last executing test programs: 5.308614787s ago: executing program 0 (id=904): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000740)) 5.092070744s ago: executing program 3 (id=907): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.837708781s ago: executing program 0 (id=908): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@part={'part', 0x3d, 0xb8}}, {@nobarrier}, {@gid}, {@gid}, {@gid}]}, 0x44, 0x70c, &(0x7f00000027c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.227894379s ago: executing program 0 (id=913): io_setup(0x2, &(0x7f0000000100)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000040)={0x3, 0x0, 0x0, 0x8, 0x700, r1, 0x0, 0x0, 0x100000000}]) 3.799165394s ago: executing program 3 (id=917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYBLOB="080001"], 0x90}}, 0x0) 3.772636509s ago: executing program 4 (id=918): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x15) write(r0, 0x0, 0x0) 3.463863494s ago: executing program 0 (id=920): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.432139274s ago: executing program 1 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="192d0400454402000c002b80050002000c00000008000d"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.298988373s ago: executing program 4 (id=923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 3.171082368s ago: executing program 3 (id=924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, r1, 0x1, 0xfffffffb, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}}, 0x0) 2.978382226s ago: executing program 1 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x2200090, &(0x7f00000004c0)={[{@autodefrag}, {@datasum}, {@ssd_spread}, {@barrier}, {@discard}, {@space_cache_v1}, {@usebackuproot}, {@space_cache_v2}]}, 0x1, 0x5108, &(0x7f000000a240)="$eJzs3U+IVWUfB/Dnzp1xRgXnvsILtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Ya957z3Ln3Od5z74wzjejnIzPnPOd3nuc893oW93v1nBMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghPDiH58fLaufvTl9/uJMfc/h7TPXDk5vPBdCpb29ktd373ju1bd27n5pInaYfSVb1mr9hsy6Xsoaa3o2tvr1/rwRQhhLBqjmy2fXF0btXt1fHLDUrSv7Tmw9UN9y6lizeuPqhTPFl07LxGpPYLXk59XlhXOp3v49kuzRaXedepWeUzTrn55w/8mLAAAWZarRXnQ+juYfcTvtQ2k9adeTdjNpx08Ize7GUmTjruk3z81pfZXmWc+iwnjfeSb1/P3vtBtp/6SdRI1FzLN31zzSTPSb51xSX615AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxNHn1n9OGy+tmb0+cvztT3HN4+c+3g9MZzIdTa2ytZubLug2P1v7/bcfLwT9u+PnX5hcereb+4HO3aOfweV56cDOHNrsrlOOyVDSE0egvtZviqWHi7vfJ8LAAAAHAveaD9e6TTzuLgWE+70k6TlfafKAuLt67sO7H1QH3LqWPN6o2rF84sfbxGn/Hqtx2v064t/FS6gnGMv+l4C/W46/7COOXSEdM8/8SlqX/K+hfyf608/8d3Tv4HAADgTsj/6TjlBuX/71//89Oy/oX8v7nnkIX8H2cc8/9IWFr+BwAAgLvZSuf/emGccoPy//jLY9+U9S/k/6nh8v9o97Tjxt/ihPdOhjA1aOoAAABAH/Hf3Re+Woh5PfvmIM3rTz925GLZeIX8Xx8u/48t66sCAAAA7sTxL3c9UlYv5P/GcPl/fEVnDQAAACzGux9NfFhWL+T/2eHy/7p8mV/5kHX6Of4vhKOTIUy0Vuaywi+h+UynAAAAACyTmNP/+mzPj2X7FfL/XPn9/+OdDuL1/z33/ytc/99VyO7695QbAwAAAHA/Kl7PH2+Pnz25oN/z94e9/v/BtUdeKzt+If8fGi7/V7uXy/n8PwAAAFiClX/+39plvf//rsI45Qbd////H7/3a1n/Qv5vDpf/43J998s7Xalk78/7kyFsaq3kdxP8Nh5ub1KYH+sqtDWSHjtjj7wwP95VaJtLemybDOGh1sqhpPC/WGgmhesb8sLxpHAuL8S/p07hZOyRnyin45n2xYZ8umnhh1jIL7CYj1dQrO9cEpH0uNGvR6tw2x4XOgcHAAC4r8TwnKe3sd5mSKPsfGXQDusG7TAyaIfqoB1Gkx3SHfttD7O9hbi9eX7L4p7/f3y4/B/fijXZot/1/yFe/58/17Bz/f9sLNSSwnwsNNI7BjTiMbKw+0k8Rq2R97i+qVMAAACAe1r8XqC6yvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l717jZGrug8AfvY5+/J6IalCaJRskhrHTbxe2+ShliprStWINM26oUFVlGJjr8niBTu2KTEKkbGJaISgtKFKPhRhFEU1H6BWICIpIFykOELlEVEVBRAotIYolJSSRKQJUqhm7z2zd87defixxkt/P8k7Z+Z/nncennPvnXMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/+HQl6/862bxh35z3lPPXjhx6d51F7509XmnPxbC5OzjHVm4Y+C6WyZ+dse5d+69d82tdx85//29ebk8HgarfzrzO9fGWo8sCeGejhC608DKoSzQk98fivW9YyiE08JcoFZiaiArkTYcvtcfwv4wF6hV9d3+EIYKgQsef/CBG6qJm/tDWBZCqKRtPFPJ2uhPA2f1ZoGBNLCtOwv88vVMLfCdziwAxy2+GWov+oOT9RlG5i/X4PXXc8I69sZKh9cVEyON8/103QJ3qqA3fWDyuJ62UnUsiNLb45B32yJ4t5W2802etuIXqfwbyutzoUro3Dy1ZeMVM7viI51hbKyrUU0L9Dw/+coXNx1NetG8DmMHRk7I6/DGR5fd0bXiE4/cvXLZCwc+sO/F4+3mDwubtJheaJWQv+YWzfMYTfg8WQRvv9K3pFFfukIIWz73O59sFi/N/0eaz//jyznedtbljrW+NpzNzeMjQzHx8nA2NwcAAIBFYzHsNd02dv9HmtVXmv+Ptnf8Px7yzyfz2WgPhTAxm9i3NIQzZh/PArfH5i5eGsK7Z1OT9YF1SeBQCG+fTayoVZWU6IslRpPAj4fzwEQSOBwDk0ngmzFwUxK4NgYOJoFNMXAoCZwbA2G6fhy/O5yPo+1AfwxsyDbiwXgWws+HY2vJtnq6VhUAAMAJks8Oe+rvFs51ON4McXp5sL9VhngGdsMMlaSGdAZbm1Y1rKG7VQ2drWqojXtP8+GXau5oVXPpNIyO+gy3/OKvPhWaKM3/x5vP/yvzdKSjdPw/hPWzf2PuzjwyU4tvmKzLAAAAAByHwf997hvN4qX5/0R75//HfSJdhczh4bgbYuvSEMbrA1m1v18OZEe9B/MAAAAALAa14/G1Y+HT+W12inY6ny7nnzzK/PHA/8S8+XsP3behWX9L8//J9s7/H6i/zTpxOPbiq0tD6CsEvh97WQ3MGo2BH320PpCP/3DcANfHqvITE2pVXR9LbIiB8SSwv1GJH9RKnFEfyJ+sWuP7auOYzksUAgAAAHDSxd0B8bh8PP//Pb9ec2WzcqX5/4ajO/9/dh5cOr1/ZjCEVd0hdKU/DHh4IFsYMAaGOvLE/QNZXV1pVdcMhHBOdWBpVc/l6/93p2sMPt6fVRUDZ7znwCtnVRPf6A9hVTHwxGdu+2A1sSsJ1Br/8/4Q3lUdbdr4t/uyxnvSxr/WF8I7C4FaVRf3hVBtrDet6sFKfh2DtKp/qoTwlkKgVtWHKiHsDgAsUvG/0s3FB3fuvmrrxpmZqR0LmIj78PvDlumZqbFN22Y2Vxr0aXPS57pljK4pj6ndK988nS9R9Om71g+1k679TnC82Fa+H7904mB+P34X6pkd55qeurtr0yG/773lJkLhm1SjIXcu8JAHipXMPYml+mP+3jAY+q7YObVj7Asbd+3asTr72272NdnfeJgp21ar0201MF/f2nh5NFwtK3Gs22p5sZJVuy7bvmrn7qtWTl+28ZKpS6YuX/2hNeNnj68d//DZq6qjGs/+thjq8vmqTob6+m1tjusEDvXM7kIlJ+NTQ0JCYrEltg0ub/p/cmn+v735/D9+6sRP/nx9hkbH/0fiYf7s8bnD/BtiYH+7x/9HGh3Nr50YMJoE9sTAHof5AQAAeHOIk/y4NzPulf7Jim+/0Kxcaf6/p73f/5+g9f9rS9ef32iZ/xWxxHij9f/TZf5r6//vabT+f7rMf239//1vwPr/V9QCySb5ufX/AQCAN4OTt/5/y+X90wsElDK0XN4/vUBAKUPLZfzbvUDAUa///8x//MV/hyZK8/+b2pv/W7gfAAAATh1f+pMrf6tZvDT/39/e/P/kr/8XGp3/P9ooMNloYUDr/wEAALBINVr/b+S6gYuqt//VN3+50vz/YHvz/3jaRWdd7ljra8PZmnYhXdPu5eHaTwYAAABgcegMY2M9beatWxl13bG3+WS+FGizdNFzf3Tk6M7/P9Te/L/udxk3Prrsjq4Vn3jktbtXLnvhwAf2vTh3/B8AAABYOO3ulwAAAAAAAAAAAAAAAN54z/373rXN4qXf/4f1s483+v1/vO5f/H3BW+tyx1pbr/+X37/g43funl2y8OHhEN5bDGzdu/W0kF+bf3kx8MBnV7ytmtiblrjv2XOfryYuSgMfW3n6q9XEOUlgQ1wk8e1pIF5V8dUlSSAur/hvaSBuj4NpoDcPfGVJNo6OdFv9ZCjbVh3ptnpqKISlhUBtW90zlLXRkQ7w5iRQG+Dn00Ac4J/mgc60V3cOZr2KgaFY9NbBrFcAAJyy4rfAnrBlemZqPH6Fj7dndtffRnVLll1Trrajzeafzpcm+/Rd64faSXel30XnrjXeEyrVIawufV0tZumYHeWJqaXFpntrgyG3Wu2ts0G51NFuut7GI+rPRjS2advM5p6WA1/bOsua7pZZVpcmO8UsnbObtI1a2uhLGyNqc9u00eV4vzOMjXUluX4vBkdCnVaviHZ/r19c56/Rq6CY5/Ij+37ZrL7S/H+kvfl/pTiuV/OLAeyJV9b7m6WW+QcAAICF9ZV1v/p6/Pep6x56olne0vx/tL35f9yDlR8KzvZ2HIrX/9+3NITZS+uPZIHbY3MXLw3h3bOpyVgiu6D++bHEeBa4Pe4wWRFLbJisr6ovBg4mgR8P54FDSeBwDOR7KQ6EfFfO3w6H8MHZ1Pr6EttjiZEk8MkYGE0CYzEwngSWxMBEEnhpSR6YTAL/GgNhun5b3bUk31YAAABHI59n9dTfDek872B3qwwdrTIMtMrQ2SpDpVWGRqOI978VM/QkJ690FDL1pLX2J7WUMsSL4R91v0oZwg/qc6YFS03H8w9q5xt01Ge49yPdldBEaf4/3t78f6D+Nmv9cJz/z13/Lwt8P3bvq/HU8dEY+NFH6wP5joHDcbJ7fa2qybxEPmm/PpaYiIHRJLA9BiaSwIb1eWD/2+oD+Uy71vi+WuPTeYlCAAAAAE66uIMg7qaJ8/9bd355sFm50vx/or35f2xvsNjYtbHWI0tCuKdjrje1wMqhLBD3YwzFn8e/YyiE0wo7OGolpgayEr1Jw+F7/dkv1HvTqr7bn/34IN6/4PEHH7ihmri5P4Rlhb0vtTaeqWRt9KeBs3qzwEAa2NadBeKen1rgO51ZAI5bba9gfEHlp7rUjMxfrsHr781yTdB0eKV9oPPkm+83VwultMM136dac3RPW9P9t5wwpbfHIe+2xfhuG/FuK36Ryr+hvD4XqoTOzVNbNl4xsys+Uvwla8kCPc/FX6m2kz4Br8M9x97b1ippB8aTj4/x+cvN/zrsiNXd+OiyO7pWfOKRu1cue+HAB/a92HY3Gog/FH7w6n8Z+mFh8y60Sshfc4vu82TS58li/G9g1NMWQlj/0teubxYvzf8n25v/dye3s34VN+bOpSG8r7BxH46b/w+XZp+DhUD2KfmWciA75P6fww0/OQEAAOBEq+3uqO0vmM5vsxPC03lyOf/kUeaP+ysm5s3foJulPZwDf/nZZc3GVZr/b2g+/+9LunnqHP//+xhw/J83B8f/53Wq74ruSx/Yc1y7okvVsSAc/5/Xqf5uc/x/Xo7/O/4/H8f/W3D8f16n+tNW+pa03ZeuEMILf3D/U83ipfn/9vbm/9b/m3/Rvtr6fxsarf+3vdH6f3us/wcAACyoBgvNpfO80up9pQzp6n2lDC0XCGy5xKD1/456/b/nz3zm16GJ0vx/T3vz//hyGCy2vljW/xtd36Cqm2Jgu4UBAQAAOBU12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAG+vev/ufzc3iD/3mvKeevXDi0r3rLnzp6vNOfyyE6dnHO7Jwx8B1t0z87I5z79x775pb7z5y/vsrebme/Pa363LHWl8bDmF/4ZGhmHh5uHpnLnDBx+/c3V1NPDwcwnuLga17t55WTXxzOITlxcADn13xtmpib1rivmfPfb6auCgNfGzl6a9WE+fkgY60u/+wJOtuR9rdG5aEsLQQqHX30iX1VdXa+OM80Jm28Y9DWRsxMBSLfn0oayMGZmKJ6b4QVnWH0JVW9VAlq6orreqfK1lVXWlVX6qEcE4IoTut6tnerKrudOSP9WZVxcAZ7znwylnVxP7eEFYVA0985rYPVhOfTwK1xv+sN4R3VV8yaePf6ska70kbv7knhHeGEHrTEr/ozkr0piWe6w7hLYVArfHPdYewO/CmED986j7Rdu6+auvGmZmpHQuY6M3b6g9bpmemxjZtm9lcSfrUSEch/fo1xz72p1/54qbq7afvWj/UTro7L9cz2+U1PXV3157qvY/9GihWMvd8lOqP+XvDYOi7YufUjrEvbNy1a8fq7G+72ddkf7vyaLatVi+WbbW8WMmqXZdtX7Vz91Urpy/beMnUJVOXr/7QmvGzx9eOf/jsVdVRjWd/T8RQbzv5Qz2zu1DJyfgAkJCQWGyJzrpPt/FT/YO89EV/rqM9oTL7AV2aVhSzdMyO8kQMet0xjvhYvqe0HNHq0sShlGXNPFmuqc+ytjSZmKulP8sy+72uNDksNtY5u0nj/c4wNtbVaDuM1N8tbt6fHsfmfTLfdO2mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//1C+JTo=") 2.978259619s ago: executing program 5 (id=927): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.917544145s ago: executing program 4 (id=928): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.790556745s ago: executing program 3 (id=929): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.592394111s ago: executing program 2 (id=930): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fusectl\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, 0x0) 2.509277354s ago: executing program 5 (id=931): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) 2.323937336s ago: executing program 2 (id=932): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) 2.111877379s ago: executing program 5 (id=933): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc9", 0x2}], 0x1) 1.935009254s ago: executing program 4 (id=934): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000040), 0x4}, 0x4000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 1.840441748s ago: executing program 2 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) 1.72598401s ago: executing program 1 (id=936): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x200000c, 0x2000001, 0x200ffff, 0x0, 0x9, "0200", 0xc, 0x5}) ioctl$TCXONC(r0, 0x540a, 0x3) 1.69848024s ago: executing program 5 (id=937): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") 1.407384181s ago: executing program 2 (id=938): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x20) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000300)) 1.398548912s ago: executing program 1 (id=939): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.087844735s ago: executing program 4 (id=940): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") 1.003376931s ago: executing program 2 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 969.037198ms ago: executing program 1 (id=942): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000180)="27031c0024001400020000000000005e3b2509b1507da32b76be75564abbf5507fce4ffe5949b3b7179d710600000000000098870e7c89fd5644a7985ddbc01443011faaa43756c888fe6ab7e1e457eaaea85ecdb7250281d8c2053dd544", 0x5e}], 0x1}, 0x24000810) 905.688424ms ago: executing program 0 (id=943): r0 = socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x18000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x9}, 0xff}) 831.20435ms ago: executing program 5 (id=944): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 634.517004ms ago: executing program 1 (id=945): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "8daf"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) 576.018862ms ago: executing program 0 (id=946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x1000012, &(0x7f00000003c0)=ANY=[], 0x0, 0x314, &(0x7f0000000740)="$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") 426.087373ms ago: executing program 4 (id=947): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file7\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x308, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xc34) 309.998722ms ago: executing program 3 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0xfffffffc, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 248.333722ms ago: executing program 5 (id=949): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setresuid(0x0, 0xee01, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 237.792281ms ago: executing program 2 (id=950): r0 = timerfd_create(0x7, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 0s ago: executing program 3 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) sigaltstack(0x0, 0x0) kernel console output (not intermixed with test programs): EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.188: couldn't read orphan inode 15 (err -117) [ 141.248103][ T6513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.308853][ T6526] loop3: detected capacity change from 0 to 64 [ 141.415415][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.849670][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.198'. [ 141.990302][ T6503] loop5: detected capacity change from 0 to 32768 [ 142.270959][ T6543] mmap: syz.3.202 (6543) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.352183][ T6546] loop2: detected capacity change from 0 to 512 [ 142.377154][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.383884][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.392021][ T6546] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.392198][ T6548] loop0: detected capacity change from 0 to 256 [ 142.495748][ T6546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.551021][ T6546] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.203: bad orphan inode 131083 [ 142.616420][ T6546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.616660][ T6548] FAT-fs (loop0): Directory bread(block 64) failed [ 142.724761][ T6548] FAT-fs (loop0): Directory bread(block 65) failed [ 142.777132][ T6548] FAT-fs (loop0): Directory bread(block 66) failed [ 142.840625][ T6548] FAT-fs (loop0): Directory bread(block 67) failed [ 142.847309][ T6548] FAT-fs (loop0): Directory bread(block 68) failed [ 142.897357][ T6548] FAT-fs (loop0): Directory bread(block 69) failed [ 142.946386][ T6548] FAT-fs (loop0): Directory bread(block 70) failed [ 142.969293][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.976715][ T6548] FAT-fs (loop0): Directory bread(block 71) failed [ 143.034922][ T6548] FAT-fs (loop0): Directory bread(block 72) failed [ 143.047186][ T6548] FAT-fs (loop0): Directory bread(block 73) failed [ 143.205546][ T6562] loop1: detected capacity change from 0 to 128 [ 143.214677][ T6560] loop5: detected capacity change from 0 to 1024 [ 143.346945][ T6562] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.490772][ T6562] hpfs: filesystem error: improperly stopped [ 143.527815][ T6562] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.554199][ T1144] hfsplus: b-tree write err: -5, ino 4 [ 143.556867][ T6534] loop4: detected capacity change from 0 to 32768 [ 143.571415][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.211'. [ 143.603156][ T6562] hpfs: You really don't want any checks? You are crazy... [ 143.647865][ T6562] hpfs: hpfs_map_sector(): read error [ 143.668509][ T6562] hpfs: code page support is disabled [ 143.691966][ T6562] hpfs: hpfs_map_4sectors(): unaligned read [ 143.710677][ T6562] hpfs: hpfs_map_4sectors(): unaligned read [ 143.758070][ T6534] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.767573][ T6562] hpfs: filesystem error: unable to find root dir [ 144.031723][ T6534] XFS (loop4): Ending clean mount [ 144.256710][ T6534] XFS (loop4): User initiated shutdown received. [ 144.288710][ T6534] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xf5/0x190 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 144.376875][ T6534] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 144.450638][ T5963] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 144.610274][ T5870] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.635203][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.651806][ T5963] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 144.705443][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.762654][ T5963] usb 2-1: config 0 descriptor?? [ 145.057254][ T6607] loop0: detected capacity change from 0 to 1024 [ 145.096825][ T6607] EXT4-fs: Ignoring removed orlov option [ 145.201658][ T6607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.226275][ T5963] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 145.310581][ T5963] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 145.344121][ T6611] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 145.350819][ T6611] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 145.388908][ T5963] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 145.491491][ T5963] usb 2-1: USB disconnect, device number 6 [ 145.594730][ T5963] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 145.626604][ T6617] loop2: detected capacity change from 0 to 2048 [ 145.725050][ T6617] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 145.735193][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.776862][ T6617] UDF-fs: Scanning with blocksize 512 failed [ 145.829730][ T6619] fido_id[6619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.892914][ T6617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.457233][ T6631] warning: `syz.2.229' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.461739][ T24] Process accounting resumed [ 146.623375][ T6634] Process accounting resumed [ 146.640582][ T5963] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 146.836737][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.882832][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.962872][ T5963] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 146.999676][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.049933][ T5963] usb 1-1: config 0 descriptor?? [ 147.199441][ T6614] loop5: detected capacity change from 0 to 40427 [ 147.219725][ T6614] F2FS-fs (loop5): build fault injection rate: 14 [ 147.229552][ T6614] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 147.313344][ T6614] F2FS-fs (loop5): invalid crc value [ 147.375010][ C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 147.431724][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 147.569899][ T5963] uclogic 0003:28BD:0042.0007: interface is invalid, ignoring [ 147.781917][ T6614] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 147.815288][ T10] usb 1-1: USB disconnect, device number 3 [ 147.815872][ T6660] loop3: detected capacity change from 0 to 1024 [ 147.846591][ T6614] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 147.936240][ T6614] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 148.026308][ T6614] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 148.078218][ T6614] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2760 [ 148.158778][ T6639] loop1: detected capacity change from 0 to 32768 [ 148.264695][ T5866] syz-executor: attempt to access beyond end of device [ 148.264695][ T5866] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.264886][ T6669] loop3: detected capacity change from 0 to 256 [ 148.286614][ T48] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 148.316292][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 148.316336][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.316357][ T5866] Call Trace: [ 148.316367][ T5866] [ 148.316379][ T5866] dump_stack_lvl+0x16c/0x1f0 [ 148.316437][ T5866] f2fs_handle_critical_error+0x624/0x9f0 [ 148.316487][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.316530][ T5866] ? f2fs_build_fault_attr+0x53/0x1f0 [ 148.316577][ T5866] f2fs_write_end_io+0x958/0xcf0 [ 148.316631][ T5866] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 148.316686][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.316737][ T5866] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 148.316781][ T5866] bio_endio+0x713/0x860 [ 148.316839][ T5866] submit_bio_noacct+0x306/0x1ed0 [ 148.316894][ T5866] __submit_merged_bio+0x33c/0x770 [ 148.316945][ T5866] __submit_merged_write_cond+0x319/0x3f0 [ 148.317003][ T5866] f2fs_write_cache_pages+0x2067/0x2570 [ 148.317080][ T5866] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 148.317129][ T5866] ? arch_stack_walk+0x88/0x100 [ 148.317180][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317218][ T5866] ? __kasan_check_byte+0x13/0x50 [ 148.317249][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317288][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317326][ T5866] ? rcu_is_watching+0x12/0xc0 [ 148.317367][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317408][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317447][ T5866] ? __kasan_check_byte+0x13/0x50 [ 148.317492][ T5866] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.317537][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317632][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317670][ T5866] ? add_lock_to_list+0x9d/0x130 [ 148.317722][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317772][ T5866] f2fs_write_data_pages+0x4ad/0xd90 [ 148.317834][ T5866] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.317890][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317940][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.317983][ T5866] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.318040][ T5866] do_writepages+0x27a/0x600 [ 148.318094][ T5866] ? __pfx_do_writepages+0x10/0x10 [ 148.318139][ T5866] ? do_raw_spin_unlock+0x172/0x230 [ 148.318190][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.318231][ T5866] ? _raw_spin_unlock+0x28/0x50 [ 148.318285][ T5866] filemap_fdatawrite_wbc+0x104/0x160 [ 148.318330][ T5866] ? stack_trace_save+0x8e/0xc0 [ 148.318381][ T5866] __filemap_fdatawrite_range+0xb9/0x100 [ 148.318441][ T5866] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 148.318498][ T5866] ? check_path.constprop.0+0x24/0x50 [ 148.318602][ T5866] ? find_held_lock+0x2b/0x80 [ 148.318647][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.318690][ T5866] ? do_raw_spin_unlock+0x172/0x230 [ 148.318731][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.318780][ T5866] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 148.318862][ T5866] block_operations+0x2b0/0xfe0 [ 148.318908][ T5866] ? __pfx_block_operations+0x10/0x10 [ 148.318965][ T5866] ? add_lock_to_list+0x9d/0x130 [ 148.319068][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.319109][ T5866] ? down_write+0x14d/0x200 [ 148.319142][ T5866] ? __pfx_down_write+0x10/0x10 [ 148.319183][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.319223][ T5866] ? rcu_is_watching+0x12/0xc0 [ 148.319271][ T5866] f2fs_write_checkpoint+0x2b8/0x4c60 [ 148.319312][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.319353][ T5866] ? kfree+0x2b4/0x4d0 [ 148.319394][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.319439][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.319480][ T5866] ? rcu_is_watching+0x12/0xc0 [ 148.319522][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.319564][ T5866] ? kthread_stop+0x273/0x630 [ 148.319601][ T5866] kill_f2fs_super+0x3c2/0x470 [ 148.319635][ T5866] ? __pfx_kill_f2fs_super+0x10/0x10 [ 148.319668][ T5866] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.319741][ T5866] deactivate_locked_super+0xc1/0x1a0 [ 148.319797][ T5866] deactivate_super+0xde/0x100 [ 148.319853][ T5866] cleanup_mnt+0x225/0x450 [ 148.319913][ T5866] task_work_run+0x150/0x240 [ 148.319955][ T5866] ? __pfx_task_work_run+0x10/0x10 [ 148.319992][ T5866] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.320038][ T5866] ? __pfx___x64_sys_umount+0x10/0x10 [ 148.320084][ T5866] exit_to_user_mode_loop+0xeb/0x110 [ 148.320124][ T5866] do_syscall_64+0x41c/0x4e0 [ 148.320166][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.320201][ T5866] RIP: 0033:0x7fb03078fed7 [ 148.320229][ T5866] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 148.320263][ T5866] RSP: 002b:00007ffe03f04528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 148.320295][ T5866] RAX: 0000000000000000 RBX: 00007fb030811c05 RCX: 00007fb03078fed7 [ 148.320318][ T5866] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe03f045e0 [ 148.320339][ T5866] RBP: 00007ffe03f045e0 R08: 0000000000000000 R09: 0000000000000000 [ 148.320361][ T5866] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe03f05670 [ 148.320384][ T5866] R13: 00007fb030811c05 R14: 000000000002429d R15: 00007ffe03f056b0 [ 148.320431][ T5866] [ 148.826793][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.911242][ T5866] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 148.949327][ T6639] ialloc: diAlloc returned -5! [ 149.230811][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.268797][ T48] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 149.317201][ T6679] loop0: detected capacity change from 0 to 512 [ 149.347350][ T6669] FAT-fs (loop3): Directory bread(block 64) failed [ 149.378389][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.424898][ T6669] FAT-fs (loop3): Directory bread(block 65) failed [ 149.455309][ T6679] EXT4-fs (loop0): Test dummy encryption mode enabled [ 149.470773][ T6669] FAT-fs (loop3): Directory bread(block 66) failed [ 149.477359][ T6669] FAT-fs (loop3): Directory bread(block 67) failed [ 149.506226][ T48] usb 5-1: config 0 descriptor?? [ 149.530515][ T6679] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.535782][ T6669] FAT-fs (loop3): Directory bread(block 68) failed [ 149.567533][ T6669] FAT-fs (loop3): Directory bread(block 69) failed [ 149.641739][ T6669] FAT-fs (loop3): Directory bread(block 70) failed [ 149.669864][ T6679] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.250: corrupted xattr entries [ 149.680742][ T6669] FAT-fs (loop3): Directory bread(block 71) failed [ 149.688165][ T6669] FAT-fs (loop3): Directory bread(block 72) failed [ 149.695488][ T6669] FAT-fs (loop3): Directory bread(block 73) failed [ 149.872187][ T6679] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.958236][ T6679] EXT4-fs (loop0): 1 orphan inode deleted [ 149.977277][ T48] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 150.012640][ T6679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.141272][ T48] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 150.209628][ T48] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 150.315852][ T48] usb 5-1: USB disconnect, device number 3 [ 150.374156][ T48] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 150.447838][ T6698] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 150.456455][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.693203][ T6696] fido_id[6696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 150.892751][ T6700] loop3: detected capacity change from 0 to 4096 [ 150.955210][ T6700] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 151.304117][ T6715] pim6reg: entered allmulticast mode [ 151.364927][ T6716] pim6reg: left allmulticast mode [ 151.521051][ T6718] loop0: detected capacity change from 0 to 8 [ 151.883500][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.265'. [ 152.493327][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 152.606731][ T6709] loop4: detected capacity change from 0 to 32768 [ 152.646537][ T6709] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.258 (6709) [ 152.732330][ T6709] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.771048][ T6709] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 152.816762][ T6713] loop5: detected capacity change from 0 to 40427 [ 152.886865][ T6713] F2FS-fs (loop5): invalid crc value [ 152.928259][ T6709] BTRFS info (device loop4): rebuilding free space tree [ 153.033670][ T6709] BTRFS info (device loop4): setting nodatasum [ 153.060371][ T6709] BTRFS info (device loop4): enabling ssd optimizations [ 153.081282][ T6709] BTRFS info (device loop4): turning off barriers [ 153.087780][ T6709] BTRFS info (device loop4): turning on flush-on-commit [ 153.125731][ T6709] BTRFS info (device loop4): turning on sync discard [ 153.143956][ T6709] BTRFS info (device loop4): enabling free space tree [ 153.154088][ T6709] BTRFS info (device loop4): force clearing of disk cache [ 153.168568][ T6709] BTRFS info (device loop4): doing ref verification [ 153.220614][ T6730] loop2: detected capacity change from 0 to 32768 [ 153.272961][ T6713] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.311779][ T6713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 153.334726][ T6730] syz.2.268: attempt to access beyond end of device [ 153.334726][ T6730] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 153.376459][ T5870] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.380418][ T6730] metapage_write_end_io: I/O error [ 153.450743][ T6730] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 153.450743][ T6730] [ 153.516014][ T6730] ERROR: (device loop2): remounting filesystem as read-only [ 153.529716][ T30] audit: type=1800 audit(1757842401.014:2): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.284" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 153.549950][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.580610][ T6730] ERROR: (device loop2): diWrite: ixpxd invalid [ 153.580610][ T6730] [ 153.592693][ T6762] loop1: detected capacity change from 0 to 64 [ 153.623564][ T6730] ERROR: (device loop2): txAbort: [ 153.623564][ T6730] [ 153.720611][ T6730] blkno = 8ed2c, nblocks = 1 [ 153.725453][ T6730] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 153.725453][ T6730] [ 153.829101][ T6730] UFO tlock:0xffffc9000292a090 [ 153.862405][ T6763] overlayfs: upper fs needs to support d_type. [ 153.921515][ T5866] syz-executor: attempt to access beyond end of device [ 153.921515][ T5866] loop5: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 153.968161][ T6763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 153.981741][ T6730] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 153.981741][ T6730] [ 153.999225][ T5866] syz-executor: attempt to access beyond end of device [ 153.999225][ T5866] loop5: rw=2051, sector=45096, nr_sectors = 57304 limit=40427 [ 154.040724][ T6730] jfs_lookup: dtSearch returned -5 [ 154.062320][ T5866] F2FS-fs (loop5): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 154.065746][ T6763] overlayfs: failed to set xattr on upper [ 154.122425][ T5866] F2FS-fs (loop5): Issue discard(5637, 5637, 7163) failed, ret: -5 [ 154.150709][ T6763] overlayfs: ...falling back to redirect_dir=nofollow. [ 154.157590][ T6763] overlayfs: ...falling back to index=off. [ 154.181642][ T5963] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.222725][ T112] blkno = 8ed2c, nblocks = 4 [ 154.227355][ T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 154.227355][ T112] [ 154.240983][ T6763] overlayfs: ...falling back to uuid=null. [ 154.246818][ T6763] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 154.261682][ T5876] syz-executor: attempt to access beyond end of device [ 154.261682][ T5876] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 154.310556][ T5876] metapage_write_end_io: I/O error [ 154.330897][ T5876] JFS: metapage_get_blocks failed [ 154.336040][ T5876] JFS: metapage_get_blocks failed [ 154.365398][ T5876] JFS: metapage_get_blocks failed [ 154.377757][ T5876] JFS: metapage_get_blocks failed [ 154.378171][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 154.418119][ T5963] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.457150][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.477721][ T5963] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 154.508607][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.569912][ T5863] Trying to free block not in datazone [ 154.593957][ T5963] usb 1-1: config 0 descriptor?? [ 154.615436][ T5863] Trying to free block not in datazone [ 154.658671][ T5863] Trying to free block not in datazone [ 155.057599][ T5963] uclogic 0003:5543:0042.000A: unbalanced collection at end of report description [ 155.131364][ T5963] uclogic 0003:5543:0042.000A: parse failed [ 155.154354][ T5963] uclogic 0003:5543:0042.000A: probe with driver uclogic failed with error -22 [ 155.373560][ T6782] xt_l2tp: unknown flags: 51 [ 155.392865][ T5963] usb 1-1: USB disconnect, device number 4 [ 155.700779][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.746206][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 155.869204][ T6776] loop3: detected capacity change from 0 to 32768 [ 155.905327][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 155.926861][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.944158][ T10] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 156.007497][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.091103][ T10] usb 6-1: config 0 descriptor?? [ 156.391112][ T30] audit: type=1800 audit(1757842403.894:3): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.290" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 156.538775][ T10] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x2 [ 156.561369][ T10] greenasia 0003:0E8F:0012.000B: item fetching failed at offset 4/5 [ 156.590761][ T10] greenasia 0003:0E8F:0012.000B: parse failed [ 156.596951][ T10] greenasia 0003:0E8F:0012.000B: probe with driver greenasia failed with error -22 [ 156.661601][ T6802] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 156.680870][ T6780] loop4: detected capacity change from 0 to 32768 [ 156.806819][ T10] usb 6-1: USB disconnect, device number 2 [ 156.825638][ T6780] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.853077][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.931299][ T6802] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 157.026298][ T6780] XFS (loop4): Ending clean mount [ 157.319807][ T5870] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.428758][ T6819] loop0: detected capacity change from 0 to 2048 [ 157.439940][ T6792] loop1: detected capacity change from 0 to 32768 [ 157.480883][ T6792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.288 (6792) [ 157.549143][ T6792] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.580702][ T6792] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 157.618882][ T6822] loop2: detected capacity change from 0 to 2048 [ 157.659677][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.674184][ T6822] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 157.754368][ T6822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.924864][ T6792] BTRFS info (device loop1): allowing degraded mounts [ 157.970205][ T6792] BTRFS info (device loop1): enabling ssd optimizations [ 158.027803][ T6792] BTRFS info (device loop1): enabling free space tree [ 158.051313][ T6792] BTRFS info (device loop1): doing ref verification [ 158.082797][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.094170][ T6792] BTRFS info (device loop1): force zlib compression, level 3 [ 158.620373][ T6859] loop4: detected capacity change from 0 to 8 [ 158.863004][ T5863] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.291503][ T6865] loop5: detected capacity change from 0 to 2048 [ 159.396667][ T6865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.523923][ T6871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.312'. [ 159.586470][ T6865] cifs: Unknown parameter 'c936' [ 159.598197][ T6871] netlink: 'syz.3.312': attribute type 3 has an invalid length. [ 159.851794][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.136642][ T6858] loop2: detected capacity change from 0 to 32768 [ 160.252131][ T6858] XFS: noikeep mount option is deprecated. [ 160.415649][ T6858] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.525906][ T6858] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 160.596507][ T6858] XFS (loop2): Starting recovery (logdev: internal) [ 160.673723][ T6858] XFS (loop2): Ending recovery (logdev: internal) [ 160.775287][ T5229] udevd[5229]: worker [6125] terminated by signal 33 (Unknown signal 33) [ 160.811835][ T5229] udevd[5229]: worker [6125] failed while handling '/devices/virtual/block/loop2' [ 161.072014][ T5876] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.949872][ T6886] loop1: detected capacity change from 0 to 32768 [ 162.202392][ T6886] ialloc: diAlloc returned -5! [ 162.294045][ T6893] loop5: detected capacity change from 0 to 32768 [ 162.390576][ T6893] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.319 (6893) [ 162.552325][ T6919] pim6reg: entered allmulticast mode [ 162.627289][ T6920] pim6reg: left allmulticast mode [ 162.687475][ T6893] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.779123][ T6893] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 162.993311][ T6911] loop0: detected capacity change from 0 to 131072 [ 163.009309][ T6911] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 163.039927][ T6911] F2FS-fs (loop0): invalid crc value [ 163.062848][ T6911] F2FS-fs (loop0): Wrong journal entry on segno 1541 [ 163.075681][ T6922] mkiss: ax0: crc mode is auto. [ 163.099751][ T6911] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 163.154770][ T6893] BTRFS info (device loop5): rebuilding free space tree [ 163.291036][ T6893] BTRFS info (device loop5): setting nodatasum [ 163.369868][ T6893] BTRFS info (device loop5): enabling ssd optimizations [ 163.397820][ T6893] BTRFS info (device loop5): turning off barriers [ 163.447951][ T6893] BTRFS info (device loop5): turning on flush-on-commit [ 163.490768][ T6893] BTRFS info (device loop5): turning on sync discard [ 163.509975][ T6893] BTRFS info (device loop5): enabling free space tree [ 163.571217][ T6893] BTRFS info (device loop5): force clearing of disk cache [ 163.624812][ T6893] BTRFS info (device loop5): doing ref verification [ 163.875765][ T6958] loop2: detected capacity change from 0 to 128 [ 163.880713][ T6957] loop1: detected capacity change from 0 to 512 [ 163.931396][ T5866] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.942745][ T6957] EXT4-fs: Ignoring removed oldalloc option [ 163.984028][ T6958] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 164.041583][ T6958] hpfs: filesystem error: improperly stopped [ 164.043717][ T6957] EXT4-fs (loop1): 1 truncate cleaned up [ 164.068949][ T6958] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 164.086286][ T6958] hpfs: You really don't want any checks? You are crazy... [ 164.125313][ T6957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.175369][ T6958] hpfs: hpfs_map_sector(): read error [ 164.220565][ T6958] hpfs: code page support is disabled [ 164.227648][ T6958] hpfs: hpfs_map_4sectors(): unaligned read [ 164.276030][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.277610][ T6958] hpfs: hpfs_map_4sectors(): unaligned read [ 164.408955][ T6958] hpfs: filesystem error: unable to find root dir [ 164.514571][ T6969] tipc: Enabling of bearer rejected, failed to enable media [ 165.285974][ T6984] loop4: detected capacity change from 0 to 1024 [ 165.380124][ T6984] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 165.421757][ T6984] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 165.532427][ T6984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.561649][ T6988] loop3: detected capacity change from 0 to 512 [ 165.591959][ T6988] EXT4-fs: Ignoring removed oldalloc option [ 165.704258][ T6988] EXT4-fs (loop3): 1 truncate cleaned up [ 165.769139][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.902958][ T6952] loop0: detected capacity change from 0 to 32768 [ 165.949919][ T6952] XFS: noikeep mount option is deprecated. [ 165.960742][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.193532][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.221845][ T6952] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.397741][ T6952] XFS (loop0): Ending clean mount [ 166.439896][ T6952] XFS (loop0): Quotacheck needed: Please wait. [ 166.567432][ T6952] XFS (loop0): Quotacheck: Done. [ 166.591026][ T7014] loop3: detected capacity change from 0 to 256 [ 166.688259][ T30] audit: type=1326 audit(1757842414.184:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd398eba9 code=0x7ffc0000 [ 166.756495][ T30] audit: type=1326 audit(1757842414.184:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd398eba9 code=0x7ffc0000 [ 166.837994][ T5872] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.846060][ T30] audit: type=1326 audit(1757842414.214:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9bd398eba9 code=0x7ffc0000 [ 166.871071][ T30] audit: type=1326 audit(1757842414.214:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd398eba9 code=0x7ffc0000 [ 167.175868][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 167.601752][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 167.657576][ T6994] loop2: detected capacity change from 0 to 32768 [ 167.796893][ T6994] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.354 (6994) [ 167.839554][ T7033] loop3: detected capacity change from 0 to 32768 [ 167.847257][ T7033] XFS: ikeep mount option is deprecated. [ 167.934280][ T7033] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.934794][ T6994] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.960880][ T6994] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 168.086224][ T7033] XFS (loop3): Ending clean mount [ 168.095111][ T7033] XFS (loop3): Quotacheck needed: Please wait. [ 168.179272][ T13] XFS (loop3): Metadata corruption detected at xfs_dinode_verify.part.0+0x93e/0x1760, inode 0x1144 dinode [ 168.306649][ T13] XFS (loop3): Unmount and run xfs_repair [ 168.330579][ T13] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 168.361170][ T13] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 168.404804][ T13] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 168.426298][ T6994] BTRFS info (device loop2): enabling ssd optimizations [ 168.448778][ T13] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 168.469133][ T6994] BTRFS info (device loop2): enabling free space tree [ 168.481797][ T7027] loop1: detected capacity change from 0 to 32768 [ 168.518535][ T13] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 168.529118][ T6994] BTRFS info (device loop2): use lzo compression, level 1 [ 168.580498][ T13] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 168.580643][ T6994] BTRFS info (device loop2): max_inline set to 0 [ 168.628198][ T13] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 a2 ce e4 0c ................ [ 168.667664][ T13] 00000060: ff ff ff ff a6 fb 00 84 00 00 00 00 00 00 00 05 ................ [ 168.677083][ T13] 00000070: 00 00 00 01 00 00 00 10 00 00 e3 00 00 00 00 08 ................ [ 168.700917][ T7033] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 168.719444][ T7027] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 168.880666][ T5874] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.927873][ T7069] Zero length message leads to an empty skb [ 168.932099][ T5874] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 168.987665][ T7027] OCFS2: ERROR (device loop1): ocfs2_reserve_suballoc_bits: Invalid chain allocator 74 [ 169.039218][ T5876] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 169.073495][ T7027] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 169.084294][ T7027] OCFS2: Returning error to the calling process. [ 169.091623][ T7027] (syz.1.365,7027,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5 [ 169.100003][ T7027] (syz.1.365,7027,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5 [ 169.109191][ T7027] (syz.1.365,7027,1):ocfs2_reserve_new_inode:1120 ERROR: status = -5 [ 169.118128][ T7027] (syz.1.365,7027,1):ocfs2_mknod:309 ERROR: status = -5 [ 169.125580][ T7027] (syz.1.365,7027,1):ocfs2_mknod:505 ERROR: status = -5 [ 169.519676][ T5863] ocfs2: Unmounting device (7,1) on (node local) [ 169.789741][ T7032] loop4: detected capacity change from 0 to 32768 [ 170.067581][ T7085] loop2: detected capacity change from 0 to 64 [ 170.425426][ T7032] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.538475][ T7032] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop4": -EINTR [ 170.574137][ T7032] XFS (loop4): log mount failed [ 170.723908][ T7093] loop3: detected capacity change from 0 to 1024 [ 170.764497][ T7093] EXT4-fs: inline encryption not supported [ 170.788724][ T7093] EXT4-fs: Ignoring removed i_version option [ 170.832727][ T7093] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.857302][ T7097] macvlan2: entered promiscuous mode [ 170.889317][ T7097] macvlan2: entered allmulticast mode [ 170.899247][ T7099] loop2: detected capacity change from 0 to 1024 [ 170.931943][ T7093] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.373: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.079082][ T7093] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 171.141781][ T7104] loop1: detected capacity change from 0 to 512 [ 171.149596][ T7093] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.373: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.161287][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.212657][ T7093] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 171.250408][ T7093] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.373: Failed to acquire dquot type 0 [ 171.265628][ T7099] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.291031][ T7093] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 171.306147][ T7093] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.373: mark_inode_dirty error [ 171.317522][ T7104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.317671][ T7104] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.344592][ T7093] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 171.354994][ T7093] EXT4-fs (loop3): 1 orphan inode deleted [ 171.362834][ T7093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.379654][ T1098] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.450783][ T1098] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 171.501260][ T1098] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 171.611059][ T7114] loop5: detected capacity change from 0 to 16 [ 171.632829][ T7114] erofs (device loop5): mounted with root inode @ nid 36. [ 171.655766][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.674828][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.722751][ T5874] EXT4-fs error (device loop3): __ext4_get_inode_loc:4860: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.817146][ T5874] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 171.831595][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.899212][ T5874] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 172.381986][ T7130] netlink: 332 bytes leftover after parsing attributes in process `syz.4.397'. [ 172.643580][ T7136] loop0: detected capacity change from 0 to 8 [ 172.833513][ T7140] loop5: detected capacity change from 0 to 64 [ 173.409771][ T7154] loop2: detected capacity change from 0 to 64 [ 173.634914][ T7161] capability: warning: `syz.4.412' uses 32-bit capabilities (legacy support in use) [ 173.946108][ T7132] loop1: detected capacity change from 0 to 32768 [ 173.990059][ T7132] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.311878][ T7132] XFS (loop1): Ending clean mount [ 174.362381][ T7132] XFS (loop1): Quotacheck needed: Please wait. [ 174.457215][ T7132] XFS (loop1): Quotacheck: Done. [ 174.931972][ T5863] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.119797][ T7178] loop5: detected capacity change from 0 to 32768 [ 175.386360][ T7196] loop4: detected capacity change from 0 to 1764 [ 175.562886][ T7196] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 175.640503][ T7196] netlink: 'syz.4.426': attribute type 2 has an invalid length. [ 175.987835][ T7208] loop4: detected capacity change from 0 to 16 [ 176.042201][ T7207] loop2: detected capacity change from 0 to 1024 [ 176.096668][ T7207] EXT4-fs: Ignoring removed orlov option [ 176.140206][ T7210] loop3: detected capacity change from 0 to 1024 [ 176.262281][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.285456][ T7216] loop5: detected capacity change from 0 to 128 [ 176.382987][ T7207] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.445000][ T7216] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 176.521484][ T7208] erofs (device loop4): mounted with root inode @ nid 36. [ 176.550172][ T7207] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 176.827737][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.864621][ T5866] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.143199][ T7230] loop3: detected capacity change from 0 to 64 [ 177.225774][ T7236] loop2: detected capacity change from 0 to 512 [ 177.272280][ T7236] EXT4-fs: Ignoring removed oldalloc option [ 177.351645][ T7236] EXT4-fs (loop2): 1 truncate cleaned up [ 177.383220][ T7236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.437502][ T5963] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.460671][ T30] audit: type=1800 audit(1757842424.924:8): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.438" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 177.664615][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.691357][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.705750][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.719139][ T5963] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 177.728542][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.770157][ T5963] usb 2-1: config 0 descriptor?? [ 177.793444][ T7243] loop3: detected capacity change from 0 to 16 [ 177.841352][ T7243] erofs (device loop3): mounted with root inode @ nid 36. [ 178.129595][ T7244] loop0: detected capacity change from 0 to 4096 [ 178.252002][ T5963] hid-udraw 0003:20D6:CB17.000C: item fetching failed at offset 5/7 [ 178.297421][ T5963] hid-udraw 0003:20D6:CB17.000C: parse failed [ 178.320637][ T5963] hid-udraw 0003:20D6:CB17.000C: probe with driver hid-udraw failed with error -22 [ 178.397639][ T7251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.524749][ T5963] usb 2-1: USB disconnect, device number 7 [ 178.533115][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.483364][ T7274] loop0: detected capacity change from 0 to 64 [ 180.203253][ T7257] loop4: detected capacity change from 0 to 32768 [ 180.214901][ T7257] XFS: noikeep mount option is deprecated. [ 180.325342][ T7257] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.400627][ T5963] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 180.470089][ T7257] XFS (loop4): Ending clean mount [ 180.502334][ T7257] XFS (loop4): Quotacheck needed: Please wait. [ 180.565357][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.569728][ T7257] XFS (loop4): Quotacheck: Done. [ 180.613303][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.660973][ T5963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.709523][ T5870] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.713904][ T5963] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 180.733614][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.757536][ T5963] usb 3-1: config 0 descriptor?? [ 181.105948][ T7275] loop5: detected capacity change from 0 to 32768 [ 181.260107][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.318465][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.332474][ T7275] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 181.386630][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.431977][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.459040][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.505643][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.510774][ T7299] loop3: detected capacity change from 0 to 32768 [ 181.519518][ T7275] OCFS2: ERROR (device loop5): ocfs2_reserve_suballoc_bits: Invalid chain allocator 74 [ 181.552333][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.574537][ T7275] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 181.596302][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.610289][ T7275] OCFS2: Returning error to the calling process. [ 181.628565][ T7275] (syz.5.460,7275,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5 [ 181.637423][ T7275] (syz.5.460,7275,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5 [ 181.644954][ T7299] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 181.646650][ T7275] (syz.5.460,7275,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5 [ 181.663479][ T7275] (syz.5.460,7275,0):ocfs2_mknod:309 ERROR: status = -5 [ 181.668441][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.671748][ T7275] (syz.5.460,7275,0):ocfs2_mknod:505 ERROR: status = -5 [ 181.686549][ T7321] loop1: detected capacity change from 0 to 64 [ 181.696510][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 181.741292][ T7321] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 181.749778][ T5963] elecom 0003:056E:010C.000D: unknown main item tag 0x0 [ 181.752679][ T7321] hfs: filesystem is marked locked, mounting read-only. [ 181.799117][ T5963] elecom 0003:056E:010C.000D: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0 [ 181.910780][ T5963] usb 3-1: USB disconnect, device number 3 [ 182.067800][ T5874] ocfs2: Unmounting device (7,3) on (node local) [ 182.080876][ T5866] ocfs2: Unmounting device (7,5) on (node local) [ 182.329102][ T7330] loop1: detected capacity change from 0 to 128 [ 182.426971][ T7330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 182.560626][ T7328] fido_id[7328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 182.638992][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 182.710860][ T7341] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 182.719105][ T7341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.014556][ T7349] loop4: detected capacity change from 0 to 512 [ 183.122755][ T7349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.287656][ T7349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.371401][ T7349] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.822393][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.032243][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 184.204407][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.260585][ T5926] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 184.299137][ T7379] loop0: detected capacity change from 0 to 4096 [ 184.306459][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.347983][ T5926] usb 4-1: config 0 descriptor?? [ 184.464507][ T7386] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.567462][ T7379] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 184.648997][ T7379] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 184.701149][ T7379] Remounting filesystem read-only [ 184.731488][ T7379] NILFS (loop0): error -5 truncating bmap (ino=12) [ 184.760688][ T7351] loop1: detected capacity change from 0 to 32768 [ 184.816487][ T7351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.491 (7351) [ 184.869280][ T5926] hkems 0003:2006:0118.000E: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 184.893527][ T5926] hkems 0003:2006:0118.000E: no inputs found [ 184.904120][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 184.906314][ T5926] hkems 0003:2006:0118.000E: force feedback init failed [ 184.911613][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 184.974111][ T7351] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.023750][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 185.029895][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 185.051505][ T7351] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 185.081379][ T5872] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 185.110094][ T5926] usb 4-1: USB disconnect, device number 3 [ 185.286478][ T7395] fido_id[7395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 185.354394][ T24] libceph: connect (1)[c::]:6789 error -101 [ 185.371046][ T7351] BTRFS info (device loop1): enabling ssd optimizations [ 185.378352][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 185.423636][ T7351] BTRFS info (device loop1): enabling free space tree [ 185.563716][ T7392] ceph: No mds server is up or the cluster is laggy [ 185.963991][ T7422] loop2: detected capacity change from 0 to 32768 [ 185.974378][ T7422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.514 (7422) [ 186.049725][ T7422] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.061001][ T7422] BTRFS info (device loop2 state S): using crc32c (crc32c-lib) checksum algorithm [ 186.070602][ T7422] BTRFS warning (device loop2 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 186.119191][ T7430] loop3: detected capacity change from 0 to 512 [ 186.132554][ T5863] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.171369][ T7437] loop5: detected capacity change from 0 to 64 [ 186.238194][ T1144] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 186.268137][ T7430] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.308407][ T3519] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 186.374547][ T3519] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 186.469253][ T3519] BTRFS warning (device loop2 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored [ 186.554160][ T7422] BTRFS error (device loop2 state S): chunk 5242880 has missing dev extent, have 0 expect 1 [ 186.564793][ T7422] BTRFS error (device loop2 state S): failed to verify dev extents against chunks: -117 [ 186.583027][ T7422] BTRFS error (device loop2 state S): open_ctree failed: -117 [ 186.629227][ T5874] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 187.057891][ T7463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.650348][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'. [ 187.793389][ T7484] loop5: detected capacity change from 0 to 16 [ 187.834558][ T7484] erofs (device loop5): mounted with root inode @ nid 36. [ 187.932731][ T7484] erofs (device loop5): bogus dirent @ nid 36 [ 188.466237][ T7497] loop4: detected capacity change from 0 to 512 [ 188.719075][ T7506] loop3: detected capacity change from 0 to 256 [ 188.728641][ T7506] exfat: Deprecated parameter 'utf8' [ 188.737309][ T7506] exfat: Deprecated parameter 'namecase' [ 188.763185][ T7497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.786349][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 188.808016][ T7506] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 188.822198][ T7497] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.841186][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 189.262773][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.632430][ T7531] loop1: detected capacity change from 0 to 512 [ 189.737626][ T7533] loop2: detected capacity change from 0 to 1024 [ 189.768633][ T7531] EXT4-fs error (device loop1): ext4_iget_extra_inode:5103: inode #15: comm syz.1.555: corrupted in-inode xattr: invalid ea_ino [ 189.892500][ T7531] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.555: couldn't read orphan inode 15 (err -117) [ 189.982923][ T7531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.100900][ T12] hfsplus: b-tree write err: -5, ino 4 [ 190.214294][ T7531] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 190.336301][ T7544] process 'syz.2.560' launched '/dev/fd/3' with NULL argv: empty string added [ 190.393692][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.698793][ T7552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.563'. [ 191.077621][ T7530] loop4: detected capacity change from 0 to 32768 [ 191.202319][ T7536] loop3: detected capacity change from 0 to 40427 [ 191.288345][ T7536] F2FS-fs (loop3): invalid crc value [ 191.317902][ T7530] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 191.365405][ T7565] UHID_CREATE from different security context by process 175 (syz.1.569), this is not allowed. [ 191.512287][ T7561] loop0: detected capacity change from 0 to 4096 [ 191.569280][ T7561] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 191.635782][ T5870] ocfs2: Unmounting device (7,4) on (node local) [ 191.754058][ T7536] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.848226][ T7561] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 191.864399][ T7536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.919490][ T7561] ntfs3(loop0): ino=1a, mi_enum_attr [ 191.946001][ T7561] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 192.031268][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.096508][ T7561] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 192.249922][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.329659][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.387483][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.417555][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 192.473084][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.532837][ T9] usb 2-1: config 0 descriptor?? [ 192.659182][ T10] hid_parser_main: 33 callbacks suppressed [ 192.659214][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.748016][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.780535][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.827975][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.865175][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.890221][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.899648][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.933569][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 192.970394][ T9] elecom 0003:056E:010C.0010: unknown main item tag 0x0 [ 192.995354][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 193.036068][ T9] elecom 0003:056E:010C.0010: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 193.061354][ T10] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 193.188161][ T7596] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 193.240665][ T7596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.271517][ T9] usb 2-1: USB disconnect, device number 8 [ 193.516983][ T7597] fido_id[7597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.537436][ T7598] fido_id[7598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 193.557997][ T7602] loop5: detected capacity change from 0 to 256 [ 193.621342][ T5963] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 193.746249][ T7602] FAT-fs (loop5): Directory bread(block 64) failed [ 193.769716][ T7606] loop0: detected capacity change from 0 to 1024 [ 193.791156][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 193.796456][ T7602] FAT-fs (loop5): Directory bread(block 65) failed [ 193.814378][ T7602] FAT-fs (loop5): Directory bread(block 66) failed [ 193.821841][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.855686][ T7602] FAT-fs (loop5): Directory bread(block 67) failed [ 193.892519][ T5179] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 193.899791][ T5179] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.906297][ T7602] FAT-fs (loop5): Directory bread(block 68) failed [ 193.906340][ T7602] FAT-fs (loop5): Directory bread(block 69) failed [ 193.906439][ T7602] FAT-fs (loop5): Directory bread(block 70) failed [ 193.906477][ T7602] FAT-fs (loop5): Directory bread(block 71) failed [ 193.906580][ T7602] FAT-fs (loop5): Directory bread(block 72) failed [ 193.906618][ T7602] FAT-fs (loop5): Directory bread(block 73) failed [ 193.908440][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.081928][ T5963] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 194.091667][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.129223][ T5963] usb 5-1: config 0 descriptor?? [ 194.566460][ T5963] uclogic 0003:5543:0781.0011: reserved main item tag 0xe [ 194.615032][ T5963] uclogic 0003:5543:0781.0011: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 194.766923][ T5963] usb 5-1: USB disconnect, device number 4 [ 195.018782][ T7629] fido_id[7629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 195.070219][ T7639] loop5: detected capacity change from 0 to 512 [ 195.132656][ T7639] EXT4-fs warning (device loop5): dx_probe:800: inode #2: comm syz.5.602: Unrecognised inode hash code 255 [ 195.146236][ T7639] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.602: Corrupt directory, running e2fsck is recommended [ 195.248142][ T7639] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 195.280101][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 195.309269][ T7639] EXT4-fs error (device loop5): ext4_iget_extra_inode:5103: inode #15: comm syz.5.602: corrupted in-inode xattr: invalid ea_ino [ 195.422526][ T7639] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.602: couldn't read orphan inode 15 (err -117) [ 195.512151][ T7639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.692365][ T7656] nbd: must specify an index to disconnect [ 195.878118][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.364056][ T7662] loop3: detected capacity change from 0 to 32768 [ 196.418898][ T7662] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.427967][ T7662] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 196.456637][ T7662] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 463 [ 196.472609][ T7662] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqobnN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 196.475085][ T7673] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 196.481910][ T7662] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:7662 [syz.3.610] init_inodes+0x113b/0x2eb0 [ 196.502627][ T7662] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 196.513284][ T7662] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 196.521463][ T7662] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 196.530350][ T7662] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 196.537170][ T7662] gfs2: fsid=syz:syz.s: File system withdrawn [ 196.543397][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.3.610 Not tainted syzkaller #0 PREEMPT(full) [ 196.543444][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.543465][ T7662] Call Trace: [ 196.543477][ T7662] [ 196.543490][ T7662] dump_stack_lvl+0x16c/0x1f0 [ 196.543551][ T7662] gfs2_withdraw+0xa8b/0x1130 [ 196.543621][ T7662] ? __pfx_gfs2_withdraw+0x10/0x10 [ 196.543676][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.543725][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.543770][ T7662] ? __pfx_map_id_range_down+0x10/0x10 [ 196.543822][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.543874][ T7662] inode_go_instantiate+0xe68/0x1290 [ 196.543938][ T7662] ? __pfx_inode_go_instantiate+0x10/0x10 [ 196.543995][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544041][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544094][ T7662] gfs2_instantiate+0x16c/0x250 [ 196.544137][ T7662] gfs2_glock_wait+0x214/0x330 [ 196.544180][ T7662] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 196.544227][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544278][ T7662] gfs2_glock_nq+0x12f2/0x19f0 [ 196.544329][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544373][ T7662] ? do_raw_spin_unlock+0x172/0x230 [ 196.544434][ T7662] check_journal_clean+0x11a/0x350 [ 196.544490][ T7662] ? __pfx_check_journal_clean+0x10/0x10 [ 196.544552][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544595][ T7662] ? do_raw_spin_lock+0x12c/0x2b0 [ 196.544631][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544674][ T7662] ? find_held_lock+0x2b/0x80 [ 196.544722][ T7662] ? init_inodes+0x113b/0x2eb0 [ 196.544778][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544833][ T7662] ? do_raw_spin_unlock+0x172/0x230 [ 196.544877][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.544921][ T7662] ? _raw_spin_unlock+0x28/0x50 [ 196.544970][ T7662] ? gfs2_jdesc_find+0xbf/0x100 [ 196.545010][ T7662] init_inodes+0x113b/0x2eb0 [ 196.545088][ T7662] ? __pfx_init_inodes+0x10/0x10 [ 196.545156][ T7662] ? gfs2_fill_super+0x1be2/0x2d30 [ 196.545213][ T7662] ? init_sb+0xa50/0x10d0 [ 196.545279][ T7662] ? __pfx_snprintf+0x10/0x10 [ 196.545357][ T7662] ? gfs2_fill_super+0x1be2/0x2d30 [ 196.545421][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.545465][ T7662] gfs2_fill_super+0x1be2/0x2d30 [ 196.545522][ T7662] ? __lock_acquire+0xb97/0x1ce0 [ 196.545597][ T7662] ? __pfx_gfs2_fill_super+0x10/0x10 [ 196.545661][ T7662] ? gfs2_fill_super+0x1875/0x2d30 [ 196.545718][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.545761][ T7662] ? set_blocksize+0x406/0x500 [ 196.545808][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.545851][ T7662] ? sb_set_blocksize+0x176/0x1d0 [ 196.545894][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.545946][ T7662] get_tree_bdev_flags+0x38c/0x620 [ 196.546003][ T7662] ? __pfx_gfs2_fill_super+0x10/0x10 [ 196.546063][ T7662] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 196.546120][ T7662] ? rcu_is_watching+0x12/0xc0 [ 196.546167][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.546214][ T7662] ? aa_get_newest_label+0xd2/0x250 [ 196.546255][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.546299][ T7662] ? apparmor_capable+0x114/0x1d0 [ 196.546345][ T7662] gfs2_get_tree+0x4e/0x280 [ 196.546405][ T7662] vfs_get_tree+0x8e/0x340 [ 196.546463][ T7662] path_mount+0x1513/0x2000 [ 196.546513][ T7662] ? __pfx_path_mount+0x10/0x10 [ 196.546556][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.546600][ T7662] ? kmem_cache_free+0x2d1/0x4d0 [ 196.546653][ T7662] ? putname+0x154/0x1a0 [ 196.546699][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.546740][ T7662] ? putname+0x154/0x1a0 [ 196.546785][ T7662] ? __x64_sys_mount+0x28d/0x310 [ 196.546833][ T7662] __x64_sys_mount+0x28d/0x310 [ 196.546874][ T7662] ? __pfx___x64_sys_mount+0x10/0x10 [ 196.546914][ T7662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.546974][ T7662] do_syscall_64+0xcd/0x4e0 [ 196.547011][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.547047][ T7662] RIP: 0033:0x7f9bd399034a [ 196.547076][ T7662] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.547110][ T7662] RSP: 002b:00007f9bd4758e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.547143][ T7662] RAX: ffffffffffffffda RBX: 00007f9bd4758ef0 RCX: 00007f9bd399034a [ 196.547167][ T7662] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f9bd4758eb0 [ 196.547190][ T7662] RBP: 0000200000000400 R08: 00007f9bd4758ef0 R09: 0000000000200001 [ 196.547214][ T7662] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 196.547237][ T7662] R13: 00007f9bd4758eb0 R14: 00000000000125d5 R15: 0000200000000240 [ 196.547286][ T7662] [ 196.547562][ T7662] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 196.680048][ T7677] loop4: detected capacity change from 0 to 764 [ 197.500786][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 197.719599][ T24] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 197.741883][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.764040][ T24] usb 3-1: config 0 has no interface number 0 [ 197.770285][ T24] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 197.840911][ T24] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.889896][ T24] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 197.929732][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.971094][ T24] usb 3-1: Product: syz [ 197.975358][ T24] usb 3-1: Manufacturer: syz [ 197.979969][ T24] usb 3-1: SerialNumber: syz [ 198.052184][ T24] usb 3-1: config 0 descriptor?? [ 198.770887][ T24] usb 3-1: USB disconnect, device number 4 [ 198.841783][ T7716] loop0: detected capacity change from 0 to 1024 [ 198.857812][ T7716] EXT4-fs: Ignoring removed nobh option [ 198.885139][ T7716] EXT4-fs: Ignoring removed bh option [ 198.942427][ T7716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.140328][ T7716] EXT4-fs error (device loop0): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 199.245116][ T7692] loop1: detected capacity change from 0 to 32768 [ 199.339087][ T7692] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.345246][ T7732] loop4: detected capacity change from 0 to 164 [ 199.487824][ T7692] XFS (loop1): Ending clean mount [ 199.578405][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.913367][ T5863] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.110828][ T7712] loop5: detected capacity change from 0 to 32768 [ 200.220808][ T7712] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 200.300810][ T7712] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 200.376189][ T49] (kworker/u8:3,49,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 200.505738][ T30] audit: type=1800 audit(1757842448.004:9): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.630" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=17058 res=0 errno=0 [ 200.789284][ T5866] ocfs2: Unmounting device (7,5) on (node local) [ 201.231489][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.359561][ T7739] loop2: detected capacity change from 0 to 32768 [ 201.405147][ T7774] loop4: detected capacity change from 0 to 256 [ 201.421004][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 201.463931][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.563167][ T7739] ialloc: diAlloc returned -5! [ 201.609621][ T7739] ialloc: diAlloc returned -5! [ 201.789156][ T7777] netlink: 100 bytes leftover after parsing attributes in process `syz.5.652'. [ 201.899373][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.929112][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.970531][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.030736][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.081944][ T24] usb 4-1: config 0 descriptor?? [ 202.240958][ T7780] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 202.451484][ T5846] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 202.533710][ T24] hid_parser_main: 111 callbacks suppressed [ 202.533740][ T24] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 202.600204][ T24] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 202.651191][ T24] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 202.680164][ T7762] loop0: detected capacity change from 0 to 32768 [ 202.699714][ T5846] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 202.713276][ T24] microsoft 0003:045E:07DA.0012: no inputs found [ 202.739123][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.750694][ T24] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 202.778379][ T7762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.646 (7762) [ 202.807283][ T5846] usb 3-1: config 0 descriptor?? [ 202.824014][ T24] usb 4-1: USB disconnect, device number 4 [ 202.873798][ T7762] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.973356][ T7762] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 203.055439][ T7788] fido_id[7788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 203.217148][ T7762] BTRFS info (device loop0): enabling ssd optimizations [ 203.224464][ T7762] BTRFS info (device loop0): enabling free space tree [ 203.329624][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.370204][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.400156][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.431047][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.457933][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.475036][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.523398][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.532011][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.567239][ T5846] macally 0003:060B:0001.0013: unknown main item tag 0x0 [ 203.627841][ T5846] macally 0003:060B:0001.0013: hidraw0: USB HID v8.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 203.650142][ T7809] IPVS: persistence engine module ip_vs_pe_t not found [ 203.681467][ T7814] loop3: detected capacity change from 0 to 512 [ 203.692943][ T5872] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.734519][ T5846] usb 3-1: USB disconnect, device number 5 [ 203.755646][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 203.780013][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.831151][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.837575][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.854558][ T10] usb 5-1: config 0 descriptor?? [ 203.899698][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.928774][ T7814] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.008667][ T7815] fido_id[7815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 204.064328][ T7814] EXT4-fs error (device loop3): ext4_get_first_dir_block:3536: inode #12: block 32: comm syz.3.660: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 204.229477][ T7814] EXT4-fs error (device loop3): ext4_get_first_dir_block:3540: inode #12: comm syz.3.660: directory missing '.' [ 204.411432][ T5926] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 204.473712][ T5179] Bluetooth: hci3: connection err: -111 [ 204.570062][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.614196][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.661434][ T5926] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 204.729473][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.826025][ T5926] usb 6-1: config 0 descriptor?? [ 204.850572][ T7789] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 204.850787][ T5179] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.874633][ T10] ath6kl: Failed to submit usb control message: -71 [ 204.935848][ T7829] loop0: detected capacity change from 0 to 128 [ 204.948901][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 204.990522][ T10] ath6kl: Unable to send get target info: -71 [ 204.996860][ T7829] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 205.029056][ T10] ath6kl: Failed to init ath6kl core: -71 [ 205.080778][ T7829] hpfs: filesystem error: improperly stopped [ 205.085928][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 205.121890][ T7829] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 205.129653][ T7829] hpfs: You really don't want any checks? You are crazy... [ 205.148124][ T10] usb 5-1: USB disconnect, device number 5 [ 205.237031][ T7829] hpfs: hpfs_map_sector(): read error [ 205.266992][ T7829] hpfs: code page support is disabled [ 205.304840][ T7829] hpfs: hpfs_map_4sectors(): unaligned read [ 205.336862][ T7829] hpfs: hpfs_map_4sectors(): unaligned read [ 205.337014][ T5926] hkems 0003:2006:0118.0014: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 205.362935][ T7829] hpfs: filesystem error: unable to find root dir [ 205.419364][ T5926] hkems 0003:2006:0118.0014: no inputs found [ 205.439596][ T5926] hkems 0003:2006:0118.0014: force feedback init failed [ 205.560912][ T5926] usb 6-1: USB disconnect, device number 3 [ 205.683905][ T7835] fido_id[7835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 205.941358][ T7837] loop3: detected capacity change from 0 to 4096 [ 205.979513][ T7837] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 206.218248][ T7837] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 206.439427][ T49] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 206.479331][ T5874] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 206.512605][ T5874] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 206.542432][ T5874] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 206.570619][ T3519] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 206.691701][ T7768] syz.1.640 (7768): drop_caches: 1 [ 207.752481][ T7852] loop5: detected capacity change from 0 to 32768 [ 208.167459][ T7861] loop2: detected capacity change from 0 to 32768 [ 208.302229][ T7890] loop0: detected capacity change from 0 to 1024 [ 208.303345][ T7861] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.400861][ T7890] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 208.456807][ T7895] bridge0: entered promiscuous mode [ 208.580391][ T7861] XFS (loop2): Ending clean mount [ 208.616225][ T7861] XFS (loop2): Quotacheck needed: Please wait. [ 208.650825][ T7901] loop3: detected capacity change from 0 to 8 [ 208.663077][ T7890] hfsplus: filesystem is marked journaled, leaving read-only. [ 208.755694][ T7861] XFS (loop2): Quotacheck: Done. [ 208.828527][ T7901] SQUASHFS error: zlib decompression failed, data probably corrupt [ 208.940657][ T7901] SQUASHFS error: Failed to read block 0x9b: -5 [ 208.966932][ T7901] SQUASHFS error: Unable to read metadata cache entry [99] [ 208.975395][ T7901] SQUASHFS error: Unable to read inode 0x127 [ 209.074867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.113373][ T7874] loop1: detected capacity change from 0 to 32768 [ 209.190906][ T7874] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.686 (7874) [ 209.223064][ T5876] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.296327][ T7906] loop4: detected capacity change from 0 to 1024 [ 209.333626][ T7874] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 209.370611][ T7874] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 209.512244][ T7920] loop0: detected capacity change from 0 to 512 [ 209.546252][ T7920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.622295][ T1098] hfsplus: b-tree write err: -5, ino 4 [ 209.678483][ T7874] BTRFS info (device loop1): enabling ssd optimizations [ 209.720608][ T7874] BTRFS info (device loop1): enabling free space tree [ 209.754996][ T7920] EXT4-fs (loop0): 1 truncate cleaned up [ 209.804974][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.000630][ T7920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.703: bg 0: block 256: padding at end of block bitmap is not set [ 210.085871][ T7920] EXT4-fs (loop0): Remounting filesystem read-only [ 210.307332][ T5863] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 210.534067][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.884627][ T7956] loop0: detected capacity change from 0 to 1024 [ 211.358658][ T7960] loop5: detected capacity change from 0 to 1024 [ 211.403858][ T7960] EXT4-fs: Ignoring removed nobh option [ 211.409501][ T7960] EXT4-fs: Ignoring removed bh option [ 211.556315][ T7960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.764138][ T7960] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 211.799228][ T7966] loop0: detected capacity change from 0 to 4096 [ 211.878535][ T7966] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 212.086277][ T7966] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 212.190274][ T7945] loop4: detected capacity change from 0 to 32768 [ 212.242151][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 212.275965][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.315533][ T7979] loop1: detected capacity change from 0 to 512 [ 212.345623][ T7668] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 212.391781][ T5872] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 212.398367][ T5872] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 212.423362][ T7979] EXT4-fs: Ignoring removed i_version option [ 212.450016][ T5872] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 212.455809][ T7945] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.472993][ T7979] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.479165][ T49] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 212.483176][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.575751][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.586037][ T7979] EXT4-fs (loop1): 1 truncate cleaned up [ 212.609031][ T7979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.645576][ T5926] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 212.700747][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.757032][ T5926] usb 4-1: config 0 descriptor?? [ 212.817985][ T5870] ocfs2: Unmounting device (7,4) on (node local) [ 212.878246][ T7988] loop0: detected capacity change from 0 to 128 [ 212.931647][ T7988] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 212.976859][ T7988] hpfs: filesystem error: improperly stopped [ 212.994029][ T7988] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 213.052850][ T7988] hpfs: You really don't want any checks? You are crazy... [ 213.130077][ T7992] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.728'. [ 213.141738][ T7988] hpfs: hpfs_map_sector(): read error [ 213.147142][ T7988] hpfs: code page support is disabled [ 213.200599][ T7988] hpfs: hpfs_map_4sectors(): unaligned read [ 213.225968][ T7988] hpfs: hpfs_map_4sectors(): unaligned read [ 213.259440][ T7988] hpfs: filesystem error: unable to find root dir [ 213.273595][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.301382][ T5926] aquacomputer_d5next 0003:0C70:F014.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 213.346256][ T7988] hpfs: hpfs_map_4sectors(): unaligned read [ 213.364235][ T7988] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 213.542019][ T5926] usb 4-1: USB disconnect, device number 5 [ 213.703876][ T7993] fido_id[7993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 213.722619][ T7982] loop2: detected capacity change from 0 to 32768 [ 213.803159][ T7982] ERROR: (device loop2): diRead: i_ino != di_number [ 213.803159][ T7982] [ 213.844999][ T7982] ERROR: (device loop2): remounting filesystem as read-only [ 214.230926][ T8010] loop4: detected capacity change from 0 to 16 [ 214.309620][ T8010] erofs (device loop4): mounted with root inode @ nid 36. [ 214.513196][ T8018] loop3: detected capacity change from 0 to 1024 [ 214.635021][ T8020] loop1: detected capacity change from 0 to 164 [ 214.914031][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.744'. [ 215.203222][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 215.347823][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.749'. [ 215.604337][ T8049] loop3: detected capacity change from 0 to 1024 [ 215.772327][ T8049] syz.3.755: attempt to access beyond end of device [ 215.772327][ T8049] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 215.998745][ T8049] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 216.025509][ T8049] hfsplus: unable to mark blocks free: error -5 [ 216.046401][ T8056] syz.3.755: attempt to access beyond end of device [ 216.046401][ T8056] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 216.047322][ T8049] hfsplus: can't free extent [ 216.151272][ T8062] loop1: detected capacity change from 0 to 2048 [ 216.167343][ T8056] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 216.194835][ T8062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.209342][ T8056] syz.3.755: attempt to access beyond end of device [ 216.209342][ T8056] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 216.280777][ T8056] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 216.497257][ T8066] ubi31: attaching mtd0 [ 216.517970][ T8068] loop2: detected capacity change from 0 to 256 [ 216.545583][ T8066] ubi31: scanning is finished [ 216.550323][ T8066] ubi31: empty MTD device detected [ 216.556726][ T8068] exfat: Deprecated parameter 'namecase' [ 216.568944][ T8068] exfat: Deprecated parameter 'utf8' [ 216.601665][ T8068] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 216.949625][ T8066] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 216.986236][ T8066] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 217.000763][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.010963][ T5963] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.031006][ T8066] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 217.038252][ T8066] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 217.060120][ T8053] loop4: detected capacity change from 0 to 32768 [ 217.071921][ T8066] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 217.078857][ T8066] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 217.121400][ T8066] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2311806772 [ 217.142750][ T8066] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 217.163665][ T8053] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 217.166651][ T8076] ubi31: background thread "ubi_bgt31d" started, PID 8076 [ 217.180718][ T5846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 217.205639][ T5963] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.231232][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 217.273422][ T5963] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.293280][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.324487][ T24] usb 2-1: Product: syz [ 217.324629][ T8053] XFS (loop4): Ending clean mount [ 217.328790][ T5963] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.362480][ T24] usb 2-1: Manufacturer: syz [ 217.368153][ T5846] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 217.370841][ T24] usb 2-1: SerialNumber: syz [ 217.390565][ T5963] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 217.397763][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.443356][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.471821][ T24] usb 2-1: config 0 descriptor?? [ 217.479614][ T5846] usb 1-1: config 0 descriptor?? [ 217.520687][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 217.533938][ T5963] usb 4-1: config 0 descriptor?? [ 217.717896][ T5870] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.023110][ T5963] uclogic 0003:5543:0005.0016: item 0 2 0 8 parsing failed [ 218.064273][ T5963] uclogic 0003:5543:0005.0016: parse failed [ 218.110726][ T5963] uclogic 0003:5543:0005.0016: probe with driver uclogic failed with error -22 [ 218.159003][ T24] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 218.176815][ T24] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 218.252353][ T24] usb 2-1: USB disconnect, device number 9 [ 218.347762][ T5963] usb 4-1: USB disconnect, device number 6 [ 218.364091][ T8100] netlink: 'syz.5.772': attribute type 10 has an invalid length. [ 218.423640][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.492381][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.772'. [ 218.590248][ T8101] bridge_slave_1: left allmulticast mode [ 218.606064][ T8101] bridge_slave_1: left promiscuous mode [ 218.619788][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.623911][ T5846] ath6kl: Failed to submit usb control message: -110 [ 218.662439][ T5846] ath6kl: unable to send the bmi data to the device: -110 [ 218.679856][ T5846] ath6kl: Unable to send get target info: -110 [ 218.682716][ T8101] bridge_slave_0: left allmulticast mode [ 218.709960][ T5846] ath6kl: Failed to init ath6kl core: -110 [ 218.727450][ T8101] bridge_slave_0: left promiscuous mode [ 218.734141][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.734188][ T5846] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 218.817865][ T30] audit: type=1326 audit(1757842466.314:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8104 comm="syz.2.774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b1218eba9 code=0x0 [ 218.932280][ T8074] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 218.938726][ T5179] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.008828][ T5962] usb 1-1: USB disconnect, device number 5 [ 219.084843][ T8108] binder: 8107:8108 ioctl 9362 0 returned -22 [ 219.115743][ T8108] binder: 8107:8108 ioctl c0046209 200000000000000 returned -22 [ 219.210362][ T8112] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 219.350520][ T5940] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 219.523086][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 219.559132][ T5940] usb 4-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 219.603882][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.675340][ T5940] usb 4-1: config 0 descriptor?? [ 219.706057][ T8110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.014756][ T8130] loop5: detected capacity change from 0 to 64 [ 220.192448][ T5940] ntrig 0003:1B96:000E.0017: hidraw0: USB HID vff.fa Device [HID 1b96:000e] on usb-dummy_hcd.3-1/input0 [ 220.192574][ T8132] loop1: detected capacity change from 0 to 512 [ 220.263968][ T8135] loop2: detected capacity change from 0 to 64 [ 220.274904][ T8132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.373930][ T8132] EXT4-fs (loop1): 1 truncate cleaned up [ 220.414826][ T8132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.440617][ T5940] usb 4-1: USB disconnect, device number 7 [ 220.663377][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.235974][ T8151] fido_id[8151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 221.275968][ T8153] loop5: detected capacity change from 0 to 4096 [ 221.444391][ T8163] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.696696][ T30] audit: type=1800 audit(1757842469.184:11): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.802" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 222.053329][ T8175] loop5: detected capacity change from 0 to 1024 [ 222.101173][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.155005][ T8175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.267552][ T8142] loop0: detected capacity change from 0 to 32768 [ 222.301011][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 222.310403][ T8175] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.804: missing EA_INODE flag [ 222.312083][ T8142] [ 222.312083][ T8142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.312083][ T8142] [ 222.323341][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.391071][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.391159][ T8142] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 222.391159][ T8142] [ 222.423740][ T8175] EXT4-fs (loop5): Remounting filesystem read-only [ 222.458430][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.512934][ T8142] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 222.520571][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.529644][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.608698][ T9] usb 5-1: config 0 descriptor?? [ 222.666206][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.736640][ T5872] [ 222.736640][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.736640][ T5872] [ 222.750101][ T5872] [ 222.750101][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.750101][ T5872] [ 222.930902][ T5846] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 223.078650][ T9] hid_parser_main: 8 callbacks suppressed [ 223.078680][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 223.161352][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 223.171363][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.194675][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 223.209265][ T9] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 223.248437][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 223.270509][ T9] microsoft 0003:045E:07DA.0018: no inputs found [ 223.300841][ T9] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 223.328684][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 223.350878][ T9] usb 5-1: USB disconnect, device number 6 [ 223.369236][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.421128][ T8174] loop1: detected capacity change from 0 to 32768 [ 223.422113][ T5846] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 223.467682][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 223.498061][ T5846] usb 4-1: Product: syz [ 223.509518][ T8174] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 223.518882][ T5846] usb 4-1: Manufacturer: syz [ 223.532032][ T5846] usb 4-1: SerialNumber: syz [ 223.545000][ T5846] usb 4-1: config 0 descriptor?? [ 223.592434][ T8174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 223.603559][ T8191] fido_id[8191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 223.770558][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 223.792676][ T5846] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 223.816007][ T5846] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 223.883619][ T5863] ocfs2: Unmounting device (7,1) on (node local) [ 223.976406][ T5926] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 223.995850][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.019747][ T5926] usb 1-1: Product: syz [ 224.049852][ T8199] loop1: detected capacity change from 0 to 8 [ 224.050510][ T5926] usb 1-1: Manufacturer: syz [ 224.097059][ T5926] usb 1-1: SerialNumber: syz [ 224.132530][ T10] usb 4-1: USB disconnect, device number 8 [ 224.155732][ T5926] usb 1-1: config 0 descriptor?? [ 224.418233][ T5926] usb 1-1: USB disconnect, device number 6 [ 224.471768][ T8203] netlink: 'syz.5.817': attribute type 1 has an invalid length. [ 224.511897][ T8203] netlink: 44 bytes leftover after parsing attributes in process `syz.5.817'. [ 224.574908][ T8190] loop2: detected capacity change from 0 to 32768 [ 224.583249][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.657280][ T8207] loop4: detected capacity change from 0 to 256 [ 224.843831][ T8207] FAT-fs (loop4): Directory bread(block 64) failed [ 224.880049][ T8207] FAT-fs (loop4): Directory bread(block 65) failed [ 224.909739][ T8207] FAT-fs (loop4): Directory bread(block 66) failed [ 224.961293][ T8207] FAT-fs (loop4): Directory bread(block 67) failed [ 224.999649][ T8207] FAT-fs (loop4): Directory bread(block 68) failed [ 225.029939][ T8207] FAT-fs (loop4): Directory bread(block 69) failed [ 225.071860][ T8207] FAT-fs (loop4): Directory bread(block 70) failed [ 225.126190][ T8207] FAT-fs (loop4): Directory bread(block 71) failed [ 225.151695][ T8207] FAT-fs (loop4): Directory bread(block 72) failed [ 225.180609][ T8207] FAT-fs (loop4): Directory bread(block 73) failed [ 225.453521][ T8220] loop3: detected capacity change from 0 to 256 [ 225.543854][ T8220] exFAT-fs (loop3): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d) [ 225.554398][ T8222] loop0: detected capacity change from 0 to 2048 [ 225.662301][ T8224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.723855][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.799021][ T8222] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 225.876377][ T8222] Remounting filesystem read-only [ 225.897738][ T8222] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 225.946088][ T8222] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 225.956185][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 225.988011][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 226.012973][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.034613][ T8222] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 226.069442][ T9] usb 2-1: Product: syz [ 226.104568][ T9] usb 2-1: Manufacturer: syz [ 226.109200][ T9] usb 2-1: SerialNumber: syz [ 226.121827][ T8233] NILFS (loop0): error -2 truncating bmap (ino=16) [ 226.122009][ T8222] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 226.159522][ T8237] vlan2: entered promiscuous mode [ 226.193316][ T9] usb 2-1: config 0 descriptor?? [ 226.209532][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 226.249304][ T8237] bridge0: entered promiscuous mode [ 226.270710][ T30] audit: type=1800 audit(1757842473.764:12): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.826" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 226.314974][ T8232] loop4: detected capacity change from 0 to 4096 [ 226.460644][ T8232] ntfs3(loop4): ino=18, mi_enum_attr [ 226.486818][ T8232] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 226.535704][ T8232] ntfs3(loop4): ino=1a, mi_enum_attr [ 226.562013][ T5872] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 226.620125][ T9] gspca_se401: Wrong descriptor type [ 226.761284][ T5926] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 226.846582][ T5940] usb 2-1: USB disconnect, device number 10 [ 226.984809][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.010529][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.028207][ T5926] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.045213][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 227.091725][ T5926] usb 6-1: SerialNumber: syz [ 227.200570][ T5955] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.314947][ T5926] usb 6-1: 0:2 : does not exist [ 227.380727][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 227.396728][ T5955] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 227.396954][ T5926] usb 6-1: USB disconnect, device number 4 [ 227.421814][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.446630][ T5955] usb 4-1: Product: syz [ 227.455462][ T5955] usb 4-1: Manufacturer: syz [ 227.460085][ T5955] usb 4-1: SerialNumber: syz [ 227.492198][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.513215][ T5955] usb 4-1: config 0 descriptor?? [ 227.540274][ T8261] loop0: detected capacity change from 0 to 1024 [ 227.584535][ T5955] usb 4-1: selecting invalid altsetting 3 [ 227.596879][ T5955] comedi comedi4: could not set alternate setting 3 in high speed [ 227.621732][ T5955] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 227.633581][ T8261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.673894][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.690725][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 227.700982][ T5955] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 227.746735][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 227.764917][ T5955] usb 4-1: USB disconnect, device number 9 [ 227.794124][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 227.835793][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.860166][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 227.882702][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 227.913644][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.933137][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 227.960674][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.978462][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 228.014983][ T9] usb 5-1: Product: syz [ 228.019211][ T9] usb 5-1: Manufacturer: syz [ 228.034174][ T9] usb 5-1: SerialNumber: syz [ 228.048399][ T9] usb 5-1: config 0 descriptor?? [ 228.078167][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 228.099887][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 228.125210][ T8272] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 228.147378][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.156775][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.176354][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 228.196812][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.204253][ T8272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.212639][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.219811][ T8272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.256280][ T8272] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.272111][ T8273] bridge_slave_1: left allmulticast mode [ 228.278065][ T8273] bridge_slave_1: left promiscuous mode [ 228.290757][ T5963] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 228.361543][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.429099][ T8273] bridge_slave_0: left allmulticast mode [ 228.445748][ T8271] loop5: detected capacity change from 0 to 32768 [ 228.454083][ T8271] btrfs: Deprecated parameter 'usebackuproot' [ 228.460175][ T8271] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.465636][ T8273] bridge_slave_0: left promiscuous mode [ 228.474818][ T8271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.847 (8271) [ 228.493276][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.494124][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 228.510647][ T8271] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.516960][ T5955] usb 5-1: USB disconnect, device number 7 [ 228.527083][ T8271] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 228.551103][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.564801][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.598211][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.609435][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.623612][ T5955] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 228.635980][ T10] usb 3-1: SerialNumber: syz [ 228.649413][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 228.694915][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.715040][ T5963] usb 2-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 228.742335][ T3519] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xe9f3fa9a level 0 [ 228.766650][ T8271] BTRFS warning (device loop5): couldn't read tree root [ 228.771955][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.774801][ T8271] BTRFS warning (device loop5): try to load backup roots slot 1 [ 228.803663][ T13] BTRFS warning (device loop5): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xaeea91f2 level 0 [ 228.811041][ T8273] bond0: (slave bridge0): Releasing backup interface [ 228.842253][ T5963] usb 2-1: config 0 descriptor?? [ 228.849044][ T8268] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.888040][ T8271] BTRFS warning (device loop5): failed to read root (objectid=4): -5 [ 228.896941][ T8271] BTRFS warning (device loop5): try to load backup roots slot 2 [ 228.909213][ T7668] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 228.924463][ T10] usb 3-1: 0:2 : does not exist [ 228.939749][ T10] usb 3-1: unit 5: unexpected type 0x03 [ 228.981270][ T8271] BTRFS warning (device loop5): couldn't read tree root [ 228.988276][ T8271] BTRFS warning (device loop5): try to load backup roots slot 3 [ 229.008333][ T8271] BTRFS warning (device loop5): global root 2 0 already exists [ 229.017826][ T8271] BTRFS error (device loop5): failed to load root extent [ 229.042986][ T8271] BTRFS error (device loop5): open_ctree failed: -17 [ 229.084325][ T10] usb 3-1: USB disconnect, device number 6 [ 229.147196][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.440541][ T5963] hid-generic 0003:0486:0185.0019: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.1-1/input0 [ 229.667120][ T5940] usb 2-1: USB disconnect, device number 11 [ 229.880614][ T5963] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 229.904869][ T8307] loop5: detected capacity change from 0 to 256 [ 229.964188][ T8307] exfat: Deprecated parameter 'utf8' [ 229.969631][ T8307] exfat: Deprecated parameter 'namecase' [ 230.005402][ T8307] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 230.023883][ T8303] fido_id[8303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 230.084241][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.170761][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.204813][ T5963] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 230.234348][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.290077][ T8309] loop3: detected capacity change from 0 to 4096 [ 230.330814][ T5963] usb 1-1: config 0 descriptor?? [ 230.642460][ T8316] loop1: detected capacity change from 0 to 2048 [ 230.813981][ T5963] aquacomputer_d5next 0003:0C70:F014.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 230.828524][ T8316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.933280][ T8325] loop2: detected capacity change from 0 to 64 [ 231.030273][ T5963] usb 1-1: USB disconnect, device number 7 [ 231.111919][ T8330] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 231.111919][ T8330] program syz.5.865 not setting count and/or reply_len properly [ 231.278884][ T8334] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 231.348831][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.352191][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.356805][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.424566][ T8329] fido_id[8329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 231.494759][ T8294] Bluetooth: hci1: command 0x0406 tx timeout [ 231.503726][ T8294] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.509755][ T8294] Bluetooth: hci3: command 0x0406 tx timeout [ 231.514483][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 231.522326][ T8294] Bluetooth: hci2: command 0x0406 tx timeout [ 231.532069][ T8296] Bluetooth: hci4: command 0x0406 tx timeout [ 231.619868][ T8339] loop5: detected capacity change from 0 to 512 [ 231.643622][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.650880][ T8334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.658520][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.665731][ T8334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.804935][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.820008][ T8334] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.828212][ T8341] loop4: detected capacity change from 0 to 2048 [ 231.873483][ T8339] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.910767][ T8335] bridge_slave_1: left allmulticast mode [ 231.950806][ T8335] bridge_slave_1: left promiscuous mode [ 232.011282][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.018987][ T8350] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.129731][ T8341] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 232.161795][ T8335] bridge_slave_0: left allmulticast mode [ 232.168633][ T8341] Remounting filesystem read-only [ 232.182847][ T8341] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 232.200640][ T8335] bridge_slave_0: left promiscuous mode [ 232.205019][ T8341] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 232.252084][ T8357] NILFS (loop4): error -2 truncating bmap (ino=16) [ 232.255633][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.272808][ T8341] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 232.309231][ T8341] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 232.356118][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.380727][ T30] audit: type=1800 audit(1757842479.874:13): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.870" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 232.498574][ T8335] bond0: (slave bridge0): Releasing backup interface [ 232.644695][ T5870] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 232.785310][ T8364] loop5: detected capacity change from 0 to 256 [ 232.888143][ T8364] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 233.417206][ T5926] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.454106][ T8353] loop1: detected capacity change from 0 to 32768 [ 233.610565][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 233.622707][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.635995][ T8389] syz.2.886 uses obsolete (PF_INET,SOCK_PACKET) [ 233.661776][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.737187][ T5926] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 233.775785][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.818364][ T5926] usb 1-1: config 0 descriptor?? [ 234.240683][ T5963] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 234.342101][ T5926] glorious 0003:258A:0033.001B: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0 [ 234.490811][ T5963] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 234.499926][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.536254][ T5926] usb 1-1: USB disconnect, device number 8 [ 234.548956][ T5963] usb 6-1: Product: syz [ 234.548987][ T5963] usb 6-1: Manufacturer: syz [ 234.698900][ T5963] usb 6-1: SerialNumber: syz [ 234.742294][ T5963] usb 6-1: config 0 descriptor?? [ 234.828920][ T8398] fido_id[8398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.048659][ T8411] netlink: 'syz.2.893': attribute type 10 has an invalid length. [ 235.101484][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.109257][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.143064][ T5963] usb 6-1: USB disconnect, device number 5 [ 235.230207][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 235.279474][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.286722][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.294340][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.301571][ T8411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.397389][ T8411] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 235.448191][ T8420] netlink: 'syz.0.895': attribute type 5 has an invalid length. [ 235.470806][ T8414] bridge_slave_1: left allmulticast mode [ 235.534956][ T8414] bridge_slave_1: left promiscuous mode [ 235.594380][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.666688][ T8414] bridge_slave_0: left allmulticast mode [ 235.705742][ T8414] bridge_slave_0: left promiscuous mode [ 235.755798][ T5940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.770990][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.966394][ T5940] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 236.000619][ T5940] usb 4-1: config 0 has no interface number 0 [ 236.032917][ T8414] bond0: (slave bridge0): Releasing backup interface [ 236.052470][ T5940] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=19.c9 [ 236.064389][ T8431] loop0: detected capacity change from 0 to 128 [ 236.090845][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.110362][ T5940] usb 4-1: Product: syz [ 236.133001][ T5940] usb 4-1: Manufacturer: syz [ 236.137641][ T5940] usb 4-1: SerialNumber: syz [ 236.177667][ T5940] usb 4-1: config 0 descriptor?? [ 236.442851][ T5940] ftdi_sio 4-1:0.16: FTDI USB Serial Device converter detected [ 236.483395][ T5940] ftdi_sio ttyUSB0: unknown device type: 0x19c9 [ 236.544396][ T5940] usb 4-1: USB disconnect, device number 10 [ 236.576608][ T5940] ftdi_sio 4-1:0.16: device disconnected [ 236.614535][ T8407] loop1: detected capacity change from 0 to 32768 [ 236.717746][ T8407] JBD2: Ignoring recovery information on journal [ 236.730763][ T5963] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.910542][ T5963] usb 6-1: Using ep0 maxpacket: 8 [ 236.932281][ T5963] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 236.989786][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.022526][ T8407] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 237.048811][ T5963] usb 6-1: Product: syz [ 237.070526][ T5963] usb 6-1: Manufacturer: syz [ 237.099512][ T5963] usb 6-1: SerialNumber: syz [ 237.141344][ T5963] usb 6-1: config 0 descriptor?? [ 237.256354][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 237.506152][ T10] usb 6-1: USB disconnect, device number 6 [ 237.539350][ T5863] ocfs2: Unmounting device (7,1) on (node local) [ 237.651810][ T8462] loop0: detected capacity change from 0 to 1024 [ 237.793910][ T8462] hfsplus: bad catalog entry type [ 238.005046][ T69] hfsplus: b-tree write err: -5, ino 4 [ 238.649777][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 238.696603][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 238.776999][ T8485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.917'. [ 239.006716][ T8493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.150759][ T5963] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 239.356954][ T5963] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 239.396163][ T5963] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 239.435731][ T5963] usb 1-1: config 0 has no interface number 0 [ 239.442241][ T8503] sd 0:0:1:0: device reset [ 239.457740][ T5963] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 239.508235][ T8506] loop4: detected capacity change from 0 to 512 [ 239.515047][ T5963] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.598268][ T5963] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 239.695429][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.733678][ T8506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.756885][ T8505] loop1: detected capacity change from 0 to 32768 [ 239.764557][ T8505] btrfs: Deprecated parameter 'usebackuproot' [ 239.770702][ T8505] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 239.782210][ T5963] usb 1-1: config 0 descriptor?? [ 239.787418][ T8506] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.804476][ T8505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.926 (8505) [ 239.848400][ T8505] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.858666][ T8505] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 239.891444][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.898435][ T8506] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #12: comm syz.4.928: corrupted xattr block 6: invalid header [ 240.051110][ T30] audit: type=1800 audit(1757842487.544:14): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.932" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 240.078033][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xe9f3fa9a level 0 [ 240.090645][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 240.096538][ T8505] BTRFS warning (device loop1): couldn't read tree root [ 240.096573][ T8505] BTRFS warning (device loop1): try to load backup roots slot 1 [ 240.102748][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xaeea91f2 level 0 [ 240.127647][ T8505] BTRFS warning (device loop1): failed to read root (objectid=4): -5 [ 240.136198][ T8505] BTRFS warning (device loop1): try to load backup roots slot 2 [ 240.145108][ T12] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 240.155567][ T8505] BTRFS warning (device loop1): couldn't read tree root [ 240.162595][ T8505] BTRFS warning (device loop1): try to load backup roots slot 3 [ 240.172041][ T8505] BTRFS warning (device loop1): global root 2 0 already exists [ 240.179644][ T8505] BTRFS error (device loop1): failed to load root extent [ 240.231806][ T5940] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 240.231972][ T8505] BTRFS error (device loop1): open_ctree failed: -17 [ 240.311364][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.319432][ T5940] usb 4-1: Product: syz [ 240.380659][ T5940] usb 4-1: Manufacturer: syz [ 240.385329][ T5940] usb 4-1: SerialNumber: syz [ 240.422243][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.435615][ T5940] usb 4-1: config 0 descriptor?? [ 240.484757][ T5940] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 240.560276][ T5963] usb 1-1: USB disconnect, device number 9 [ 240.875580][ T8539] loop5: detected capacity change from 0 to 2048 [ 240.995968][ T8539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.148131][ T5940] gspca_ov534_9: reg_w failed -71 [ 241.238062][ T8549] loop4: detected capacity change from 0 to 2048 [ 241.377447][ T6115] loop4: p1 < > p4 < > [ 241.387181][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.392106][ T6115] loop4: partition table partially beyond EOD, truncated [ 241.429748][ T6115] loop4: p1 start 8388352 is beyond EOD, truncated [ 241.461232][ T5940] gspca_ov534_9: Unknown sensor 0000 [ 241.461326][ T5940] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 241.475964][ T8549] loop4: p1 < > p4 < > [ 241.494864][ T8549] loop4: partition table partially beyond EOD, truncated [ 241.523302][ T5940] usb 4-1: USB disconnect, device number 11 [ 241.533744][ T8549] loop4: p1 start 8388352 is beyond EOD, truncated [ 241.808046][ T8561] loop0: detected capacity change from 0 to 64 [ 241.910007][ T8561] hfs: get root inode failed [ 241.937298][ T8563] loop4: detected capacity change from 0 to 64 [ 241.989380][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 242.000721][ T5940] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.145920][ T8563] [ 242.148266][ T8563] ====================================================== [ 242.155279][ T8563] WARNING: possible circular locking dependency detected [ 242.162292][ T8563] syzkaller #0 Not tainted [ 242.166705][ T8563] ------------------------------------------------------ [ 242.173714][ T8563] syz.4.947/8563 is trying to acquire lock: [ 242.179600][ T8563] ffff88805270a178 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 242.190353][ T8563] [ 242.190353][ T8563] but task is already holding lock: [ 242.197715][ T8563] ffff8880252da0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x1c3/0x240 [ 242.207088][ T8563] [ 242.207088][ T8563] which lock already depends on the new lock. [ 242.207088][ T8563] [ 242.217571][ T8563] [ 242.217571][ T8563] the existing dependency chain (in reverse order) is: [ 242.226572][ T8563] [ 242.226572][ T8563] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 242.234505][ T8563] __mutex_lock+0x193/0x1060 [ 242.239643][ T8563] hfs_find_init+0x1c3/0x240 [ 242.244855][ T8563] hfs_ext_read_extent+0x19b/0x9e0 [ 242.250585][ T8563] hfs_get_block+0x55f/0x830 [ 242.255791][ T8563] block_read_full_folio+0x457/0x850 [ 242.261616][ T8563] filemap_read_folio+0xc8/0x2a0 [ 242.267181][ T8563] do_read_cache_folio+0x263/0x5c0 [ 242.272811][ T8563] read_cache_page+0x5b/0x160 [ 242.278008][ T8563] __hfs_bnode_create+0x62d/0x8a0 [ 242.283653][ T8563] hfs_bnode_find+0x2dc/0xd50 [ 242.288866][ T8563] hfs_brec_find+0x2b1/0x540 [ 242.293985][ T8563] hfs_brec_read+0x26/0x120 [ 242.299022][ T8563] hfs_cat_find_brec+0xd8/0x2c0 [ 242.304412][ T8563] hfs_fill_super+0x47f/0x730 [ 242.309627][ T8563] get_tree_bdev_flags+0x38c/0x620 [ 242.315281][ T8563] vfs_get_tree+0x8e/0x340 [ 242.320230][ T8563] path_mount+0x1513/0x2000 [ 242.325258][ T8563] __x64_sys_mount+0x28d/0x310 [ 242.330548][ T8563] do_syscall_64+0xcd/0x4e0 [ 242.335571][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.342106][ T8563] [ 242.342106][ T8563] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 242.351425][ T8563] __lock_acquire+0x12a6/0x1ce0 [ 242.357057][ T8563] lock_acquire+0x179/0x350 [ 242.362281][ T8563] __mutex_lock+0x193/0x1060 [ 242.367534][ T8563] hfs_extend_file+0xa1/0xb10 [ 242.373296][ T8563] hfs_bmap_reserve+0x2a2/0x390 [ 242.378717][ T8563] __hfs_ext_write_extent+0x3cf/0x520 [ 242.384725][ T8563] hfs_ext_write_extent+0x1b5/0x1f0 [ 242.390558][ T8563] hfs_write_inode+0xc3/0x9f0 [ 242.395857][ T8563] __writeback_single_inode+0xb3e/0xfb0 [ 242.402140][ T8563] writeback_single_inode+0x2bc/0x550 [ 242.408144][ T8563] write_inode_now+0x170/0x1e0 [ 242.413451][ T8563] hfs_file_fsync+0xa7/0x190 [ 242.418570][ T8563] vfs_fsync_range+0x139/0x220 [ 242.423862][ T8563] generic_file_write_iter+0x305/0x3c0 [ 242.429985][ T8563] vfs_write+0x7d3/0x11d0 [ 242.434853][ T8563] ksys_write+0x12a/0x250 [ 242.439726][ T8563] do_syscall_64+0xcd/0x4e0 [ 242.444951][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.451466][ T8563] [ 242.451466][ T8563] other info that might help us debug this: [ 242.451466][ T8563] [ 242.461788][ T8563] Possible unsafe locking scenario: [ 242.461788][ T8563] [ 242.469416][ T8563] CPU0 CPU1 [ 242.474787][ T8563] ---- ---- [ 242.480167][ T8563] lock(&tree->tree_lock/1); [ 242.484887][ T8563] lock(&HFS_I(tree->inode)->extents_lock); [ 242.493401][ T8563] lock(&tree->tree_lock/1); [ 242.500798][ T8563] lock(&HFS_I(tree->inode)->extents_lock); [ 242.506791][ T8563] [ 242.506791][ T8563] *** DEADLOCK *** [ 242.506791][ T8563] [ 242.514926][ T8563] 4 locks held by syz.4.947/8563: [ 242.519943][ T8563] #0: ffff888055d41438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 242.529041][ T8563] #1: ffff8880324e2428 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 242.538181][ T8563] #2: ffff88805270b020 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: hfs_file_fsync+0x9d/0x190 [ 242.548783][ T8563] #3: ffff8880252da0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x1c3/0x240 [ 242.558609][ T8563] [ 242.558609][ T8563] stack backtrace: [ 242.564501][ T8563] CPU: 1 UID: 0 PID: 8563 Comm: syz.4.947 Not tainted syzkaller #0 PREEMPT(full) [ 242.564542][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.564562][ T8563] Call Trace: [ 242.564573][ T8563] [ 242.564584][ T8563] dump_stack_lvl+0x116/0x1f0 [ 242.564640][ T8563] print_circular_bug+0x275/0x350 [ 242.564693][ T8563] check_noncircular+0x14c/0x170 [ 242.564750][ T8563] __lock_acquire+0x12a6/0x1ce0 [ 242.564810][ T8563] lock_acquire+0x179/0x350 [ 242.564861][ T8563] ? hfs_extend_file+0xa1/0xb10 [ 242.564896][ T8563] ? __pfx___might_resched+0x10/0x10 [ 242.564938][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.564982][ T8563] ? hfs_extend_file+0xa1/0xb10 [ 242.565012][ T8563] __mutex_lock+0x193/0x1060 [ 242.565063][ T8563] ? hfs_extend_file+0xa1/0xb10 [ 242.565094][ T8563] ? __lock_acquire+0x107f/0x1ce0 [ 242.565150][ T8563] ? __pfx___mutex_lock+0x10/0x10 [ 242.565213][ T8563] ? __pfx___might_resched+0x10/0x10 [ 242.565255][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565293][ T8563] ? rcu_is_watching+0x12/0xc0 [ 242.565338][ T8563] ? hfs_extend_file+0xa1/0xb10 [ 242.565367][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565406][ T8563] hfs_extend_file+0xa1/0xb10 [ 242.565440][ T8563] ? __pfx_hfs_extend_file+0x10/0x10 [ 242.565473][ T8563] ? hfs_brec_find+0x3ea/0x540 [ 242.565516][ T8563] ? __pfx___mutex_lock+0x10/0x10 [ 242.565573][ T8563] hfs_bmap_reserve+0x2a2/0x390 [ 242.565627][ T8563] ? rcu_is_watching+0x12/0xc0 [ 242.565673][ T8563] __hfs_ext_write_extent+0x3cf/0x520 [ 242.565709][ T8563] hfs_ext_write_extent+0x1b5/0x1f0 [ 242.565741][ T8563] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 242.565778][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565817][ T8563] ? blk_finish_plug+0x53/0xa0 [ 242.565856][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565894][ T8563] ? mpage_writepages+0x159/0x1c0 [ 242.565942][ T8563] ? __pfx_mpage_writepages+0x10/0x10 [ 242.565991][ T8563] hfs_write_inode+0xc3/0x9f0 [ 242.566028][ T8563] ? __pfx_hfs_write_inode+0x10/0x10 [ 242.566063][ T8563] ? __lock_acquire+0xb97/0x1ce0 [ 242.566129][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.566174][ T8563] __writeback_single_inode+0xb3e/0xfb0 [ 242.566225][ T8563] ? __pfx___writeback_single_inode+0x10/0x10 [ 242.566269][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.566307][ T8563] ? do_raw_spin_unlock+0x172/0x230 [ 242.566343][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.566385][ T8563] writeback_single_inode+0x2bc/0x550 [ 242.566434][ T8563] write_inode_now+0x170/0x1e0 [ 242.566478][ T8563] ? __pfx_write_inode_now+0x10/0x10 [ 242.566548][ T8563] ? down_write+0x14d/0x200 [ 242.566580][ T8563] ? __pfx_down_write+0x10/0x10 [ 242.566613][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.566654][ T8563] ? __pfx_hfs_file_fsync+0x10/0x10 [ 242.566687][ T8563] hfs_file_fsync+0xa7/0x190 [ 242.566721][ T8563] vfs_fsync_range+0x139/0x220 [ 242.566751][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.566793][ T8563] generic_file_write_iter+0x305/0x3c0 [ 242.566833][ T8563] vfs_write+0x7d3/0x11d0 [ 242.566883][ T8563] ? __pfx_generic_file_write_iter+0x10/0x10 [ 242.566921][ T8563] ? __pfx___mutex_lock+0x10/0x10 [ 242.566973][ T8563] ? __pfx_vfs_write+0x10/0x10 [ 242.567038][ T8563] ksys_write+0x12a/0x250 [ 242.567087][ T8563] ? __pfx_ksys_write+0x10/0x10 [ 242.567138][ T8563] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.567182][ T8563] do_syscall_64+0xcd/0x4e0 [ 242.567217][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.567250][ T8563] RIP: 0033:0x7fae8518eba9 [ 242.567276][ T8563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.567308][ T8563] RSP: 002b:00007fae85f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.567338][ T8563] RAX: ffffffffffffffda RBX: 00007fae853d5fa0 RCX: 00007fae8518eba9 [ 242.567360][ T8563] RDX: 0000000000000c34 RSI: 0000200000000940 RDI: 0000000000000004 [ 242.567380][ T8563] RBP: 00007fae85211e19 R08: 0000000000000000 R09: 0000000000000000 [ 242.567400][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.567420][ T8563] R13: 00007fae853d6038 R14: 00007fae853d5fa0 R15: 00007fffcd6216d8 [ 242.567454][ T8563] [ 242.981083][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to send rpc fd=3 want=5432 sent=0 n=-1 (errno 32: Broken pipe) [ 243.131843][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.141767][ T5940] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 243.150857][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.160790][ T5940] usb 2-1: config 0 descriptor?? [ 243.170525][ T69] wlan1: Trigger new scan to find an IBSS to join [ 243.354085][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 243.418942][ T5955] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.975394][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 243.981903][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 244.069972][ T5940] usb 2-1: USB disconnect, device number 12 [ 244.100341][ T1098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.160359][ T8563] hfs: node 4:3 still has 1 user(s)! [ 244.206909][ T1098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.256820][ T1098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.317584][ T1098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.414452][ T1098] bridge_slave_1: left allmulticast mode [ 244.420189][ T1098] bridge_slave_1: left promiscuous mode [ 244.426158][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.434936][ T1098] bridge_slave_0: left allmulticast mode [ 244.440773][ T1098] bridge_slave_0: left promiscuous mode [ 244.446426][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.559212][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.571534][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.582010][ T1098] bond0 (unregistering): Released all slaves [ 244.820041][ T1098] hsr_slave_0: left promiscuous mode [ 244.828394][ T1098] hsr_slave_1: left promiscuous mode [ 244.844443][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.851987][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.859806][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.867333][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.882533][ T1098] veth1_macvtap: left promiscuous mode [ 244.888089][ T1098] veth0_macvtap: left promiscuous mode [ 244.896256][ T1098] veth1_vlan: left promiscuous mode [ 244.901842][ T1098] veth0_vlan: left promiscuous mode [ 245.093425][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 245.114109][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 245.448981][ T1098] IPVS: stop unused estimator thread 0... [ 245.499841][ T1098] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.539338][ T1098] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.590935][ T1098] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.636296][ T1098] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.747403][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.798751][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.858370][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.927714][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.053448][ T1098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.088317][ T1098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.156440][ T1098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.224079][ T1098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.350388][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.397706][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.446930][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.537529][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.629682][ T1098] bridge_slave_1: left allmulticast mode [ 246.637311][ T1098] bridge_slave_1: left promiscuous mode [ 246.643953][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.653430][ T1098] bridge_slave_0: left allmulticast mode [ 246.659088][ T1098] bridge_slave_0: left promiscuous mode [ 246.667455][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.878975][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.892280][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.907839][ T1098] bond0 (unregistering): Released all slaves [ 246.966748][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.985652][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.995503][ T1098] bond0 (unregistering): Released all slaves [ 247.085321][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.095490][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.105308][ T1098] bond0 (unregistering): Released all slaves [ 247.156996][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.172933][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.182927][ T1098] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 247.194053][ T1098] bond0 (unregistering): Released all slaves [ 247.815898][ T1098] hsr_slave_0: left promiscuous mode [ 247.823505][ T1098] hsr_slave_1: left promiscuous mode [ 247.829250][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.839578][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.847459][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.855020][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.865605][ T1098] hsr_slave_0: left promiscuous mode [ 247.871565][ T1098] hsr_slave_1: left promiscuous mode [ 247.877609][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.887111][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.895024][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.902913][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.913651][ T1098] hsr_slave_0: left promiscuous mode [ 247.919407][ T1098] hsr_slave_1: left promiscuous mode [ 247.927108][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.935163][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.943521][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.951258][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.962389][ T1098] hsr_slave_0: left promiscuous mode [ 247.968916][ T1098] hsr_slave_1: left promiscuous mode [ 247.974787][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.990177][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.998420][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.006464][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.029746][ T1098] veth1_macvtap: left promiscuous mode [ 248.039146][ T1098] veth0_macvtap: left promiscuous mode [ 248.045028][ T1098] veth1_vlan: left promiscuous mode [ 248.050317][ T1098] veth0_vlan: left promiscuous mode [ 248.056602][ T1098] veth1_macvtap: left promiscuous mode [ 248.062157][ T1098] veth0_macvtap: left promiscuous mode [ 248.067727][ T1098] veth1_vlan: left promiscuous mode [ 248.073372][ T1098] veth0_vlan: left promiscuous mode [ 248.079671][ T1098] veth1_macvtap: left promiscuous mode [ 248.085416][ T1098] veth0_macvtap: left promiscuous mode [ 248.091068][ T1098] veth1_vlan: left promiscuous mode [ 248.096342][ T1098] veth0_vlan: left promiscuous mode [ 248.102760][ T1098] veth1_macvtap: left promiscuous mode [ 248.108268][ T1098] veth0_macvtap: left promiscuous mode [ 248.114237][ T1098] veth1_vlan: left promiscuous mode [ 248.119532][ T1098] veth0_vlan: left promiscuous mode [ 248.414525][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 248.433770][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 248.608533][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 248.626039][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 248.775947][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 248.793976][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 248.949522][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 248.970766][ T1098] team0 (unregistering): Port device team_slave_0 removed