last executing test programs: 2.608378204s ago: executing program 1 (id=3427): r0 = syz_open_dev$radio(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000200)={0x8098f909, 0x0, "7e54ff56c7e323330b5f23870ded65694a4e99d00e4d41f29f9a582ca04eca1d"}) 2.480473316s ago: executing program 1 (id=3432): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@empty}, @in=@multicast1, {@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0xffffff7f00000000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x8}}, 0x128}}, 0x300000000000000) 2.246957579s ago: executing program 1 (id=3437): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00'], 0x48) 2.213657199s ago: executing program 3 (id=3439): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x5}}) 2.095611351s ago: executing program 3 (id=3442): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0) 2.068490192s ago: executing program 1 (id=3445): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x11, 0xb}, 0x18) 1.974188003s ago: executing program 3 (id=3447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@empty}, @in=@multicast1, {@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0xffffff7f00000000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x8}}, 0x128}}, 0x300000000000000) 1.939938423s ago: executing program 1 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.818979315s ago: executing program 3 (id=3453): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500) 1.779490125s ago: executing program 1 (id=3455): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000440)={[{@journal_async_commit}, {@heartbeat_none}, {@grpquota}, {@inode64}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@localflocks}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0xee00) 1.676382127s ago: executing program 3 (id=3458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f00000001c0)="9f7cf21223926c8228dea70cc9c1f43b", 0x10) 1.547832059s ago: executing program 3 (id=3461): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, 0x0, {0x9, 0x38c8711b}, {0x62, 0x39}, 0x8001, [0x0, 0x4fffffffffffe, 0x9, 0x3, 0x3, 0xad02, 0xfffffffffffffffe, 0x3, 0x100003, 0xc, 0xd81, 0x1df, 0xd1f, 0x6, 0x3ed, 0xc]}) 1.521550929s ago: executing program 2 (id=3463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x800}]}}}]}, 0x44}}, 0x0) 1.313502922s ago: executing program 2 (id=3466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x14, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x14}}, 0x0) 1.151740294s ago: executing program 2 (id=3469): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0x541b, 0x0) 979.889347ms ago: executing program 2 (id=3472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 960.227007ms ago: executing program 4 (id=3473): pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) writev(r0, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000840)="649f5006", 0x4}, {0x0}], 0x3) 921.905597ms ago: executing program 2 (id=3474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0xfffffe68) 879.153218ms ago: executing program 0 (id=3475): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000300)={0x0, [[0x2], [0x10000], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x20000000, 0x1}], '\x00', 0x1000}) 809.384919ms ago: executing program 4 (id=3476): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)={0x5, 0x8, [0x0, 0x0]}) 759.848049ms ago: executing program 2 (id=3477): syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[], 0x41, 0x552d, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x0) 759.65792ms ago: executing program 0 (id=3478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9259}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8044) 679.461241ms ago: executing program 4 (id=3479): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x9}) 668.382731ms ago: executing program 0 (id=3480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x298, 0x298, 0x1a0, 0x0, 0x1a0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 512.062103ms ago: executing program 4 (id=3481): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0x218}], 0x1) 415.649944ms ago: executing program 0 (id=3482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x800d, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x63fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000000}, 0x50) 241.877507ms ago: executing program 4 (id=3483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xa78, 0x10000000000000) 158.741208ms ago: executing program 0 (id=3484): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) 91.946099ms ago: executing program 4 (id=3485): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0xa0, 0xb, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x9, 0xde}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x6, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x420}}, {0x6, &(0x7f0000006b40)=@string={0x6, 0x3, "bdd81dd2"}}]}) socket$pppoe(0x18, 0x1, 0x0) 0s ago: executing program 0 (id=3486): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x129102, 0x0) read$FUSE(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 171.884945][ T7061] loop1: detected capacity change from 0 to 2048 [ 171.949296][ T7061] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.048033][ T4162] udevd[4162]: incorrect nilfs2 checksum on /dev/loop1 [ 172.055431][ T7070] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.438128][ T7089] delete_channel: no stack [ 172.619078][ T7096] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.654322][ T7096] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.669867][ T7096] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.679109][ T7096] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.695335][ T7096] device geneve2 entered promiscuous mode [ 172.775830][ T7106] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1090'. [ 172.792567][ T4269] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.792594][ T5330] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 172.849078][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 173.032507][ T4269] usb 5-1: Using ep0 maxpacket: 16 [ 173.152623][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 173.193266][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 173.220939][ T5330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.226489][ T4269] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.234428][ T5330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.261710][ T4269] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 173.261787][ T7126] netlink: 'syz.2.1100': attribute type 3 has an invalid length. [ 173.281264][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.333925][ T4269] usb 5-1: config 0 descriptor?? [ 173.344473][ T5330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 173.354132][ T7094] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 173.371495][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.375191][ T4269] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 173.386438][ T5330] usb 4-1: SerialNumber: syz [ 173.435176][ T7130] bridge0: mtu greater than device maximum [ 173.470795][ T5330] usb 4-1: 0:2 : does not exist [ 173.510642][ T7114] loop1: detected capacity change from 0 to 32768 [ 173.616690][ T7134] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present [ 173.766083][ T5330] usb 5-1: USB disconnect, device number 12 [ 173.847028][ T7142] rdma_rxe: rxe_register_device failed with error -23 [ 173.857668][ T7142] rdma_rxe: failed to add lo [ 173.908845][ T5400] usb 4-1: USB disconnect, device number 13 [ 174.351432][ T7163] program syz.4.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.398460][ T7165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.514379][ T7171] device gre0 entered promiscuous mode [ 174.767175][ T7183] netlink: 4116 bytes leftover after parsing attributes in process `syz.3.1126'. [ 174.930947][ T7191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.938885][ T7191] IPv6: NLM_F_CREATE should be set when creating new route [ 174.946301][ T7191] IPv6: NLM_F_CREATE should be set when creating new route [ 175.220427][ T7204] netlink: ct family unspecified [ 175.225757][ T7204] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.461621][ T7217] infiniband syz0: set active [ 175.493379][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.510882][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.528952][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.574411][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.597612][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.614710][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.636963][ T5400] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.658606][ T21] lo speed is unknown, defaulting to 1000 [ 175.830689][ T7225] loop3: detected capacity change from 0 to 1764 [ 175.837721][ T7227] xt_socket: unknown flags 0x50 [ 175.913544][ T5400] usb 2-1: Using ep0 maxpacket: 32 [ 176.058051][ T5400] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.071151][ T5400] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 176.102570][ T5400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.124710][ T7242] tmpfs: Bad value for 'mpol' [ 176.151789][ T5400] usb 2-1: config 0 descriptor?? [ 176.214476][ T5400] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 176.257765][ T5400] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.288735][ T5400] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 176.326185][ T5400] usb 2-1: media controller created [ 176.381607][ T5400] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.482605][ T5400] set interface failed [ 176.482642][ T5400] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 176.509879][ T5400] error writing reg: 0xff, val: 0x00 [ 176.553775][ T7264] mkiss: ax0: crc mode is auto. [ 176.586084][ T5400] dvb_usb_mxl111sf: probe of 2-1:0.0 failed with error -22 [ 176.614047][ T5400] usb 2-1: USB disconnect, device number 13 [ 176.862502][ T21] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 176.915026][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 177.222703][ T21] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 177.260468][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.289738][ T21] usb 3-1: config 0 descriptor?? [ 177.290889][ T7301] loop1: detected capacity change from 0 to 128 [ 177.344471][ T21] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 177.364812][ T7306] capability: warning: `syz.3.1186' uses 32-bit capabilities (legacy support in use) [ 177.383979][ T7301] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.430382][ T7301] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.772560][ T21] gp8psk: usb in 128 operation failed. [ 177.808792][ T21] gp8psk: usb in 137 operation failed. [ 177.842512][ T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 177.870539][ T21] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 177.920336][ T21] usb 3-1: USB disconnect, device number 10 [ 178.001458][ T7326] loop0: detected capacity change from 0 to 2048 [ 178.068624][ T7326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.094087][ T7336] loop4: detected capacity change from 0 to 256 [ 178.161469][ T7326] UDF-fs: incorrect filename length (10) [ 178.346113][ T7342] loop0: detected capacity change from 0 to 128 [ 178.428975][ T7316] loop1: detected capacity change from 0 to 32768 [ 178.496326][ T7342] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.582664][ T7342] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.641505][ T7342] EXT4-fs warning (device loop0): ext4_group_extend:1852: can't read last block, resize aborted [ 178.670982][ T7316] XFS (loop1): Mounting V5 Filesystem [ 178.890509][ T7316] XFS (loop1): Ending clean mount [ 178.922887][ T7316] XFS (loop1): Quotacheck needed: Please wait. [ 179.046674][ T7316] XFS (loop1): Quotacheck: Done. [ 179.192552][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.256545][ T4170] XFS (loop1): Unmounting Filesystem [ 179.349332][ T7394] fuse: Invalid rootmode [ 179.552664][ T21] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 179.566942][ T21] usb 4-1: config 0 has no interface number 0 [ 179.580023][ T7404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1231'. [ 179.623073][ T21] usb 4-1: config 0 interface 74 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 179.647349][ T21] usb 4-1: config 0 interface 74 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 179.658764][ T7404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1231'. [ 179.670284][ T7406] misc userio: The device must be registered before sending interrupts [ 179.682372][ T21] usb 4-1: config 0 interface 74 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.882693][ T21] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 179.911035][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.923271][ T7417] ipt_rpfilter: unknown options [ 179.952517][ T21] usb 4-1: Product: syz [ 179.956789][ T21] usb 4-1: Manufacturer: syz [ 179.961436][ T21] usb 4-1: SerialNumber: syz [ 179.994419][ T21] usb 4-1: config 0 descriptor?? [ 180.032777][ T7426] loop4: detected capacity change from 0 to 128 [ 180.045503][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 180.070599][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 180.087675][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 180.486920][ T4177] usb 4-1: USB disconnect, device number 14 [ 180.495810][ T4177] f81534a_ctrl 4-1:0.74: failed to set register 0x116: -19 [ 180.533747][ T4177] f81534a_ctrl 4-1:0.74: failed to enable ports: -19 [ 180.631336][ T7460] loop1: detected capacity change from 0 to 256 [ 180.668794][ T7460] exfat: Deprecated parameter 'utf8' [ 180.677171][ T7460] exfat: Deprecated parameter 'utf8' [ 180.692958][ T7460] exfat: Deprecated parameter 'utf8' [ 180.743038][ T7460] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 180.848708][ T7472] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1265'. [ 180.971808][ T7481] loop1: detected capacity change from 0 to 256 [ 181.046744][ T7484] loop4: detected capacity change from 0 to 1764 [ 181.098654][ T7481] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 181.239177][ T7494] netlink: 'syz.3.1274': attribute type 10 has an invalid length. [ 181.439336][ T7498] loop4: detected capacity change from 0 to 1764 [ 181.478262][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1278'. [ 181.485312][ T7494] team0: Port device wlan1 added [ 181.579023][ T7498] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 181.791208][ T7508] loop3: detected capacity change from 0 to 1764 [ 181.875049][ T7512] loop1: detected capacity change from 0 to 4096 [ 181.923472][ T7512] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 182.046964][ T7512] ntfs: volume version 3.1. [ 182.357009][ T7531] mkiss: ax0: crc mode is auto. [ 182.897590][ T7516] loop4: detected capacity change from 0 to 32768 [ 183.048359][ T7516] XFS (loop4): Mounting V5 Filesystem [ 183.074374][ T7566] deleting an unspecified loop device is not supported. [ 183.315703][ T7516] XFS (loop4): Ending clean mount [ 183.335527][ T7576] mmap: syz.2.1310 (7576): VmData 37474304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 183.348506][ T7516] XFS (loop4): Quotacheck needed: Please wait. [ 183.522355][ T7516] XFS (loop4): Quotacheck: Done. [ 183.693880][ T4184] XFS (loop4): Unmounting Filesystem [ 184.538886][ T7625] loop4: detected capacity change from 0 to 2048 [ 184.624508][ T7625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.817397][ T7646] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 184.912122][ T7649] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 184.938846][ T7649] netlink: 'syz.4.1348': attribute type 3 has an invalid length. [ 184.968705][ T7649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1348'. [ 185.272624][ T4177] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 185.509758][ T7672] loop4: detected capacity change from 0 to 1024 [ 185.588007][ T4269] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.616170][ T7672] hfsplus: keylen 65060 too large [ 185.632009][ T7672] hfsplus: xattr searching failed [ 185.673731][ T4177] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 185.681996][ T4177] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.717495][ T4177] usb 2-1: config 0 has no interface number 0 [ 185.732533][ T4177] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 185.743061][ T4177] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.831903][ T7680] netlink: 'syz.0.1364': attribute type 3 has an invalid length. [ 185.832644][ T4269] usb 3-1: Using ep0 maxpacket: 16 [ 185.845015][ T7680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1364'. [ 185.963007][ T4177] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 185.974085][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.993121][ T4177] usb 2-1: Product: syz [ 185.997355][ T4177] usb 2-1: Manufacturer: syz [ 186.001961][ T4177] usb 2-1: SerialNumber: syz [ 186.063664][ T4177] usb 2-1: config 0 descriptor?? [ 186.136838][ T7690] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 186.147778][ T4269] usb 3-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=e3.4b [ 186.152867][ T7690] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 186.166752][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.188890][ T4269] usb 3-1: Product: syz [ 186.193611][ T4269] usb 3-1: Manufacturer: syz [ 186.198391][ T4269] usb 3-1: SerialNumber: syz [ 186.213102][ T4269] usb 3-1: config 0 descriptor?? [ 186.263273][ T4269] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 186.297236][ T7634] loop3: detected capacity change from 0 to 32768 [ 186.460486][ T4269] usb 3-1: USB disconnect, device number 11 [ 186.497681][ T7634] XFS (loop3): Mounting V5 Filesystem [ 186.552867][ T4177] usbtouchscreen: probe of 2-1:0.117 failed with error -71 [ 186.579868][ T4177] usb 2-1: USB disconnect, device number 14 [ 186.706066][ T7714] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1376'. [ 186.818634][ T7634] XFS (loop3): Ending clean mount [ 186.839761][ T7634] XFS (loop3): Quotacheck needed: Please wait. [ 186.911914][ T7634] XFS (loop3): Quotacheck: Done. [ 187.249747][ T7728] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1381'. [ 187.308957][ T7728] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1381'. [ 187.356728][ T4171] XFS (loop3): Unmounting Filesystem [ 187.548527][ T7742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1389'. [ 187.763934][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 188.409606][ T7780] loop1: detected capacity change from 0 to 8 [ 188.483348][ T7780] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 188.507238][ T4162] udevd[4162]: incorrect cramfs checksum on /dev/loop1 [ 188.575293][ T7780] cramfs: Error -3 while decompressing! [ 188.581328][ T7780] cramfs: ffffffff961c9228(26)->ffff88805374a000(4096) [ 188.617388][ T4162] udevd[4162]: incorrect cramfs checksum on /dev/loop1 [ 188.672873][ T7780] cramfs: Error -3 while decompressing! [ 188.695342][ T7780] cramfs: ffffffff961c9242(26)->ffff88805b4df000(4096) [ 188.702281][ T7780] cramfs: Error -3 while decompressing! [ 188.715190][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 188.752466][ T7780] cramfs: ffffffff961c925c(16)->ffff888052e3b000(4096) [ 188.787419][ T7780] cramfs: Error -3 while decompressing! [ 188.838844][ T7780] cramfs: ffffffff961c9228(26)->ffff88805374a000(4096) [ 189.176457][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1421'. [ 189.298414][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 189.808325][ T7841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.877995][ T7844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1437'. [ 190.002691][ T4386] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.196970][ T7859] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.276767][ T7866] netlink: 'syz.1.1448': attribute type 3 has an invalid length. [ 190.351529][ T7868] loop4: detected capacity change from 0 to 1024 [ 190.365660][ T4386] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 190.394781][ T4386] usb 3-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 190.441512][ T4386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.479636][ T4386] usb 3-1: config 1 has no interface number 0 [ 190.515592][ T4386] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 190.561083][ T4386] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 190.638464][ T4227] hfsplus: b-tree write err: -5, ino 4 [ 190.670786][ T7880] device netdevsim0 entered promiscuous mode [ 190.743914][ T4386] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.765937][ T4386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.770518][ T7885] netlink: 'syz.4.1454': attribute type 10 has an invalid length. [ 190.792553][ T4386] usb 3-1: Product: syz [ 190.802796][ T4386] usb 3-1: Manufacturer: syz [ 190.811389][ T4386] usb 3-1: SerialNumber: syz [ 190.863643][ T4386] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 190.870499][ T4386] cdc_ncm 3-1:1.1: bind() failure [ 191.038281][ T7897] __nla_validate_parse: 2 callbacks suppressed [ 191.038303][ T7897] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1463'. [ 191.116784][ T4386] usb 3-1: USB disconnect, device number 12 [ 191.427788][ T7913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 191.566295][ T7919] loop4: detected capacity change from 0 to 256 [ 191.621091][ T7921] loop1: detected capacity change from 0 to 64 [ 191.820360][ T7882] loop3: detected capacity change from 0 to 32768 [ 191.861413][ T7925] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.1477'. [ 191.936408][ T7932] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1479'. [ 192.035549][ T7882] XFS (loop3): Mounting V5 Filesystem [ 192.087057][ T7910] loop0: detected capacity change from 0 to 40427 [ 192.164751][ T7882] XFS (loop3): Ending clean mount [ 192.202810][ T7910] F2FS-fs (loop0): invalid crc value [ 192.258469][ T7910] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.273223][ T7882] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 192.483597][ T4171] XFS (loop3): Unmounting Filesystem [ 192.512895][ T4219] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 192.531196][ T7910] F2FS-fs (loop0): Start checkpoint disabled! [ 192.626858][ T7910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 192.952741][ T4219] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 192.971134][ T4219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.023078][ T4219] usb 5-1: config 0 has no interface number 0 [ 193.029262][ T4219] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 193.070752][ T4219] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 193.102429][ T4219] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.163022][ T4219] usb 5-1: config 0 interface 52 has no altsetting 0 [ 193.313076][ T4219] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 193.324469][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 193.352520][ T4177] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 193.360206][ T4219] usb 5-1: Product: syz [ 193.371779][ T4219] usb 5-1: SerialNumber: syz [ 193.393236][ T4219] usb 5-1: config 0 descriptor?? [ 193.419101][ T7986] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 193.681013][ T4219] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input9 [ 193.704926][ T8002] loop3: detected capacity change from 0 to 512 [ 193.737258][ T8002] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.782668][ T4177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.799112][ T8002] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.825049][ T8002] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 193.861690][ T4177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.906092][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.914911][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.918421][ T4386] usb 5-1: USB disconnect, device number 13 [ 193.927196][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 193.936759][ T4177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 193.962934][ T8002] EXT4-fs (loop3): 1 truncate cleaned up [ 193.999242][ T4177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 194.038557][ T4177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.057574][ T8002] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,nojournal_checksum,. Quota mode: writeback. [ 194.072887][ T7968] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 194.073187][ T8013] device netdevsim0 entered promiscuous mode [ 194.104546][ T4177] hub 2-1:1.0: bad descriptor, ignoring hub [ 194.115488][ T4177] hub: probe of 2-1:1.0 failed with error -5 [ 194.144137][ T4177] cdc_wdm 2-1:1.0: skipping garbage [ 194.149401][ T4177] cdc_wdm 2-1:1.0: skipping garbage [ 194.213156][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1520'. [ 194.223970][ T4177] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 194.229912][ T4177] cdc_wdm 2-1:1.0: Unknown control protocol [ 194.313555][ T4177] usb 2-1: USB disconnect, device number 15 [ 194.372644][ T21] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 194.773397][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.823724][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 194.912717][ T21] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 194.934561][ T21] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 194.981660][ T21] usb 4-1: config 17 has no interface number 0 [ 195.005960][ T21] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 61741, setting to 64 [ 195.056774][ T21] usb 4-1: config 17 interface 8 has no altsetting 0 [ 195.104263][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 195.222732][ T21] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 195.249181][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.282689][ T21] usb 4-1: Product: syz [ 195.300658][ T21] usb 4-1: Manufacturer: syz [ 195.316014][ T21] usb 4-1: SerialNumber: syz [ 195.601435][ T8089] loop1: detected capacity change from 0 to 256 [ 195.675415][ T21] usb 4-1: selecting invalid altsetting 0 [ 195.697372][ T8089] FAT-fs (loop1): Directory bread(block 64) failed [ 195.722551][ T8089] FAT-fs (loop1): Directory bread(block 65) failed [ 195.749676][ T8089] FAT-fs (loop1): Directory bread(block 66) failed [ 195.753510][ T21] usb 4-1: USB disconnect, device number 15 [ 195.802945][ T8089] FAT-fs (loop1): Directory bread(block 67) failed [ 195.850839][ T8089] FAT-fs (loop1): Directory bread(block 68) failed [ 195.871042][ T8089] FAT-fs (loop1): Directory bread(block 69) failed [ 195.890416][ T8089] FAT-fs (loop1): Directory bread(block 70) failed [ 195.899609][ T8089] FAT-fs (loop1): Directory bread(block 71) failed [ 195.907469][ T8089] FAT-fs (loop1): Directory bread(block 72) failed [ 195.914482][ T8089] FAT-fs (loop1): Directory bread(block 73) failed [ 195.994171][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.089535][ T8098] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 196.163698][ T8098] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.1551'. [ 196.499554][ T8123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1558'. [ 196.755947][ T8138] 9pnet: p9_fd_create_tcp (8138): problem connecting socket to 127.0.0.1 [ 197.175065][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 197.212756][ T8165] netlink: 3416 bytes leftover after parsing attributes in process `syz.1.1568'. [ 197.223558][ T8165] netlink: 3416 bytes leftover after parsing attributes in process `syz.1.1568'. [ 197.265070][ T8165] netlink: 242 bytes leftover after parsing attributes in process `syz.1.1568'. [ 197.467089][ T8173] loop4: detected capacity change from 0 to 4096 [ 197.629438][ T8189] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.684234][ T8173] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=129, name_len=6 [ 197.755661][ T8173] Remounting filesystem read-only [ 198.222830][ T4177] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 198.238930][ T8220] binder: 8219:8220 ioctl c018620c 200000000240 returned -1 [ 198.399972][ T8233] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1594'. [ 198.603574][ T4177] usb 2-1: config 0 has no interfaces? [ 198.612725][ T4177] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 198.652082][ T4177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.684014][ T4177] usb 2-1: config 0 descriptor?? [ 198.757241][ T8255] loop4: detected capacity change from 0 to 256 [ 198.852701][ T4219] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.863341][ T8255] exfat: Deprecated parameter 'utf8' [ 198.887414][ T8255] exfat: Deprecated parameter 'utf8' [ 198.910006][ T8255] exfat: Deprecated parameter 'utf8' [ 198.969915][ T8202] udc-core: couldn't find an available UDC or it's busy [ 198.984933][ T8255] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 199.032763][ T8202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 199.096476][ T5330] usb 2-1: USB disconnect, device number 16 [ 199.142543][ T4219] usb 3-1: Using ep0 maxpacket: 32 [ 199.312717][ T4219] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.402947][ T4219] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 199.422437][ T4219] usb 3-1: config 7 has no interface number 0 [ 199.456887][ T4219] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 199.473698][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 199.487321][ T4219] usb 3-1: config 7 interface 187 has no altsetting 0 [ 199.526992][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'. [ 199.538682][ T8283] device netdevsim0 entered promiscuous mode [ 199.557401][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'. [ 199.569430][ T8283] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.702849][ T4219] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 199.732348][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.762865][ T4219] usb 3-1: Product: syz [ 199.782931][ T4219] usb 3-1: Manufacturer: syz [ 199.810046][ T4219] usb 3-1: SerialNumber: syz [ 199.883083][ T8243] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 199.922798][ T8300] (syz.4.1618,8300,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 199.931458][ T8300] (syz.4.1618,8300,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 200.105243][ T8308] netlink: 'syz.1.1621': attribute type 10 has an invalid length. [ 200.142743][ T4219] usb 3-1: Limiting number of CPorts to U8_MAX [ 200.154678][ T4219] usb 3-1: Unknown endpoint type found, address 0x07 [ 200.172852][ T8308] device dummy0 entered promiscuous mode [ 200.179445][ T8308] bridge0: port 3(dummy0) entered blocking state [ 200.212921][ T4219] usb 3-1: Not enough endpoints found in device, aborting! [ 200.242579][ T8308] bridge0: port 3(dummy0) entered disabled state [ 200.278588][ T8308] bridge0: port 3(dummy0) entered blocking state [ 200.285702][ T8308] bridge0: port 3(dummy0) entered forwarding state [ 200.358015][ T5330] usb 3-1: USB disconnect, device number 13 [ 200.674859][ T4269] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.682760][ T8330] netlink: 'syz.1.1629': attribute type 25 has an invalid length. [ 200.951624][ T4269] usb 5-1: Using ep0 maxpacket: 32 [ 200.978943][ T8311] loop3: detected capacity change from 0 to 32768 [ 201.059778][ T8350] loop1: detected capacity change from 0 to 16 [ 201.075112][ T4269] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 201.083511][ T8311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1622 (8311) [ 201.112501][ T4269] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 201.125195][ T8350] erofs: (device loop1): mounted with root inode @ nid 36. [ 201.132949][ T4269] usb 5-1: config 8 has no interface number 0 [ 201.153235][ T4269] usb 5-1: config 8 interface 203 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 201.204020][ T4269] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 201.232149][ T4269] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 201.252611][ T4269] usb 5-1: config 8 interface 203 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.299386][ T4269] usb 5-1: config 8 interface 203 has no altsetting 0 [ 201.340798][ T8311] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 201.362907][ T8311] BTRFS info (device loop3): using free space tree [ 201.371631][ T8311] BTRFS info (device loop3): has skinny extents [ 201.482578][ T4269] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 201.502037][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 201.520825][ T4269] usb 5-1: Product: syz [ 201.525796][ T4269] usb 5-1: Manufacturer: syz [ 201.535167][ T4269] usb 5-1: SerialNumber: syz [ 201.552836][ T8318] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 201.707037][ T8311] BTRFS info (device loop3): enabling ssd optimizations [ 201.863365][ T4269] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 201.898684][ T4269] usb 5-1: USB disconnect, device number 14 [ 202.668148][ T8416] loop1: detected capacity change from 0 to 4096 [ 202.752671][ T5400] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 203.182721][ T5400] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 203.224697][ T5400] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 203.261482][ T5400] usb 4-1: config 4 interface 0 has no altsetting 0 [ 203.442824][ T5400] usb 4-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=84.b2 [ 203.455279][ T8467] netlink: 'syz.4.1681': attribute type 2 has an invalid length. [ 203.457647][ T5400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.486609][ T5400] usb 4-1: Product: syz [ 203.496533][ T5400] usb 4-1: Manufacturer: syz [ 203.536557][ T5400] usb 4-1: SerialNumber: syz [ 203.813311][ T8485] loop1: detected capacity change from 0 to 64 [ 203.886182][ T5400] snd-usb-caiaq 4-1:4.0: can't set alt interface. [ 203.900584][ T5400] usb 4-1: unable to init card! (ret=-5) [ 203.907600][ T5400] snd-usb-caiaq: probe of 4-1:4.0 failed with error -5 [ 203.950353][ T5400] usb 4-1: USB disconnect, device number 16 [ 204.368002][ T8519] __nla_validate_parse: 2 callbacks suppressed [ 204.368019][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 204.491869][ T8524] netlink: 'syz.3.1708': attribute type 5 has an invalid length. [ 204.952538][ T4269] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 205.319905][ T4269] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 205.332210][ T4269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.344740][ T8585] netlink: 'syz.1.1737': attribute type 10 has an invalid length. [ 205.352965][ T4269] usb 3-1: config 0 has no interface number 0 [ 205.379713][ T8585] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1737'. [ 205.412039][ T8588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.427925][ T8585] device bond0 entered promiscuous mode [ 205.441144][ T8585] device bond_slave_0 entered promiscuous mode [ 205.453307][ T8585] device bond_slave_1 entered promiscuous mode [ 205.482599][ T5400] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.520308][ T4269] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 205.535829][ T8593] loop3: detected capacity change from 0 to 64 [ 205.542154][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.543112][ T8591] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1740'. [ 205.550731][ T4269] usb 3-1: Product: syz [ 205.563969][ T4269] usb 3-1: Manufacturer: syz [ 205.568584][ T4269] usb 3-1: SerialNumber: syz [ 205.597772][ T8593] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 205.616085][ T4269] usb 3-1: config 0 descriptor?? [ 205.622668][ T8593] MINIX-fs: bad superblock or unable to read bitmaps [ 205.653411][ T4269] hub 3-1:0.31: bad descriptor, ignoring hub [ 205.659475][ T4269] hub: probe of 3-1:0.31 failed with error -5 [ 205.882576][ T4269] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 205.900445][ T4269] usb 3-1: No valid video chain found. [ 205.922680][ T5400] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.953141][ T5400] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.963423][ T4269] usb 3-1: USB disconnect, device number 14 [ 206.017184][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1751'. [ 206.053223][ T5400] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.082794][ T5400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.106130][ T8621] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 206.113260][ T5400] usb 5-1: SerialNumber: syz [ 206.160737][ T8624] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 206.182146][ T8624] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1756'. [ 206.253386][ T8621] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.291697][ T8621] bond0: (slave team0): Enslaving as an active interface with an up link [ 206.339551][ T8633] kcapi: manufacturer command 4294967295 unknown. [ 206.432521][ T8621] syz.3.1755 (8621) used greatest stack depth: 20416 bytes left [ 206.435511][ T5400] usb 5-1: 0:2 : does not exist [ 206.452274][ T8638] loop1: detected capacity change from 0 to 16 [ 206.459764][ T5400] usb 5-1: unit 5: unexpected type 0x03 [ 206.491311][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1764'. [ 206.519330][ T5400] usb 5-1: USB disconnect, device number 15 [ 206.536859][ T8638] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.714864][ T8651] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 206.793955][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.872099][ T8661] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1775'. [ 206.887461][ T8663] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 206.921146][ T8663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1776'. [ 207.012591][ T4177] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.142921][ T8673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.285768][ T8682] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1786'. [ 207.372839][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 207.372860][ T4177] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 207.400891][ T4177] usb 2-1: config 0 has no interface number 0 [ 207.408736][ T4177] usb 2-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 207.419360][ T4177] usb 2-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 207.430657][ T4177] usb 2-1: config 0 interface 7 has no altsetting 0 [ 207.438065][ T4177] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 207.464104][ T4177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.493664][ T4177] usb 2-1: config 0 descriptor?? [ 207.522948][ T8653] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.645895][ T8697] loop3: detected capacity change from 0 to 512 [ 207.743282][ T8697] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1793: casefold flag without casefold feature [ 207.767004][ T8697] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1793: couldn't read orphan inode 15 (err -117) [ 207.792954][ T4177] usb 2-1: string descriptor 0 read error: -71 [ 207.802759][ T8697] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.823359][ T4177] usb 2-1: Error in usbnet_get_endpoints (-22) [ 207.894345][ T4177] usb 2-1: USB disconnect, device number 17 [ 208.029895][ T8711] loop4: detected capacity change from 0 to 4096 [ 208.114104][ T8711] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 208.159729][ T8711] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 208.192562][ T8711] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 208.225268][ T8711] ntfs: volume version 3.1. [ 208.435243][ T4227] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 208.454694][ T4227] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 208.472451][ T8727] netlink: 'syz.3.1807': attribute type 10 has an invalid length. [ 208.520102][ T4184] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 208.573920][ T8727] team0: Port device wlan1 removed [ 208.604697][ T8727] batman_adv: batadv0: Adding interface: wlan1 [ 208.642673][ T8727] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.702496][ T8727] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 208.728581][ T8737] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 208.794040][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.825525][ T8737] bond0: (slave team0): Enslaving as an active interface with an up link [ 209.026871][ T8756] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 209.351475][ T8778] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 209.390291][ T8778] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.391245][ T8778] device team0 entered promiscuous mode [ 209.391260][ T8778] device team_slave_0 entered promiscuous mode [ 209.391433][ T8778] device team_slave_1 entered promiscuous mode [ 209.391902][ T8778] bond0: (slave team0): Enslaving as an active interface with an up link [ 209.764413][ T8795] __nla_validate_parse: 6 callbacks suppressed [ 209.764431][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 209.858569][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1840'. [ 209.904732][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1840'. [ 209.937323][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1840'. [ 210.145410][ T8817] loop3: detected capacity change from 0 to 512 [ 210.225522][ T8824] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1854'. [ 210.282136][ T8817] EXT4-fs (loop3): orphan cleanup on readonly fs [ 210.330965][ T8817] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1850: bg 0: block 248: padding at end of block bitmap is not set [ 210.337640][ T8829] program syz.2.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.461085][ T8817] Quota error (device loop3): write_blk: dquota write failed [ 210.522620][ T8817] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 210.566508][ T8817] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.1850: Failed to acquire dquot type 1 [ 210.604020][ T8817] EXT4-fs (loop3): 1 truncate cleaned up [ 210.656894][ T8817] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.762538][ T8817] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 210.861683][ T8855] loop4: detected capacity change from 0 to 2048 [ 210.884845][ T8850] loop0: detected capacity change from 0 to 4096 [ 210.954483][ T8850] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 210.966410][ T8855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.001006][ T8850] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 211.045562][ T8867] program syz.2.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.055572][ T8850] ntfs: volume version 3.1. [ 211.150219][ T8871] Cannot find set identified by id 0 to match [ 211.287834][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 211.414909][ T8888] device veth1_to_team entered promiscuous mode [ 211.466878][ T8888] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 211.881591][ T8916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1900'. [ 211.978532][ T8923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1902'. [ 212.018813][ T8928] sctp: [Deprecated]: syz.4.1906 (pid 8928) Use of int in maxseg socket option. [ 212.018813][ T8928] Use struct sctp_assoc_value instead [ 212.042530][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 212.062204][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 212.624931][ T8958] nvme_fabrics: missing parameter 'transport=%s' [ 212.632030][ T8958] nvme_fabrics: missing parameter 'nqn=%s' [ 212.705237][ T8956] loop3: detected capacity change from 0 to 4096 [ 212.812681][ T8956] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 213.022424][ T8986] netlink: 'syz.0.1933': attribute type 2 has an invalid length. [ 213.306624][ T9001] bridge0: port 3(veth0_to_bridge) entered blocking state [ 213.340057][ T9001] bridge0: port 3(veth0_to_bridge) entered disabled state [ 213.351556][ T9001] device veth0_to_bridge entered promiscuous mode [ 213.381154][ T9001] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.403893][ T9001] bridge0: port 3(veth0_to_bridge) entered blocking state [ 213.411186][ T9001] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 213.416753][ T8996] loop4: detected capacity change from 0 to 8192 [ 213.552651][ T8996] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 213.572974][ T8996] REISERFS (device loop4): using ordered data mode [ 213.579527][ T8996] reiserfs: using flush barriers [ 213.650975][ T8996] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.736411][ T8996] REISERFS (device loop4): checking transaction log (loop4) [ 213.934561][ T9032] xt_l2tp: v2 tid > 0xffff: 262144 [ 214.033671][ T8996] REISERFS (device loop4): Using tea hash to sort names [ 214.081898][ T8996] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 214.205280][ T9035] loop1: detected capacity change from 0 to 4096 [ 214.448762][ T9053] loop0: detected capacity change from 0 to 512 [ 214.503720][ T9059] loop1: detected capacity change from 0 to 512 [ 214.537573][ T9053] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.628843][ T9053] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 214.659520][ T9059] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 214.702915][ T9059] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.729648][ T9053] EXT4-fs (loop0): 1 truncate cleaned up [ 214.744521][ T9053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.852317][ T9078] __nla_validate_parse: 9 callbacks suppressed [ 214.852336][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1976'. [ 214.898475][ T9081] loop4: detected capacity change from 0 to 512 [ 215.095171][ T9081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.130976][ T9081] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.132581][ T4177] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 215.288415][ T9100] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 215.482566][ T4177] usb 2-1: Using ep0 maxpacket: 8 [ 215.604057][ T4177] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 215.624153][ T4177] usb 2-1: config 0 has no interface number 0 [ 215.664774][ T4177] usb 2-1: config 0 interface 74 has no altsetting 0 [ 215.702172][ T9121] loop0: detected capacity change from 0 to 512 [ 215.774346][ T9127] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1996'. [ 215.842690][ T4177] usb 2-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice=81.cd [ 215.851808][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.865490][ T9121] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.872834][ T4177] usb 2-1: Product: syz [ 215.885300][ T4177] usb 2-1: Manufacturer: syz [ 215.890857][ T4177] usb 2-1: SerialNumber: syz [ 215.908797][ T9121] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.924258][ T4177] usb 2-1: config 0 descriptor?? [ 216.087653][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 216.255620][ T4177] snd-usb-caiaq 2-1:0.74: can't set alt interface. [ 216.262187][ T4177] usb 2-1: unable to init card! (ret=-5) [ 216.290946][ T4177] snd-usb-caiaq: probe of 2-1:0.74 failed with error -5 [ 216.315781][ T4177] usb 2-1: USB disconnect, device number 18 [ 216.415534][ T9164] loop3: detected capacity change from 0 to 256 [ 216.505075][ T9169] device bond1 entered promiscuous mode [ 216.511468][ T9169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.527378][ T9172] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2018'. [ 216.556074][ T9164] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.002668][ T9194] netlink: 700 bytes leftover after parsing attributes in process `syz.2.2028'. [ 217.339507][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 217.352505][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 217.648726][ T9238] 9pnet: Insufficient options for proto=fd [ 218.432866][ T9282] [U] [ 218.436139][ T9282] [U] [ 218.438874][ T9282] [U] [ 218.441595][ T9282] [U] [ 218.514853][ T9282] [U] [ 218.517609][ T9282] [U] [ 218.520329][ T9282] [U] [ 218.523042][ T9282] [U] [ 218.649417][ T9282] [U] [ 218.652179][ T9282] [U] [ 218.654890][ T9282] [U] [ 218.657602][ T9282] [U] [ 218.677292][ T9282] [U] [ 218.680063][ T9282] [U] [ 218.682791][ T9282] [U] [ 218.685626][ T9282] [U] [ 218.757090][ T9281] [U] [ 219.089231][ T9307] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.152321][ T9270] loop3: detected capacity change from 0 to 32768 [ 219.336891][ T9315] netlink: 'syz.4.2089': attribute type 5 has an invalid length. [ 219.378352][ T9315] device ip6erspan0 entered promiscuous mode [ 219.502895][ T2422] pvrusb2: request_firmware fatal error with code=-110 [ 219.512221][ T2422] pvrusb2: Failure uploading firmware1 [ 219.534805][ T2422] pvrusb2: Device initialization was not successful. [ 219.541666][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.585917][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 219.625310][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 219.652488][ T4215] pvrusb2: Device being rendered inoperable [ 219.672498][ T4292] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 219.912523][ T4292] usb 3-1: Using ep0 maxpacket: 32 [ 220.016533][ T9343] autofs4:pid:9343:autofs_fill_super: called with bogus options [ 220.032792][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 220.074450][ T9337] loop3: detected capacity change from 0 to 4096 [ 220.155056][ T9337] __ntfs_error: 12 callbacks suppressed [ 220.155075][ T9337] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 220.193384][ T9337] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 220.213271][ T9337] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 220.227023][ T4292] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 220.242824][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.260599][ T4292] usb 3-1: Product: syz [ 220.272642][ T4292] usb 3-1: Manufacturer: syz [ 220.277538][ T4292] usb 3-1: SerialNumber: syz [ 220.281158][ T9337] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 220.291731][ T4292] usb 3-1: config 0 descriptor?? [ 220.344320][ T4292] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 220.361338][ T9337] ntfs: volume version 3.1. [ 220.587962][ T4269] usb 3-1: USB disconnect, device number 15 [ 220.673983][ T9365] loop0: detected capacity change from 0 to 2048 [ 220.710120][ T9365] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.921649][ T9383] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 220.995684][ T9380] loop1: detected capacity change from 0 to 4096 [ 221.216929][ T9380] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 221.406812][ T155] ntfs3: loop1: ino=1c, Internal error [ 221.420111][ T155] ntfs3: loop1: ntfs3_write_inode r=1c failed, -22. [ 221.505773][ T9405] loop4: detected capacity change from 0 to 4096 [ 221.591475][ T9414] loop3: detected capacity change from 0 to 512 [ 221.617529][ T9405] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 221.668379][ T9414] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.767280][ T9414] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 221.821936][ T9405] ntfs3: loop4: failed to convert "c46c" to default [ 221.871889][ T9414] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 221.985329][ T9414] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 222.000572][ T26] audit: type=1400 audit(1746801727.309:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=9427 comm="syz.1.2142" [ 222.062554][ T9414] System zones: 0-2, 18-18, 34-35 [ 222.073772][ T9414] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.632633][ T9462] netlink: 'syz.4.2159': attribute type 3 has an invalid length. [ 222.782923][ T9469] xt_bpf: check failed: parse error [ 222.816892][ T9474] loop3: detected capacity change from 0 to 256 [ 222.931912][ T9474] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 222.991562][ T9483] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2170'. [ 223.092756][ T4292] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 223.335495][ T9497] loop3: detected capacity change from 0 to 4096 [ 223.342619][ T4292] usb 2-1: Using ep0 maxpacket: 16 [ 223.373888][ T9506] netlink: 'syz.4.2180': attribute type 3 has an invalid length. [ 223.402691][ T9506] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2180'. [ 223.462792][ T4292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.498871][ T4292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.683505][ T4292] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.724192][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.772549][ T4292] usb 2-1: Product: syz [ 223.800174][ T4292] usb 2-1: Manufacturer: syz [ 223.823603][ T4292] usb 2-1: SerialNumber: syz [ 223.968378][ T9530] x_tables: ip_tables: osf match: only valid for protocol 6 [ 224.192741][ T4292] usb 2-1: 0:2 : does not exist [ 224.197809][ T4292] usb 2-1: unit 9 not found! [ 224.242571][ T4292] usb 2-1: USB disconnect, device number 19 [ 224.484901][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.679088][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2214'. [ 224.804606][ T9570] loop3: detected capacity change from 0 to 4096 [ 224.853236][ T9570] ntfs3: loop3: ino=3, Correct links count -> 2. [ 224.941697][ T9591] loop4: detected capacity change from 0 to 8 [ 224.987083][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2224'. [ 225.017211][ T26] audit: type=1800 audit(1746801730.329:5): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2213" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 225.099692][ T9591] SQUASHFS error: Failed to read block 0x6e6: -5 [ 225.132723][ T9591] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 225.151292][ T9591] SQUASHFS error: Unable to read directory block [631:26] [ 225.612687][ T4177] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 225.673347][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 225.691877][ T9636] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.850418][ T9649] loop4: detected capacity change from 0 to 64 [ 225.857072][ T9648] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.950448][ T9653] loop0: detected capacity change from 0 to 512 [ 226.007407][ T4177] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 226.030742][ T9653] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.055696][ T4177] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 226.075135][ T9653] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (800) [ 226.092449][ T4177] usb 4-1: config 220 has no interface number 2 [ 226.116532][ T4177] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 226.166376][ T4177] usb 4-1: config 220 interface 0 has no altsetting 0 [ 226.182617][ T4177] usb 4-1: config 220 interface 76 has no altsetting 0 [ 226.189805][ T4177] usb 4-1: config 220 interface 1 has no altsetting 0 [ 226.412696][ T4177] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.421936][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.442521][ T4269] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 226.482648][ T4177] usb 4-1: Product: syz [ 226.486873][ T4177] usb 4-1: Manufacturer: syz [ 226.521342][ T4177] usb 4-1: SerialNumber: syz [ 226.812723][ T4269] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.852553][ T4269] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.912007][ T4269] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.941548][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.952857][ T4177] usb 4-1: selecting invalid altsetting 0 [ 226.959151][ T4177] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 226.987812][ T4177] usb 4-1: No valid video chain found. [ 227.003630][ T4269] hub 5-1:4.0: USB hub found [ 227.130274][ T4177] usb 4-1: selecting invalid altsetting 0 [ 227.142425][ T4177] usbtest: probe of 4-1:220.1 failed with error -22 [ 227.159369][ T9703] netlink: 'syz.1.2279': attribute type 10 has an invalid length. [ 227.165818][ T4177] usb 4-1: USB disconnect, device number 17 [ 227.191529][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2279'. [ 227.229392][ T4269] hub 5-1:4.0: 13 ports detected [ 227.235750][ T4269] usb 5-1: selecting invalid altsetting 1 [ 227.241522][ T4269] hub 5-1:4.0: Using single TT (err -22) [ 227.288268][ T4269] hub 5-1:4.0: insufficient power available to use all downstream ports [ 227.385736][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 227.408193][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2283'. [ 227.432729][ T4269] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 227.439811][ T4269] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 227.533547][ T4269] usb 5-1: USB disconnect, device number 16 [ 227.601950][ T9726] loop0: detected capacity change from 0 to 256 [ 227.689656][ T9726] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.730266][ T9726] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 227.786331][ T9726] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 228.065986][ T9740] loop3: detected capacity change from 0 to 4096 [ 228.142656][ T4177] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 228.157170][ T9751] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.176130][ T9740] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 228.229851][ T9740] Remounting filesystem read-only [ 228.342697][ T4386] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 228.429627][ T4177] usb 2-1: Using ep0 maxpacket: 32 [ 228.612725][ T4177] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.719432][ T4177] usb 2-1: config 5 has an invalid interface number: 61 but max is 0 [ 228.728864][ T4177] usb 2-1: config 5 has no interface number 0 [ 228.736302][ T4386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.740101][ T4177] usb 2-1: config 5 interface 61 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 228.766468][ T4386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.773927][ T4177] usb 2-1: config 5 interface 61 has no altsetting 0 [ 228.792970][ T4386] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.821110][ T4386] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.841903][ T4386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.872307][ T4386] usb 1-1: config 0 descriptor?? [ 228.924231][ T4386] hub 1-1:0.0: USB hub found [ 228.930194][ T9789] netlink: 'syz.2.2320': attribute type 12 has an invalid length. [ 229.002911][ T4177] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 229.012026][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.070988][ T4177] usb 2-1: Product: syz [ 229.091961][ T4177] usb 2-1: Manufacturer: syz [ 229.102478][ T4177] usb 2-1: SerialNumber: syz [ 229.123205][ T9736] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.142711][ T4386] hub 1-1:0.0: 12 ports detected [ 229.162685][ T4386] hub 1-1:0.0: insufficient power available to use all downstream ports [ 229.370152][ T4386] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 229.377441][ T4386] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 229.423921][ T4177] ath6kl: Failed to submit usb control message: -71 [ 229.431928][ T4177] ath6kl: unable to send the bmi data to the device: -71 [ 229.447205][ T4177] ath6kl: Unable to send get target info: -71 [ 229.459447][ T4177] ath6kl: Failed to init ath6kl core: -71 [ 229.463074][ T4386] usb 1-1: USB disconnect, device number 9 [ 229.493443][ T4177] ath6kl_usb: probe of 2-1:5.61 failed with error -71 [ 229.529705][ T4177] usb 2-1: USB disconnect, device number 20 [ 229.632724][ T9825] loop3: detected capacity change from 0 to 256 [ 229.776562][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 229.836912][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2340'. [ 229.857059][ T9831] device bond3 entered promiscuous mode [ 229.896163][ T9831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.950070][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 229.979625][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2342'. [ 230.231989][ T9854] IPv6: sit1: Disabled Multicast RS [ 230.376664][ T9857] loop3: detected capacity change from 0 to 4096 [ 230.541406][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2363'. [ 230.739706][ T9857] EXT4-fs (loop3): Test dummy encryption mode enabled [ 230.759704][ T9857] EXT4-fs (loop3): Ignoring removed orlov option [ 230.810816][ T9857] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,nolazytime,orlov,data_err=abort,errors=remount-ro,nobarrier,quota,. Quota mode: writeback. [ 231.005038][ T9857] EXT4-fs error (device loop3): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.3.2352: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 231.095478][ T9857] EXT4-fs (loop3): Remounting filesystem read-only [ 231.157729][ T9857] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.2352: directory missing '..' [ 231.189913][ T9857] EXT4-fs (loop3): Remounting filesystem read-only [ 231.447969][ T9928] loop0: detected capacity change from 0 to 512 [ 231.519710][ T9928] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 231.545080][ T9928] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 231.607725][ T9928] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 231.616227][ T9928] System zones: 1-12 [ 231.627521][ T9928] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.2384: corrupted in-inode xattr [ 231.679788][ T9943] loop4: detected capacity change from 0 to 256 [ 231.742987][ T9928] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2384: couldn't read orphan inode 15 (err -117) [ 231.832939][ T9928] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 231.839417][ T9943] FAT-fs (loop4): Directory bread(block 64) failed [ 231.902954][ T9943] FAT-fs (loop4): Directory bread(block 65) failed [ 231.919814][ T9943] FAT-fs (loop4): Directory bread(block 66) failed [ 231.941141][ T9943] FAT-fs (loop4): Directory bread(block 67) failed [ 231.970227][ T9943] FAT-fs (loop4): Directory bread(block 68) failed [ 231.991511][ T9943] FAT-fs (loop4): Directory bread(block 69) failed [ 232.008521][ T9964] netlink: 'syz.3.2402': attribute type 30 has an invalid length. [ 232.019824][ T9943] FAT-fs (loop4): Directory bread(block 70) failed [ 232.027047][ T9943] FAT-fs (loop4): Directory bread(block 71) failed [ 232.043196][ T9943] FAT-fs (loop4): Directory bread(block 72) failed [ 232.060023][ T9943] FAT-fs (loop4): Directory bread(block 73) failed [ 232.904062][T10028] loop1: detected capacity change from 0 to 512 [ 232.913792][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 232.930176][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 232.985391][T10028] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 233.062585][T10028] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.087479][T10027] device bond2 entered promiscuous mode [ 233.094014][T10027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.144464][T10036] device vti0 entered promiscuous mode [ 233.152515][ T4386] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 233.513349][ T4386] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 233.549941][ T4386] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.593230][ T4386] usb 3-1: config 220 has no interface number 2 [ 233.599715][ T4386] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 233.659385][ T4386] usb 3-1: config 220 interface 0 has no altsetting 0 [ 233.682631][ T4386] usb 3-1: config 220 interface 76 has no altsetting 0 [ 233.706340][ T4386] usb 3-1: config 220 interface 1 has no altsetting 0 [ 233.872688][ T4386] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 233.882262][T10063] xt_hashlimit: max too large, truncated to 1048576 [ 233.909477][ T4386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.932906][ T4386] usb 3-1: Product: syz [ 233.934825][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'. [ 233.937120][ T4386] usb 3-1: Manufacturer: syz [ 233.937142][ T4386] usb 3-1: SerialNumber: syz [ 233.993137][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2449'. [ 234.025297][T10070] loop1: detected capacity change from 0 to 1024 [ 234.049939][T10066] device bond1 entered promiscuous mode [ 234.058908][T10066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.134239][ T4384] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 234.312743][ T4386] usb 3-1: selecting invalid altsetting 0 [ 234.319846][T10081] loop4: detected capacity change from 0 to 64 [ 234.326680][ T4386] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 234.342284][ T4386] usb 3-1: No valid video chain found. [ 234.392502][ T4384] usb 4-1: Using ep0 maxpacket: 16 [ 234.417281][T10081] hfs: unable to locate alternate MDB [ 234.424151][ T4386] usb 3-1: selecting invalid altsetting 0 [ 234.429919][ T4386] usbtest: probe of 3-1:220.1 failed with error -22 [ 234.442601][T10081] hfs: continuing without an alternate MDB [ 234.465415][ T4386] usb 3-1: USB disconnect, device number 16 [ 234.512660][ T4384] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 234.532619][ T4384] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 234.539873][ T4384] usb 4-1: config 0 has no interface number 0 [ 234.667959][T10097] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.722684][ T4384] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 234.740040][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.759244][ T4384] usb 4-1: Product: syz [ 234.767110][ T4384] usb 4-1: Manufacturer: syz [ 234.805490][ T4384] usb 4-1: SerialNumber: syz [ 234.826528][ T4384] usb 4-1: config 0 descriptor?? [ 235.122673][ T4384] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 235.129090][ T4384] usb 4-1: No valid video chain found. [ 235.182584][ T4384] usb 4-1: USB disconnect, device number 18 [ 235.324718][T10131] gfs2: not a GFS2 filesystem [ 235.437858][T10136] loop4: detected capacity change from 0 to 512 [ 235.460117][T10139] netlink: 'syz.2.2486': attribute type 10 has an invalid length. [ 235.485402][T10136] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.495911][T10139] device ipvlan1 entered promiscuous mode [ 235.511013][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 235.512250][T10139] batman_adv: batadv0: Adding interface: ipvlan1 [ 235.521286][T10136] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 235.554208][T10139] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.590089][T10139] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 235.617761][T10136] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 235.719676][T10136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 235.725887][T10150] loop1: detected capacity change from 0 to 256 [ 235.745540][T10136] System zones: 0-2, 18-18, 34-35 [ 235.757429][T10136] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.188146][T10165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2495'. [ 236.243838][T10165] unsupported nlmsg_type 40 [ 236.286512][T10168] loop0: detected capacity change from 0 to 2048 [ 236.364197][T10168] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294902015, location=4294902015 [ 236.404210][T10168] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294902271, location=4294902271 [ 236.470129][T10168] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 236.500185][T10168] UDF-fs: Scanning with blocksize 512 failed [ 236.525938][T10168] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294902015, location=4294902015 [ 236.599489][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2501'. [ 236.631516][T10168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.765663][T10155] loop3: detected capacity change from 0 to 32768 [ 236.898343][T10155] ea_get: invalid extended attribute [ 236.972617][T10186] syz.0.2516 uses old SIOCAX25GETINFO [ 237.300744][T10204] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.2515'. [ 237.502613][ T4384] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.619731][T10219] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 237.658923][T10219] openvswitch: netlink: Actions may not be safe on all matching packets [ 237.762542][ T4384] usb 5-1: Using ep0 maxpacket: 8 [ 237.786106][T10227] loop1: detected capacity change from 0 to 256 [ 237.802590][T10231] cgroup: Invalid name [ 237.825225][T10233] device bridge2 entered promiscuous mode [ 237.879213][T10227] FAT-fs (loop1): Directory bread(block 64) failed [ 237.887983][ T4384] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 237.903891][ T4384] usb 5-1: config 0 has no interface number 0 [ 237.922680][T10227] FAT-fs (loop1): Directory bread(block 65) failed [ 237.929360][T10227] FAT-fs (loop1): Directory bread(block 66) failed [ 237.936278][ T4384] usb 5-1: config 0 interface 74 has no altsetting 0 [ 237.962565][T10227] FAT-fs (loop1): Directory bread(block 67) failed [ 237.982734][T10227] FAT-fs (loop1): Directory bread(block 68) failed [ 237.999711][T10227] FAT-fs (loop1): Directory bread(block 69) failed [ 238.012866][T10227] FAT-fs (loop1): Directory bread(block 70) failed [ 238.019455][T10227] FAT-fs (loop1): Directory bread(block 71) failed [ 238.036481][T10227] FAT-fs (loop1): Directory bread(block 72) failed [ 238.053130][T10227] FAT-fs (loop1): Directory bread(block 73) failed [ 238.112682][ T4384] usb 5-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice=81.cd [ 238.136280][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.159692][ T4384] usb 5-1: Product: syz [ 238.179474][ T4384] usb 5-1: Manufacturer: syz [ 238.184258][ T4384] usb 5-1: SerialNumber: syz [ 238.201421][ T4384] usb 5-1: config 0 descriptor?? [ 238.545403][ T4384] snd-usb-caiaq 5-1:0.74: can't set alt interface. [ 238.563237][ T4384] usb 5-1: unable to init card! (ret=-5) [ 238.584032][ T4384] snd-usb-caiaq: probe of 5-1:0.74 failed with error -5 [ 238.611299][ T4384] usb 5-1: USB disconnect, device number 17 [ 238.651261][T10255] loop1: detected capacity change from 0 to 64 [ 238.660838][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2544'. [ 238.712648][T10257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2544'. [ 239.668816][T10305] loop4: detected capacity change from 0 to 4096 [ 239.797251][T10305] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 239.937723][T10305] ntfs3: loop4: failed to convert "c46c" to iso8859-14 [ 240.231509][T10342] loop1: detected capacity change from 0 to 764 [ 240.316843][T10348] loop3: detected capacity change from 0 to 256 [ 240.367937][T10342] Symlink component flag not implemented [ 240.389539][T10349] loop4: detected capacity change from 0 to 1024 [ 240.389988][T10342] Symlink component flag not implemented [ 240.425108][T10291] loop0: detected capacity change from 0 to 32768 [ 240.450004][T10342] Symlink component flag not implemented (129) [ 240.480752][T10342] Symlink component flag not implemented (6) [ 240.490523][T10349] EXT4-fs (loop4): first meta block group too large: 16777216 (group descriptor block count 1) [ 241.170262][T10383] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.2605'. [ 241.654879][T10423] loop1: detected capacity change from 0 to 512 [ 241.666321][ T4384] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.699987][T10423] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 241.699987][T10423] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 241.699987][T10423] [ 241.731679][T10423] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 241.742505][T10423] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.860230][T10423] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 241.882721][ T4177] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 241.942576][ T4384] usb 4-1: Using ep0 maxpacket: 32 [ 241.986628][T10423] EXT4-fs (loop1): 1 truncate cleaned up [ 242.016550][ T144] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 242.052720][T10423] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 242.067715][ T4384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.102610][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6240: comm kworker/u4:1: Failed to release dquot type 1 [ 242.186749][ T4177] usb 5-1: Using ep0 maxpacket: 32 [ 242.309643][ T4384] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 242.329276][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.353667][ T4384] usb 4-1: Product: syz [ 242.356958][T10447] loop1: detected capacity change from 0 to 512 [ 242.359700][ T4384] usb 4-1: Manufacturer: syz [ 242.365050][ T4177] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.381709][ T4384] usb 4-1: SerialNumber: syz [ 242.409011][T10447] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.429378][ T4384] usb 4-1: config 0 descriptor?? [ 242.443064][T10451] loop0: detected capacity change from 0 to 256 [ 242.453863][T10447] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.460527][T10447] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.2634: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 242.473071][ T4384] etas_es58x 4-1:0.0: Starting syz syz (Serial Number syz) driver version 1.00 [ 242.486050][T10447] EXT4-fs error (device loop1): ext4_quota_enable:6415: comm syz.1.2634: Bad quota inode: 3, type: 0 [ 242.501421][ T4177] usb 5-1: config 6 has an invalid interface number: 3 but max is 2 [ 242.534846][ T4177] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 242.561750][T10447] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 242.575829][ T4177] usb 5-1: config 6 has no interface number 1 [ 242.576969][T10447] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 242.589534][T10447] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 242.626652][ T4177] usb 5-1: too many endpoints for config 6 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 242.648166][ T4177] usb 5-1: config 6 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 242.656369][T10447] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 242.702458][ T4269] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 242.710175][ T4177] usb 5-1: config 6 interface 2 has no altsetting 0 [ 242.730387][T10447] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 242.735401][ T4177] usb 5-1: config 6 interface 0 has no altsetting 0 [ 242.745426][ T4386] usb 4-1: USB disconnect, device number 19 [ 242.942682][ T4269] usb 3-1: Using ep0 maxpacket: 8 [ 242.979883][ T4177] usb 5-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 242.999069][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.008715][ T4177] usb 5-1: Product: syz [ 243.013292][ T4177] usb 5-1: Manufacturer: syz [ 243.021902][ T4177] usb 5-1: SerialNumber: syz [ 243.038071][T10468] xt_NFQUEUE: number of total queues is 0 [ 243.195625][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'. [ 243.228122][ T4269] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 243.249182][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.298179][ T4269] usb 3-1: Product: syz [ 243.306074][ T4269] usb 3-1: Manufacturer: syz [ 243.310734][ T4269] usb 3-1: SerialNumber: syz [ 243.376791][ T4269] usb 3-1: config 0 descriptor?? [ 243.386329][ T4177] usb 5-1: selecting invalid altsetting 0 [ 243.396893][ T4177] usb 5-1: Could not set interface, error -22 [ 243.419042][ T4269] gspca_main: sq930x-2.14.0 probing 2770:930c [ 243.424901][ T4177] usb 5-1: selecting invalid altsetting 1 [ 243.430907][ T4177] usb 5-1: Could not set interface, error -22 [ 243.469507][ T4177] usb 5-1: USB disconnect, device number 18 [ 243.517622][T10494] kAFS: Can only specify source 'none' with -o dyn [ 243.531870][T10496] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 243.703410][T10506] netlink: 'syz.3.2664': attribute type 8 has an invalid length. [ 243.789527][ T5330] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.862524][ T4269] gspca_sq930x: ucbus_write failed -71 [ 243.926894][T10518] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 244.072479][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 244.102615][ T4269] gspca_sq930x: Sensor ov9630 not yet treated [ 244.108801][ T4269] sq930x: probe of 3-1:0.0 failed with error -22 [ 244.137173][ T4269] usb 3-1: USB disconnect, device number 17 [ 244.297810][T10539] loop4: detected capacity change from 0 to 2048 [ 244.364420][T10545] delete_channel: no stack [ 244.422881][ T5330] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 244.452494][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.460539][ T5330] usb 1-1: Product: syz [ 244.466654][T10548] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.495445][ T5330] usb 1-1: Manufacturer: syz [ 244.532735][ T5330] usb 1-1: SerialNumber: syz [ 244.563720][ T5330] usb 1-1: config 0 descriptor?? [ 244.882500][ T4386] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.068363][T10572] loop1: detected capacity change from 0 to 4096 [ 245.106586][ T4269] usb 1-1: USB disconnect, device number 10 [ 245.138257][T10572] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 245.148269][ T4269] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -19 [ 245.162937][ T4269] f81534a_ctrl 1-1:0.0: failed to enable ports: -19 [ 245.183151][T10581] xt_NFQUEUE: number of total queues is 0 [ 245.235721][T10584] netlink: 'syz.2.2701': attribute type 3 has an invalid length. [ 245.248880][T10572] ntfs3: loop1: Failed to load $Extend. [ 245.262681][ T4386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.309728][ T4386] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 245.351526][ T4386] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 245.388664][ T4386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.450495][ T4386] usb 4-1: config 0 descriptor?? [ 245.459534][T10592] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 245.474845][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 245.496736][T10590] ALSA: mixer_oss: invalid OSS volume 'u' [ 245.595412][T10598] CIFS mount error: No usable UNC path provided in device string! [ 245.595412][T10598] [ 245.647193][T10598] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 245.825474][T10608] netlink: 'syz.4.2714': attribute type 4 has an invalid length. [ 245.882522][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'. [ 245.940034][ T4386] Bluetooth: Can't get state to change to load configuration err [ 245.982199][ T4386] Bluetooth: Loading sysconfig file failed [ 245.997750][ T4386] ath3k: probe of 4-1:0.0 failed with error -16 [ 246.010975][ T4386] usb 4-1: USB disconnect, device number 20 [ 246.026524][T10622] loop0: detected capacity change from 0 to 128 [ 246.130902][T10622] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 246.239356][ T4169] sysv_free_block: flc_count > flc_size [ 246.262920][ T4169] sysv_free_block: flc_count > flc_size [ 246.268633][ T4169] sysv_free_block: flc_count > flc_size [ 246.295250][ T4169] sysv_free_block: flc_count > flc_size [ 246.300847][ T4169] sysv_free_block: flc_count > flc_size [ 246.327165][ T4169] sysv_free_block: flc_count > flc_size [ 246.349230][ T4169] sysv_free_block: flc_count > flc_size [ 246.387238][ T4169] sysv_free_block: flc_count > flc_size [ 246.405612][ T4169] sysv_free_block: flc_count > flc_size [ 246.411217][ T4169] sysv_free_block: flc_count > flc_size [ 246.453869][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 246.842457][ T4386] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 247.087927][T10628] loop4: detected capacity change from 0 to 32768 [ 247.222623][ T4386] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 247.248196][ T4386] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.282427][ T4386] usb 3-1: config 0 has no interface number 0 [ 247.309300][ T4386] usb 3-1: config 0 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.360030][ T4386] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.89 [ 247.390407][ T4386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.431162][ T4386] usb 3-1: config 0 descriptor?? [ 247.475195][ T4386] usb 3-1: Found UVC 0.00 device (1bcf:0b40) [ 247.500701][T10692] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2754'. [ 247.511013][ T4386] usb 3-1: Forcing UVC version to 1.0a [ 247.523665][ T4386] usb 3-1: No valid video chain found. [ 247.719258][ T4177] usb 3-1: USB disconnect, device number 18 [ 247.802439][ T4386] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 247.909697][T10711] loop0: detected capacity change from 0 to 1024 [ 248.042673][ T4386] usb 5-1: Using ep0 maxpacket: 16 [ 248.062037][T10711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.174768][ T4386] usb 5-1: config 4 has an invalid interface number: 98 but max is 0 [ 248.192561][ T4386] usb 5-1: config 4 has no interface number 0 [ 248.219126][ T4386] usb 5-1: config 4 interface 98 has no altsetting 0 [ 248.393316][T10738] loop1: detected capacity change from 0 to 256 [ 248.409473][ T4386] usb 5-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=2e.17 [ 248.418866][ T4386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.476183][ T4386] usb 5-1: Product: syz [ 248.492522][ T4386] usb 5-1: Manufacturer: syz [ 248.497349][ T4386] usb 5-1: SerialNumber: syz [ 248.575063][ T4386] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 248.903191][T10768] netlink: 'syz.0.2791': attribute type 2 has an invalid length. [ 248.964360][T10768] netlink: 'syz.0.2791': attribute type 1 has an invalid length. [ 249.002708][ T4386] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 249.011676][ T4386] gspca_pac7302: probe of 5-1:4.98 failed with error -71 [ 249.077920][ T4386] usb 5-1: USB disconnect, device number 19 [ 249.250613][T10785] xt_TCPMSS: Only works on TCP SYN packets [ 249.416726][ T1092] block nbd2: Attempted send on invalid socket [ 249.425180][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.644925][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 249.674268][T10817] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2815'. [ 249.835733][T10825] ipt_REJECT: ECHOREPLY no longer supported. [ 250.357514][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2836'. [ 250.467112][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2839'. [ 250.572798][ T4177] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.710181][T10876] netlink: 'syz.1.2843': attribute type 12 has an invalid length. [ 250.725047][T10875] loop4: detected capacity change from 0 to 2048 [ 250.740507][T10876] netlink: 'syz.1.2843': attribute type 12 has an invalid length. [ 250.756212][T10876] netlink: 'syz.1.2843': attribute type 12 has an invalid length. [ 250.832659][ T4177] usb 1-1: Using ep0 maxpacket: 8 [ 250.908312][T10875] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,bsddf,. Quota mode: none. [ 250.982612][ T4177] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.998849][ T4177] usb 1-1: config 179 has no interface number 0 [ 251.000614][T10875] afs: Unexpected value for 'dyn' [ 251.035010][ T4177] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 251.081624][ T4177] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 251.156186][ T4177] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.177221][ T4177] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 251.188145][ T4177] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 251.211247][ T4177] usb 1-1: config 179 interface 65 has no altsetting 0 [ 251.241466][ T4177] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 251.284848][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.391044][ T4177] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 251.409867][ T4386] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 251.657003][ T4177] usb 1-1: USB disconnect, device number 11 [ 251.672608][ T4386] usb 2-1: Using ep0 maxpacket: 8 [ 251.674537][ T4177] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 251.933163][ T4384] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 251.962966][ T4386] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 251.982714][ T4386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 251.990756][ T4386] usb 2-1: Product: syz [ 251.995217][ T4386] usb 2-1: Manufacturer: syz [ 251.999840][ T4386] usb 2-1: SerialNumber: syz [ 252.007372][ T4386] usb 2-1: config 0 descriptor?? [ 252.054276][ T4386] usbtest 2-1:0.0: FX2 device [ 252.059588][ T4386] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 252.145794][T10948] cgroup: name respecified [ 252.173561][ T4384] usb 4-1: Using ep0 maxpacket: 8 [ 252.213946][ T4384] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 252.275708][ T4386] usb 2-1: USB disconnect, device number 21 [ 252.321990][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2874'. [ 252.434251][T10960] x_tables: duplicate underflow at hook 2 [ 252.950915][T10987] netlink: 1476 bytes leftover after parsing attributes in process `syz.1.2890'. [ 253.032766][ T4384] usb 4-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 253.041908][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=66 [ 253.082433][ T4384] usb 4-1: Product: syz [ 253.086812][ T4384] usb 4-1: Manufacturer: syz [ 253.099442][ T4384] usb 4-1: SerialNumber: syz [ 253.112600][ T4384] usb 4-1: config 0 descriptor?? [ 253.259904][T10999] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 253.268819][T10999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2895'. [ 253.410137][ T4384] gspca_main: 0c45:613b too many config [ 253.433229][ T4384] usb 4-1: USB disconnect, device number 21 [ 253.608442][T11016] netlink: 'syz.1.2903': attribute type 3 has an invalid length. [ 253.791872][T11023] cgroup: name respecified [ 253.815885][T11025] loop0: detected capacity change from 0 to 512 [ 253.847053][T11025] EXT4-fs (loop0): Ignoring removed oldalloc option [ 253.927432][T11025] EXT4-fs (loop0): orphan cleanup on readonly fs [ 253.946630][T11025] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 253.962199][T11025] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 253.980231][T11025] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.2909: Failed to acquire dquot type 1 [ 253.994792][ T5400] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 254.010549][T11025] EXT4-fs (loop0): 1 truncate cleaned up [ 254.030273][T11025] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 254.282560][ T5400] usb 5-1: Using ep0 maxpacket: 16 [ 254.290500][T11042] x_tables: duplicate entry at hook 3 [ 254.295421][T11045] x_tables: unsorted underflow at hook 2 [ 254.422727][ T5400] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 254.440574][ T5400] usb 5-1: config 4 has no interface number 0 [ 254.458084][ T5400] usb 5-1: config 4 interface 51 has no altsetting 0 [ 254.652843][ T5400] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 254.674231][ T5400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.701599][ T5400] usb 5-1: Product: syz [ 254.706835][ T5400] usb 5-1: Manufacturer: syz [ 254.716334][ T5400] usb 5-1: SerialNumber: syz [ 254.774021][ T5400] upd78f0730 5-1:4.51: upd78f0730 converter detected [ 254.791394][T11073] loop3: detected capacity change from 0 to 512 [ 254.798363][ T5400] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 254.901064][T11073] EXT4-fs (loop3): 1 truncate cleaned up [ 254.902784][ T4177] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 254.921489][T11073] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,usrquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nombcache,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 255.007270][ T5330] usb 5-1: USB disconnect, device number 20 [ 255.023354][ T5330] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 255.032683][ T5330] upd78f0730 5-1:4.51: device disconnected [ 255.181523][T11099] loop3: detected capacity change from 0 to 512 [ 255.188198][ T4177] usb 2-1: Using ep0 maxpacket: 32 [ 255.232560][ T5400] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 255.244240][T11099] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.2944: bad orphan inode 13 [ 255.257299][T11099] ext4_test_bit(bit=12, block=4) = 1 [ 255.271603][T11099] is_bad_inode(inode)=0 [ 255.282687][T11099] NEXT_ORPHAN(inode)=0 [ 255.287675][T11099] max_ino=32 [ 255.301019][T11099] i_nlink=1 [ 255.308612][T11099] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 255.333931][ T4177] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 255.344637][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.350960][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.364039][ T4177] usb 2-1: config 0 has no interface number 0 [ 255.386276][T11099] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.2944: Unrecognised inode hash code 20 [ 255.407233][T11099] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2944: Corrupt directory, running e2fsck is recommended [ 255.492926][ T5400] usb 3-1: Using ep0 maxpacket: 8 [ 255.542809][ T4177] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=eb.4e [ 255.558630][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.587253][ T4177] usb 2-1: Product: syz [ 255.595308][ T4177] usb 2-1: Manufacturer: syz [ 255.602665][ T4177] usb 2-1: SerialNumber: syz [ 255.634473][ T5400] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 255.650624][ T4177] usb 2-1: config 0 descriptor?? [ 255.662494][ T5400] usb 3-1: config 0 has no interface number 0 [ 255.742777][T11114] loop0: detected capacity change from 0 to 256 [ 255.800497][T11117] tmpfs: Bad value for 'uid' [ 255.820819][T11114] FAT-fs (loop0): bogus logical sector size 2238 [ 255.828712][T11114] FAT-fs (loop0): Can't find a valid FAT filesystem [ 255.839983][T11114] binder: Bad value for 'stats' [ 255.862669][ T5400] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=43.f5 [ 255.882724][ T5400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.922768][ T4177] cdc_subset: probe of 2-1:0.242 failed with error -22 [ 255.927165][T11122] netlink: 'syz.4.2955': attribute type 3 has an invalid length. [ 255.929873][ T5400] usb 3-1: Product: syz [ 255.966972][ T5400] usb 3-1: Manufacturer: syz [ 255.971631][ T5400] usb 3-1: SerialNumber: syz [ 256.008441][ T5400] usb 3-1: config 0 descriptor?? [ 256.036434][T11126] netlink: 'syz.0.2956': attribute type 49 has an invalid length. [ 256.135169][ T4177] usb 2-1: USB disconnect, device number 22 [ 256.170668][T11133] x_tables: unsorted underflow at hook 4 [ 256.180883][T11134] loop3: detected capacity change from 0 to 24 [ 256.306887][T11138] loop4: detected capacity change from 0 to 128 [ 256.323892][ T5400] empeg 3-1:0.176: empeg converter detected [ 256.329855][ T5400] usb 3-1: active config #0 != 1 ?? [ 256.345539][ T5400] usb 3-1: USB disconnect, device number 19 [ 256.375268][T11138] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 256.429087][T11138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.522580][ T5330] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 256.718258][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 256.772627][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 256.839576][T11162] loop4: detected capacity change from 0 to 64 [ 257.122737][ T5330] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 257.131840][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.192736][ T5330] usb 1-1: Product: syz [ 257.196967][ T5330] usb 1-1: Manufacturer: syz [ 257.201621][ T5330] usb 1-1: SerialNumber: syz [ 257.273477][ T5330] usb 1-1: config 0 descriptor?? [ 257.425465][T11186] loop3: detected capacity change from 0 to 1764 [ 257.592658][T11186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 257.733331][ T5330] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 257.741688][ T5330] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 257.751006][T11202] overlayfs: missing 'lowerdir' [ 257.832822][ T5330] peak_usb: probe of 1-1:0.0 failed with error -71 [ 257.875531][ T5330] usb 1-1: USB disconnect, device number 12 [ 258.008545][T11178] loop1: detected capacity change from 0 to 32768 [ 258.055008][T11178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2982 (11178) [ 258.149133][T11178] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 258.196716][T11178] BTRFS info (device loop1): enabling disk space caching [ 258.199520][T11223] netlink: del zone limit has 8 unknown bytes [ 258.213589][T11178] BTRFS info (device loop1): enabling auto defrag [ 258.220065][T11178] BTRFS info (device loop1): force clearing of disk cache [ 258.302518][T11178] BTRFS info (device loop1): turning on async discard [ 258.309398][T11178] BTRFS info (device loop1): disk space caching is enabled [ 258.311929][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 258.372906][T11178] BTRFS info (device loop1): has skinny extents [ 258.518778][T11244] loop0: detected capacity change from 0 to 512 [ 258.678408][T11244] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 258.717973][T11244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 258.750893][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 258.752602][T11244] System zones: [ 258.760179][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 258.796351][T11244] 0-1, 15-15, 18-18, 34-34 [ 258.801977][T11244] EXT4-fs (loop0): orphan cleanup on readonly fs [ 258.812564][T11178] BTRFS info (device loop1): enabling ssd optimizations [ 258.821413][T11178] BTRFS info (device loop1): clearing free space tree [ 258.832607][T11178] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 258.844065][T11178] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 258.850003][T11244] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 258.876460][T11244] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 258.891884][T11244] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 258.911067][T11244] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.3011: bad orphan inode 16 [ 258.934103][T11244] ext4_test_bit(bit=15, block=18) = 1 [ 258.939535][T11244] is_bad_inode(inode)=0 [ 258.952470][T11244] NEXT_ORPHAN(inode)=0 [ 258.959827][T11244] max_ino=32 [ 258.979424][T11244] i_nlink=2 [ 258.999717][T11244] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 259.095659][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 259.562771][T11300] program syz.2.3035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.712506][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 260.014746][T11280] loop4: detected capacity change from 0 to 32768 [ 260.146777][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 260.258944][T11328] xt_addrtype: ipv6 does not support BROADCAST matching [ 260.546613][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 260.760325][T11354] loop4: detected capacity change from 0 to 1024 [ 260.787116][T11358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.105548][T11370] No such timeout policy "syz1" [ 261.581401][T11386] loop1: detected capacity change from 0 to 2048 [ 261.670368][T11386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.733435][T11386] smb3: Bad value for 'uid' [ 261.742649][T11344] loop0: detected capacity change from 0 to 32768 [ 261.919790][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 261.974963][T11344] XFS (loop0): Mounting V5 Filesystem [ 262.246347][T11344] XFS (loop0): Ending clean mount [ 262.273964][T11344] XFS (loop0): Quotacheck needed: Please wait. [ 262.454735][T11344] XFS (loop0): Quotacheck: Done. [ 262.493248][T11344] UBIFS error (pid: 11344): cannot open "./file0", error -22 [ 262.533621][ T4169] XFS (loop0): Unmounting Filesystem [ 262.707873][T11449] loop4: detected capacity change from 0 to 512 [ 262.890434][T11449] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 262.903707][T11449] ext4 filesystem being mounted at /609/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.102143][T11467] UBIFS error (pid: 11467): cannot open "", error -22 [ 263.127732][T11468] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3112'. [ 263.495146][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 263.548126][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'. [ 263.761446][T11505] loop0: detected capacity change from 0 to 1024 [ 264.101016][T11527] loop3: detected capacity change from 0 to 164 [ 264.201075][T11527] rock: directory entry would overflow storage [ 264.226740][T11527] rock: sig=0x4543, size=28, remaining=18 [ 264.282012][T11527] ISOFS: unable to read i-node block [ 264.531647][T11550] loop1: detected capacity change from 0 to 1024 [ 264.841785][ T4227] hfsplus: b-tree write err: -5, ino 4 [ 265.205647][T11581] netlink: 'syz.2.3167': attribute type 1 has an invalid length. [ 265.264287][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 265.286808][T11581] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3167'. [ 265.316611][T11581] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3167'. [ 265.336099][T11533] loop0: detected capacity change from 0 to 32768 [ 265.341446][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 265.359139][T11533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3140 (11533) [ 265.452552][T11533] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 265.461291][T11533] BTRFS info (device loop0): using free space tree [ 265.500856][T11533] BTRFS info (device loop0): has skinny extents [ 265.592583][ T4292] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 265.700384][T11611] net veth1_virt_wifi : renamed from virt_wifi0 [ 265.790528][T11622] loop4: detected capacity change from 0 to 64 [ 265.793220][T11533] BTRFS info (device loop0): enabling ssd optimizations [ 265.973790][ T4292] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.152729][ T4292] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 266.182210][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.228256][ T4292] usb 4-1: Product: syz [ 266.249637][ T4292] usb 4-1: Manufacturer: syz [ 266.260940][ T4292] usb 4-1: SerialNumber: syz [ 266.301334][ T4292] usb 4-1: config 0 descriptor?? [ 266.371149][ T4292] gspca_main: pac207-2.14.0 probing 093a:2476 [ 266.512588][ T4292] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 266.718933][ T5330] usb 4-1: USB disconnect, device number 22 [ 266.935935][T11661] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 267.188970][T11672] loop3: detected capacity change from 0 to 1024 [ 267.328993][T11684] loop1: detected capacity change from 0 to 64 [ 267.403231][T11672] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.424164][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'. [ 267.433599][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 267.852685][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3217'. [ 268.122463][T11739] x_tables: duplicate entry at hook 3 [ 268.140404][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3233'. [ 268.841348][T11779] loop1: detected capacity change from 0 to 4096 [ 268.846371][T11790] loop4: detected capacity change from 0 to 24 [ 268.886973][T11779] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 268.894754][T11792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.020847][T11779] ntfs3: loop1: failed to convert "c46c" to macroman [ 269.177975][T11800] loop3: detected capacity change from 0 to 256 [ 269.296550][T11800] FAT-fs (loop3): Directory bread(block 64) failed [ 269.313674][T11800] FAT-fs (loop3): Directory bread(block 65) failed [ 269.323908][T11800] FAT-fs (loop3): Directory bread(block 66) failed [ 269.342496][ T4386] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 269.368635][T11800] FAT-fs (loop3): Directory bread(block 67) failed [ 269.398804][T11800] FAT-fs (loop3): Directory bread(block 68) failed [ 269.411307][T11800] FAT-fs (loop3): Directory bread(block 69) failed [ 269.431358][T11800] FAT-fs (loop3): Directory bread(block 70) failed [ 269.469293][T11800] FAT-fs (loop3): Directory bread(block 71) failed [ 269.472433][ T4384] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 269.485050][T11800] FAT-fs (loop3): Directory bread(block 72) failed [ 269.491800][T11800] FAT-fs (loop3): Directory bread(block 73) failed [ 269.552636][ T4269] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 269.582837][ T4386] usb 3-1: Using ep0 maxpacket: 8 [ 269.702817][ T4386] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 269.713764][ T4386] usb 3-1: config 179 has no interface number 0 [ 269.720081][ T4386] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 269.735805][ T4386] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 269.747568][ T4384] usb 5-1: Using ep0 maxpacket: 16 [ 269.757942][ T4386] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.782213][ T4386] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 269.813277][T11820] netlink: 'syz.0.3270': attribute type 3 has an invalid length. [ 269.822536][ T4269] usb 2-1: Using ep0 maxpacket: 32 [ 269.845328][ T4386] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 269.909693][ T4386] usb 3-1: config 179 interface 65 has no altsetting 0 [ 269.942763][ T4269] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.951012][ T4386] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 269.968131][ T4269] usb 2-1: config 0 has no interface number 0 [ 269.992694][ T4269] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 270.003678][ T4386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.021478][ T4269] usb 2-1: config 0 interface 1 has no altsetting 0 [ 270.052638][ T4384] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 270.066000][ T4386] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 270.092441][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.109034][ T4384] usb 5-1: Product: syz [ 270.116237][ T4384] usb 5-1: Manufacturer: syz [ 270.120878][ T4384] usb 5-1: SerialNumber: syz [ 270.136773][ T4384] usb 5-1: config 0 descriptor?? [ 270.174634][ T4384] gspca_main: spca501-2.14.0 probing 0497:c001 [ 270.202713][ T4269] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 270.222690][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.255413][ T4269] usb 2-1: Product: syz [ 270.259633][ T4269] usb 2-1: Manufacturer: syz [ 270.294158][ T4269] usb 2-1: SerialNumber: syz [ 270.307810][ T4269] usb 2-1: config 0 descriptor?? [ 270.388558][ T4384] gspca_spca501: reg write: error -71 [ 270.394374][ T4384] spca501 5-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 270.403284][ T4177] usb 3-1: USB disconnect, device number 20 [ 270.407296][T11836] loop3: detected capacity change from 0 to 128 [ 270.410142][ T4177] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 270.423545][ T4384] spca501: probe of 5-1:0.0 failed with error -22 [ 270.467906][ T4384] usb 5-1: USB disconnect, device number 21 [ 270.534182][T11836] FAT-fs (loop3): count of clusters too big (2147483774) [ 270.575473][T11836] FAT-fs (loop3): Can't find a valid FAT filesystem [ 270.604709][ T4269] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 270.633037][ T4269] cx231xx 2-1:0.1: Failed to read PCB config [ 270.639089][ T4269] cx231xx: probe of 2-1:0.1 failed with error -71 [ 270.647646][ T4269] usb 2-1: USB disconnect, device number 23 [ 270.732625][ T4953] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 270.972598][ T4377] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 270.992497][ T4953] usb 1-1: Using ep0 maxpacket: 16 [ 271.112710][ T4953] usb 1-1: config 0 has no interfaces? [ 271.242440][ T4377] usb 4-1: Using ep0 maxpacket: 16 [ 271.272762][ T4953] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.e3 [ 271.292951][ T4953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.322485][ T4953] usb 1-1: Product: syz [ 271.339988][ T4953] usb 1-1: Manufacturer: syz [ 271.359753][ T4953] usb 1-1: SerialNumber: syz [ 271.372848][ T4377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 271.379164][ T4953] r8152-cfgselector 1-1: config 0 descriptor?? [ 271.422786][ T4377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 271.466194][ T4377] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 271.482544][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.531588][ T4377] usb 4-1: config 0 descriptor?? [ 271.536310][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'. [ 271.592159][T11836] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 271.614687][ T4377] usb 4-1: Found UVC 0.00 device (10c4:ea90) [ 271.621618][ T4377] usb 4-1: No valid video chain found. [ 271.665610][ T4953] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 271.686380][ T155] usb 1-1: config 0 descriptor?? [ 271.707386][T11880] overlayfs: missing 'lowerdir' [ 271.841222][ T4384] usb 4-1: USB disconnect, device number 23 [ 271.913249][ T155] usb 1-1: can't set config #0, error -71 [ 271.922423][ T4953] usb 1-1: USB disconnect, device number 13 [ 272.017830][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.062469][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.077881][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.089515][T11894] infiniband syz0: set active [ 272.100487][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.111142][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.121620][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.133927][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.149583][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.161486][T11894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3308'. [ 272.187046][ T4384] lo speed is unknown, defaulting to 1000 [ 272.226504][T11904] tmpfs: Bad value for 'mpol' [ 272.435739][T11916] sock: sock_timestamping_bind_phc: sock not bind to device [ 272.582543][ T4377] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 272.591044][T11924] Cannot find del_set index 3 as target [ 272.932898][ T4377] usb 3-1: not running at top speed; connect to a high speed hub [ 273.022644][ T4377] usb 3-1: config 110 has an invalid interface number: 40 but max is 0 [ 273.032423][ T4377] usb 3-1: config 110 has no interface number 0 [ 273.053593][ T4377] usb 3-1: config 110 interface 40 altsetting 5 endpoint 0x8 has invalid maxpacket 15725, setting to 64 [ 273.102537][ T4377] usb 3-1: config 110 interface 40 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 273.123497][ T4377] usb 3-1: config 110 interface 40 has no altsetting 0 [ 273.149153][T11962] loop4: detected capacity change from 0 to 512 [ 273.292190][T11962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3341: bg 0: block 248: padding at end of block bitmap is not set [ 273.292554][ T4377] usb 3-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=fb.38 [ 273.323457][T11962] Quota error (device loop4): write_blk: dquota write failed [ 273.343211][T11962] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 273.356262][T11962] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.3341: Failed to acquire dquot type 1 [ 273.379384][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.396674][ T4377] usb 3-1: Product: syz [ 273.401316][T11962] EXT4-fs (loop4): 1 truncate cleaned up [ 273.407155][ T4384] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.415444][T11962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.427881][ T4377] usb 3-1: Manufacturer: syz [ 273.428807][T11962] ext4 filesystem being mounted at /667/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.461972][ T4377] usb 3-1: SerialNumber: syz [ 273.469506][T11977] device netdevsim0 entered promiscuous mode [ 273.512760][T11908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.521316][T11977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.607062][T11982] loop1: detected capacity change from 0 to 256 [ 273.723121][T11982] exfat: Deprecated parameter 'utf8' [ 273.728523][T11982] exfat: Unknown parameter 'sys_tz' [ 273.813412][ T4384] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 273.829886][ T4384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.880880][ T4384] usb 4-1: config 0 descriptor?? [ 273.921840][ T4377] usb 3-1: USB disconnect, device number 21 [ 273.944203][ T4384] sisusb 4-1:0.0: Invalid USB2VGA device [ 273.961486][ T4384] sisusb: probe of 4-1:0.0 failed with error -22 [ 273.989156][T11996] loop0: detected capacity change from 0 to 64 [ 274.002786][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:110.40/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.033291][T11998] openvswitch: netlink: EtherType 0 is less than min 600 [ 274.098794][ T5330] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.221363][T12006] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 274.239446][T12006] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 274.352452][ T5330] usb 2-1: Using ep0 maxpacket: 16 [ 274.477708][ T5330] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 274.497400][ T5330] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 274.527522][ T5330] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 274.570636][ T5330] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 274.606967][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 274.643383][ T5330] usb 2-1: config 0 has no interface number 0 [ 274.667585][ T5330] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 274.715594][ T5330] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.742046][ T5330] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.759875][ T5330] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.798443][ T5330] usb 2-1: config 0 interface 125 has no altsetting 0 [ 274.817773][ T5330] usb 2-1: config 0 interface 125 has no altsetting 2 [ 274.885412][T12027] loop0: detected capacity change from 0 to 4096 [ 274.949344][ T4377] usb 4-1: USB disconnect, device number 24 [ 275.002059][T12027] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 275.002727][ T5330] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 275.034527][T12027] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 275.051136][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.098862][ T5330] usb 2-1: Product: syz [ 275.101020][T12027] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 275.123431][ T5330] usb 2-1: Manufacturer: syz [ 275.129724][ T5330] usb 2-1: SerialNumber: syz [ 275.152951][T12027] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 275.167709][T12041] VFS: could not find a valid V7 on nullb0. [ 275.170183][ T5330] usb 2-1: config 0 descriptor?? [ 275.206814][T12027] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 275.240105][T12027] ntfs: volume version 3.1. [ 275.274217][ T5330] usb 2-1: selecting invalid altsetting 2 [ 275.285061][T12027] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 275.351055][T12027] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 275.404766][T12027] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 275.482460][ C0] usb 2-1: async_complete: urb error -71 [ 275.489019][ C0] usb 2-1: async_complete: urb error -71 [ 275.494746][ C0] usb 2-1: async_complete: urb error -71 [ 275.500448][ C0] usb 2-1: async_complete: urb error -71 [ 275.526999][ T5330] get_1284_register: usb error -71 [ 275.532409][ T5330] uss720: probe of 2-1:0.125 failed with error -71 [ 275.572789][ T5330] usb 2-1: USB disconnect, device number 24 [ 275.959900][T12067] loop0: detected capacity change from 0 to 4096 [ 276.024987][T12067] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 276.152817][T12067] ntfs3: loop0: failed to convert "c46c" to macroman [ 276.480889][T12106] xt_ecn: cannot match TCP bits for non-tcp packets [ 276.623038][T12114] __nla_validate_parse: 20 callbacks suppressed [ 276.623057][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 276.729497][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 276.789945][T12122] loop0: detected capacity change from 0 to 512 [ 276.813283][T12116] loop3: detected capacity change from 0 to 4096 [ 276.852796][T12122] EXT4-fs (loop0): Test dummy encryption mode enabled [ 276.859666][T12122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 276.872595][T12116] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 276.923181][T12129] libceph: resolve '0' (ret=-3): failed [ 276.963931][T12122] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.3419: bad orphan inode 131083 [ 277.028781][T12122] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 277.111052][T12116] ntfs3: loop3: failed to convert "c46c" to macroman [ 277.863957][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3448'. [ 277.888997][T12185] netlink: 'syz.1.3450': attribute type 8 has an invalid length. [ 277.903046][T12185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.296413][T12213] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 278.492867][T12216] netlink: 'syz.0.3465': attribute type 2 has an invalid length. [ 278.705550][T12226] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.105454][T12196] loop1: detected capacity change from 0 to 32768 [ 279.162788][T12246] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 279.186175][T12196] (syz.1.3455,12196,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.227254][T12196] (syz.1.3455,12196,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.244061][T12207] loop3: detected capacity change from 0 to 32768 [ 279.280446][T12248] [U] v3f"W/4:XTzWtlW= [ 279.297962][T12207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3461 (12207) [ 279.366192][T12248] [U] J"e:" [ 279.382817][T12207] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 279.401825][T12196] JBD2: Ignoring recovery information on journal [ 279.432666][T12207] BTRFS info (device loop3): using free space tree [ 279.439236][T12207] BTRFS info (device loop3): has skinny extents [ 279.626420][T12196] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 279.800442][T12196] [ 279.802832][T12196] ====================================================== [ 279.809980][T12196] WARNING: possible circular locking dependency detected [ 279.817019][T12196] 5.15.182-syzkaller #0 Not tainted [ 279.822512][T12196] ------------------------------------------------------ [ 279.829558][T12196] syz.1.3455/12196 is trying to acquire lock: [ 279.835644][T12196] ffff8880248f6650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_reserve_local_alloc_bits+0xaeb/0x24c0 [ 279.846145][T12196] [ 279.846145][T12196] but task is already holding lock: [ 279.853526][T12196] ffff88806125df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 279.866801][T12196] [ 279.866801][T12196] which lock already depends on the new lock. [ 279.866801][T12196] [ 279.877220][T12196] [ 279.877220][T12196] the existing dependency chain (in reverse order) is: [ 279.886278][T12196] [ 279.886278][T12196] -> #8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 279.896833][T12196] down_write+0x38/0x60 [ 279.901545][T12196] ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 279.908078][T12196] ocfs2_reserve_cluster_bitmap_bits+0xc1/0x1c0 [ 279.914866][T12196] ocfs2_reserve_local_alloc_bits+0x876/0x24c0 [ 279.914891][T12207] BTRFS info (device loop3): enabling ssd optimizations [ 279.921648][T12196] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 279.935439][T12196] ocfs2_lock_allocators+0x2f7/0x5b0 [ 279.941273][T12196] ocfs2_extend_allocation+0x397/0x1760 [ 279.947358][T12196] ocfs2_extend_no_holes+0x20b/0x490 [ 279.953358][T12196] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 279.959008][T12196] dqget+0x778/0xeb0 [ 279.963470][T12196] ocfs2_setattr+0xe87/0x1a10 [ 279.968701][T12196] notify_change+0xbcd/0xee0 [ 279.973844][T12196] chown_common+0x483/0x610 [ 279.978891][T12196] do_fchownat+0x164/0x270 [ 279.983920][T12196] __x64_sys_lchown+0x81/0x90 [ 279.989136][T12196] do_syscall_64+0x4c/0xa0 [ 279.994195][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.000894][T12196] [ 280.000894][T12196] -> #7 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 280.011437][T12196] down_write+0x38/0x60 [ 280.016163][T12196] ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 280.022857][T12196] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 280.029735][T12196] ocfs2_lock_allocators+0x2f7/0x5b0 [ 280.035566][T12196] ocfs2_extend_allocation+0x397/0x1760 [ 280.041657][T12196] ocfs2_extend_no_holes+0x20b/0x490 [ 280.047497][T12196] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 280.053140][ T4292] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 280.053149][T12196] dqget+0x778/0xeb0 [ 280.053176][T12196] ocfs2_setattr+0xe87/0x1a10 [ 280.070311][T12196] notify_change+0xbcd/0xee0 [ 280.075447][T12196] chown_common+0x483/0x610 [ 280.080495][T12196] do_fchownat+0x164/0x270 [ 280.085459][T12196] __x64_sys_lchown+0x81/0x90 [ 280.090681][T12196] do_syscall_64+0x4c/0xa0 [ 280.095647][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.102098][T12196] [ 280.102098][T12196] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 280.111075][T12196] down_write+0x38/0x60 [ 280.115777][T12196] ocfs2_lock_global_qf+0x1e5/0x270 [ 280.121624][T12196] ocfs2_acquire_dquot+0x29d/0xaf0 [ 280.127286][T12196] dqget+0x778/0xeb0 [ 280.131729][T12196] ocfs2_setattr+0xe87/0x1a10 [ 280.136954][T12196] notify_change+0xbcd/0xee0 [ 280.142085][T12196] chown_common+0x483/0x610 [ 280.147138][T12196] do_fchownat+0x164/0x270 [ 280.152097][T12196] __x64_sys_lchown+0x81/0x90 [ 280.157319][T12196] do_syscall_64+0x4c/0xa0 [ 280.162315][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.168761][T12196] [ 280.168761][T12196] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 280.179303][T12196] down_write+0x38/0x60 [ 280.184003][T12196] ocfs2_lock_global_qf+0x1c7/0x270 [ 280.190001][T12196] ocfs2_acquire_dquot+0x29d/0xaf0 [ 280.195646][T12196] dqget+0x778/0xeb0 [ 280.200084][T12196] ocfs2_setattr+0xe87/0x1a10 [ 280.205307][T12196] notify_change+0xbcd/0xee0 [ 280.210436][T12196] chown_common+0x483/0x610 [ 280.215475][T12196] do_fchownat+0x164/0x270 [ 280.220426][T12196] __x64_sys_lchown+0x81/0x90 [ 280.225731][T12196] do_syscall_64+0x4c/0xa0 [ 280.230690][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.237131][T12196] [ 280.237131][T12196] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 280.244805][T12196] __mutex_lock_common+0x1eb/0x2390 [ 280.250547][T12196] mutex_lock_nested+0x17/0x20 [ 280.255867][T12196] dquot_commit+0x5a/0x410 [ 280.260851][T12196] ext4_write_dquot+0x1f0/0x360 [ 280.266248][T12196] mark_all_dquot_dirty+0xf9/0x400 [ 280.271917][T12196] __dquot_free_space+0x7ca/0xb90 [ 280.277497][T12196] ext4_free_blocks+0x1af5/0x2480 [ 280.283074][T12196] ext4_ext_remove_space+0x1eaa/0x4390 [ 280.289072][T12196] ext4_ext_truncate+0x192/0x240 [ 280.294539][T12196] ext4_truncate+0x9f1/0x10d0 [ 280.299755][T12196] ext4_process_orphan+0x1cb/0x300 [ 280.305407][T12196] ext4_orphan_cleanup+0xaa9/0x12e0 [ 280.311137][T12196] ext4_fill_super+0x9288/0x9a00 [ 280.316604][T12196] mount_bdev+0x287/0x3c0 [ 280.321463][T12196] legacy_get_tree+0xe6/0x180 [ 280.326667][T12196] vfs_get_tree+0x88/0x270 [ 280.331606][T12196] do_new_mount+0x24a/0xa40 [ 280.336624][T12196] __se_sys_mount+0x2d6/0x3c0 [ 280.341815][T12196] do_syscall_64+0x4c/0xa0 [ 280.346747][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.353347][T12196] [ 280.353347][T12196] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 280.360986][T12196] down_write+0x38/0x60 [ 280.365661][T12196] ext4_truncate+0x96d/0x10d0 [ 280.370953][T12196] ext4_setattr+0xffe/0x19e0 [ 280.376058][T12196] notify_change+0xbcd/0xee0 [ 280.381167][T12196] do_truncate+0x197/0x220 [ 280.386106][T12196] do_sys_ftruncate+0x31b/0x3d0 [ 280.391473][T12196] do_syscall_64+0x4c/0xa0 [ 280.396403][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.402817][T12196] [ 280.402817][T12196] -> #2 (jbd2_handle){++++}-{0:0}: [ 280.410104][T12196] start_this_handle+0x1338/0x15a0 [ 280.415733][T12196] jbd2__journal_start+0x2b7/0x5a0 [ 280.421361][T12196] jbd2_journal_start+0x26/0x30 [ 280.426728][T12196] ocfs2_start_trans+0x374/0x6c0 [ 280.432180][T12196] ocfs2_modify_bh+0xe5/0x470 [ 280.437547][T12196] ocfs2_local_read_info+0x13b1/0x16e0 [ 280.443532][T12196] dquot_load_quota_sb+0x756/0xac0 [ 280.449186][T12196] dquot_load_quota_inode+0x2d8/0x5d0 [ 280.455117][T12196] ocfs2_enable_quotas+0x1c3/0x440 [ 280.460761][T12196] ocfs2_fill_super+0x3a1f/0x4d80 [ 280.466307][T12196] mount_bdev+0x287/0x3c0 [ 280.471153][T12196] legacy_get_tree+0xe6/0x180 [ 280.476351][T12196] vfs_get_tree+0x88/0x270 [ 280.481284][T12196] do_new_mount+0x24a/0xa40 [ 280.486299][T12196] __se_sys_mount+0x2d6/0x3c0 [ 280.491496][T12196] do_syscall_64+0x4c/0xa0 [ 280.496429][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.502847][T12196] [ 280.502847][T12196] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 280.511356][T12196] down_read+0x44/0x2e0 [ 280.516028][T12196] ocfs2_start_trans+0x368/0x6c0 [ 280.521477][T12196] ocfs2_modify_bh+0xe5/0x470 [ 280.526679][T12196] ocfs2_local_read_info+0x13b1/0x16e0 [ 280.532652][T12196] dquot_load_quota_sb+0x756/0xac0 [ 280.538283][T12196] dquot_load_quota_inode+0x2d8/0x5d0 [ 280.544170][T12196] ocfs2_enable_quotas+0x1c3/0x440 [ 280.549798][T12196] ocfs2_fill_super+0x3a1f/0x4d80 [ 280.555342][T12196] mount_bdev+0x287/0x3c0 [ 280.560191][T12196] legacy_get_tree+0xe6/0x180 [ 280.565394][T12196] vfs_get_tree+0x88/0x270 [ 280.570341][T12196] do_new_mount+0x24a/0xa40 [ 280.575363][T12196] __se_sys_mount+0x2d6/0x3c0 [ 280.580557][T12196] do_syscall_64+0x4c/0xa0 [ 280.585575][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.591986][T12196] [ 280.591986][T12196] -> #0 (sb_internal#5){.+.+}-{0:0}: [ 280.599455][T12196] __lock_acquire+0x2c33/0x7c60 [ 280.604823][T12196] lock_acquire+0x197/0x3f0 [ 280.609845][T12196] ocfs2_start_trans+0x269/0x6c0 [ 280.615294][T12196] ocfs2_reserve_local_alloc_bits+0xaeb/0x24c0 [ 280.622053][T12196] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 280.628893][T12196] ocfs2_lock_allocators+0x2f7/0x5b0 [ 280.634702][T12196] ocfs2_extend_allocation+0x397/0x1760 [ 280.641048][T12196] ocfs2_extend_no_holes+0x20b/0x490 [ 280.647024][T12196] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 280.652709][T12196] dqget+0x778/0xeb0 [ 280.657153][T12196] ocfs2_setattr+0xe87/0x1a10 [ 280.662368][T12196] notify_change+0xbcd/0xee0 [ 280.667488][T12196] chown_common+0x483/0x610 [ 280.672518][T12196] do_fchownat+0x164/0x270 [ 280.677454][T12196] __x64_sys_lchown+0x81/0x90 [ 280.682644][T12196] do_syscall_64+0x4c/0xa0 [ 280.687575][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.693985][T12196] [ 280.693985][T12196] other info that might help us debug this: [ 280.693985][T12196] [ 280.704201][T12196] Chain exists of: [ 280.704201][T12196] sb_internal#5 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 [ 280.704201][T12196] [ 280.722814][T12196] Possible unsafe locking scenario: [ 280.722814][T12196] [ 280.730283][T12196] CPU0 CPU1 [ 280.735635][T12196] ---- ---- [ 280.741335][T12196] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 280.748616][T12196] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 280.758416][T12196] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 280.768226][T12196] lock(sb_internal#5); [ 280.772466][T12196] [ 280.772466][T12196] *** DEADLOCK *** [ 280.772466][T12196] [ 280.780595][T12196] 7 locks held by syz.1.3455/12196: [ 280.785778][T12196] #0: ffff8880248f6460 (sb_writers#37){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 280.795005][T12196] #1: ffff88806125b488 (&type->i_mutex_dir_key#28){+.+.}-{3:3}, at: chown_common+0x3c6/0x610 [ 280.805272][T12196] #2: ffff88805e5ba0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x290/0xaf0 [ 280.815271][T12196] #3: ffff88806125a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 280.828339][T12196] #4: ffff88806125a2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 280.839768][T12196] #5: ffff888061213488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 280.853703][T12196] #6: ffff88806125df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 280.867359][T12196] [ 280.867359][T12196] stack backtrace: [ 280.873247][T12196] CPU: 0 PID: 12196 Comm: syz.1.3455 Not tainted 5.15.182-syzkaller #0 [ 280.881578][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 280.891652][T12196] Call Trace: [ 280.894940][T12196] [ 280.897881][T12196] dump_stack_lvl+0x168/0x230 [ 280.902569][T12196] ? load_image+0x3b0/0x3b0 [ 280.907077][T12196] ? show_regs_print_info+0x20/0x20 [ 280.912280][T12196] ? print_circular_bug+0x12b/0x1a0 [ 280.917475][T12196] check_noncircular+0x274/0x310 [ 280.922410][T12196] ? add_chain_block+0x940/0x940 [ 280.927527][T12196] ? lockdep_lock+0xdc/0x1e0 [ 280.932115][T12196] ? mark_lock+0x94/0x320 [ 280.936446][T12196] ? mark_lock+0x94/0x320 [ 280.940771][T12196] __lock_acquire+0x2c33/0x7c60 [ 280.945629][T12196] ? verify_lock_unused+0x140/0x140 [ 280.950821][T12196] ? verify_lock_unused+0x140/0x140 [ 280.956022][T12196] ? verify_lock_unused+0x140/0x140 [ 280.961235][T12196] ? verify_lock_unused+0x140/0x140 [ 280.966434][T12196] lock_acquire+0x197/0x3f0 [ 280.970935][T12196] ? ocfs2_reserve_local_alloc_bits+0xaeb/0x24c0 [ 280.977293][T12196] ? __might_sleep+0xf0/0xf0 [ 280.981873][T12196] ? do_raw_spin_lock+0x11d/0x280 [ 280.986887][T12196] ? read_lock_is_recursive+0x10/0x10 [ 280.992256][T12196] ? __rwlock_init+0x140/0x140 [ 280.997015][T12196] ? do_raw_spin_unlock+0x11d/0x230 [ 281.002217][T12196] ocfs2_start_trans+0x269/0x6c0 [ 281.007153][T12196] ? ocfs2_reserve_local_alloc_bits+0xaeb/0x24c0 [ 281.013495][T12196] ? ocfs2_recovery_exit+0x280/0x280 [ 281.018809][T12196] ? do_raw_spin_unlock+0x11d/0x230 [ 281.024089][T12196] ocfs2_reserve_local_alloc_bits+0xaeb/0x24c0 [ 281.030460][T12196] ? stack_trace_save+0x98/0xe0 [ 281.035306][T12196] ? verify_lock_unused+0x140/0x140 [ 281.040590][T12196] ? stack_depot_save+0x404/0x440 [ 281.045614][T12196] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 281.052283][T12196] ? __kasan_kmalloc+0xcc/0xf0 [ 281.057042][T12196] ? __kasan_kmalloc+0xb5/0xf0 [ 281.061802][T12196] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 281.068210][T12196] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 281.073754][T12196] ? ocfs2_extend_allocation+0x397/0x1760 [ 281.079466][T12196] ? ocfs2_extend_no_holes+0x20b/0x490 [ 281.084922][T12196] ? ocfs2_acquire_dquot+0x5fe/0xaf0 [ 281.090202][T12196] ? ocfs2_setattr+0xe87/0x1a10 [ 281.095045][T12196] ? notify_change+0xbcd/0xee0 [ 281.099803][T12196] ? chown_common+0x483/0x610 [ 281.104474][T12196] ? do_fchownat+0x164/0x270 [ 281.109065][T12196] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 281.115126][T12196] ? __lock_acquire+0x7c60/0x7c60 [ 281.120148][T12196] ? do_raw_spin_lock+0x11d/0x280 [ 281.125170][T12196] ? __rwlock_init+0x140/0x140 [ 281.130101][T12196] ? do_raw_spin_unlock+0x11d/0x230 [ 281.135292][T12196] ? _raw_spin_unlock+0x24/0x40 [ 281.140139][T12196] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 281.146202][T12196] ? ocfs2_reserve_clusters_with_limit+0x168/0xba0 [ 281.152788][T12196] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 281.159196][T12196] ? ocfs2_reserve_clusters+0x30/0x30 [ 281.164567][T12196] ? rcu_is_watching+0x11/0xa0 [ 281.169321][T12196] ? ocfs2_num_free_extents+0x2de/0x5a0 [ 281.174863][T12196] ? ocfs2_validate_extent_block+0x550/0x550 [ 281.180865][T12196] ? ocfs2_read_blocks_sync+0xb30/0xb30 [ 281.186402][T12196] ? __kernel_text_address+0x9a/0x100 [ 281.191780][T12196] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 281.197155][T12196] ocfs2_lock_allocators+0x2f7/0x5b0 [ 281.202451][T12196] ? _ocfs2_clear_bit+0x40/0x40 [ 281.207304][T12196] ? ocfs2_read_inode_block+0x11a/0x180 [ 281.212846][T12196] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 281.218823][T12196] ? stack_depot_save+0x404/0x440 [ 281.223845][T12196] ocfs2_extend_allocation+0x397/0x1760 [ 281.229395][T12196] ? __lock_acquire+0x13ad/0x7c60 [ 281.234420][T12196] ? ocfs2_setattr+0xe87/0x1a10 [ 281.239277][T12196] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.245343][T12196] ? ocfs2_extend_no_holes+0x490/0x490 [ 281.250801][T12196] ? mark_lock+0x94/0x320 [ 281.255128][T12196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 281.261106][T12196] ? ocfs2_allocate_extend_trans+0x5b0/0x5b0 [ 281.267189][T12196] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 281.272300][T12196] ocfs2_extend_no_holes+0x20b/0x490 [ 281.277589][T12196] ? ocfs2_zero_extend+0x26c0/0x26c0 [ 281.282868][T12196] ? do_raw_spin_unlock+0x11d/0x230 [ 281.288064][T12196] ? _raw_spin_unlock+0x24/0x40 [ 281.292907][T12196] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 281.298101][T12196] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 281.303210][T12196] ? ocfs2_destroy_dquot+0x40/0x40 [ 281.308327][T12196] ? percpu_counter_add_batch+0x13b/0x160 [ 281.314054][T12196] dqget+0x778/0xeb0 [ 281.318045][T12196] ocfs2_setattr+0xe87/0x1a10 [ 281.322726][T12196] ? ocfs2_extend_allocation+0x1760/0x1760 [ 281.328528][T12196] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 281.334328][T12196] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 281.340572][T12196] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 281.346461][T12196] ? from_kgid+0x159/0x680 [ 281.350873][T12196] ? make_kgid+0x640/0x640 [ 281.355282][T12196] ? common_perm+0x1b0/0x1b0 [ 281.359879][T12196] ? bpf_lsm_inode_setattr+0x5/0x10 [ 281.365072][T12196] ? try_break_deleg+0x79/0x120 [ 281.369915][T12196] ? ocfs2_extend_allocation+0x1760/0x1760 [ 281.375716][T12196] notify_change+0xbcd/0xee0 [ 281.380307][T12196] chown_common+0x483/0x610 [ 281.384804][T12196] ? __ia32_sys_chmod+0x70/0x70 [ 281.389646][T12196] ? rcu_read_lock_any_held+0xb0/0x120 [ 281.395102][T12196] ? __mnt_want_write+0x1e2/0x260 [ 281.400126][T12196] do_fchownat+0x164/0x270 [ 281.404534][T12196] ? chown_common+0x610/0x610 [ 281.409205][T12196] __x64_sys_lchown+0x81/0x90 [ 281.413880][T12196] do_syscall_64+0x4c/0xa0 [ 281.418376][T12196] ? clear_bhb_loop+0x15/0x70 [ 281.423051][T12196] ? clear_bhb_loop+0x15/0x70 [ 281.427721][T12196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.433608][T12196] RIP: 0033:0x7fb88b859969 [ 281.438019][T12196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.457639][T12196] RSP: 002b:00007fb8896c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 281.466052][T12196] RAX: ffffffffffffffda RBX: 00007fb88ba80fa0 RCX: 00007fb88b859969 [ 281.474026][T12196] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000200000000380 [ 281.482000][T12196] RBP: 00007fb88b8dbab1 R08: 0000000000000000 R09: 0000000000000000 [ 281.489967][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.497938][T12196] R13: 0000000000000000 R14: 00007fb88ba80fa0 R15: 00007fff2a898488 [ 281.505913][T12196] [ 281.605791][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 281.735218][ T4292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 281.784638][ T4292] usb 5-1: not running at top speed; connect to a high speed hub [ 281.892522][ T4292] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 281.903456][ T4292] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.916547][ T4292] usb 5-1: config 1 interface 0 has no altsetting 0 [ 282.092582][ T4292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.101638][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.109682][ T4292] usb 5-1: Product: syz [ 282.113858][ T4292] usb 5-1: Manufacturer: 툝 [ 282.118456][ T4292] usb 5-1: SerialNumber: syz [ 282.152707][T12269] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.472535][ T4292] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 282.483448][ T4292] usb 5-1: USB disconnect, device number 22 [ 286.053399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.063329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.065607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.077424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.089318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.101375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.113313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.125196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.137032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.148989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)