last executing test programs: 1m8.850841632s ago: executing program 2 (id=618): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 1m8.635991556s ago: executing program 2 (id=621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x3, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x9, 0xfffd}) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x2, 0x1, 0x40000007, 0x7ffc}) 1m8.587116338s ago: executing program 2 (id=623): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1m8.489973531s ago: executing program 2 (id=625): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3) 1m8.115102439s ago: executing program 2 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'macvlan0\x00', {0x2}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) 1m7.580112932s ago: executing program 2 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='\x00 / 128\n\x00', 0x8) 1m7.207172471s ago: executing program 32 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='\x00 / 128\n\x00', 0x8) 3.183733583s ago: executing program 3 (id=1277): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="18806c52adc8a4f71898d690f33c", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 3.034536727s ago: executing program 3 (id=1278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*'}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 2.028377721s ago: executing program 3 (id=1289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000240)={0x1}) 1.938564233s ago: executing program 1 (id=1292): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0xfd, 0x2aa, &(0x7f0000000c80)="$eJzs3c9OE10Yx/EfpS/wgjBVFAVjPNGNbiZQr6AhkBibaJAa/yQmg0y16dCSToOpMcLOrWsvgbh0Z2K8ATZegQt3bFyyMI7pdIACQ4IEmYLfz+Y8nTNPc06eM81p0pmuP3y3UC76dtGpK9VllJYGtCFllFK3WrqiNhXGPWq3opvD+W9X7j96fCeXz0/NGDOdm72VNcYMXf388vWHa1/qAw8+Dn3q1Vrm6fqP7Pe1kbXR9V+zL0q+KfmmUq0bx8xVq3VnznPNfMkv28bc81zHd02p4ru1Hf1Fr7q42DBOZX6wf7Hm+r5xKg1TdhumXjX1WsM4z51Sxdi2bQb7haa+/btSxzkOJKVWyzmTksb29BRWExkQAABIVMz+f+Uw+/909Jr9/0lSWJ2ZcXJJjwJHyNp7qLn/fxL7dY/9PwAAAAAAAAAAAAAAAAAAAAAAJ8FGEFhBEFjNdvP+gB5JQXT8f0n9kgYknZE0KGkous0gI+mspHOShiWdl3RB0oiki5IuSRpte6+Ep4oY7fVvtv9F9e+m/v+E/eq/6/oPHyJB/U+fA9af6/+UantwT5+08HapsFRota3+XFEleXI1Lks/w1pGWvH07fzUuAlldHlhOcpfXip078yfkNVcMHH5E618szO/N1x3W/lZWc0FFpefjc3v043rbfm2LH19pqo8zYdrcjv/zYQxk3fzu/LHwvN26zne8vx1ttkSWz/b3q+/lX+A9RGMx9YnrbF0snOH5DdelR3Pc2sEBJ0XjHTGMA4dvO+MYRwmSPqTCcdhu+hJjwQAAAAAAAAAAAAAAAAA8CeO5jeDm/8UFn9OwlMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCP3wEAAP//t8JUVA==") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 1.874257495s ago: executing program 3 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) 1.67386747s ago: executing program 3 (id=1295): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.613359791s ago: executing program 1 (id=1297): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2a}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, 0x0, r1, 0x3, 0x401, 0x3ffe}) 1.384232106s ago: executing program 1 (id=1299): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x3, 0x0, &(0x7f0000000040)=[{0x400012df, 0x2000000000000003}, {0x7ff, 0x107e}, {0xffffffffffffedca, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r1, 0x0, &(0x7f00000c7000/0x1000)=nil, 0x1000, 0x10}) 1.23940674s ago: executing program 1 (id=1301): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000240)=0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 1.115664173s ago: executing program 0 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.019798005s ago: executing program 0 (id=1305): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x165a}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0xd2, &(0x7f0000000340)=""/210, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0) 889.740438ms ago: executing program 0 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 851.715759ms ago: executing program 4 (id=1307): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000300)={r1, 0x10, 0x7}, 0x8) 696.587573ms ago: executing program 4 (id=1308): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x69, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}}, {0x16, 0xff, 0x0, @empty}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x7, 0x6, @local}, 0x14) 670.976553ms ago: executing program 0 (id=1309): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) read(r0, &(0x7f0000000180)=""/248, 0xf8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 591.128195ms ago: executing program 4 (id=1310): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0xfffffe8e) 472.069849ms ago: executing program 4 (id=1311): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='N,N:'], 0x6a) 471.833909ms ago: executing program 0 (id=1312): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1d9, &(0x7f0000004680)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 460.871758ms ago: executing program 3 (id=1313): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xe, 0x4000000, 0x1}, 0x70bd27, 0x0, 0x2}}, 0xf0}}, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 388.87723ms ago: executing program 4 (id=1314): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='./cgroup\x00', 0x4c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2040) 271.875553ms ago: executing program 1 (id=1315): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x7fff, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0xfffffed3, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2, 0x40000e}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c13300004565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997ffc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc300"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) 187.777445ms ago: executing program 0 (id=1316): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)={0x40, 0x10, 0x4, "a2024f38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 164.101026ms ago: executing program 4 (id=1317): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x147142, 0xc1) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 0s ago: executing program 1 (id=1318): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x20000}) kernel console output (not intermixed with test programs): T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.825887][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.854826][ T5840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.883750][ T5840] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 111.902724][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.921067][ T5840] usb 1-1: Product: syz [ 111.931216][ T5840] usb 1-1: Manufacturer: syz [ 111.941421][ T5840] usb 1-1: SerialNumber: syz [ 112.335490][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 112.797934][ T969] usb 1-1: USB disconnect, device number 5 [ 112.798006][ C0] usb 1-1: comm data receiver aborted. [ 112.859701][ T6572] loop2: detected capacity change from 0 to 32768 [ 112.911090][ T6572] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.244 (6572) [ 113.045315][ T6587] udevd[6587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.108084][ T6572] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 113.167171][ T6572] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 113.222747][ T6572] BTRFS info (device loop2): enabling auto defrag [ 113.234136][ T6572] BTRFS info (device loop2): force clearing of disk cache [ 113.241854][ T6583] loop1: detected capacity change from 0 to 32768 [ 113.261751][ T6572] BTRFS info (device loop2): ignoring data csums [ 113.297849][ T6572] BTRFS info (device loop2): turning on async discard [ 113.322927][ T6572] BTRFS info (device loop2): setting nodatacow, compression disabled [ 113.326808][ T6583] JBD2: Ignoring recovery information on journal [ 113.351493][ T6572] BTRFS info (device loop2): turning off async discard [ 113.371742][ T6572] BTRFS info (device loop2): disabling free space tree [ 113.492887][ T6583] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.672349][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 113.761623][ T6572] BTRFS error (device loop2: state MC): ignoredatacsums must be used with ro mount option [ 113.839124][ T5768] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.624440][ T27] audit: type=1400 audit(1791820316.552:11): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6636 comm="syz.1.261" [ 114.737199][ T5841] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.841964][ T6624] loop0: detected capacity change from 0 to 32768 [ 114.892538][ T6624] [ 114.892538][ T6624] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.892538][ T6624] [ 114.943421][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 114.967376][ T5841] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 114.987213][ T6624] JFS: metapage_get_blocks failed [ 115.002873][ T5841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.010350][ T6624] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 115.010350][ T6624] [ 115.046053][ T5841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.055323][ T6624] ERROR: (device loop0): diWrite: ixpxd invalid [ 115.055323][ T6624] [ 115.077519][ T5841] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.090617][ T6624] ERROR: (device loop0): txCommit: [ 115.090617][ T6624] [ 115.152658][ T5841] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.161760][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.248799][ T5769] [ 115.248799][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.248799][ T5769] [ 115.292181][ T5769] [ 115.292181][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.292181][ T5769] [ 115.466362][ T5841] usb 3-1: GET_CAPABILITIES returned 0 [ 115.492549][ T5841] usbtmc 3-1:16.0: can't read capabilities [ 115.856720][ T5841] usb 3-1: USB disconnect, device number 2 [ 116.143684][ T6668] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 116.165060][ T6668] ucsi_ccg: probe of 0-0008 failed with error -110 [ 116.184665][ T6668] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 116.326167][ T6674] loop1: detected capacity change from 0 to 4096 [ 116.552837][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 116.744830][ T6683] block device autoloading is deprecated and will be removed. [ 116.773350][ T6683] syz.0.282: attempt to access beyond end of device [ 116.773350][ T6683] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 117.088720][ T6689] loop2: detected capacity change from 0 to 4096 [ 117.106392][ T6696] Bluetooth: ISO socket layer initialized [ 117.138903][ T6689] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 117.227182][ T6689] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 117.259787][ T6689] ntfs3: loop2: Failed to load $Extend (-2). [ 117.282810][ T6689] ntfs3: loop2: Failed to initialize $Extend. [ 117.909919][ T6722] netem: change failed [ 118.090088][ T6727] dyndbg: expected <4096 bytes into control [ 118.358378][ T6740] loop3: detected capacity change from 0 to 512 [ 118.367586][ T5841] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.436509][ T6740] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.309: bad orphan inode 13 [ 118.484594][ T6740] ext4_test_bit(bit=12, block=4) = 1 [ 118.489972][ T6740] is_bad_inode(inode)=0 [ 118.511623][ T6740] NEXT_ORPHAN(inode)=0 [ 118.536474][ T6740] max_ino=32 [ 118.539773][ T6740] i_nlink=1 [ 118.553019][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 118.564871][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.589133][ T5841] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.612022][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.651676][ T5841] usb 1-1: config 0 descriptor?? [ 118.665662][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.796303][ T6752] block nbd1: shutting down sockets [ 118.820296][ T6756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.914611][ T5841] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 118.951289][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.966463][ T5841] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 118.976966][ T5841] usb 1-1: media controller created [ 119.015789][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.123062][ T5841] az6027: usb out operation failed. (-71) [ 119.145329][ T5841] az6027: usb out operation failed. (-71) [ 119.159782][ T5841] stb0899_attach: Driver disabled by Kconfig [ 119.168070][ T5841] az6027: no front-end attached [ 119.168070][ T5841] [ 119.174728][ T6766] loop2: detected capacity change from 0 to 64 [ 119.178529][ T5841] az6027: usb out operation failed. (-71) [ 119.222695][ T5841] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 119.247601][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 119.314373][ T5841] dvb-usb: schedule remote query interval to 400 msecs. [ 119.321421][ T5841] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 119.345398][ T5841] usb 1-1: USB disconnect, device number 6 [ 119.491833][ T5841] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 119.548559][ T6770] loop1: detected capacity change from 0 to 8192 [ 119.565663][ T6770] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.580546][ T6770] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 119.589925][ T6770] REISERFS (device loop1): using ordered data mode [ 119.596931][ T6770] reiserfs: using flush barriers [ 119.620154][ T6770] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.662227][ T6777] ip6gre1: entered promiscuous mode [ 119.671743][ T6777] ip6gre1: entered allmulticast mode [ 119.701075][ T1092] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.732016][ T6770] REISERFS (device loop1): checking transaction log (loop1) [ 119.746277][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.753736][ T1092] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.920736][ T6770] REISERFS (device loop1): Using rupasov hash to sort names [ 119.928583][ T6770] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 120.002955][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.062429][ T6789] loop3: detected capacity change from 0 to 256 [ 120.082188][ T6788] loop2: detected capacity change from 0 to 512 [ 120.101602][ T6788] EXT4-fs: Ignoring removed nobh option [ 120.127686][ T6788] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.160588][ T6788] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.204403][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.217703][ T6788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.269106][ T6788] EXT4-fs (loop2): 1 truncate cleaned up [ 120.287063][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.348150][ T6788] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.365935][ T6795] loop3: detected capacity change from 0 to 512 [ 120.374648][ T6795] EXT4-fs: Ignoring removed oldalloc option [ 120.395261][ T6795] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.414186][ T6797] mmap: syz.0.336 (6797) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.498531][ T6795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.589442][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.719795][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.941652][ T6815] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.342'. [ 120.998136][ T6818] bonding: unable to delete non-existent b [ 121.429206][ T6835] loop3: detected capacity change from 0 to 16 [ 121.519069][ T6835] erofs: (device loop3): mounted with root inode @ nid 36. [ 121.895694][ T6850] loop0: detected capacity change from 0 to 512 [ 121.933206][ T6850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.961924][ T6848] loop2: detected capacity change from 0 to 4096 [ 122.010171][ T6850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.029979][ T6848] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.080311][ T6848] NILFS (loop2): mounting unchecked fs [ 122.136207][ T6850] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.238296][ T6848] NILFS (loop2): recovery complete [ 122.264131][ T5770] udevd[5770]: incorrect nilfs2 checksum on /dev/loop2 [ 122.271191][ T6866] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.378088][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.033045][ T6868] loop1: detected capacity change from 0 to 32768 [ 123.043575][ T6868] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.354 (6868) [ 123.101885][ T6868] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 123.134002][ T6868] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.155603][ T6868] BTRFS info (device loop1): turning on flush-on-commit [ 123.172579][ T6868] BTRFS info (device loop1): using free space tree [ 123.263820][ T6899] mkiss: ax0: crc mode is auto. [ 123.329131][ T6868] BTRFS info (device loop1): enabling ssd optimizations [ 123.339048][ T6868] BTRFS info (device loop1): auto enabling async discard [ 123.583996][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.738781][ T5776] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 123.932620][ T6930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 123.947166][ T5941] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop1 scanned by udevd (5941) [ 124.023514][ T6938] loop0: detected capacity change from 0 to 512 [ 124.049740][ T6938] EXT4-fs: Ignoring removed bh option [ 124.097519][ T6938] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 124.189296][ T6938] EXT4-fs (loop0): 1 truncate cleaned up [ 124.206745][ T6938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.529318][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.808882][ T6963] loop3: detected capacity change from 0 to 2048 [ 124.858533][ T6963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.014088][ T6963] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.035938][ T6963] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 22 with error 28 [ 125.051703][ T6963] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.051703][ T6963] [ 125.062111][ T6963] EXT4-fs (loop3): Total free blocks count 0 [ 125.082163][ T6963] EXT4-fs (loop3): Free/Dirty block details [ 125.110620][ T6963] EXT4-fs (loop3): free_blocks=2415919104 [ 125.132316][ T6963] EXT4-fs (loop3): dirty_blocks=32 [ 125.140063][ T6963] EXT4-fs (loop3): Block reservation details [ 125.148087][ T6963] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 125.201864][ T6978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.264882][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.348963][ T6982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.555430][ T6989] program syz.3.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.600870][ T6990] loop2: detected capacity change from 0 to 2048 [ 125.660834][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.733015][ T6996] loop1: detected capacity change from 0 to 256 [ 125.793115][ T6990] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 126.000853][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.469092][ T7012] loop2: detected capacity change from 0 to 4096 [ 126.577932][ T7017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.653332][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.661263][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.668626][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.675948][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.683816][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.691257][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.698668][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.706013][ T7021] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 126.761989][ T7012] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 127.012364][ T7027] loop3: detected capacity change from 0 to 512 [ 127.089505][ T7027] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.412: Attempting to read directory block (0) that is past i_size (16) [ 127.125801][ T7027] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 127.174001][ T7027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.245887][ T7027] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.412: Attempting to read directory block (0) that is past i_size (16) [ 127.276680][ T7027] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.412: Attempting to read directory block (0) that is past i_size (16) [ 127.746584][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.205038][ T7045] loop2: detected capacity change from 0 to 2048 [ 128.254926][ T7045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.312103][ T7045] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.361181][ T7053] loop0: detected capacity change from 0 to 512 [ 128.447349][ T7054] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.417: bg 0: block 345: padding at end of block bitmap is not set [ 128.453364][ T7053] EXT4-fs: Ignoring removed orlov option [ 128.473804][ T7045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.417: bg 0: block 345: padding at end of block bitmap is not set [ 128.548185][ T7053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.575685][ T7054] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 128.603816][ T7053] EXT4-fs (loop0): 1 truncate cleaned up [ 128.637435][ T7053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.707324][ T7047] loop1: detected capacity change from 0 to 40427 [ 128.725241][ T7047] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 128.734733][ T7047] F2FS-fs (loop1): invalid crc value [ 128.748839][ T7047] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.799288][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.823191][ T7047] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.891501][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.007606][ T7047] syz.1.419: attempt to access beyond end of device [ 129.007606][ T7047] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.124308][ T5776] syz-executor: attempt to access beyond end of device [ 129.124308][ T5776] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 129.145311][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.224421][ T7094] loop0: detected capacity change from 0 to 32768 [ 130.393773][ T7112] tap0: tun_chr_ioctl cmd 1074025677 [ 130.399903][ T7112] tap0: linktype set to 780 [ 130.665713][ T7106] loop2: detected capacity change from 0 to 32768 [ 130.718107][ T7106] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.847275][ T7127] loop3: detected capacity change from 0 to 128 [ 130.896016][ T7106] (syz.2.444,7106,1):ocfs2_double_lock:1192 ERROR: status = -2 [ 130.914025][ T7106] (syz.2.444,7106,0):ocfs2_rename:1301 ERROR: status = -2 [ 130.921246][ T7106] (syz.2.444,7106,0):ocfs2_rename:1692 ERROR: status = -2 [ 130.999079][ T7127] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.215445][ T7127] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.277477][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 131.447010][ T5950] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.658571][ T7150] loop3: detected capacity change from 0 to 256 [ 131.822689][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.935902][ T7158] loop2: detected capacity change from 0 to 256 [ 131.982246][ T7158] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 132.049342][ T7160] loop3: detected capacity change from 0 to 2048 [ 132.191330][ T7160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.217892][ T7164] loop1: detected capacity change from 0 to 512 [ 132.265987][ T7160] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.410674][ T7164] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 132.432329][ T7160] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.468: bg 0: block 345: padding at end of block bitmap is not set [ 132.434064][ T7164] FAT-fs (loop1): Filesystem has been set read-only [ 132.467044][ T7164] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 132.509402][ T7171] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.468: bg 0: block 345: padding at end of block bitmap is not set [ 132.592623][ T7171] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 132.730850][ T7179] loop1: detected capacity change from 0 to 256 [ 132.783756][ T7179] exfat: Deprecated parameter 'namecase' [ 132.797158][ T7179] exfat: Deprecated parameter 'utf8' [ 132.802765][ T7179] exfat: Deprecated parameter 'namecase' [ 132.809552][ T7179] exfat: Deprecated parameter 'namecase' [ 132.830092][ T7179] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 132.830273][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.084385][ T7186] loop0: detected capacity change from 0 to 1024 [ 133.107740][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.116418][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319891][ T7193] loop1: detected capacity change from 0 to 16 [ 133.331546][ T7193] erofs: (device loop1): mounted with root inode @ nid 36. [ 133.385751][ T7195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.499604][ T7195] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.574286][ T7195] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 133.628491][ T7195] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.628491][ T7195] [ 133.656235][ T7195] EXT4-fs (loop0): Total free blocks count 0 [ 133.672699][ T7195] EXT4-fs (loop0): Free/Dirty block details [ 133.692805][ T7195] EXT4-fs (loop0): free_blocks=20480 [ 133.701556][ T7195] EXT4-fs (loop0): dirty_blocks=32 [ 133.722646][ T7195] EXT4-fs (loop0): Block reservation details [ 133.736557][ T7195] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 133.755962][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.781676][ T7202] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 133.823696][ T7210] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.927181][ T7210] EXT4-fs (loop2): shut down requested (1) [ 133.937146][ T7215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.008996][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.548743][ T5777] Bluetooth: hci2: link tx timeout [ 134.557309][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.963159][ T7240] msr: Write to unrecognized MSR 0x83f by syz.0.500 (pid: 7240). [ 134.981155][ T7240] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 135.190579][ T7250] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 135.422907][ T5841] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.520892][ T7254] set_capacity_and_notify: 3 callbacks suppressed [ 135.520911][ T7254] loop0: detected capacity change from 0 to 1024 [ 135.563292][ T7254] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 135.589682][ T7254] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.618962][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.627806][ T7254] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: inode #32: comm syz.0.507: iget: special inode unallocated [ 135.642743][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.642792][ T5841] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 135.679446][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.700449][ T5841] usb 4-1: config 0 descriptor?? [ 135.752632][ T7254] EXT4-fs (loop0): no journal found [ 135.757943][ T7254] EXT4-fs (loop0): can't get journal size [ 135.803535][ T7254] EXT4-fs (loop0): filesystem is read-only [ 135.840648][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.945846][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.201238][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.220635][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.235754][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.245561][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.263922][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.281900][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.298196][ T5841] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 136.341436][ T5841] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 136.447395][ T5841] playstation 0003:054C:0BA0.0003: Invalid reportID received, expected 18 got 90 [ 136.469423][ T5841] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -22 [ 136.494798][ T5841] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4 [ 136.515375][ T5841] playstation 0003:054C:0BA0.0003: Failed to create dualshock4. [ 136.545540][ T5841] playstation: probe of 0003:054C:0BA0.0003 failed with error -22 [ 136.622645][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 136.751624][ T5841] usb 4-1: USB disconnect, device number 3 [ 136.979950][ T7259] loop0: detected capacity change from 0 to 32768 [ 137.018195][ T7273] loop2: detected capacity change from 0 to 4096 [ 137.091588][ T7259] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.235026][ T7273] ntfs: volume version 3.1. [ 137.376799][ T7277] syz.1.516: attempt to access beyond end of device [ 137.376799][ T7277] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.407695][ T7259] (syz.0.509,7259,1):ocfs2_double_lock:1192 ERROR: status = -2 [ 137.453533][ T7259] (syz.0.509,7259,1):ocfs2_rename:1301 ERROR: status = -2 [ 137.460730][ T7259] (syz.0.509,7259,1):ocfs2_rename:1692 ERROR: status = -2 [ 137.529757][ T5782] Bluetooth: hci3: unexpected event 0x0f length: 84 > 4 [ 137.645384][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 137.916482][ T7287] loop3: detected capacity change from 0 to 4096 [ 137.986295][ T7290] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.067001][ T7287] NILFS (loop3): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 138.107363][ T7287] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 138.159479][ T7287] Remounting filesystem read-only [ 138.176891][ T7287] NILFS (loop3): error -5 preparing GC: cannot mark copying blocks dirty [ 138.245706][ T7297] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 138.923525][ T7301] loop1: detected capacity change from 0 to 32768 [ 138.931103][ T7301] XFS: noikeep mount option is deprecated. [ 138.941685][ T7301] XFS: noikeep mount option is deprecated. [ 139.000982][ T7301] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.040368][ T7303] loop3: detected capacity change from 0 to 32768 [ 139.080555][ T7303] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.241161][ T7303] XFS (loop3): Ending clean mount [ 139.297306][ T7301] XFS (loop1): Ending clean mount [ 139.298634][ T7303] XFS (loop3): Quotacheck needed: Please wait. [ 139.326872][ T7301] XFS (loop1): Quotacheck needed: Please wait. [ 139.425398][ T7301] XFS (loop1): Quotacheck: Done. [ 139.426512][ T7303] XFS (loop3): Quotacheck: Done. [ 139.653156][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.677029][ T7335] loop2: detected capacity change from 0 to 32768 [ 139.720361][ T7346] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 139.730896][ T7335] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 139.770191][ T5950] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.109886][ T7335] XFS (loop2): Starting recovery (logdev: internal) [ 140.221691][ T7335] XFS (loop2): Ending recovery (logdev: internal) [ 140.487453][ T7371] loop3: detected capacity change from 0 to 512 [ 140.506214][ T5768] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 140.560758][ T7371] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.626908][ T7371] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.648590][ T7371] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.549: bg 0: block 248: padding at end of block bitmap is not set [ 140.720817][ T7371] Quota error (device loop3): write_blk: dquota write failed [ 140.743117][ T7371] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 140.763452][ T7371] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.549: Failed to acquire dquot type 1 [ 140.813845][ T7371] EXT4-fs (loop3): 1 truncate cleaned up [ 140.820835][ T7371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 140.939422][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 140.954291][ T11] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 140.979320][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 141.196905][ T7390] loop1: detected capacity change from 0 to 8192 [ 141.228906][ T7390] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.248217][ T7390] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 141.286521][ T7390] REISERFS (device loop1): using ordered data mode [ 141.318467][ T7390] reiserfs: using flush barriers [ 141.375875][ T7390] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 141.454671][ T7390] REISERFS (device loop1): checking transaction log (loop1) [ 141.508116][ T7390] REISERFS (device loop1): Using r5 hash to sort names [ 141.520135][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 141.552645][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 141.575248][ T7390] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 141.584578][ T7392] loop3: detected capacity change from 0 to 32768 [ 141.627429][ T7390] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 141.655188][ T7392] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.690724][ T7392] XFS (loop3): Ending clean mount [ 141.892427][ T5950] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.152821][ T7422] loop1: detected capacity change from 0 to 4096 [ 142.189013][ T7422] NILFS (loop1): invalid segment: Checksum error in segment payload [ 142.197398][ T7422] NILFS (loop1): trying rollback from an earlier position [ 142.244061][ T7422] NILFS (loop1): recovery complete [ 142.265627][ T7427] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.326328][ T7422] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 4096 [ 142.354839][ T7422] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=12) [ 142.396000][ T7422] Remounting filesystem read-only [ 142.401132][ T7422] NILFS (loop1): error -5 cleaning segments [ 142.929705][ T7422] NILFS (loop1): error -30 cleaning segments [ 142.991804][ T7444] loop3: detected capacity change from 0 to 2048 [ 143.032629][ T5776] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 143.076847][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 143.079654][ T7445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.095774][ T5776] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 143.135713][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.170341][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.180185][ T7444] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 143.192792][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.212590][ T7444] Remounting filesystem read-only [ 143.222993][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 143.250095][ T5776] NILFS (loop1): discard dirty block: blocknr=5, size=1024 [ 143.258995][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.282630][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.291521][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.317293][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 143.320241][ T7449] loop2: detected capacity change from 0 to 256 [ 143.331741][ T5776] NILFS (loop1): discard dirty block: blocknr=6, size=1024 [ 143.334223][ T5950] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 143.341437][ T5776] NILFS (loop1): discard dirty block: blocknr=7, size=1024 [ 143.363892][ T5776] NILFS (loop1): discard dirty block: blocknr=8, size=1024 [ 143.371232][ T5776] NILFS (loop1): discard dirty block: blocknr=9, size=1024 [ 143.380182][ T7449] exfat: Deprecated parameter 'utf8' [ 143.396607][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 143.419352][ T5950] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 143.432595][ T7449] exfat: Deprecated parameter 'namecase' [ 143.438312][ T7449] exfat: Deprecated parameter 'namecase' [ 143.451514][ T5776] NILFS (loop1): discard dirty block: blocknr=11, size=1024 [ 143.472543][ T5950] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 143.480262][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.489193][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.489216][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.489230][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.489526][ T5950] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 143.526786][ T7449] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 143.540323][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.560210][ T7440] loop0: detected capacity change from 0 to 32768 [ 143.562009][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.621344][ T5950] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 143.633213][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.642715][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 143.649522][ T5776] NILFS (loop1): discard dirty block: blocknr=12, size=1024 [ 143.674140][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.684638][ T7440] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.701596][ T5776] NILFS (loop1): discard dirty block: blocknr=13, size=1024 [ 143.734116][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.748141][ T5776] NILFS (loop1): discard dirty block: blocknr=14, size=1024 [ 143.773440][ T5950] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 143.781720][ T5776] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.816087][ T5950] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 143.885637][ T5950] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 143.904365][ T7440] XFS (loop0): Ending clean mount [ 143.947171][ T5950] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 143.992080][ T5950] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 144.015442][ T5950] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 144.048465][ T5950] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 144.070316][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.075498][ T7461] loop1: detected capacity change from 0 to 128 [ 144.093187][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.102081][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.157659][ T5950] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 144.168326][ T5950] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 144.177620][ T7461] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 144.189161][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.198113][ T5950] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 144.208948][ T5950] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 144.213122][ T7461] FAT-fs (loop1): Filesystem has been set read-only [ 144.216701][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.248261][ T5950] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 144.271199][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.293651][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.309390][ T7462] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 144.320510][ T5950] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 144.329882][ T5950] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.344223][ T7462] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 52) [ 144.802194][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.586'. [ 144.954674][ T5840] IPVS: starting estimator thread 0... [ 145.034546][ T7485] overlayfs: workdir and upperdir must reside under the same mount [ 145.043596][ T7483] IPVS: using max 21 ests per chain, 50400 per kthread [ 145.053792][ T5843] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.255712][ T5843] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 145.278787][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.305924][ T5843] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 145.326786][ T5843] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.341234][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.367329][ T5843] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 145.392534][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.414639][ T5843] usb 1-1: config 0 descriptor?? [ 145.436913][ T7500] loop3: detected capacity change from 0 to 128 [ 145.503920][ T7500] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.536437][ T7500] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.663264][ T5950] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.724866][ T5841] usb 1-1: USB disconnect, device number 7 [ 145.817942][ T7489] loop1: detected capacity change from 0 to 32768 [ 145.832921][ T7489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.592 (7489) [ 145.897520][ T7489] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.911185][ T7489] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 145.941904][ T7489] BTRFS info (device loop1): force clearing of disk cache [ 145.958033][ T7489] BTRFS info (device loop1): metadata ratio 0 [ 145.982956][ T7489] BTRFS info (device loop1): using free space tree [ 146.113055][ T7489] BTRFS info (device loop1): enabling ssd optimizations [ 146.132601][ T7489] BTRFS info (device loop1): auto enabling async discard [ 146.163772][ T7489] BTRFS info (device loop1): rebuilding free space tree [ 146.252912][ T7499] loop2: detected capacity change from 0 to 32768 [ 146.361934][ T7499] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.417961][ T7532] nbd0: detected capacity change from 0 to 63 [ 146.436730][ T5782] block nbd0: Receive control failed (result -32) [ 146.436939][ T10] block nbd0: Send control failed (result -32) [ 146.452352][ T10] block nbd0: Request send failed, requeueing [ 146.463278][ T10] block nbd0: Dead connection, failed to find a fallback [ 146.471455][ T10] block nbd0: shutting down sockets [ 146.478739][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.491908][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.500485][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.511177][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 146.542699][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.564455][ T7499] XFS (loop2): Ending clean mount [ 146.583792][ T1061] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.593072][ T1061] Buffer I/O error on dev nbd0, logical block 2, async page read [ 146.600984][ T1061] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.610541][ T1061] Buffer I/O error on dev nbd0, logical block 3, async page read [ 146.621414][ T1061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.630605][ T1061] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.630625][ T7499] XFS (loop2): Quotacheck needed: Please wait. [ 146.655522][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 146.667562][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 146.675743][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 146.684492][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 146.693634][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 146.703071][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.710826][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 146.718899][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 146.728414][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 146.740583][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 146.750266][ T6587] ldm_validate_partition_table(): Disk read failed. [ 146.758952][ T6587] Dev nbd0: unable to read RDB block 0 [ 146.766387][ T6587] nbd0: unable to read partition table [ 146.781775][ T6587] ldm_validate_partition_table(): Disk read failed. [ 146.790250][ T6587] Dev nbd0: unable to read RDB block 0 [ 146.798138][ T6587] nbd0: unable to read partition table [ 146.897393][ T7499] XFS (loop2): Quotacheck: Done. [ 146.984906][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.080460][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.234284][ T7552] loop0: detected capacity change from 0 to 4096 [ 147.338664][ T7552] ntfs: volume version 3.1. [ 147.926174][ T7567] loop0: detected capacity change from 0 to 1024 [ 148.151357][ T7567] hfsplus: xattr searching failed [ 148.165119][ T7578] capability: warning: `syz.3.620' uses 32-bit capabilities (legacy support in use) [ 148.179389][ T7578] program syz.3.620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.291808][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 148.437961][ T7589] loop2: detected capacity change from 0 to 1024 [ 148.454891][ T7589] EXT4-fs: Ignoring removed bh option [ 148.483948][ T7589] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 148.510663][ T7593] loop3: detected capacity change from 0 to 512 [ 148.535390][ T7589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.747580][ T5768] EXT4-fs error (device loop2): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /153/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 148.776381][ T5768] EXT4-fs (loop2): Remounting filesystem read-only [ 148.965809][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 149.007130][ T7604] loop3: detected capacity change from 0 to 8192 [ 149.026025][ T7604] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 149.112772][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.148855][ T7604] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 149.184396][ T7604] ntfs3: loop3: Failed to load $Extend (-2). [ 149.190450][ T7604] ntfs3: loop3: Failed to initialize $Extend. [ 149.236670][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.457544][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.624209][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.759999][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.918431][ T7614] loop0: detected capacity change from 0 to 32768 [ 149.962966][ T7614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.637 (7614) [ 150.032183][ T7614] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.071194][ T7614] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.108486][ T7614] BTRFS info (device loop0): force clearing of disk cache [ 150.123230][ T7614] BTRFS info (device loop0): metadata ratio 0 [ 150.129375][ T7614] BTRFS info (device loop0): using free space tree [ 150.147918][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 150.159451][ T7628] netlink: 'syz.1.644': attribute type 30 has an invalid length. [ 150.182073][ T7628] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.191653][ T7628] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.200486][ T7628] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.209283][ T7628] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.231501][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 150.272956][ T7636] netlink: 'syz.1.644': attribute type 30 has an invalid length. [ 150.321433][ T7614] BTRFS info (device loop0): enabling ssd optimizations [ 150.332797][ T7614] BTRFS info (device loop0): auto enabling async discard [ 150.372916][ T7614] BTRFS info (device loop0): rebuilding free space tree [ 150.483685][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.496021][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.505402][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.523274][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.530970][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.539488][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.846506][ T1113] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.960863][ T5769] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.545269][ T7651] chnl_net:caif_netlink_parms(): no params data found [ 152.078293][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.095665][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.106528][ T7651] bridge_slave_0: entered allmulticast mode [ 152.115250][ T7651] bridge_slave_0: entered promiscuous mode [ 152.124434][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.134914][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.142145][ T7651] bridge_slave_1: entered allmulticast mode [ 152.150611][ T7651] bridge_slave_1: entered promiscuous mode [ 152.266624][ T7651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.299108][ T7651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.339060][ T11] hsr_slave_0: left promiscuous mode [ 152.345342][ T11] hsr_slave_1: left promiscuous mode [ 152.351477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.376054][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.403654][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.411127][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.424794][ T11] bridge_slave_1: left allmulticast mode [ 152.430482][ T11] bridge_slave_1: left promiscuous mode [ 152.436874][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.447311][ T11] bridge_slave_0: left allmulticast mode [ 152.473012][ T11] bridge_slave_0: left promiscuous mode [ 152.478851][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.541503][ T11] veth1_macvtap: left promiscuous mode [ 152.547644][ T11] veth0_macvtap: left promiscuous mode [ 152.557819][ T11] veth1_vlan: left promiscuous mode [ 152.566895][ T11] veth0_vlan: left promiscuous mode [ 152.625055][ T5777] Bluetooth: hci0: command tx timeout [ 152.782913][ T969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.862717][ T5777] Bluetooth: hci4: command 0x1003 tx timeout [ 152.863844][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.985200][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.002685][ T969] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.038370][ T969] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 153.057858][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.070847][ T969] usb 1-1: Product: syz [ 153.078729][ T969] usb 1-1: Manufacturer: syz [ 153.085651][ T969] usb 1-1: SerialNumber: syz [ 153.097570][ T969] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 153.148245][ T969] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 153.148245][ T969] Please send a copy of this message to and [ 153.499750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 153.558619][ T11] team0 (unregistering): Port device team_slave_0 removed [ 153.595384][ T969] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 153.624761][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.633591][ T969] usb 1-1: USB disconnect, device number 8 [ 153.760592][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.410633][ T11] bond0 (unregistering): Released all slaves [ 154.499304][ T7728] netlink: 72 bytes leftover after parsing attributes in process `syz.1.665'. [ 154.557029][ T7651] team0: Port device team_slave_0 added [ 154.609193][ T7651] team0: Port device team_slave_1 added [ 154.702621][ T5782] Bluetooth: hci0: command tx timeout [ 154.748820][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.756082][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.782989][ T7651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.810319][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.819254][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.845978][ T7651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.878897][ T7734] loop0: detected capacity change from 0 to 764 [ 155.124298][ T7651] hsr_slave_0: entered promiscuous mode [ 155.141234][ T7651] hsr_slave_1: entered promiscuous mode [ 155.159421][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 155.359887][ T7746] ima: policy update failed [ 155.382698][ T27] audit: type=1802 audit(1791820357.312:12): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.673" res=0 errno=0 [ 155.636861][ T7651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.657069][ T7651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.703896][ T7651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.730230][ T7651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.951863][ T7651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.013307][ T7651] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.039429][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.046783][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.101540][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.111794][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.259143][ T7771] loop3: detected capacity change from 0 to 2048 [ 156.276645][ T7750] loop0: detected capacity change from 0 to 40427 [ 156.311360][ T7750] F2FS-fs (loop0): invalid crc value [ 156.371005][ T7750] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.418153][ T7771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.431852][ T7771] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.469884][ T7771] fs-verity: sha512 using implementation "sha512-avx2" [ 156.537437][ T7771] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.677: bg 0: block 345: padding at end of block bitmap is not set [ 156.546602][ T7750] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.613901][ T7771] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 0 [ 156.641536][ T7771] fs-verity (loop3, inode 13): Error -28 building Merkle tree [ 156.746528][ T5769] syz-executor: attempt to access beyond end of device [ 156.746528][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.783922][ T5782] Bluetooth: hci0: command tx timeout [ 156.786960][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 156.805926][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.841557][ T7651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.011751][ T7794] loop3: detected capacity change from 0 to 764 [ 157.497384][ T7651] veth0_vlan: entered promiscuous mode [ 157.540193][ T7651] veth1_vlan: entered promiscuous mode [ 157.620256][ T7651] veth0_macvtap: entered promiscuous mode [ 157.671414][ T7651] veth1_macvtap: entered promiscuous mode [ 157.676746][ T7809] loop0: detected capacity change from 0 to 256 [ 157.693676][ T7809] exfat: Deprecated parameter 'utf8' [ 157.705492][ T7809] exfat: Deprecated parameter 'utf8' [ 157.731663][ T7809] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 157.783880][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.822634][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.862606][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.906913][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.956608][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.990368][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.014799][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.044068][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.092602][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.122539][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.141453][ T7821] loop1: detected capacity change from 0 to 256 [ 158.165009][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.176423][ T7821] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.209193][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.234176][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.264597][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.290265][ T7821] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.310388][ T7651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.357113][ T7651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.398896][ T7651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.418706][ T7651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.493379][ T7805] loop3: detected capacity change from 0 to 32768 [ 158.768748][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.813870][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.867652][ T5782] Bluetooth: hci0: command tx timeout [ 158.978906][ T7836] loop0: detected capacity change from 0 to 128 [ 158.988361][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.009540][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.021631][ T7836] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 159.090194][ T7836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.469919][ T7849] net_ratelimit: 3261 callbacks suppressed [ 159.469937][ T7849] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.921754][ T7873] loop0: detected capacity change from 0 to 512 [ 159.988529][ T7873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.017399][ T7873] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.247383][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.267232][ T7891] loop1: detected capacity change from 0 to 512 [ 160.345839][ T7891] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 160.406696][ T7894] netlink: 'syz.3.708': attribute type 30 has an invalid length. [ 160.444523][ T7891] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.705: bg 0: block 4: invalid block bitmap [ 160.475412][ T7891] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 160.508481][ T7894] bond1: option arp_missed_max: invalid value (0) [ 160.515523][ T7891] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.705: invalid indirect mapped block 1 (level 1) [ 160.539109][ T7894] bond1: option arp_missed_max: allowed values 1 - 255 [ 160.568463][ T7891] EXT4-fs (loop1): 1 truncate cleaned up [ 160.594262][ T7894] bond1 (unregistering): Released all slaves [ 160.607711][ T7891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.781393][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.310965][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 161.330393][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 161.366083][ T7924] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.375131][ T7924] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.384008][ T7924] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.392803][ T7924] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.435906][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 161.447411][ T7930] input: syz1 as /devices/virtual/input/input8 [ 161.465259][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 161.668577][ T7939] netlink: 76 bytes leftover after parsing attributes in process `syz.3.719'. [ 161.693904][ T7939] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 162.816153][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 162.842891][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 162.910915][ T7985] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.928454][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 163.498103][ T8019] loop3: detected capacity change from 0 to 512 [ 163.537443][ T8019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.621041][ T8019] EXT4-fs error (device loop3): ext4_get_first_dir_block:3586: inode #12: comm syz.3.744: Directory block failed checksum [ 163.687220][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.223371][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.240232][ T8044] loop3: detected capacity change from 0 to 256 [ 164.252361][ T8047] netlink: 'syz.4.754': attribute type 12 has an invalid length. [ 164.267689][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'. [ 164.322043][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 164.447081][ T5840] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.460860][ T5840] usb 1-1: config 0 has no interface number 0 [ 164.485121][ T5840] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.508394][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.529481][ T5840] usb 1-1: Product: syz [ 164.552607][ T5840] usb 1-1: Manufacturer: syz [ 164.557274][ T5840] usb 1-1: SerialNumber: syz [ 164.578579][ T8055] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.579217][ T5840] usb 1-1: config 0 descriptor?? [ 164.810990][ T5840] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 164.838526][ T5840] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.853340][ T5840] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 164.862260][ T5840] usb 1-1: media controller created [ 164.871175][ T8070] ip_tables: iptables: counters copy to user failed while replacing table [ 164.920289][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.305738][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.327362][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.341226][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.348940][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.376649][ T8095] autofs4:pid:8095:autofs_fill_super: pipe file descriptor does not contain proper ops [ 165.419305][ T8093] netlink: 'syz.1.775': attribute type 30 has an invalid length. [ 165.468433][ T8093] bond1: option arp_missed_max: invalid value (0) [ 165.475128][ T8093] bond1: option arp_missed_max: allowed values 1 - 255 [ 165.486974][ T8093] bond1 (unregistering): Released all slaves [ 165.620428][ T8102] loop3: detected capacity change from 0 to 1024 [ 165.639482][ T8102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.692365][ T8102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.753245][ T5841] kernel write not supported for file bpf-prog (pid: 5841 comm: kworker/0:7) [ 165.794212][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.966181][ T8115] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 165.979896][ T8115] CPU: 0 PID: 8115 Comm: syz.1.783 Not tainted syzkaller #0 [ 165.982978][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.987229][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.987294][ T8115] Call Trace: [ 165.987306][ T8115] [ 165.987315][ T8115] dump_stack_lvl+0x18c/0x250 [ 166.015757][ T8115] ? show_regs_print_info+0x20/0x20 [ 166.020977][ T8115] ? load_image+0x420/0x420 [ 166.025500][ T8115] sysfs_create_dir_ns+0x26e/0x2a0 [ 166.030632][ T8115] ? __lock_acquire+0x7eb0/0x7eb0 [ 166.035698][ T8115] ? sysfs_warn_dup+0xa0/0xa0 [ 166.040411][ T8115] ? rcu_is_watching+0x15/0xb0 [ 166.045189][ T8115] ? do_raw_spin_unlock+0x121/0x230 [ 166.050415][ T8115] kobject_add_internal+0x617/0xc90 [ 166.055628][ T8115] kobject_add+0x164/0x240 [ 166.060059][ T8115] ? kobject_init+0x1d0/0x1d0 [ 166.064744][ T8115] ? get_device_parent+0x366/0x390 [ 166.069873][ T8115] device_add+0x3fa/0xc40 [ 166.074228][ T8115] tty_register_device_attr+0x428/0x990 [ 166.079832][ T8115] ? tty_register_device+0x30/0x30 [ 166.084956][ T8115] ? tty_port_init+0x132/0x1a0 [ 166.089722][ T8115] ? gsm_dlci_alloc+0x32a/0x630 [ 166.094575][ T8115] ? __might_fault+0xaa/0x120 [ 166.099270][ T8115] gsm_activate_mux+0x110/0x2a0 [ 166.104128][ T8115] gsmld_ioctl+0x12ca/0x1900 [ 166.108727][ T8115] ? gsmld_write+0x120/0x120 [ 166.113330][ T8115] ? __init_ldsem+0x150/0x150 [ 166.118035][ T8115] ? lockdep_hardirqs_on+0x98/0x150 [ 166.123272][ T8115] ? gsmld_write+0x120/0x120 [ 166.127882][ T8115] tty_ioctl+0x9b5/0xdc0 [ 166.132140][ T8115] ? tty_get_icount+0xb0/0xb0 [ 166.136831][ T8115] __se_sys_ioctl+0xfd/0x170 [ 166.141430][ T8115] do_syscall_64+0x55/0xb0 [ 166.145847][ T8115] ? clear_bhb_loop+0x40/0x90 [ 166.150521][ T8115] ? clear_bhb_loop+0x40/0x90 [ 166.155197][ T8115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.161103][ T8115] RIP: 0033:0x7f037bb9e1d9 [ 166.165521][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.185129][ T8115] RSP: 002b:00007f0379dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.193564][ T8115] RAX: ffffffffffffffda RBX: 00007f037be26090 RCX: 00007f037bb9e1d9 [ 166.201569][ T8115] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 166.209555][ T8115] RBP: 00007f037bc35888 R08: 0000000000000000 R09: 0000000000000000 [ 166.217537][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.225510][ T8115] R13: 00007f037be26128 R14: 00007f037be26090 R15: 00007ffdd5071028 [ 166.233499][ T8115] [ 166.257187][ T5840] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 166.272788][ T8115] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.338652][ T23] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 166.363197][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.414772][ T23] usb 5-1: Product: syz [ 166.419359][ T23] usb 5-1: Manufacturer: syz [ 166.439353][ T23] usb 5-1: SerialNumber: syz [ 166.442434][ T5840] usb 1-1: USB disconnect, device number 9 [ 166.533239][ T23] usb 5-1: config 0 descriptor?? [ 166.562214][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 166.588105][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.604824][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 166.629279][ T23] usb 5-1: media controller created [ 166.677393][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.797498][ T23] DVB: Unable to find symbol mt352_attach() [ 166.822876][ T8120] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 166.854202][ T8120] dvb-usb: bulk message failed: -22 (7/0) [ 166.926795][ T23] DVB: Unable to find symbol nxt6000_attach() [ 166.939778][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 166.970812][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 167.014095][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 167.021221][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 167.042167][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 167.050569][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 167.065554][ T23] usb 5-1: USB disconnect, device number 2 [ 167.166751][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 167.439960][ T8135] netlink: 'syz.0.790': attribute type 30 has an invalid length. [ 167.471957][ T8135] bond1: option arp_missed_max: invalid value (0) [ 167.478707][ T8135] bond1: option arp_missed_max: allowed values 1 - 255 [ 167.490864][ T8135] bond1 (unregistering): Released all slaves [ 167.764058][ T8147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.794'. [ 167.787547][ T27] audit: type=1807 audit(1791820370.715:13): action=measure uid>1 res=1 [ 167.787841][ T8148] ima: policy update completed [ 167.821395][ T27] audit: type=1802 audit(1791820370.745:14): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.796" res=1 errno=0 [ 167.978474][ T8159] capability: warning: `syz.4.800' uses deprecated v2 capabilities in a way that may be insecure [ 168.149733][ T8166] netlink: 52 bytes leftover after parsing attributes in process `syz.1.803'. [ 168.330389][ T8173] loop0: detected capacity change from 0 to 4096 [ 168.382056][ T8173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.524663][ T8183] loop4: detected capacity change from 0 to 1024 [ 168.532094][ T8183] EXT4-fs: Ignoring removed oldalloc option [ 168.545443][ T8183] EXT4-fs: Ignoring removed orlov option [ 168.557606][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.660452][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.733857][ T8183] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.774252][ T8190] loop9: detected capacity change from 0 to 7 [ 168.800882][ T8190] Dev loop9: unable to read RDB block 7 [ 168.816260][ T8190] loop9: unable to read partition table [ 168.829514][ T8190] loop9: partition table beyond EOD, truncated [ 168.846563][ T8190] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 168.847048][ T8183] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.809: Freeing blocks not in datazone - block = 0, count = 16 [ 168.909477][ T8193] loop3: detected capacity change from 0 to 4096 [ 168.927168][ T1150] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set [ 168.989570][ T8197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.000764][ T1150] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.052753][ T1150] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.052753][ T1150] [ 169.082530][ T1150] EXT4-fs (loop4): Total free blocks count 0 [ 169.088581][ T1150] EXT4-fs (loop4): Free/Dirty block details [ 169.114767][ T1150] EXT4-fs (loop4): free_blocks=16 [ 169.119881][ T1150] EXT4-fs (loop4): dirty_blocks=16 [ 169.139995][ T1150] EXT4-fs (loop4): Block reservation details [ 169.154165][ T1150] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 169.168464][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.785085][ T8231] netlink: 52 bytes leftover after parsing attributes in process `syz.4.825'. [ 169.884434][ T8237] binder: Binderfs stats mode cannot be changed during a remount [ 169.917673][ T8239] loop0: detected capacity change from 0 to 128 [ 170.411734][ T8262] loop0: detected capacity change from 0 to 1024 [ 170.438224][ T8262] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 170.460574][ T8262] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.840: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 170.488498][ T8262] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.840: couldn't read orphan inode 11 (err -117) [ 170.514972][ T8262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.570084][ T8262] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.840: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.591564][ T8262] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 170.601228][ T8262] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.840: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.633158][ T8262] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 170.648429][ T8262] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.840: Failed to acquire dquot type 0 [ 170.668992][ T8269] kAFS: Invalid Command on /proc/fs/afs/cells file [ 170.736200][ T8271] loop4: detected capacity change from 0 to 64 [ 170.761824][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.782006][ T5769] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 170.804229][ T5769] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 170.817486][ T5769] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 170.834153][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 170.970975][ T8276] program syz.3.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.987725][ T8279] »»»»»»: renamed from vlan0 (while UP) [ 171.286216][ T8291] loop0: detected capacity change from 0 to 1024 [ 171.308641][ T8291] hfsplus: part requires an argument [ 171.335955][ T8291] hfsplus: unable to parse mount options [ 172.342125][ T8336] input: syz0 as /devices/virtual/input/input10 [ 172.554695][ T8344] loop4: detected capacity change from 0 to 16 [ 172.594354][ T8344] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.181626][ T8371] loop4: detected capacity change from 0 to 256 [ 173.257038][ T8374] loop9: detected capacity change from 0 to 7 [ 173.295670][ T8374] Dev loop9: unable to read RDB block 7 [ 173.353674][ T8374] loop9: unable to read partition table [ 173.379056][ T8374] loop9: partition table beyond EOD, truncated [ 173.398766][ T8374] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 174.154406][ T8405] loop0: detected capacity change from 0 to 4096 [ 174.173904][ T8405] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.515698][ T8405] EXT4-fs: Ignoring removed orlov option [ 174.537615][ T8405] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.574012][ T8405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.745019][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.270062][ T8444] loop4: detected capacity change from 0 to 64 [ 175.390987][ T8444] BFS-fs: bfs_readdir(): Bad f_pos=0000031f for loop4:00000002 [ 175.551422][ T8453] loop1: detected capacity change from 0 to 256 [ 175.632172][ T8455] overlayfs: upper fs does not support tmpfile. [ 175.726404][ T8453] FAT-fs (loop1): Directory bread(block 64) failed [ 175.745961][ T8453] FAT-fs (loop1): Directory bread(block 65) failed [ 175.783208][ T8453] FAT-fs (loop1): Directory bread(block 66) failed [ 175.791399][ T8453] FAT-fs (loop1): Directory bread(block 67) failed [ 175.808644][ T8453] FAT-fs (loop1): Directory bread(block 68) failed [ 175.822164][ T8453] FAT-fs (loop1): Directory bread(block 69) failed [ 175.835088][ T8453] FAT-fs (loop1): Directory bread(block 70) failed [ 175.845734][ T8453] FAT-fs (loop1): Directory bread(block 71) failed [ 175.857176][ T8453] FAT-fs (loop1): Directory bread(block 72) failed [ 175.870739][ T8453] FAT-fs (loop1): Directory bread(block 73) failed [ 176.408038][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.910'. [ 176.456387][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.910'. [ 176.646614][ T8489] loop3: detected capacity change from 0 to 256 [ 176.678361][ T8489] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 176.727579][ T8491] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.562762][ T5840] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 177.790648][ T5840] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 177.800390][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.818997][ T5840] usb 1-1: config 0 descriptor?? [ 177.857176][ T5840] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 178.101400][ T5840] gp8psk: usb in 128 operation failed. [ 178.109808][ T8544] loop3: detected capacity change from 0 to 256 [ 178.227436][ T8547] loop1: detected capacity change from 0 to 1024 [ 178.247200][ T8547] EXT4-fs: Ignoring removed oldalloc option [ 178.254626][ T8547] EXT4-fs: Ignoring removed orlov option [ 178.298561][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.332004][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 178.332548][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 178.354559][ T5840] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 178.374677][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 178.406102][ T8547] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.487228][ T8547] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.930: Freeing blocks not in datazone - block = 0, count = 16 [ 178.524337][ T5840] gp8psk: usb in 149 operation failed. [ 178.536967][ T5840] gp8psk: failed to get FPGA version [ 178.553387][ T5840] gp8psk: usb in 138 operation failed. [ 178.564832][ T1084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set [ 178.568049][ T5840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 178.584230][ T8556] loop3: detected capacity change from 0 to 512 [ 178.608395][ T1084] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.631161][ T1084] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.631161][ T1084] [ 178.643443][ T1084] EXT4-fs (loop1): Total free blocks count 0 [ 178.650377][ T1084] EXT4-fs (loop1): Free/Dirty block details [ 178.657344][ T1084] EXT4-fs (loop1): free_blocks=16 [ 178.663476][ T1084] EXT4-fs (loop1): dirty_blocks=16 [ 178.663607][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.669889][ T1084] EXT4-fs (loop1): Block reservation details [ 178.683556][ T5840] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 178.688783][ T1084] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 178.713087][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.743244][ T8556] EXT4-fs (loop3): 1 truncate cleaned up [ 178.750761][ T8556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.788556][ T8] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.803010][ T5840] usb 1-1: USB disconnect, device number 10 [ 178.838601][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.883317][ T8] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 178.922599][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.964576][ T8] usb 5-1: config 0 descriptor?? [ 178.966616][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.442936][ T8] input: HID 12ba:0100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:12BA:0100.0004/input/input11 [ 179.444330][ T8575] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 179.499026][ T8576] serio: Serial port ttyS3 [ 179.720296][ T8] sony 0003:12BA:0100.0004: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.4-1/input0 [ 179.799295][ T8] usb 5-1: USB disconnect, device number 3 [ 179.807291][ T8585] jffs2: notice: (8585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.921004][ T8586] fido_id[8586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 180.725254][ T8629] loop4: detected capacity change from 0 to 256 [ 181.405346][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.960'. [ 181.524917][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.960'. [ 181.842011][ T8646] loop0: detected capacity change from 0 to 32768 [ 181.867567][ T8646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.959 (8646) [ 181.930441][ T8646] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.942769][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.974908][ T8646] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 181.985634][ T8671] loop1: detected capacity change from 0 to 1024 [ 182.002897][ T8646] BTRFS info (device loop0): setting nodatasum [ 182.011214][ T8646] BTRFS info (device loop0): using free space tree [ 182.060990][ T8671] gfs2: path_lookup on c::: returned error -2 [ 182.142704][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 182.193743][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 182.233582][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.248292][ T8646] BTRFS info (device loop0): enabling ssd optimizations [ 182.262756][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.282588][ T8646] BTRFS info (device loop0): auto enabling async discard [ 182.302074][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.342606][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.384579][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.685984][ T42] usb 4-1: GET_CAPABILITIES returned 0 [ 182.714538][ T42] usbtmc 4-1:16.0: can't read capabilities [ 182.770014][ T5769] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.975669][ T5840] usb 4-1: USB disconnect, device number 4 [ 183.282774][ T5782] Bluetooth: to_multiplier 8192 > 3200 [ 184.697707][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 185.353141][ T5782] Bluetooth: hci3: command tx timeout [ 186.012563][ T8768] comedi comedi1: reset error (fatal) [ 186.587739][ T27] audit: type=1400 audit(1791820390.515:15): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8770 comm="syz.1.997" name="p" offset=48 [ 186.699595][ T8777] loop4: detected capacity change from 0 to 1024 [ 186.736348][ T8777] EXT4-fs: Ignoring removed nobh option [ 186.747314][ T8777] EXT4-fs: Ignoring removed bh option [ 186.808689][ T8779] loop1: detected capacity change from 0 to 2048 [ 186.833516][ T8777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.899002][ T8781] loop0: detected capacity change from 0 to 256 [ 186.919537][ T8779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 186.972193][ T8779] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.137840][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00ff07000000. [ 187.335233][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.235501][ T8817] Bluetooth: MGMT ver 1.22 [ 188.414407][ T8828] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.062343][ T8857] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1033'. [ 189.438655][ T8851] loop4: detected capacity change from 0 to 32768 [ 189.460768][ T8851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1028 (8851) [ 189.517532][ T8851] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.537863][ T8851] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 189.567766][ T8851] BTRFS info (device loop4): setting nodatacow, compression disabled [ 189.582964][ T8851] BTRFS info (device loop4): disabling tree log [ 189.600533][ T8851] BTRFS info (device loop4): turning on async discard [ 189.617982][ T8851] BTRFS info (device loop4): max_inline at 0 [ 189.638287][ T8851] BTRFS info (device loop4): using free space tree [ 189.836120][ T8890] loop3: detected capacity change from 0 to 512 [ 189.889946][ T8890] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.907651][ T8890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.960074][ T8890] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1041: bad orphan inode 131083 [ 190.017546][ T8890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.089099][ T8896] loop0: detected capacity change from 0 to 512 [ 190.101539][ T8851] BTRFS info (device loop4): balance: start -sconvert=raid0,usage=0..1342177280 [ 190.127401][ T8896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 190.152111][ T8851] BTRFS info (device loop4): left=0, need=98304, flags=10 [ 190.152616][ T8896] System zones: 1-12 [ 190.168704][ T8896] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1043: error while reading EA inode 32 err=-116 [ 190.191680][ T8851] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 190.195074][ T8896] EXT4-fs (loop0): Remounting filesystem read-only [ 190.204034][ T8851] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 190.211692][ T8896] EXT4-fs (loop0): 1 orphan inode deleted [ 190.225874][ T8851] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 190.232844][ T8896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.241244][ T8851] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 190.262300][ T8851] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 190.270713][ T8851] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 190.279170][ T8851] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 190.327046][ T8851] BTRFS info (device loop4): relocating block group 1048576 flags system [ 190.387476][ T8890] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 190.388012][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.528882][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.671426][ T8851] BTRFS info (device loop4): balance: ended with status: 0 [ 190.768452][ T8906] kvm: kvm [8905]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2 [ 191.128585][ T27] audit: type=1400 audit(1791820395.055:16): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=8922 comm="syz.0.1054" name="//o" offset=35 [ 191.246087][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 191.330232][ T7651] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.927023][ T8943] loop3: detected capacity change from 0 to 256 [ 191.986064][ T8943] exfat: Deprecated parameter 'utf8' [ 192.013855][ T8943] exfat: Deprecated parameter 'utf8' [ 192.019664][ T8943] exfat: Deprecated parameter 'namecase' [ 192.034757][ T8943] exfat: Deprecated parameter 'namecase' [ 192.055043][ T8943] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d) [ 192.281353][ T8938] loop0: detected capacity change from 0 to 32768 [ 192.406889][ T8938] UFO tlock:0xffffc90002869168 [ 192.426805][ T8938] MetaData crosses page boundary!! [ 192.435579][ T8938] lblock = 610061, size = 269537280 [ 192.442682][ T8938] CPU: 1 PID: 8938 Comm: syz.0.1062 Not tainted syzkaller #0 [ 192.450367][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.461513][ T8938] Call Trace: [ 192.464847][ T8938] [ 192.468327][ T8938] dump_stack_lvl+0x18c/0x250 [ 192.473571][ T8938] ? show_regs_print_info+0x20/0x20 [ 192.478810][ T8938] ? load_image+0x420/0x420 [ 192.483392][ T8938] ? folio_unlock+0x118/0x2f0 [ 192.489437][ T8938] __get_metapage+0xaac/0xfa0 [ 192.495943][ T8938] dtSearch+0x58d/0x21a0 [ 192.501019][ T8938] ? rcu_is_watching+0x15/0xb0 [ 192.506737][ T8938] jfs_lookup+0x1b1/0x420 [ 192.511380][ T8938] ? jfs_get_parent+0xb0/0xb0 [ 192.519291][ T8938] ? __lock_acquire+0x7eb0/0x7eb0 [ 192.527099][ T8938] ? __rwlock_init+0x150/0x150 [ 192.534179][ T8938] ? d_set_d_op+0x25f/0x370 [ 192.539617][ T8938] ? do_raw_spin_unlock+0x121/0x230 [ 192.546799][ T8938] ? _raw_spin_unlock+0x28/0x40 [ 192.553416][ T8938] ? d_alloc+0x1eb/0x250 [ 192.557934][ T8938] lookup_one_qstr_excl+0x112/0x250 [ 192.563475][ T8938] filename_create+0x246/0x450 [ 192.569819][ T8938] ? kern_path_create+0x50/0x50 [ 192.575471][ T8938] ? __virt_addr_valid+0x10c/0x380 [ 192.581344][ T8938] ? __virt_addr_valid+0x10c/0x380 [ 192.588752][ T8938] do_mkdirat+0xa9/0x450 [ 192.594624][ T8938] ? vfs_mkdir+0x470/0x470 [ 192.602306][ T8938] ? getname_flags+0x20a/0x500 [ 192.608273][ T8938] __x64_sys_mkdir+0x6e/0x80 [ 192.614431][ T8938] do_syscall_64+0x55/0xb0 [ 192.619240][ T8938] ? clear_bhb_loop+0x40/0x90 [ 192.625320][ T8938] ? clear_bhb_loop+0x40/0x90 [ 192.630061][ T8938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.636724][ T8938] RIP: 0033:0x7f915b79e1d9 [ 192.642067][ T8938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.668351][ T8938] RSP: 002b:00007f915c60c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 192.678432][ T8938] RAX: ffffffffffffffda RBX: 00007f915ba25fa0 RCX: 00007f915b79e1d9 [ 192.686485][ T8938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 192.696790][ T8938] RBP: 00007f915b835888 R08: 0000000000000000 R09: 0000000000000000 [ 192.706827][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.716942][ T8938] R13: 00007f915ba26038 R14: 00007f915ba25fa0 R15: 00007ffe932f4c48 [ 192.726995][ T8938] [ 192.730279][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.744608][ T8938] bread failed! [ 192.750371][ T8938] jfs_lookup: dtSearch returned -5 [ 192.811972][ T8962] netlink: 'syz.4.1073': attribute type 12 has an invalid length. [ 192.822848][ T8962] netlink: 'syz.4.1073': attribute type 29 has an invalid length. [ 192.840367][ T8962] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1073'. [ 192.866847][ T8962] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 192.882983][ T8962] netlink: 'syz.4.1073': attribute type 2 has an invalid length. [ 193.058463][ T8969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.176553][ T8969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.313293][ T8969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.502857][ T8969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.731437][ T8969] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.779267][ T8969] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.841187][ T8969] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.881839][ T8987] loop1: detected capacity change from 0 to 256 [ 193.899744][ T8969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.937815][ T8987] exFAT-fs (loop1): error, The cluster chain has a loop [ 193.950353][ T8987] exFAT-fs (loop1): Filesystem has been set read-only [ 193.997304][ T8987] exFAT-fs (loop1): failed to count the number of clusters in root [ 194.012631][ T8987] exFAT-fs (loop1): failed to recognize exfat type [ 194.453170][ T9003] loop0: detected capacity change from 0 to 1024 [ 194.473705][ T9003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.528155][ T9003] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.548989][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.555615][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.591772][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 194.624012][ T9003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.729854][ T8991] loop3: detected capacity change from 0 to 32768 [ 194.767958][ T8991] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1087 (8991) [ 194.816148][ T8991] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 194.846163][ T8991] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 194.875567][ T8991] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 194.910143][ T8991] BTRFS info (device loop3): use zstd compression, level 3 [ 194.933322][ T8991] BTRFS info (device loop3): using free space tree [ 194.984641][ T8997] loop1: detected capacity change from 0 to 32768 [ 195.077957][ T8997] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 195.159759][ T8991] BTRFS info (device loop3): enabling ssd optimizations [ 195.210698][ T8991] BTRFS info (device loop3): auto enabling async discard [ 195.243860][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 195.281994][ T8997] XFS (loop1): Ending clean mount [ 195.485403][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 195.522263][ T5841] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.570116][ T5841] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.637662][ T5841] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 195.709707][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.728438][ T5841] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 195.742194][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.792214][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.810875][ T5841] usb 5-1: config 0 descriptor?? [ 195.900686][ T5776] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 195.941520][ T5950] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 196.254054][ T5841] hid (null): report_id 49134 is invalid [ 196.279713][ T5841] hid (null): unknown global tag 0xd [ 196.303892][ T5841] hid (null): unknown global tag 0xc [ 196.328544][ T5841] hid (null): unknown global tag 0xc [ 196.345116][ T5841] hid (null): global environment stack overflow [ 196.448255][ T5841] usb 5-1: USB disconnect, device number 4 [ 197.051042][ T9065] loop0: detected capacity change from 0 to 4096 [ 197.097721][ T9068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.162690][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 197.378187][ T5818] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 197.402677][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 197.410855][ T5818] usb 4-1: Product: syz [ 197.431065][ T5818] usb 4-1: Manufacturer: syz [ 197.448671][ T5818] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 197.489209][ T9067] loop4: detected capacity change from 0 to 32768 [ 197.832075][ T23] usb 4-1: USB disconnect, device number 5 [ 198.160942][ T9088] loop0: detected capacity change from 0 to 512 [ 198.178926][ T9088] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 198.206827][ T9088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.235985][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.281055][ T9088] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 198.295360][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.301698][ T9093] loop4: detected capacity change from 0 to 256 [ 198.310995][ T9088] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 198.330239][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.347877][ T9088] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 198.362066][ T9088] EXT4-fs (loop0): 1 orphan inode deleted [ 198.370604][ T9088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.444430][ T9088] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 198.468420][ T9088] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 198.497109][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.528856][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.557498][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.601754][ T9088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1116: Block bitmap for bg 0 marked uninitialized [ 198.698787][ T10] blk_print_req_error: 118 callbacks suppressed [ 198.698809][ T10] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 198.719456][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 94246) [ 198.735781][ T10] Buffer I/O error on device sda1, logical block 94208 [ 198.747059][ T10] device offline error, dev sda, sector 762158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 198.761420][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 95269) [ 198.776771][ T10] Buffer I/O error on device sda1, logical block 95231 [ 198.784808][ T10] device offline error, dev sda, sector 766110 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 198.796180][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 95763) [ 198.808733][ T10] Buffer I/O error on device sda1, logical block 95725 [ 198.816395][ T10] Buffer I/O error on device sda1, logical block 95726 [ 198.824776][ T10] Buffer I/O error on device sda1, logical block 95727 [ 198.831684][ T10] Buffer I/O error on device sda1, logical block 95728 [ 198.835676][ T59] device offline error, dev sda, sector 745782 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 198.838753][ T10] Buffer I/O error on device sda1, logical block 95729 [ 198.857802][ T10] Buffer I/O error on device sda1, logical block 95730 [ 198.866075][ T10] Buffer I/O error on device sda1, logical block 95731 [ 198.873978][ T10] Buffer I/O error on device sda1, logical block 95732 [ 198.885841][ T59] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2031 starting block 93222) [ 198.888318][ T10] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 198.911314][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 100390) [ 198.923843][ T10] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 198.929939][ T59] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 198.934632][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 101413) [ 198.934760][ T10] device offline error, dev sda, sector 815246 op 0x1:(WRITE) flags 0x0 phys_seg 19 prio class 2 [ 198.934786][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 101905) [ 198.935705][ T10] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 7 prio class 2 [ 198.972420][ T59] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 96294) [ 198.986472][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2027 starting block 92198) [ 198.986651][ T10] device offline error, dev sda, sector 741686 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 199.033672][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2029 starting block 92710) [ 199.052265][ T1092] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 199.077891][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.081423][ T5103] Aborting journal on device sda1-8. [ 199.128014][ T5757] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 199.154192][ T10] buffer_io_error: 138 callbacks suppressed [ 199.154211][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 199.173973][ T5103] JBD2: I/O error when updating journal superblock for sda1-8. [ 199.232826][ T24] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 199.261541][ T5757] EXT4-fs (sda1): I/O error while writing superblock [ 199.272317][ T5757] EXT4-fs (sda1): Remounting filesystem read-only [ 199.493694][ T9110] loop0: detected capacity change from 0 to 512 [ 199.520557][ T9110] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 199.529388][ T9097] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 199.569594][ T9110] EXT4-fs (loop0): orphan cleanup on readonly fs [ 199.587579][ T9110] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.1124: bad orphan inode 15 [ 199.609328][ T9110] ext4_test_bit(bit=14, block=18) = 1 [ 199.615404][ T9110] is_bad_inode(inode)=0 [ 199.620636][ T9110] NEXT_ORPHAN(inode)=1023 [ 199.626410][ T9110] max_ino=32 [ 199.629829][ T9110] i_nlink=0 [ 199.642700][ T9110] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2974: inode #15: comm syz.0.1124: corrupted xattr block 19: e_value size too large [ 199.681591][ T9110] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 199.695431][ T9110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.786289][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.973685][ T1150] bond0: (slave bond_slave_0): interface is now down [ 199.982218][ T1150] bond0: (slave bond_slave_1): interface is now down [ 200.020122][ T1150] bond0: now running without any active interface! [ 200.108766][ T9122] loop0: detected capacity change from 0 to 128 [ 200.175207][ T9122] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.206730][ T9122] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.746928][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 200.850132][ T9121] loop1: detected capacity change from 0 to 32768 [ 200.862297][ T9121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1128 (9121) [ 200.911850][ T9121] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.927713][ T9121] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 200.938455][ T9121] BTRFS info (device loop1): setting nodatasum [ 200.960403][ T9121] BTRFS info (device loop1): using free space tree [ 201.128617][ T9121] BTRFS info (device loop1): enabling ssd optimizations [ 201.136570][ T9121] BTRFS info (device loop1): auto enabling async discard [ 201.190453][ T27] audit: type=1400 audit(36846131.118:17): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9150 comm="syz.3.1136" name="unknown" offset=82 [ 201.239262][ T9152] udevd[9152]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 201.250799][ T9124] loop0: detected capacity change from 0 to 32768 [ 201.331544][ T9124] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 201.553994][ T9124] XFS (loop0): Ending clean mount [ 201.669218][ T9168] udevd[9168]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 201.691076][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.750842][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 201.762291][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.803007][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.941837][ T5769] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 202.022863][ T23] usb 5-1: config 0 has no interfaces? [ 202.052880][ T23] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 202.062007][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.074442][ T23] usb 5-1: Product: syz [ 202.097638][ T23] usb 5-1: Manufacturer: syz [ 202.102721][ T23] usb 5-1: SerialNumber: syz [ 202.125916][ T23] r8152-cfgselector 5-1: config 0 descriptor?? [ 202.218093][ T9177] jffs2: notice: (9177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 202.441726][ T23] r8152-cfgselector 5-1: Unknown version 0x0000 [ 202.451534][ T23] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 203.303925][ T9195] loop1: detected capacity change from 0 to 512 [ 203.603765][ T9205] loop3: detected capacity change from 0 to 1024 [ 203.656617][ T9205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.692726][ T9213] loop0: detected capacity change from 0 to 1024 [ 203.799784][ T9216] loop4: detected capacity change from 0 to 512 [ 203.820283][ T9205] EXT4-fs error (device loop3): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.3.1153: path /301/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 203.885076][ T9216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.968076][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.086138][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.025469][ T9255] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.319928][ T9266] loop1: detected capacity change from 0 to 1024 [ 205.344997][ T9266] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.387257][ T9266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.417497][ T9266] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.463966][ T9266] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #11: comm syz.1.1180: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 205.482545][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.497067][ T9266] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1180: couldn't read orphan inode 11 (err -117) [ 205.553377][ T9266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.633450][ T9266] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1180: Invalid block bitmap block 0 in block_group 0 [ 205.653839][ T9266] Quota error (device loop1): write_blk: dquota write failed [ 205.663414][ T9266] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 205.674164][ T9266] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1180: Failed to acquire dquot type 0 [ 205.694092][ T9266] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1180: Invalid inode bitmap blk 137438953472 in block_group 0 [ 205.732323][ T1113] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm kworker/u4:8: Invalid inode table block 8589934593 in block_group 0 [ 205.756523][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.835381][ T9276] lo: Caught tx_queue_len zero misconfig [ 205.850362][ T9267] loop4: detected capacity change from 0 to 32768 [ 205.896271][ T9267] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 205.956627][ T9267] XFS (loop4): Ending clean mount [ 206.088845][ T7651] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.127558][ T9290] loop1: detected capacity change from 0 to 1024 [ 206.604090][ T9304] loop3: detected capacity change from 0 to 1024 [ 206.616508][ T9304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.647549][ T9304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.652604][ T5843] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 206.701660][ T5950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.855487][ T5843] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.864109][ T5843] usb 1-1: not running at top speed; connect to a high speed hub [ 206.877220][ T5843] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 206.888682][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.901212][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 206.914403][ T5843] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 206.923614][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.935083][ T5843] usb 1-1: config 0 descriptor?? [ 207.264171][ T9313] loop3: detected capacity change from 0 to 32768 [ 207.388226][ T9313] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.519629][ T9313] XFS (loop3): Ending clean mount [ 207.568974][ T5843] usb 1-1: string descriptor 0 read error: -71 [ 207.604082][ T5843] uclogic 0003:5543:004D.0006: failed retrieving string descriptor #200: -71 [ 207.627511][ T5843] uclogic 0003:5543:004D.0006: failed retrieving pen parameters: -71 [ 207.652359][ T5843] uclogic 0003:5543:004D.0006: failed probing pen v2 parameters: -71 [ 207.677644][ T5843] uclogic 0003:5543:004D.0006: failed probing parameters: -71 [ 207.705495][ T5843] uclogic: probe of 0003:5543:004D.0006 failed with error -71 [ 207.734818][ T5843] usb 1-1: USB disconnect, device number 11 [ 207.783866][ T5950] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.797657][ T9331] bond0: entered promiscuous mode [ 207.807011][ T9331] bond_slave_0: entered promiscuous mode [ 207.815472][ T9331] bond_slave_1: entered promiscuous mode [ 207.835659][ T9331] bond0: left promiscuous mode [ 207.840537][ T9331] bond_slave_0: left promiscuous mode [ 207.862865][ T9331] bond_slave_1: left promiscuous mode [ 208.254231][ T9342] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 208.375144][ T5777] Bluetooth: hci0: Zero size dump init pkt [ 208.724907][ T5843] kernel write not supported for file /input/event2 (pid: 5843 comm: kworker/1:6) [ 209.199069][ T9389] loop3: detected capacity change from 0 to 128 [ 209.729115][ T9391] loop4: detected capacity change from 0 to 32768 [ 209.788884][ T9391] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.992151][ T9391] XFS (loop4): Ending clean mount [ 210.020489][ T9391] XFS (loop4): Quotacheck needed: Please wait. [ 210.094792][ T9391] XFS (loop4): Quotacheck: Done. [ 210.131902][ T9425] loop0: detected capacity change from 0 to 256 [ 210.367123][ T7651] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.460017][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.530720][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 210.652909][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 210.665513][ T5840] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 210.677905][ T5840] usb 4-1: config 0 has no interface number 0 [ 210.687076][ T5840] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 210.698226][ T5840] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.715308][ T5840] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 210.725414][ T5840] usb 4-1: config 0 interface 196 has no altsetting 0 [ 210.734252][ T5840] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 210.743514][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.751522][ T5840] usb 4-1: Product: syz [ 210.755776][ T5840] usb 4-1: Manufacturer: syz [ 210.760404][ T5840] usb 4-1: SerialNumber: syz [ 210.767561][ T5840] usb 4-1: config 0 descriptor?? [ 210.774107][ T9427] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.952679][ T5843] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.144385][ T5843] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.158379][ T5843] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.168771][ T5843] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.178001][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.189704][ T9438] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 211.215328][ T5843] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 211.403453][ T5840] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 211.436130][ T5840] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 211.449844][ T5840] usb 4-1: USB disconnect, device number 6 [ 211.533827][ T5840] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 211.704640][ T5818] usb 5-1: USB disconnect, device number 6 [ 211.810507][ T9446] loop0: detected capacity change from 0 to 2048 [ 211.861585][ T9446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.924779][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.250838][ T9464] md: invalid raid superblock magic on ram1 [ 212.262648][ T9464] md: ram1 does not have a valid v0.90 superblock, not importing! [ 212.546945][ T9478] 9p: Unknown access argument 18446744073709551615: -34 [ 212.555996][ T9480] loop0: detected capacity change from 0 to 512 [ 212.571588][ T9480] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 212.616045][ T9480] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 212.756804][ T1084] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 212.781285][ T9484] loop3: detected capacity change from 0 to 4096 [ 212.828560][ T9484] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 212.891987][ T9491] loop1: detected capacity change from 0 to 128 [ 212.928180][ T9491] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 212.938648][ T9484] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 212.957341][ T9491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.966797][ T9484] ntfs3: loop3: Failed to load $Extend (-22). [ 212.998640][ T9484] ntfs3: loop3: Failed to initialize $Extend. [ 213.078283][ T9484] ntfs3: loop3: ino=0, attr_set_size [ 213.117457][ T9484] ntfs3: loop3: ino=0, attr_set_size [ 213.132415][ T9484] ntfs3: loop3: ino=0, attr_set_size [ 213.142718][ T5843] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 213.346105][ T5843] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.377787][ T5843] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.402677][ T5843] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.422066][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.450559][ T9489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.471814][ T5843] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 213.552120][ T9487] loop4: detected capacity change from 0 to 40427 [ 213.601773][ T9487] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 213.622209][ T9487] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 213.693827][ T9487] F2FS-fs (loop4): invalid crc value [ 213.982711][ T9487] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 214.002339][ T9487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.042992][ T8] usb 1-1: USB disconnect, device number 12 [ 214.105046][ T7651] syz-executor: attempt to access beyond end of device [ 214.105046][ T7651] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.145770][ T7651] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 214.511285][ T9527] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 214.880785][ T9537] binder: 9536:9537 ioctl c018620c 200000000240 returned -1 [ 214.966476][ T9543] loop1: detected capacity change from 0 to 128 [ 214.992832][ T9543] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 215.107316][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1294'. [ 215.249459][ T1084] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 215.309702][ T27] audit: type=1807 audit(36846145.238:18): func=FILE_CHECK res=0 [ 215.318550][ T9554] ima: policy update failed [ 215.332690][ T27] audit: type=1802 audit(36846145.248:19): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1296" res=0 errno=0 [ 215.394508][ T27] audit: type=1802 audit(36846145.288:20): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1296" res=0 errno=0 [ 215.773282][ T9571] loop4: detected capacity change from 0 to 256 [ 215.796830][ T9571] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.827180][ T9556] loop3: detected capacity change from 0 to 32768 [ 215.844096][ T9571] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 215.859089][ T9556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1295 (9556) [ 215.871982][ T9571] FAT-fs (loop4): Filesystem has been set read-only [ 215.898784][ T9556] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.926518][ T9556] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 215.966012][ T9556] BTRFS info (device loop3): setting nodatasum [ 215.974577][ T9556] BTRFS info (device loop3): force zlib compression, level 3 [ 215.984997][ T7651] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 215.990175][ T9556] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 216.032583][ T9556] BTRFS info (device loop3): use lzo compression, level 0 [ 216.039787][ T9556] BTRFS info (device loop3): turning on flush-on-commit [ 216.059370][ T9556] BTRFS info (device loop3): enabling auto defrag [ 216.073715][ T9556] BTRFS info (device loop3): max_inline at 4096 [ 216.094133][ T9556] BTRFS info (device loop3): using free space tree [ 216.127415][ T9580] udevd[9580]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 216.216102][ T9556] BTRFS info (device loop3): enabling ssd optimizations [ 216.381882][ T9605] loop0: detected capacity change from 0 to 64 [ 216.424692][ T5950] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.600201][ T9610] ip6tnl0: Caught tx_queue_len zero misconfig [ 216.608691][ T9610] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1315'. [ 216.956482][ T9619] [ 216.958878][ T9619] ====================================================== [ 216.965899][ T9619] WARNING: possible circular locking dependency detected [ 216.972915][ T9619] syzkaller #0 Not tainted [ 216.977313][ T9619] ------------------------------------------------------ [ 216.984330][ T9619] syz.1.1318/9619 is trying to acquire lock: [ 216.990319][ T9619] ffffffff8dc648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 216.999410][ T9619] [ 216.999410][ T9619] but task is already holding lock: [ 217.006794][ T9619] ffff888020c9f350 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c62/0x2580 [ 217.017278][ T9619] [ 217.017278][ T9619] which lock already depends on the new lock. [ 217.017278][ T9619] [ 217.027697][ T9619] [ 217.027697][ T9619] the existing dependency chain (in reverse order) is: [ 217.036731][ T9619] [ 217.036731][ T9619] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 217.045104][ T9619] down_write+0x97/0x200 [ 217.049895][ T9619] set_blocksize+0x247/0x4b0 [ 217.055025][ T9619] sb_min_blocksize+0xbe/0x190 [ 217.060333][ T9619] ext4_fill_super+0x6e7/0x6870 [ 217.065738][ T9619] get_tree_bdev+0x3e5/0x520 [ 217.070869][ T9619] vfs_get_tree+0x8c/0x280 [ 217.075822][ T9619] do_new_mount+0x24a/0xa40 [ 217.080865][ T9619] init_mount+0xde/0x130 [ 217.085686][ T9619] do_mount_root+0x97/0x230 [ 217.090750][ T9619] mount_root_generic+0x1a6/0x3e0 [ 217.096312][ T9619] prepare_namespace+0xc2/0x100 [ 217.101702][ T9619] kernel_init_freeable+0x41a/0x560 [ 217.102589][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.107421][ T9619] kernel_init+0x1d/0x1c0 [ 217.107448][ T9619] ret_from_fork+0x48/0x80 [ 217.124803][ T9619] ret_from_fork_asm+0x11/0x20 [ 217.130122][ T9619] [ 217.130122][ T9619] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 217.138761][ T9619] down_write+0x97/0x200 [ 217.143555][ T9619] set_blocksize+0x1ff/0x4b0 [ 217.148694][ T9619] sb_min_blocksize+0xbe/0x190 [ 217.153993][ T9619] ext4_fill_super+0x6e7/0x6870 [ 217.157115][ T9612] loop4: detected capacity change from 0 to 32768 [ 217.159370][ T9619] get_tree_bdev+0x3e5/0x520 [ 217.170910][ T9619] vfs_get_tree+0x8c/0x280 [ 217.175875][ T9619] do_new_mount+0x24a/0xa40 [ 217.180920][ T9619] init_mount+0xde/0x130 [ 217.185711][ T9619] do_mount_root+0x97/0x230 [ 217.190762][ T9619] mount_root_generic+0x1a6/0x3e0 [ 217.195936][ T9612] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1317 (9612) [ 217.196319][ T9619] prepare_namespace+0xc2/0x100 [ 217.213848][ T9619] kernel_init_freeable+0x41a/0x560 [ 217.219592][ T9619] kernel_init+0x1d/0x1c0 [ 217.224470][ T9619] ret_from_fork+0x48/0x80 [ 217.229426][ T9619] ret_from_fork_asm+0x11/0x20 [ 217.234729][ T9619] [ 217.234729][ T9619] -> #2 (&type->s_umount_key#32){++++}-{3:3}: [ 217.242967][ T9619] down_read+0x46/0x2e0 [ 217.247632][ T9619] super_lock+0x189/0x390 [ 217.252475][ T9619] fs_bdev_mark_dead+0xad/0x1f0 [ 217.257847][ T9619] bdev_mark_dead+0x83/0x1a0 [ 217.262947][ T9619] blk_report_disk_dead+0x21c/0x3e0 [ 217.268655][ T9619] del_gendisk+0x2cb/0x8f0 [ 217.273582][ T9619] sd_remove+0x8d/0x100 [ 217.278243][ T9619] device_release_driver_internal+0x458/0x6f0 [ 217.284816][ T9619] bus_remove_device+0x43b/0x520 [ 217.290261][ T9619] device_del+0x51f/0x910 [ 217.295097][ T9619] __scsi_remove_device+0x1a2/0x390 [ 217.300802][ T9619] scsi_forget_host+0xd0/0x110 [ 217.306078][ T9619] scsi_remove_host+0x1b3/0x730 [ 217.311438][ T9619] virtscsi_remove+0x130/0x1a0 [ 217.316743][ T9619] virtio_dev_remove+0x96/0x1a0 [ 217.322101][ T9619] device_release_driver_internal+0x408/0x6f0 [ 217.328765][ T9619] bus_remove_device+0x43b/0x520 [ 217.334223][ T9619] device_del+0x51f/0x910 [ 217.339069][ T9619] device_unregister+0x20/0xc0 [ 217.344344][ T9619] unregister_virtio_device+0x37/0x60 [ 217.350224][ T9619] virtio_pci_remove+0x7f/0xf0 [ 217.352660][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 217.355487][ T9619] pci_device_remove+0x93/0x1b0 [ 217.355512][ T9619] device_release_driver_internal+0x408/0x6f0 [ 217.362603][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.365964][ T9619] pci_stop_bus_device+0x108/0x140 [ 217.374571][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.383362][ T9619] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 217.383395][ T9619] remove_store+0xe6/0x150 [ 217.383409][ T9619] kernfs_fop_write_iter+0x3a4/0x520 [ 217.383424][ T9619] vfs_write+0x474/0x9a0 [ 217.383445][ T9619] ksys_write+0x151/0x260 [ 217.391473][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.398764][ T9619] do_syscall_64+0x55/0xb0 [ 217.398787][ T9619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.398813][ T9619] [ 217.398813][ T9619] -> #1 (&bdev->bd_holder_lock [ 217.406385][ T8] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 217.410739][ T9619] ){+.+.}-{3:3} [ 217.416948][ T8] usb 1-1: Product: syz [ 217.421267][ T9619] : [ 217.421273][ T9619] __mutex_lock+0x135/0xc80 [ 217.426881][ T8] usb 1-1: Manufacturer: syz [ 217.435100][ T9619] bd_finish_claiming+0x229/0x3f0 [ 217.435125][ T9619] blkdev_get_by_dev+0x469/0x610 [ 217.458822][ T8] hub 1-1:4.0: USB hub found [ 217.461682][ T9619] bdev_open_by_dev+0x77/0x100 [ 217.461707][ T9619] setup_bdev_super+0x59/0x660 [ 217.461725][ T9619] mount_bdev+0x1ce/0x2c0 [ 217.512310][ T9619] legacy_get_tree+0xea/0x180 [ 217.517536][ T9619] vfs_get_tree+0x8c/0x280 [ 217.522467][ T9619] do_new_mount+0x24a/0xa40 [ 217.527503][ T9619] init_mount+0xde/0x130 [ 217.532281][ T9619] do_mount_root+0x97/0x230 [ 217.537304][ T9619] mount_root_generic+0x1a6/0x3e0 [ 217.542865][ T9619] prepare_namespace+0xc2/0x100 [ 217.548260][ T9619] kernel_init_freeable+0x41a/0x560 [ 217.553997][ T9619] kernel_init+0x1d/0x1c0 [ 217.558881][ T9619] ret_from_fork+0x48/0x80 [ 217.563847][ T9619] ret_from_fork_asm+0x11/0x20 [ 217.569155][ T9619] [ 217.569155][ T9619] -> #0 (bdev_lock){+.+.}-{3:3}: [ 217.576310][ T9619] __lock_acquire+0x3a07/0x7eb0 [ 217.581715][ T9619] lock_acquire+0x19e/0x420 [ 217.586744][ T9619] __mutex_lock+0x135/0xc80 [ 217.591785][ T9619] bd_prepare_to_claim+0x1d9/0x4a0 [ 217.597431][ T9619] truncate_bdev_range+0x4e/0x260 [ 217.602980][ T9619] blkdev_common_ioctl+0x1c7a/0x2580 [ 217.608820][ T9619] blkdev_ioctl+0x512/0x730 [ 217.613854][ T9619] __se_sys_ioctl+0xfd/0x170 [ 217.618971][ T9619] do_syscall_64+0x55/0xb0 [ 217.623919][ T9619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.630331][ T9619] [ 217.630331][ T9619] other info that might help us debug this: [ 217.630331][ T9619] [ 217.640557][ T9619] Chain exists of: [ 217.640557][ T9619] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 217.640557][ T9619] [ 217.654725][ T9619] Possible unsafe locking scenario: [ 217.654725][ T9619] [ 217.662178][ T9619] CPU0 CPU1 [ 217.666190][ T8] hub 1-1:4.0: 2 ports detected [ 217.667535][ T9619] ---- ---- [ 217.667542][ T9619] lock(mapping.invalidate_lock); [ 217.682902][ T9619] lock(&sb->s_type->i_mutex_key#8); [ 217.690809][ T9619] lock(mapping.invalidate_lock); [ 217.698429][ T9619] lock(bdev_lock); [ 217.702318][ T9619] [ 217.702318][ T9619] *** DEADLOCK *** [ 217.702318][ T9619] [ 217.710476][ T9619] 2 locks held by syz.1.1318/9619: [ 217.715574][ T9619] #0: ffff888020c9f1c0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1c28/0x2580 [ 217.726835][ T9619] #1: ffff888020c9f350 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c62/0x2580 [ 217.737736][ T9619] [ 217.737736][ T9619] stack backtrace: [ 217.743627][ T9619] CPU: 1 PID: 9619 Comm: syz.1.1318 Not tainted syzkaller #0 [ 217.751015][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.761067][ T9619] Call Trace: [ 217.764341][ T9619] [ 217.767275][ T9619] dump_stack_lvl+0x18c/0x250 [ 217.771952][ T9619] ? load_image+0x420/0x420 [ 217.776464][ T9619] ? show_regs_print_info+0x20/0x20 [ 217.781673][ T9619] ? print_circular_bug+0x12b/0x1a0 [ 217.786890][ T9619] check_noncircular+0x2fc/0x400 [ 217.791886][ T9619] ? print_deadlock_bug+0x5d0/0x5d0 [ 217.797099][ T9619] ? lockdep_lock+0xf5/0x230 [ 217.801705][ T9619] ? _find_first_zero_bit+0xd6/0x100 [ 217.807099][ T9619] __lock_acquire+0x3a07/0x7eb0 [ 217.811972][ T9619] ? finish_task_switch+0x323/0x8f0 [ 217.817193][ T9619] ? verify_lock_unused+0x140/0x140 [ 217.822383][ T9619] ? __schedule+0x15b6/0x4660 [ 217.827056][ T9619] ? lockdep_lock+0x230/0x230 [ 217.831730][ T9619] lock_acquire+0x19e/0x420 [ 217.836243][ T9619] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 217.841528][ T9619] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 217.847518][ T9619] ? __might_sleep+0xe0/0xe0 [ 217.852114][ T9619] ? read_lock_is_recursive+0x20/0x20 [ 217.857489][ T9619] ? mark_lock+0x94/0x320 [ 217.861810][ T9619] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 217.867796][ T9619] __mutex_lock+0x135/0xc80 [ 217.872306][ T9619] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 217.877594][ T9619] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.883747][ T9619] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 217.889050][ T9619] ? mutex_lock_nested+0x20/0x20 [ 217.893995][ T9619] ? lock_acquire+0x208/0x420 [ 217.898677][ T9619] bd_prepare_to_claim+0x1d9/0x4a0 [ 217.902852][ T5840] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.903781][ T9619] ? invalidate_bdev+0xc0/0xc0 [ 217.903810][ T9619] ? truncate_bdev_range+0x260/0x260 [ 217.921295][ T9619] ? __might_fault+0xaa/0x120 [ 217.925975][ T9619] ? down_write+0x16e/0x200 [ 217.930475][ T9619] ? down_read_killable+0x340/0x340 [ 217.935688][ T9619] ? __might_fault+0xaa/0x120 [ 217.940374][ T9619] truncate_bdev_range+0x4e/0x260 [ 217.945407][ T9619] blkdev_common_ioctl+0x1c7a/0x2580 [ 217.950752][ T9619] ? blkdev_bszset+0x1f0/0x1f0 [ 217.955534][ T9619] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 217.961030][ T9619] blkdev_ioctl+0x512/0x730 [ 217.965559][ T9619] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 217.971025][ T9619] ? bpf_lsm_file_ioctl+0x9/0x10 [ 217.975971][ T9619] ? security_file_ioctl+0x80/0xa0 [ 217.981091][ T9619] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 217.986554][ T9619] __se_sys_ioctl+0xfd/0x170 [ 217.991164][ T9619] do_syscall_64+0x55/0xb0 [ 217.995587][ T9619] ? clear_bhb_loop+0x40/0x90 [ 218.000267][ T9619] ? clear_bhb_loop+0x40/0x90 [ 218.004944][ T9619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.010857][ T9619] RIP: 0033:0x7f037bb9e1d9 [ 218.015270][ T9619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.034881][ T9619] RSP: 002b:00007f0379dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.043297][ T9619] RAX: ffffffffffffffda RBX: 00007f037be26090 RCX: 00007f037bb9e1d9 [ 218.051269][ T9619] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 218.059268][ T9619] RBP: 00007f037bc35888 R08: 0000000000000000 R09: 0000000000000000 [ 218.067282][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.075258][ T9619] R13: 00007f037be26128 R14: 00007f037be26090 R15: 00007ffdd5071028 [ 218.079517][ T8] hub 1-1:4.0: set hub depth failed [ 218.083234][ T9619] [ 218.083326][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.127511][ T9612] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.142553][ T1150] wlan1: Trigger new scan to find an IBSS to join [ 218.152715][ T9612] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 218.159782][ T8] usb 1-1: USB disconnect, device number 13 [ 218.162266][ T9612] BTRFS info (device loop4): setting nodatacow, compression disabled [ 218.175675][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.187134][ T9612] BTRFS info (device loop4): disabling tree log [ 218.204636][ T9625] udevd[9625]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 218.214873][ T9612] BTRFS info (device loop4): max_inline at 0 [ 218.233790][ T5840] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 218.246187][ T9612] BTRFS info (device loop4): using free space tree [ 218.252563][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.262075][ T5840] usb 4-1: Product: syz [ 218.271340][ T5840] usb 4-1: Manufacturer: syz [ 218.298694][ T5840] usb 4-1: selecting invalid altsetting 1 [ 218.318977][ T5840] dvb_ttusb_budget: ttusb_init_controller: error [ 218.337971][ T9612] BTRFS info (device loop4): auto enabling async discard [ 218.345887][ T5840] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 218.379941][ T5840] DVB: Unable to find symbol cx22700_attach() [ 218.390786][ T5840] DVB: Unable to find symbol tda10046_attach() [ 218.398028][ T5840] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 218.539062][ T9624] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 218.547201][ T9624] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 218.556452][ T7651] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.567471][ T5843] usb 4-1: USB disconnect, device number 7 [ 221.102873][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 224.142651][ T1150] wlan1: Trigger new scan to find an IBSS to join [ 225.043719][ T1092] wlan1: Creating new IBSS network, BSSID de:b9:3b:ff:97:a4