables: ip_tables: osf match: only valid for protocol 6 [ 228.666007][T12182] loop2: detected capacity change from 0 to 32768 [ 228.723176][T12182] XFS: attr2 mount option is deprecated. [ 228.753347][T12179] loop4: detected capacity change from 0 to 32768 [ 228.825810][T12179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3502 (12179) [ 228.866780][T12182] XFS (loop2): Mounting V5 Filesystem [ 228.891165][T12197] loop1: detected capacity change from 0 to 32768 [ 228.921340][T12179] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 228.950502][T12179] BTRFS info (device loop4): force clearing of disk cache [ 228.957688][T12179] BTRFS info (device loop4): force zlib compression, level 3 [ 228.969005][T12182] XFS (loop2): Ending clean mount [ 228.974321][T12179] BTRFS info (device loop4): enabling disk space caching [ 229.019688][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 229.020903][T12179] BTRFS info (device loop4): max_inline at 0 [ 229.034786][T12179] BTRFS info (device loop4): enabling auto defrag [ 229.043433][T12179] BTRFS info (device loop4): disk space caching is enabled [ 229.051484][T12226] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 229.052214][T12179] BTRFS info (device loop4): has skinny extents [ 229.068938][T12182] XFS (loop2): Quotacheck needed: Please wait. [ 229.103877][T12197] XFS (loop1): Mounting V5 Filesystem [ 229.173786][T12182] XFS (loop2): Quotacheck: Done. [ 229.274012][ T4198] XFS (loop2): Unmounting Filesystem [ 229.415988][T12197] XFS (loop1): Ending clean mount [ 229.452592][T12262] loop0: detected capacity change from 0 to 128 [ 229.480272][T12179] BTRFS info (device loop4): enabling ssd optimizations [ 229.557315][T12262] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 229.607361][ T4183] XFS (loop1): Unmounting Filesystem [ 229.677160][T12262] hpfs: filesystem error: improperly stopped [ 229.684512][T12262] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 229.702717][T12262] hpfs: You really don't want any checks? You are crazy... [ 229.718051][T12262] hpfs: hpfs_map_sector(): read error [ 229.742389][T12262] hpfs: code page support is disabled [ 229.753686][T12262] hpfs: hpfs_map_4sectors(): unaligned read [ 229.776977][T12262] hpfs: hpfs_map_4sectors(): unaligned read [ 229.822073][T12262] hpfs: filesystem error: unable to find root dir [ 230.253733][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3523'. [ 230.257724][T12275] loop0: detected capacity change from 0 to 1764 [ 230.269785][ T5032] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 230.284012][T12276] openvswitch: netlink: EtherType 0 is less than min 600 [ 230.407880][T12280] netlink: 'syz.1.3530': attribute type 21 has an invalid length. [ 230.627671][T12268] loop2: detected capacity change from 0 to 32768 [ 230.650427][ T5032] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 230.658622][ T5032] usb 5-1: config 0 has no interface number 0 [ 230.681586][ T5032] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.713551][T12268] JBD2: Ignoring recovery information on journal [ 230.720620][ T5032] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.815102][T12309] __nla_validate_parse: 2 callbacks suppressed [ 230.815117][T12309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3539'. [ 230.841332][T12268] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 230.868194][T12312] hsr0: VLAN not yet supported [ 230.869803][T12313] loop0: detected capacity change from 0 to 128 [ 230.923869][T12268] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 230.923898][T12268] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 231.004906][ T5032] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 231.010222][T12268] OCFS2: Returning error to the calling process. [ 231.042000][T12268] (syz.2.3515,12268,1):ocfs2_setattr:1302 ERROR: status = -117 [ 231.058441][ T5032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.087194][ T5032] usb 5-1: Product: syz [ 231.107445][ T5032] usb 5-1: Manufacturer: syz [ 231.137799][ T5032] usb 5-1: SerialNumber: syz [ 231.144641][T12326] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 231.151269][T12327] loop3: detected capacity change from 0 to 64 [ 231.166152][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 231.177550][ T5032] usb 5-1: config 0 descriptor?? [ 231.182944][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3544'. [ 231.234493][ T5032] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 231.286738][ T5032] vmk80xx: probe of 5-1:0.255 failed with error -22 [ 231.357779][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 231.476625][ T4264] usb 5-1: USB disconnect, device number 25 [ 231.808021][T12366] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 231.842181][T12369] xt_ecn: cannot match TCP bits for non-tcp packets [ 231.929002][T12377] loop2: detected capacity change from 0 to 64 [ 232.050121][ T1108] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 232.133022][T12393] loop4: detected capacity change from 0 to 64 [ 232.165461][T12395] netlink: 'syz.0.3580': attribute type 7 has an invalid length. [ 232.173577][T12395] netlink: 'syz.0.3580': attribute type 8 has an invalid length. [ 232.181957][T12395] netlink: 'syz.0.3580': attribute type 9 has an invalid length. [ 232.341293][T12409] loop4: detected capacity change from 0 to 128 [ 232.395698][ T4297] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 232.430377][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 232.491977][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 232.495566][T12421] loop1: detected capacity change from 0 to 8 [ 232.507814][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 232.525054][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 232.574276][T12423] loop4: detected capacity change from 0 to 4096 [ 232.594785][T12421] SQUASHFS error: lzo decompression failed, data probably corrupt [ 232.610272][ T1108] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 232.624278][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.637687][T12421] SQUASHFS error: Failed to read block 0x144: -5 [ 232.650343][ T1108] usb 4-1: Product: syz [ 232.654729][T12421] SQUASHFS error: Unable to read metadata cache entry [142] [ 232.657733][T12426] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.668976][ T1108] usb 4-1: Manufacturer: syz [ 232.685272][T12421] SQUASHFS error: Unable to read directory block [142:26] [ 232.715010][ T1108] usb 4-1: SerialNumber: syz [ 232.746333][ T1108] usb 4-1: config 0 descriptor?? [ 232.810385][ T4297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.821201][ T1108] hub 4-1:0.0: bad descriptor, ignoring hub [ 232.827101][ T1108] hub: probe of 4-1:0.0 failed with error -5 [ 232.840049][ T4297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.854833][ T1108] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 232.860135][ T1325] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 232.891881][T12430] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3595'. [ 232.940286][ T4297] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 232.949358][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.003290][ T4297] usb 3-1: SerialNumber: syz [ 233.073854][ T4297] usb 3-1: 0:2 : does not exist [ 233.290739][ T1325] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 233.325503][ T1325] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 233.360419][ T1325] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.383203][ T1325] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.402880][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.505958][ T1325] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 233.530618][ T1325] usb 3-1: USB disconnect, device number 22 [ 233.536818][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 233.600745][T10451] usb 4-1: USB disconnect, device number 20 [ 233.634842][T12443] loop4: detected capacity change from 0 to 32768 [ 233.706165][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 233.708346][ T5032] usb 1-1: USB disconnect, device number 19 [ 233.796287][T12443] XFS (loop4): Mounting V5 Filesystem [ 233.856753][T12443] XFS (loop4): Ending clean mount [ 233.863658][T12443] XFS (loop4): Quotacheck needed: Please wait. [ 233.894419][T12443] XFS (loop4): Quotacheck: Done. [ 233.952395][ T4191] XFS (loop4): Unmounting Filesystem [ 234.236704][T12489] loop2: detected capacity change from 0 to 512 [ 234.335775][T12489] EXT4-fs (loop2): Ignoring removed nobh option [ 234.404529][T12489] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #3: comm syz.2.3623: corrupted inode contents [ 234.434598][T12489] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #3: comm syz.2.3623: mark_inode_dirty error [ 234.470444][T12489] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #3: comm syz.2.3623: corrupted inode contents [ 234.500274][T12489] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.3623: mark_inode_dirty error [ 234.531206][T12489] Quota error (device loop2): write_blk: dquota write failed [ 234.542317][T12489] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 234.552476][T12489] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.3623: Failed to acquire dquot type 0 [ 234.580369][T12489] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3623: corrupted inode contents [ 234.603987][T12509] loop1: detected capacity change from 0 to 4096 [ 234.607669][T12515] xt_l2tp: unknown flags: 3b [ 234.637652][T12509] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 234.646932][T12489] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #16: comm syz.2.3623: mark_inode_dirty error [ 234.650375][ T5032] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.674581][T12489] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3623: corrupted inode contents [ 234.717349][T12489] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.3623: mark_inode_dirty error [ 234.770479][T12489] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3623: corrupted inode contents [ 234.804891][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3638'. [ 234.820723][T12489] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 234.841186][T12489] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3623: corrupted inode contents [ 234.856503][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3638'. [ 234.867938][T12489] EXT4-fs error (device loop2): ext4_truncate:4279: inode #16: comm syz.2.3623: mark_inode_dirty error [ 234.906436][T12489] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 234.929691][T12489] EXT4-fs (loop2): 1 truncate cleaned up [ 234.938797][T12489] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 234.953892][T12489] ext4 filesystem being mounted at /690/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.990193][ T5032] usb 1-1: Using ep0 maxpacket: 16 [ 235.010220][ T4264] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 235.118729][T12532] loop4: detected capacity change from 0 to 4096 [ 235.142540][T12532] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 235.193849][T12532] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 235.240430][T12532] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 235.260651][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 235.279733][T12532] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 235.300672][T12532] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 235.319918][T12532] ntfs: volume version 3.1. [ 235.326662][T12532] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 235.340434][ T5032] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 235.344776][T12532] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 235.359729][ T5032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.376164][T12532] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 235.389171][ T5032] usb 1-1: Product: syz [ 235.400699][ T5032] usb 1-1: Manufacturer: syz [ 235.410313][ T5032] usb 1-1: SerialNumber: syz [ 235.422011][ T5032] usb 1-1: config 0 descriptor?? [ 235.500726][T10451] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 235.520401][ T4264] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 235.539687][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 235.555366][ T4264] usb 4-1: Product: syz [ 235.560398][ T4264] usb 4-1: SerialNumber: syz [ 235.569500][ T4264] usb 4-1: config 0 descriptor?? [ 235.612840][ T4264] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 235.646057][ T4264] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 235.668781][ T4264] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 235.681589][ T5032] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 235.692369][ T4264] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 235.693319][ T5032] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 235.734065][T12560] nfs4: Bad value for 'source' [ 235.755281][T10451] usb 3-1: Using ep0 maxpacket: 16 [ 235.817764][ T4264] usb 4-1: USB disconnect, device number 21 [ 235.899285][ T4297] usb 1-1: USB disconnect, device number 20 [ 235.915285][T10451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 235.968758][T12575] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 235.985283][T12575] Error parsing options; rc = [-22] [ 236.106323][T12579] loop1: detected capacity change from 0 to 1024 [ 236.140372][T10451] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 236.157996][T10451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.173202][T10451] usb 3-1: Product: syz [ 236.177475][T10451] usb 3-1: Manufacturer: syz [ 236.188345][T10451] usb 3-1: SerialNumber: syz [ 236.204032][T10451] usb 3-1: config 0 descriptor?? [ 236.246427][T10451] hub 3-1:0.0: bad descriptor, ignoring hub [ 236.254819][T10451] hub: probe of 3-1:0.0 failed with error -5 [ 236.269145][T10451] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 236.462546][T12585] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 236.480383][ T5032] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 236.552465][T12591] netlink: 'syz.0.3671': attribute type 3 has an invalid length. [ 236.682067][T12598] tmpfs: Bad value for 'mpol' [ 236.688587][T12600] netlink: 'syz.0.3674': attribute type 32 has an invalid length. [ 236.825138][T12602] loop3: detected capacity change from 0 to 4096 [ 236.883542][ T5032] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 236.898765][ T5032] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 236.902538][T12610] binder: 12609:12610 ioctl c00c6211 200000001940 returned -22 [ 236.944982][ T5032] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 236.990309][ T5032] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 237.010177][ T5032] usb 2-1: config 0 has no interface number 0 [ 237.031138][ T5032] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 237.069715][ T5032] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 237.100097][ T5032] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.130526][ T5032] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.163979][ T5032] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 237.174837][ T5032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.191581][ T5032] usb 2-1: config 0 descriptor?? [ 237.248912][T12626] netlink: 'syz.0.3688': attribute type 14 has an invalid length. [ 237.262131][ T5032] gspca_main: spca561-2.14.0 probing abcd:cdee [ 237.280481][T12626] __nla_validate_parse: 19 callbacks suppressed [ 237.280494][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 237.493675][T12640] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3703'. [ 237.530247][ T5032] spca561: probe of 2-1:0.156 failed with error -22 [ 237.538137][ T5032] usb 2-1: MIDIStreaming interface descriptor not found [ 237.587704][T12644] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.3694'. [ 237.601916][ T5032] usb 2-1: USB disconnect, device number 23 [ 237.745041][T12656] loop4: detected capacity change from 0 to 128 [ 237.783147][T12658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3701'. [ 237.806439][T12656] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 237.872864][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.900405][ T4191] sysv_free_block: flc_count > flc_size [ 237.905983][ T4191] sysv_free_block: flc_count > flc_size [ 237.924949][ T4191] sysv_free_block: flc_count > flc_size [ 237.949343][ T4191] sysv_free_block: flc_count > flc_size [ 237.960699][ T4191] sysv_free_block: flc_count > flc_size [ 237.976516][ T4191] sysv_free_block: flc_count > flc_size [ 238.005725][ T4191] sysv_free_block: flc_count > flc_size [ 238.050510][ T4191] sysv_free_block: flc_count > flc_size [ 238.056093][ T4191] sysv_free_block: flc_count > flc_size [ 238.082335][ T4191] sysv_free_block: flc_count > flc_size [ 238.090157][ T3547] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 238.104158][ T4191] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 238.119795][T12675] QAT: Device 7 not found [ 238.400489][ T3547] usb 3-1: device firmware changed [ 238.407089][T12695] loop0: detected capacity change from 0 to 256 [ 238.408192][T10451] usb 3-1: USB disconnect, device number 23 [ 238.488188][T12696] loop3: detected capacity change from 0 to 4096 [ 238.497513][T12695] FAT-fs (loop0): Directory bread(block 64) failed [ 238.497570][T12698] loop4: detected capacity change from 0 to 4096 [ 238.517325][T12695] FAT-fs (loop0): Directory bread(block 65) failed [ 238.525191][T12695] FAT-fs (loop0): Directory bread(block 66) failed [ 238.533415][T12695] FAT-fs (loop0): Directory bread(block 67) failed [ 238.545560][T12698] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 238.553175][T12695] FAT-fs (loop0): Directory bread(block 68) failed [ 238.570272][ T1325] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.573383][T12695] FAT-fs (loop0): Directory bread(block 69) failed [ 238.590400][T10451] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 238.612894][T12695] FAT-fs (loop0): Directory bread(block 70) failed [ 238.629197][T12695] FAT-fs (loop0): Directory bread(block 71) failed [ 238.641121][T12696] ntfs: volume version 3.1. [ 238.644319][T12695] FAT-fs (loop0): Directory bread(block 72) failed [ 238.653788][T12695] FAT-fs (loop0): Directory bread(block 73) failed [ 238.810236][ T1325] usb 2-1: Using ep0 maxpacket: 32 [ 238.847871][T10451] usb 3-1: Using ep0 maxpacket: 16 [ 238.980402][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.010417][T10451] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 239.030236][T10451] usb 3-1: config 0 has no interface number 0 [ 239.037023][T10451] usb 3-1: config 0 interface 94 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 239.080273][T10451] usb 3-1: config 0 interface 94 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 239.116477][T10451] usb 3-1: config 0 interface 94 has no altsetting 0 [ 239.190765][T12725] loop0: detected capacity change from 0 to 256 [ 239.203048][ T1325] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 239.220239][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.234203][ T1325] usb 2-1: Product: syz [ 239.239662][ T1325] usb 2-1: Manufacturer: syz [ 239.245778][ T1325] usb 2-1: SerialNumber: syz [ 239.264100][ T1325] usb 2-1: config 0 descriptor?? [ 239.310578][T10451] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=4e.9b [ 239.320717][ T1325] usb 2-1: bad CDC descriptors [ 239.325839][ T1325] usb 2-1: unsupported MDLM descriptors [ 239.338964][T10451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.379797][T10451] usb 3-1: Product: syz [ 239.384901][T12732] netlink: 494 bytes leftover after parsing attributes in process `syz.4.3741'. [ 239.385053][T10451] usb 3-1: Manufacturer: syz [ 239.399061][T10451] usb 3-1: SerialNumber: syz [ 239.418692][T10451] usb 3-1: config 0 descriptor?? [ 239.460385][ T5043] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 239.460430][T12668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.488077][T12737] netlink: 448 bytes leftover after parsing attributes in process `syz.0.3743'. [ 239.503494][T12737] unsupported nla_type 14345 [ 239.545049][ T5032] usb 2-1: USB disconnect, device number 24 [ 239.730280][ T5043] usb 4-1: Using ep0 maxpacket: 8 [ 239.782650][T10451] keyspan 3-1:0.94: Keyspan 4 port adapter converter detected [ 239.814152][T10451] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 81 [ 239.834519][T10451] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 88 [ 239.851939][T10451] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 1 [ 239.881849][T10451] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 239.892686][T10451] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 2 [ 239.906048][ T5043] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.935373][T10451] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 239.943800][ T5043] usb 4-1: config 179 has no interface number 0 [ 239.956412][ T5043] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 239.970366][T10451] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 4 [ 239.986274][T10451] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 239.999127][T12743] loop4: detected capacity change from 0 to 32768 [ 240.006942][ T5043] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 240.025919][T10451] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 6 [ 240.034809][T10451] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 240.039630][T12763] loop0: detected capacity change from 0 to 1024 [ 240.043714][ T5043] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.098004][T10451] usb 3-1: USB disconnect, device number 24 [ 240.141803][T12743] JBD2: Can't enable checksumming v2 and v3 at the same time! [ 240.150710][T12743] (syz.4.3745,12743,1):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 240.158634][T12743] (syz.4.3745,12743,1):ocfs2_check_volume:2424 ERROR: status = -22 [ 240.170321][T12743] (syz.4.3745,12743,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 240.178284][T12743] (syz.4.3745,12743,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 240.209093][T12743] (syz.4.3745,12743,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 240.231510][ T5043] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.255818][T10451] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 240.266348][T12763] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.315303][ T5043] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.332048][T12763] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #11: comm syz.0.3756: Attempting to read directory block (0) that is past i_size (0) [ 240.361642][T10451] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 240.378208][ T5043] usb 4-1: config 179 interface 65 has no altsetting 0 [ 240.402683][T10451] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 240.422980][ T5043] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 240.447952][T10451] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 240.480131][ T5043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.499385][T10451] keyspan 3-1:0.94: device disconnected [ 240.579676][ T5043] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 240.810463][ T5032] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 240.860807][T10451] usb 4-1: USB disconnect, device number 22 [ 240.875892][T10451] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 241.029232][T12776] loop4: detected capacity change from 0 to 32768 [ 241.097225][T12776] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 241.150050][T12776] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 241.174396][T12781] loop0: detected capacity change from 0 to 32768 [ 241.185572][T12776] (syz.4.3761,12776,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 241.212728][T12776] (syz.4.3761,12776,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 241.222449][T12776] (syz.4.3761,12776,0):ocfs2_mknod:298 ERROR: status = -2 [ 241.229766][T12776] (syz.4.3761,12776,0):ocfs2_mknod:502 ERROR: status = -2 [ 241.238815][T12776] (syz.4.3761,12776,0):ocfs2_create:676 ERROR: status = -2 [ 241.274215][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 241.301618][T12781] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.3763 (12781) [ 241.307135][ T5032] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.392543][T12781] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 241.410300][ T5032] usb 2-1: config 1 interface 1 has no altsetting 0 [ 241.461037][T12781] BTRFS info (device loop0): enabling ssd optimizations [ 241.468030][T12781] BTRFS info (device loop0): turning off barriers [ 241.546845][T12781] BTRFS info (device loop0): using free space tree [ 241.583929][T12781] BTRFS info (device loop0): has skinny extents [ 241.600503][ T5032] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.627954][ T5032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.656805][ T5032] usb 2-1: Product: syz [ 241.676851][ T5032] usb 2-1: Manufacturer: syz [ 241.694437][ T5032] usb 2-1: SerialNumber: syz [ 241.765942][T12835] loop4: detected capacity change from 0 to 1024 [ 241.997284][ T154] hfsplus: b-tree write err: -5, ino 4 [ 242.038054][T12856] loop3: detected capacity change from 0 to 256 [ 242.047485][T12853] loop2: detected capacity change from 0 to 128 [ 242.110238][ T5032] usb 2-1: found format II with max.bitrate = 2418, frame size=7 [ 242.118030][ T5032] usb 2-1: 2:1: All rates were zero [ 242.196379][T12853] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 242.224900][ T5032] usb 2-1: USB disconnect, device number 25 [ 242.231536][T12853] hpfs: filesystem error: improperly stopped [ 242.237537][T12853] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 242.303171][T12853] hpfs: You really don't want any checks? You are crazy... [ 242.333210][T12853] hpfs: hpfs_map_sector(): read error [ 242.338618][T12853] hpfs: code page support is disabled [ 242.387561][T12853] hpfs: hpfs_map_4sectors(): unaligned read [ 242.416682][T12853] hpfs: hpfs_map_4sectors(): unaligned read [ 242.433608][T12853] hpfs: filesystem error: unable to find root dir [ 242.615534][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3797'. [ 242.663569][T12866] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3797'. [ 242.692729][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3797'. [ 242.748505][T12866] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3797'. [ 242.873967][T12883] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3803'. [ 242.948816][T12891] loop1: detected capacity change from 0 to 1024 [ 243.140105][ T1325] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 243.204966][T12908] loop2: detected capacity change from 0 to 1024 [ 243.313358][T12914] device veth1_macvtap left promiscuous mode [ 243.515663][T12918] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.541526][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 243.551039][ T1108] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 243.698245][T12896] loop3: detected capacity change from 0 to 32768 [ 243.728065][T12896] [ 243.728065][T12896] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.728065][T12896] [ 243.762217][ T1325] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 243.800221][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.808246][ T1325] usb 1-1: Product: syz [ 243.823558][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 243.828327][ T1325] usb 1-1: Manufacturer: syz [ 243.840374][ T1325] usb 1-1: SerialNumber: syz [ 243.846183][ T1252] [ 243.846183][ T1252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.846183][ T1252] [ 243.847709][ T1325] usb 1-1: config 0 descriptor?? [ 243.872694][ T1252] [ 243.872694][ T1252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.872694][ T1252] [ 243.888762][ T4184] [ 243.888762][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.888762][ T4184] [ 243.900822][ T1325] hub 1-1:0.0: bad descriptor, ignoring hub [ 243.906741][ T1325] hub: probe of 1-1:0.0 failed with error -5 [ 243.908155][ T4184] [ 243.908155][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.908155][ T4184] [ 243.930217][ T276] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 243.941942][ T276] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 243.950337][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 243.957512][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.967557][ T276] RIP: 0010:lmLogSync+0x121/0x9c0 [ 243.972568][ T276] Code: d5 cf fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 bd 97 ef fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 a1 97 ef fe 49 8b 3f e8 39 d5 cf fe [ 243.992157][ T276] RSP: 0018:ffffc90002ccfc60 EFLAGS: 00010206 [ 243.998211][ T276] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 05773a6fd6b4c200 [ 244.006162][ T276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.014116][ T276] RBP: ffffc90002ccfd68 R08: dffffc0000000000 R09: ffffc90002ccfba4 [ 244.022069][ T276] R10: fffff52000599f7c R11: 1ffff92000599f74 R12: 1ffff920004c4227 [ 244.030022][ T276] R13: ffff8880234a1000 R14: ffff8880630fa838 R15: 0000000000000030 [ 244.037973][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 244.046882][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.053442][ T276] CR2: 0000001b32712ff8 CR3: 000000007d407000 CR4: 00000000003506f0 [ 244.061395][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.069344][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.077295][ T276] Call Trace: [ 244.080556][ T276] [ 244.083469][ T276] ? mutex_lock_io_nested+0x60/0x60 [ 244.088653][ T276] ? lmWriteRecord+0x1aa0/0x1aa0 [ 244.093573][ T276] ? __lock_acquire+0x7c60/0x7c60 [ 244.098578][ T276] ? do_raw_spin_lock+0x11d/0x280 [ 244.103580][ T276] ? __rwlock_init+0x140/0x140 [ 244.108322][ T276] jfs_syncpt+0x77/0x90 [ 244.112459][ T276] txEnd+0x2e1/0x520 [ 244.116337][ T276] jfs_lazycommit+0x5ba/0xb20 [ 244.120996][ T276] ? txFreelock+0x5a0/0x5a0 [ 244.125478][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 244.131350][ T276] ? sched_dynamic_update+0x210/0x210 [ 244.136705][ T276] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 244.142576][ T276] ? __kthread_parkme+0x157/0x1b0 [ 244.147583][ T276] kthread+0x436/0x520 [ 244.151628][ T276] ? txFreelock+0x5a0/0x5a0 [ 244.156110][ T276] ? kthread_blkcg+0xd0/0xd0 [ 244.160680][ T276] ret_from_fork+0x1f/0x30 [ 244.165082][ T276] [ 244.168092][ T276] Modules linked in: [ 244.176878][ T1108] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 244.180178][ T1325] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 244.187053][ T1108] usb 3-1: config 4 has an invalid descriptor of length 34, skipping remainder of the config [ 244.198189][T12916] loop1: detected capacity change from 0 to 32768 [ 244.204649][ T1108] usb 3-1: config 4 has no interface number 0 [ 244.213217][ T276] ---[ end trace 53755a8b2e914e59 ]--- [ 244.219288][ T1108] usb 3-1: config 4 interface 9 altsetting 2 endpoint 0x4 has invalid maxpacket 17452, setting to 64 [ 244.222398][ T276] RIP: 0010:lmLogSync+0x121/0x9c0 [ 244.234993][ T1108] usb 3-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.238411][ T276] Code: d5 cf fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 bd 97 ef fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 a1 97 ef fe 49 8b 3f e8 39 d5 cf fe [ 244.252948][ T1108] usb 3-1: config 4 interface 9 has no altsetting 0 [ 244.271012][T10451] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 244.281007][ T276] RSP: 0018:ffffc90002ccfc60 EFLAGS: 00010206 [ 244.293123][ T276] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 05773a6fd6b4c200 [ 244.301303][ T276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.309369][ T276] RBP: ffffc90002ccfd68 R08: dffffc0000000000 R09: ffffc90002ccfba4 [ 244.319473][ T276] R10: fffff52000599f7c R11: 1ffff92000599f74 R12: 1ffff920004c4227 [ 244.327649][ T1325] input: failed to attach handler mousedev to device input25, error: -5 [ 244.327789][ T276] R13: ffff8880234a1000 R14: ffff8880630fa838 R15: 0000000000000030 [ 244.351167][ T276] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 244.361325][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.367919][ T276] CR2: 00007f89cc13d770 CR3: 000000001a392000 CR4: 00000000003506e0 [ 244.376264][ T1325] usb 1-1: USB disconnect, device number 21 [ 244.376940][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.393302][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.401382][ T276] Kernel panic - not syncing: Fatal exception [ 244.407646][ T276] Kernel Offset: disabled [ 244.411960][ T276] Rebooting in 86400 seconds..