last executing test programs: 5.5048889s ago: executing program 1 (id=1664): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r0) fanotify_init(0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 5.347012394s ago: executing program 3 (id=1668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) 5.259584311s ago: executing program 3 (id=1669): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nodiscard}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@ref_verify}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8001}}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@barrier}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(0x0, 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x147042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) pwrite64(r0, 0x0, 0x0, 0x0) 4.599125849s ago: executing program 1 (id=1689): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3a08000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000b80)="$eJzs3MtrXFUYAPBv7mTSps/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppItgSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvznjwnmej8fjDhnHvPzDnfPfdMzj13ZgJoWz3Zn0rEnoj4JUsneXZGWhTKyk1PjQ3+MTU2WIk0fe33Sr7v9tTYYFm2fN6eInM0iUg+rsThJeoduXb90sDw8NDVIt87evnd3pFr15++eHngwtCFoXf6z5w5eaLvmdP9p5oS596srYc+uHLk4Etv3Hxl8OzNt374qqNs64I4mqUneuYdy7kea3ZlLbZ3TrrS0cKGsCbViMi6q5aP//1RjdnO2x8vftTSxgGbKk3TdF/j3RMp8D9WiVa3AGiN8h/97amuiBgb3Izr4O1s8rn6BVAW93TxqO/piKQoU1twfdtMO4t1k7MTf34eeT/saKvjDwBsvW+y+c9T9flP+ajv6Y575pTbl68HZ1sj7oiIOyPiroi4OyIORORl742I+9ZYf8+C/OL5Z3JrXYGtUjb/e7a4tzV//lfM/v5Ju6tFbm90RXfUKucvDg8dL47J0ajtyPJ9y9Tx7Qs/f9poX08x9ysfWf3lXLBox62OHfOfc25gdGBjUc+a/DBfAxxfHP/snassdTAiDq3j9bN588UnvjzSaP/K8S+jCfeZ0i8iHq/3/0QsE//C+5Ndxb7T/ad6d8bw0PHe8qxY7MefbrzaqP4Nxd8EWf/vWvL8n4m/uzL3fu3I2uu48esnDa9p1nD+v1luyc7/zsrrebqz2Pb+wOjo1b6IzsrLi7f3z75amS/LT+45EPHI0uM/e4/LzrEs/sMRkZ3E90fEAxHxYNH2hyLi4chfYinj0xHx/fOPvr2e+JOVDmwTZP1/bl7/xwr9v/ZE9dJ3X68n/rqs/0/mqaPFltW8/622gRs5dgAAAPBfkeSfga8kx2bSSXLsWMTufG13VzJ8ZWT0yfNX3vvrXP2z8t1RS8qVrvp6cH09tK9YGy7z/QvyJ4p148+qXXl+V3HvG2id3Q3Gf+a3aqtbB2w639eC9mX8Q/sy/qF9Gf/QvlY7/tNNbgew9ZYa/+MtaAew9cz/oX0Z/9C+jH9oX8Y/tKWNfK9fYoXEeJMPb+c2iStPRJIn0vEWNuPv4mdYVld489pT/lrGyoVrxbjbDj24fKJ170kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN9G8AAAD//8ui3fI=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02ca"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 4.339566441s ago: executing program 1 (id=1681): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) 4.309584854s ago: executing program 3 (id=1693): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 3.77744321s ago: executing program 0 (id=1690): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000001640)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1c, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.731333264s ago: executing program 3 (id=1691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcf, 0x0, &(0x7f00000000c0)) 3.568660528s ago: executing program 3 (id=1704): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x10000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 3.408361432s ago: executing program 1 (id=1696): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) write$binfmt_elf32(r1, 0x0, 0x6fe) 3.398478673s ago: executing program 3 (id=1697): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000026300)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="9dd4c06f3836838e6144804d875a4529049ab2ac56f567464b", @ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.360582807s ago: executing program 4 (id=1698): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="80fd"], 0x9) 3.308597371s ago: executing program 1 (id=1699): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.119844417s ago: executing program 4 (id=1700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x3, 0x0, 0x0, 0x0, @dev}, 0x10) sendfile(r1, r0, 0x0, 0xffefffff) shutdown(r1, 0x0) 2.663560997s ago: executing program 0 (id=1701): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000440)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001280)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) 2.370202913s ago: executing program 0 (id=1705): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}}], 0x2, 0x4008440) 1.904811354s ago: executing program 4 (id=1706): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x2}}, 0x26) 1.904094813s ago: executing program 2 (id=1717): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed}, 0x4a) listen(r0, 0x0) listen(r1, 0x0) 1.798234553s ago: executing program 2 (id=1707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.655605725s ago: executing program 2 (id=1708): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) 1.580114262s ago: executing program 4 (id=1709): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000100)={0x1, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0ce00a70d7edb974"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "000066a100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1, 0xf41, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9dc35700d5295ebc07a620284b8ddfcc446b57e6bbd78d75343f4a7df070cbf6f45507eef0471e0e2fe76973295f8e816e18a99c908adaf90e99efb07f0bedce"}}, 0x80}}, 0x0) 1.466961822s ago: executing program 4 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xaec7, 0x0) 1.466315492s ago: executing program 0 (id=1722): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xe) 1.460799382s ago: executing program 2 (id=1723): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsmount(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x3828}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x1008, r1}, 0x0) 1.36743933s ago: executing program 0 (id=1712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @mptcp=@synack={0x1e, 0x10}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) 1.356627151s ago: executing program 2 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) 133.858218ms ago: executing program 1 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r3, &(0x7f0000000000)={0x10}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0xfffffffffffffffc, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}}, 0x0) 1.252699ms ago: executing program 4 (id=1716): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000800), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000600)=ANY=[], 0x0, 0x1d3, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 555.689µs ago: executing program 2 (id=1728): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'vlan0\x00'}}) 0s ago: executing program 0 (id=1718): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x597, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) kernel console output (not intermixed with test programs): 33912][ T7001] loop2: detected capacity change from 0 to 1024 [ 213.848575][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 213.858847][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 213.906756][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 213.923534][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 213.960734][ T4545] XFS (loop0): Unmounting Filesystem [ 213.967027][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 213.975757][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 213.978444][ T7006] loop4: detected capacity change from 0 to 512 [ 213.993827][ T7006] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.004217][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1146'. [ 214.004860][ T7006] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 214.045035][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 214.054179][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 214.073581][ T7006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 214.082610][ T7006] System zones: 1-12 [ 214.085857][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 214.088626][ T7006] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1145: corrupted in-inode xattr [ 214.106042][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 214.114750][ T7006] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1145: couldn't read orphan inode 15 (err -117) [ 214.155047][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 214.162043][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 214.258927][ T6743] EXT4-fs (loop4): unmounting filesystem. [ 214.397762][ T7017] device team_slave_0 entered promiscuous mode [ 214.404029][ T7017] device team_slave_1 entered promiscuous mode [ 214.442053][ T7017] device team_slave_0 left promiscuous mode [ 214.448087][ T7017] device team_slave_1 left promiscuous mode [ 214.631678][ T7029] loop4: detected capacity change from 0 to 256 [ 214.664563][ T7031] loop2: detected capacity change from 0 to 256 [ 214.688073][ T7029] FAT-fs (loop4): Directory bread(block 64) failed [ 214.694986][ T7029] FAT-fs (loop4): Directory bread(block 65) failed [ 214.733043][ T7029] FAT-fs (loop4): Directory bread(block 66) failed [ 214.753807][ T7029] FAT-fs (loop4): Directory bread(block 67) failed [ 214.771433][ T7029] FAT-fs (loop4): Directory bread(block 68) failed [ 214.781691][ T7029] FAT-fs (loop4): Directory bread(block 69) failed [ 214.791455][ T7029] FAT-fs (loop4): Directory bread(block 70) failed [ 214.801509][ T7029] FAT-fs (loop4): Directory bread(block 71) failed [ 214.811885][ T7029] FAT-fs (loop4): Directory bread(block 72) failed [ 214.838968][ T7029] FAT-fs (loop4): Directory bread(block 73) failed [ 215.011361][ T7043] loop0: detected capacity change from 0 to 256 [ 215.068539][ T7048] loop2: detected capacity change from 0 to 256 [ 215.081288][ T7048] exfat: Deprecated parameter 'utf8' [ 215.086931][ T7048] exfat: Deprecated parameter 'utf8' [ 215.089901][ T7043] sctp: [Deprecated]: syz.0.1164 (pid 7043) Use of int in maxseg socket option. [ 215.089901][ T7043] Use struct sctp_assoc_value instead [ 215.115813][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 215.139859][ T7048] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x811ad48d, utbl_chksum : 0xe619d30d) [ 215.724941][ T7081] loop2: detected capacity change from 0 to 2048 [ 215.773034][ T7081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.828104][ T7085] loop3: detected capacity change from 0 to 16 [ 215.852124][ T7085] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.890733][ T7085] syz.3.1183: attempt to access beyond end of device [ 215.890733][ T7085] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 215.919418][ T7089] loop0: detected capacity change from 0 to 128 [ 215.993938][ T7091] loop2: detected capacity change from 0 to 512 [ 216.018455][ T7092] syz.3.1183: attempt to access beyond end of device [ 216.018455][ T7092] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 216.155818][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 216.444591][ T7089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.447229][ T7085] syz.3.1183 (7085): drop_caches: 2 [ 216.454537][ T7091] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1186: invalid indirect mapped block 8 (level 2) [ 216.511580][ T7089] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038 (0x7fffffff) [ 216.551414][ T7091] EXT4-fs (loop2): 1 truncate cleaned up [ 216.583805][ T7091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 216.693808][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 216.706083][ T7085] syz.3.1183 (7085): drop_caches: 2 [ 216.775410][ T5950] EXT4-fs (loop2): unmounting filesystem. [ 216.809549][ T7111] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.822651][ T7113] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1193'. [ 216.838363][ T7113] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1193'. [ 216.948920][ T33] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 217.196170][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 218.235852][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 218.476382][ T2476] lo_write_bvec: 68 callbacks suppressed [ 218.476400][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 218.545816][ C1] blk_print_req_error: 68 callbacks suppressed [ 218.545835][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 218.561740][ T5050] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 218.647360][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 218.655506][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 218.697917][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 218.736289][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 218.756273][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 218.764420][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 218.839109][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 218.854283][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 218.923435][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 218.975812][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 219.057766][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 219.091973][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 219.106999][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 219.115114][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 219.190189][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 219.226001][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 219.245908][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 219.254043][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 219.325997][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 219.735862][ T33] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 219.761980][ T33] usb 2-1: can't read configurations, error -71 [ 219.803596][ T7149] loop0: detected capacity change from 0 to 128 [ 219.978463][ T7159] loop0: detected capacity change from 0 to 64 [ 220.063307][ T7162] loop2: detected capacity change from 0 to 4096 [ 220.084037][ T7162] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 220.397707][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 221.435827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 221.590021][ T7200] loop2: detected capacity change from 0 to 256 [ 221.615596][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 221.615615][ T26] audit: type=1800 audit(1725989499.469:155): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1229" name="bus" dev="loop2" ino=1048685 res=0 errno=0 [ 221.672982][ T7202] sctp: [Deprecated]: syz.1.1232 (pid 7202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.672982][ T7202] Use struct sctp_sack_info instead [ 221.767150][ T7204] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 221.861800][ T5950] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 221.887074][ T5950] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 221.946783][ T7192] loop4: detected capacity change from 0 to 40427 [ 221.979418][ T7192] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 221.999737][ T7192] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.079195][ T7192] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.140589][ T7192] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.163781][ T7192] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.252049][ T7192] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 222.304476][ T7192] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 222.372146][ T7215] loop0: detected capacity change from 0 to 8192 [ 222.398650][ T7215] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.431030][ T7215] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 222.440806][ T7215] REISERFS (device loop0): using ordered data mode [ 222.447820][ T7215] reiserfs: using flush barriers [ 222.454481][ T7215] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.473463][ T7215] REISERFS (device loop0): checking transaction log (loop0) [ 222.481018][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.556654][ T7215] REISERFS (device loop0): Using tea hash to sort names [ 222.564157][ T7215] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 223.105127][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.130065][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.147219][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.157223][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.164890][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.172315][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.278414][ T7231] loop3: detected capacity change from 0 to 2048 [ 223.314103][ T7231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.515941][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 223.534375][ T46] lo_write_bvec: 65 callbacks suppressed [ 223.534393][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 223.559821][ T7225] chnl_net:caif_netlink_parms(): no params data found [ 223.567349][ C0] blk_print_req_error: 65 callbacks suppressed [ 223.567365][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 223.592242][ T7] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 223.636389][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 223.660319][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 223.698045][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 223.734554][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 223.769308][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 223.824547][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 223.856563][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.863849][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.886180][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 223.914707][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 223.926992][ T7225] device bridge_slave_0 entered promiscuous mode [ 223.955935][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 223.964979][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 223.996565][ T7263] netlink: 'syz.3.1257': attribute type 4 has an invalid length. [ 223.996635][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.007411][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 224.038662][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.047967][ T7225] device bridge_slave_1 entered promiscuous mode [ 224.075096][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 224.122813][ T7225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.132441][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 224.149245][ T7265] loop0: detected capacity change from 0 to 1024 [ 224.161354][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 224.164939][ T7225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.192359][ T46] loop: Write error at byte offset 9223372036854808575, length 4096. [ 224.204566][ T7265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.214059][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 224.247855][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 224.272968][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 224.293379][ T7265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.346356][ T7225] team0: Port device team_slave_0 added [ 224.355218][ T7225] team0: Port device team_slave_1 added [ 224.414209][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 224.433997][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.455803][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.506293][ T5050] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 224.529859][ T7225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.555843][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 224.576913][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.595950][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.685851][ T7225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.762390][ T7225] device hsr_slave_0 entered promiscuous mode [ 224.776069][ T7225] device hsr_slave_1 entered promiscuous mode [ 224.786593][ T7225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.804634][ T7225] Cannot create hsr debugfs directory [ 224.876935][ T5050] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 224.892336][ T7289] loop0: detected capacity change from 0 to 1024 [ 224.899076][ T5050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.977838][ T5050] usb 4-1: config 0 descriptor?? [ 225.058778][ T7293] loop4: detected capacity change from 0 to 2048 [ 225.066355][ T7293] EXT4-fs: Ignoring removed orlov option [ 225.115232][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.147341][ T7293] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.172777][ T7293] EXT4-fs (loop4): Remounting filesystem read-only [ 225.192437][ T7225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.205812][ T3648] Bluetooth: hci4: command tx timeout [ 225.217859][ T6743] EXT4-fs (loop4): unmounting filesystem. [ 225.255953][ T5050] usb 4-1: string descriptor 0 read error: -71 [ 225.263589][ T5050] ldusb 4-1:0.0: Interrupt in endpoint not found [ 225.286750][ T5050] usb 4-1: USB disconnect, device number 7 [ 225.414275][ T7302] loop4: detected capacity change from 0 to 128 [ 225.433099][ T7225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.573011][ T7225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.595850][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 225.637985][ T7308] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 225.743301][ T7225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.812780][ T7318] loop3: detected capacity change from 0 to 128 [ 226.041106][ T7225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.074845][ T7225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.102255][ T7225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.118619][ T7225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.226897][ T7225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.259514][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.271083][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.296804][ T7225] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.318730][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.337533][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.354958][ T2504] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.362173][ T2504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.390192][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.411439][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.429104][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.448907][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.456084][ T2504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.482693][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.500066][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.542611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.557906][ T7315] loop0: detected capacity change from 0 to 40427 [ 226.568164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.576986][ T7315] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 226.585844][ T7315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 226.594714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.611885][ T7315] F2FS-fs (loop0): invalid crc value [ 226.622028][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.636001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 226.656687][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.679917][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.694587][ T7315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 226.710185][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.734865][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.753767][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.785931][ T7225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.801474][ T7315] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 226.809220][ T7315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 226.871253][ T7315] syz.0.1278: attempt to access beyond end of device [ 226.871253][ T7315] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 226.956023][ T3652] Bluetooth: hci2: command 0x0406 tx timeout [ 227.124790][ T9] kworker/u4:0: attempt to access beyond end of device [ 227.124790][ T9] loop0: rw=1, sector=45216, nr_sectors = 8 limit=40427 [ 227.174596][ T4545] syz-executor: attempt to access beyond end of device [ 227.174596][ T4545] loop0: rw=2051, sector=45096, nr_sectors = 120 limit=40427 [ 227.201901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.209856][ T4545] F2FS-fs (loop0): Issue discard(5637, 5637, 15) failed, ret: -5 [ 227.233828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.234271][ T7346] loop3: detected capacity change from 0 to 64 [ 227.270118][ T7225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.277010][ T48] Bluetooth: hci4: command tx timeout [ 227.307783][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.324622][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.360911][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.379974][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.403792][ T7225] device veth0_vlan entered promiscuous mode [ 227.419079][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.433827][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.465267][ T7225] device veth1_vlan entered promiscuous mode [ 227.514818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.529204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.545666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.555293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.576749][ T7225] device veth0_macvtap entered promiscuous mode [ 227.595185][ T7225] device veth1_macvtap entered promiscuous mode [ 227.613953][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.633422][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.646462][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.664715][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.675857][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 227.700874][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.718958][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.732809][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.752660][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.761909][ T7359] overlayfs: failed to resolve './file1': -2 [ 227.769362][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.785787][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.798039][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.808628][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.828098][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.835442][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.871056][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.879332][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.888171][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.914077][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.927307][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.945079][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.956608][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.970961][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.985944][ T5044] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 228.013705][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.020710][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 228.033365][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.058120][ T7365] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.066337][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.083908][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.095350][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.114697][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.125258][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.145191][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.177559][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.199886][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.211944][ T7225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.221843][ T7225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.235623][ T7225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.245581][ T7225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.346173][ T5044] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 228.382564][ T5044] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 228.445141][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.464196][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.496073][ T5044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.505145][ T5044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.514300][ T2504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.535595][ T2504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.545363][ T102] lo_write_bvec: 68 callbacks suppressed [ 228.545377][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.560716][ T5044] usb 1-1: SerialNumber: syz [ 228.591430][ T2504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.597172][ T7358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.607264][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.615392][ C1] blk_print_req_error: 69 callbacks suppressed [ 228.615407][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 228.631257][ T6374] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 228.666888][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.674634][ T3985] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 228.677064][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.700608][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 228.716784][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 228.736797][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.750722][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 228.805832][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.813978][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 228.840938][ T7382] loop2: detected capacity change from 0 to 2048 [ 228.860167][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.884433][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 228.894411][ T7358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.917022][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.925160][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 228.976528][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 228.984732][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 229.036088][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 229.044233][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 229.066049][ T3985] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 229.077303][ T3985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.090994][ T5555] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 229.105988][ T2504] loop: Write error at byte offset 9223372036854808575, length 4096. [ 229.118444][ T3985] usb 4-1: config 0 descriptor?? [ 229.125160][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 229.145660][ T7387] loop4: detected capacity change from 0 to 512 [ 229.156057][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 229.175364][ T7387] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1302: invalid block [ 229.188660][ T7387] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1302: invalid indirect mapped block 10 (level 1) [ 229.204715][ T7387] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1302: invalid indirect mapped block 8 (level 1) [ 229.221483][ T7387] EXT4-fs (loop4): 1 truncate cleaned up [ 229.230778][ T7387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.295466][ T7387] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 229.323077][ T6743] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 229.353978][ T6743] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 229.364464][ T3648] Bluetooth: hci4: command tx timeout [ 229.364614][ T5044] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 229.391902][ T6743] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error [ 229.421816][ T6743] EXT4-fs (loop4): unmounting filesystem. [ 229.498585][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 229.566232][ T5555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.573263][ T6374] usb 1-1: USB disconnect, device number 13 [ 229.584152][ T5555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.584823][ T7399] loop2: detected capacity change from 0 to 128 [ 229.601367][ T5555] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.602637][ T6374] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 229.624641][ T5555] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 229.634312][ T5555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.643546][ T7399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.653861][ T5555] usb 2-1: config 0 descriptor?? [ 229.665009][ T7399] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 229.743978][ T7225] EXT4-fs (loop2): unmounting filesystem. [ 229.765866][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 229.800391][ T7402] loop2: detected capacity change from 0 to 1024 [ 229.832103][ T7402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.975496][ T7225] EXT4-fs (loop2): unmounting filesystem. [ 229.991303][ T2476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.129638][ T2476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.167456][ T5555] acrux 0003:1A34:0802.000C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 230.185634][ T5555] acrux 0003:1A34:0802.000C: no inputs found [ 230.194943][ T5555] acrux 0003:1A34:0802.000C: Failed to enable force feedback support, error: -19 [ 230.230912][ T2476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.287699][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.298938][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.314775][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.332065][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.343727][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.351159][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.399376][ T2476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.496138][ T3985] pegasus 4-1:0.0: can't reset MAC [ 230.501748][ T3985] pegasus: probe of 4-1:0.0 failed with error -5 [ 230.525408][ T3985] usb 4-1: USB disconnect, device number 8 [ 230.795854][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 230.877756][ T7411] chnl_net:caif_netlink_parms(): no params data found [ 230.915424][ T26] audit: type=1326 audit(1725989508.769:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.0.1333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cf977def9 code=0x0 [ 231.028841][ T5555] usb 2-1: USB disconnect, device number 14 [ 231.117848][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.128167][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.136794][ T7411] device bridge_slave_0 entered promiscuous mode [ 231.169394][ T7447] loop2: detected capacity change from 0 to 8 [ 231.183708][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.197604][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.209786][ T26] audit: type=1800 audit(1725989509.069:157): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1327" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 231.227679][ T7411] device bridge_slave_1 entered promiscuous mode [ 231.370941][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.410085][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.436149][ T48] Bluetooth: hci4: command tx timeout [ 231.474157][ T7411] team0: Port device team_slave_0 added [ 231.592445][ T7411] team0: Port device team_slave_1 added [ 231.631732][ T7459] loop2: detected capacity change from 0 to 4096 [ 231.686070][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.693915][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.723299][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.766239][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.773249][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.800673][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.836081][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 231.996933][ T26] audit: type=1326 audit(1725989509.859:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.059977][ T26] audit: type=1326 audit(1725989509.899:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.141988][ T26] audit: type=1326 audit(1725989509.899:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.211346][ T26] audit: type=1326 audit(1725989509.899:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.244523][ T26] audit: type=1326 audit(1725989509.899:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.297220][ T7411] device hsr_slave_0 entered promiscuous mode [ 232.323286][ T26] audit: type=1326 audit(1725989509.899:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.348062][ T7411] device hsr_slave_1 entered promiscuous mode [ 232.368523][ T7411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.396109][ T48] Bluetooth: hci3: command tx timeout [ 232.413745][ T7411] Cannot create hsr debugfs directory [ 232.425943][ T26] audit: type=1326 audit(1725989509.899:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.449249][ T26] audit: type=1326 audit(1725989509.899:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.2.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f727e97def9 code=0x7ffc0000 [ 232.472885][ T7482] loop3: detected capacity change from 0 to 1024 [ 232.539042][ T2476] device hsr_slave_0 left promiscuous mode [ 232.547961][ T2476] device hsr_slave_1 left promiscuous mode [ 232.574073][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.592300][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.607443][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.620206][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.629557][ T2476] device bridge_slave_1 left promiscuous mode [ 232.636764][ T2476] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.644661][ T7488] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 232.658822][ T2476] device bridge_slave_0 left promiscuous mode [ 232.665072][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.746774][ T2476] device veth1_macvtap left promiscuous mode [ 232.757318][ T2476] device veth0_macvtap left promiscuous mode [ 232.767920][ T2476] device veth1_vlan left promiscuous mode [ 232.778236][ T2476] device veth0_vlan left promiscuous mode [ 232.875870][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 232.978422][ T7498] loop0: detected capacity change from 0 to 1024 [ 232.994225][ T7498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.007323][ T7492] loop2: detected capacity change from 0 to 8192 [ 233.022066][ T7500] loop3: detected capacity change from 0 to 1024 [ 233.043072][ T7498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.119080][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 233.202291][ T7500] hfsplus: request for non-existent node 134217728 in B*Tree [ 233.213306][ T7500] hfsplus: request for non-existent node 134217728 in B*Tree [ 233.586969][ T102] lo_write_bvec: 71 callbacks suppressed [ 233.586985][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 233.633004][ C0] blk_print_req_error: 70 callbacks suppressed [ 233.633023][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 233.649001][ T7] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 233.667211][ T7517] loop0: detected capacity change from 0 to 128 [ 233.669231][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 233.701467][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 233.732883][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 233.754569][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 233.797399][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 233.808932][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 233.857812][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 233.877359][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 233.915812][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.923163][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 233.965291][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 233.983736][ T7513] loop2: detected capacity change from 0 to 32768 [ 233.990565][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 234.015116][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 234.028061][ T7513] Dev loop2 SGI disklabel: csum bad, label corrupted [ 234.056649][ T3788] loop: Write error at byte offset 9223372036854808575, length 4096. [ 234.065885][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 234.118822][ T7523] loop: Write error at byte offset 9223372036854808575, length 4096. [ 234.128956][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 234.191033][ T34] loop: Write error at byte offset 9223372036854808575, length 4096. [ 234.199347][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 234.342951][ T7529] loop0: detected capacity change from 0 to 2048 [ 234.353933][ T7529] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.423156][ T7532] loop2: detected capacity change from 0 to 512 [ 234.469816][ T7532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.483652][ T7532] ext4 filesystem being mounted at /30/bus supports timestamps until 2038 (0x7fffffff) [ 234.495747][ T48] Bluetooth: hci3: command tx timeout [ 234.580232][ T2476] team0 (unregistering): Port device team_slave_1 removed [ 234.602304][ T7225] EXT4-fs (loop2): unmounting filesystem. [ 234.731612][ T7545] loop2: detected capacity change from 0 to 256 [ 234.771810][ T7545] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 234.785058][ T2476] team0 (unregistering): Port device team_slave_0 removed [ 234.917018][ T2476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.955983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 235.037949][ T2476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.122761][ T7543] loop0: detected capacity change from 0 to 32768 [ 235.143566][ T7543] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1370 (7543) [ 235.166199][ T7543] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 235.197152][ T7543] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 235.219141][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.219950][ T7543] BTRFS info (device loop0): using free space tree [ 235.436869][ T7543] BTRFS info (device loop0): enabling ssd optimizations [ 235.524797][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 235.668858][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 235.698710][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.708607][ T7] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.741689][ T4545] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 235.892522][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.902122][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.911592][ T7] usb 3-1: Product: syz [ 235.916140][ T7] usb 3-1: Manufacturer: syz [ 235.920835][ T7] usb 3-1: SerialNumber: syz [ 235.995916][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 236.099446][ T2476] bond0 (unregistering): Released all slaves [ 236.410818][ T7573] syz.1.1372 (7573): drop_caches: 2 [ 236.426861][ T7] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 236.441114][ T7573] syz.1.1372 (7573): drop_caches: 2 [ 236.514686][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 236.514700][ T26] audit: type=1326 audit(1725989514.369:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.1374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37777def9 code=0x0 [ 236.555910][ T48] Bluetooth: hci3: command tx timeout [ 236.680972][ T7586] loop3: detected capacity change from 0 to 1024 [ 236.702288][ T7586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.865027][ T6829] EXT4-fs (loop3): unmounting filesystem. [ 237.000863][ T7594] loop3: detected capacity change from 0 to 8 [ 237.036527][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 237.099773][ T7411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.119448][ T7411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.139114][ T7411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.161139][ T7411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.333376][ T7] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 237.337400][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.394428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.401345][ T7] usb 3-1: USB disconnect, device number 8 [ 237.406462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.418291][ T7411] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.459661][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.469132][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.486945][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.494105][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.523323][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.558121][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.578034][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.599122][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.606320][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.625851][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.639692][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.654706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.671968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.706249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.734521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.761236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.796439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.810646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.826866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.846936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.884903][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.967013][ T7617] loop2: detected capacity change from 0 to 2048 [ 237.986183][ T7617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.075878][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 238.253089][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.264357][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.283902][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.296059][ T5044] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 238.422545][ T7639] loop0: detected capacity change from 0 to 1024 [ 238.451649][ T7639] EXT4-fs: Ignoring removed oldalloc option [ 238.478304][ T3627] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.507082][ T7639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.536011][ T5044] usb 4-1: Using ep0 maxpacket: 16 [ 238.586918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.596347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.607747][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 238.636152][ T48] Bluetooth: hci3: command tx timeout [ 238.642245][ T102] lo_write_bvec: 70 callbacks suppressed [ 238.642259][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 238.667739][ T5044] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 238.681938][ T5044] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.693134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.706644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.724041][ C1] blk_print_req_error: 70 callbacks suppressed [ 238.724059][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 238.740114][ T5044] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.755511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.763143][ T5044] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.772552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.778232][ T5044] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.793912][ T5044] usb 4-1: config 0 has no interface number 0 [ 238.810087][ T7411] device veth0_vlan entered promiscuous mode [ 238.824462][ T5044] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 238.842104][ T7411] device veth1_vlan entered promiscuous mode [ 238.849274][ T5044] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 238.867665][ T5044] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.877995][ T3627] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 238.887235][ T3627] usb 3-1: config 0 has no interface number 0 [ 238.896045][ T3627] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 238.906321][ T5044] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.921395][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.937459][ T3627] usb 3-1: config 0 interface 29 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 238.940780][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.952489][ T5044] usb 4-1: config 0 interface 125 has no altsetting 0 [ 238.971042][ T5044] usb 4-1: config 0 interface 125 has no altsetting 2 [ 238.979175][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.991394][ T5050] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 238.996547][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.016973][ T7411] device veth0_macvtap entered promiscuous mode [ 239.028283][ T3788] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.042889][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.044978][ T7656] : renamed from ipvlan1 [ 239.071595][ T7411] device veth1_macvtap entered promiscuous mode [ 239.086034][ T3788] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.094184][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.115816][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 239.147506][ T3627] usb 3-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 239.148059][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.156930][ T5044] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 239.174896][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.186567][ T3627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.196008][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.200351][ T3627] usb 3-1: Product: syz [ 239.207723][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.215430][ T5044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.232750][ T3627] usb 3-1: Manufacturer: syz [ 239.239895][ T3627] usb 3-1: SerialNumber: syz [ 239.247768][ T5044] usb 4-1: Product: syz [ 239.255760][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.256149][ T3627] usb 3-1: config 0 descriptor?? [ 239.265794][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.276581][ T5044] usb 4-1: Manufacturer: syz [ 239.284264][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.291476][ T5044] usb 4-1: SerialNumber: syz [ 239.300215][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.310324][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.325771][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.328028][ T5044] usb 4-1: config 0 descriptor?? [ 239.335569][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.335587][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.335603][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.335615][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.335629][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.335641][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.337286][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.341758][ T7629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 239.419714][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.428004][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.447474][ T3627] HFC-S_USB: probe of 3-1:0.29 failed with error -5 [ 239.456132][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.458357][ T5044] usb 4-1: selecting invalid altsetting 2 [ 239.463702][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.492929][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.514811][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.536922][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.547841][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.566294][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.577741][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.595572][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.608151][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.617574][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.642248][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.643130][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.666108][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.679119][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.685921][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.727943][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 239.729139][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.743028][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 239.779260][ T5050] usb 3-1: USB disconnect, device number 9 [ 239.792145][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.802403][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.832014][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.863048][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.891648][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.918481][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.930282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.946751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.962645][ T7411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.983377][ T7411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.993548][ T7411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.012831][ T7411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.148950][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.165835][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 240.168553][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.203397][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.224252][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.233776][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.267975][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.335920][ T5044] parport1: fix this legacy no-device port driver! [ 240.441033][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.597086][ T7669] loop0: detected capacity change from 0 to 32768 [ 240.613731][ T7669] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 240.620935][ T5044] usb 4-1: USB disconnect, device number 9 [ 240.628845][ T7669] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.638545][ T7676] loop2: detected capacity change from 0 to 8192 [ 240.650769][ T7669] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 240.650942][ T7676] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.675345][ T3987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 240.681178][ T7676] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 240.684606][ T3987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 240.695517][ T7676] REISERFS (device loop2): using ordered data mode [ 240.715827][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 240.721462][ T7676] reiserfs: using flush barriers [ 240.748084][ T7676] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.749286][ T3987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 240.780574][ T3987] gfs2: fsid=syz:syz.0: jid=0: Done [ 240.781423][ T7676] REISERFS (device loop2): checking transaction log (loop2) [ 240.786098][ T7669] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 240.802442][ T7676] REISERFS (device loop2): Using r5 hash to sort names [ 240.810985][ T7676] REISERFS (device loop2): using 3.5.x disk format [ 240.821139][ T7676] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 240.836636][ T7669] syz.0.1418 (7669): drop_caches: 2 [ 240.842685][ T7669] syz.0.1418 (7669): drop_caches: 2 [ 240.862317][ T7676] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3685, free_space(entry_count) 2 [ 240.881465][ T7676] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 240.913962][ T7676] REISERFS (device loop2): Remounting filesystem read-only [ 240.923250][ T7676] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 241.036265][ T7] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 241.055622][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.064409][ T7] usb 2-1: Product: syz [ 241.076336][ T7] usb 2-1: Manufacturer: syz [ 241.082181][ T7] usb 2-1: SerialNumber: syz [ 241.098524][ T7] usb 2-1: config 0 descriptor?? [ 241.137675][ T7] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 241.195838][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 241.249037][ T7683] loop0: detected capacity change from 0 to 4096 [ 241.264051][ T7683] ntfs: (device loop0): parse_options(): The uid option requires an argument. [ 241.340325][ T48] block nbd2: Receive control failed (result -107) [ 241.354691][ T7686] block nbd2: shutting down sockets [ 241.642184][ T7706] loop3: detected capacity change from 0 to 1024 [ 241.707251][ T7706] hfsplus: request for non-existent node 1280 in B*Tree [ 241.720139][ T7706] hfsplus: request for non-existent node 1280 in B*Tree [ 241.768747][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 242.063741][ T7720] bridge0: port 3(vlan4) entered blocking state [ 242.088388][ T7720] bridge0: port 3(vlan4) entered disabled state [ 242.104249][ T7720] device vlan4 entered promiscuous mode [ 242.235818][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 242.268892][ T7726] "syz.2.1436" (7726) uses obsolete ecb(arc4) skcipher [ 242.283788][ T7729] loop3: detected capacity change from 0 to 1024 [ 242.327959][ T7729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 242.383549][ T6829] EXT4-fs (loop3): unmounting filesystem. [ 242.465909][ T7] gspca_ov534_9: reg_w failed -71 [ 242.638796][ T7748] loop3: detected capacity change from 0 to 128 [ 242.657575][ T7748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 242.668439][ T26] audit: type=1326 audit(1725989520.529:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.674860][ T7748] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038 (0x7fffffff) [ 242.734925][ T26] audit: type=1326 audit(1725989520.559:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.757975][ T26] audit: type=1326 audit(1725989520.569:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.789138][ T26] audit: type=1326 audit(1725989520.569:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.815592][ T26] audit: type=1326 audit(1725989520.569:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.839898][ T26] audit: type=1326 audit(1725989520.569:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.851213][ T6829] EXT4-fs (loop3): unmounting filesystem. [ 242.897207][ T26] audit: type=1326 audit(1725989520.569:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.933506][ T7] gspca_ov534_9: Unknown sensor 0000 [ 242.933578][ T7] ov534_9: probe of 2-1:0.0 failed with error -22 [ 242.945878][ T26] audit: type=1326 audit(1725989520.569:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 242.949343][ T7] usb 2-1: USB disconnect, device number 15 [ 242.976178][ T7757] ptrace attach of "./syz-executor exec"[6829] was attempted by ""[7757] [ 243.019310][ T26] audit: type=1326 audit(1725989520.569:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 243.043713][ T26] audit: type=1326 audit(1725989520.569:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d1b7def9 code=0x7ffc0000 [ 243.275868][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 243.648128][ T9] lo_write_bvec: 62 callbacks suppressed [ 243.648144][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 243.716595][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 243.729368][ C1] blk_print_req_error: 63 callbacks suppressed [ 243.729385][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 243.780860][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 243.799559][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 243.819123][ T7794] loop0: detected capacity change from 0 to 128 [ 243.836609][ T7523] loop: Write error at byte offset 9223372036854808575, length 4096. [ 243.865167][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 243.880852][ T7796] loop3: detected capacity change from 0 to 256 [ 243.898808][ T7523] loop: Write error at byte offset 9223372036854808575, length 4096. [ 243.911194][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 243.957030][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 243.974111][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 244.016940][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 244.035373][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 244.045093][ T3987] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 244.076811][ T7523] loop: Write error at byte offset 9223372036854808575, length 4096. [ 244.086858][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 244.137819][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 244.168692][ T7810] loop3: detected capacity change from 0 to 2048 [ 244.175221][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 244.216065][ T6374] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 244.224836][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 244.245928][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 244.286042][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 244.315866][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 245.297371][ T7810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 245.370385][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 245.775893][ T6829] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 245.849742][ T6829] EXT4-fs (loop3): unmounting filesystem. [ 246.395825][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 246.506031][ T7823] loop2: detected capacity change from 0 to 40427 [ 246.536711][ T7823] F2FS-fs (loop2): Invalid segment count (0) [ 246.563738][ T7823] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.580974][ T7823] F2FS-fs (loop2): invalid crc value [ 246.634481][ T7823] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.653691][ T7825] loop3: detected capacity change from 0 to 32768 [ 246.675855][ T7825] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1475 (7825) [ 246.704403][ T7825] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.755024][ T7825] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 246.765368][ T7823] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 246.779777][ T7823] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.784873][ T7825] BTRFS info (device loop3): disabling free space tree [ 246.804559][ T7825] BTRFS info (device loop3): turning off barriers [ 246.825790][ T7825] BTRFS info (device loop3): use no compression [ 246.842294][ T7825] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 246.873578][ T7825] BTRFS info (device loop3): trying to use backup root at mount time [ 246.893690][ T7825] BTRFS error (device loop3): cannot disable free space tree [ 246.904813][ T7825] BTRFS error (device loop3): open_ctree failed [ 246.918076][ T7837] loop4: detected capacity change from 0 to 4096 [ 246.930518][ T7225] syz-executor: attempt to access beyond end of device [ 246.930518][ T7225] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 246.966306][ T7837] NILFS (loop4): invalid segment: Checksum error in segment payload [ 246.984631][ T7837] NILFS (loop4): trying rollback from an earlier position [ 247.034670][ T7837] NILFS (loop4): recovery complete [ 247.047211][ T7838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.306452][ T7825] gfs2: gfs2 mount does not exist [ 247.436089][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 247.797052][ T7857] loop4: detected capacity change from 0 to 512 [ 247.807313][ T7857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 247.822800][ T7857] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 247.833521][ T6374] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.843137][ T7857] EXT4-fs (loop4): group descriptors corrupted! [ 247.846024][ T3987] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.906169][ T3978] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 248.185089][ T7871] batman_adv: batadv0: Adding interface: vlan2 [ 248.191706][ T7871] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.195996][ T6374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.219524][ T7871] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 248.256152][ T3987] usb 4-1: config 0 has no interfaces? [ 248.264052][ T6374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.267707][ T3987] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 248.273935][ T6374] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 248.283985][ T3987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.294336][ T6374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.305334][ T3978] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 248.309872][ T6374] usb 1-1: config 0 descriptor?? [ 248.322760][ T3978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.324222][ T3978] usb 2-1: config 0 descriptor?? [ 248.347331][ T3987] usb 4-1: config 0 descriptor?? [ 248.405544][ T7875] loop4: detected capacity change from 0 to 1024 [ 248.485850][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.605600][ T33] usb 4-1: USB disconnect, device number 10 [ 248.706060][ T2476] lo_write_bvec: 72 callbacks suppressed [ 248.706090][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 248.776812][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 248.785078][ C1] blk_print_req_error: 72 callbacks suppressed [ 248.785092][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 248.818900][ T6374] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 248.832927][ T6374] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 248.841412][ T6374] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 248.848962][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 248.857771][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 248.869629][ T6374] magicmouse 0003:05AC:0265.000D: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 248.955957][ T3978] usb 2-1: string descriptor 0 read error: -71 [ 248.955973][ T6374] magicmouse 0003:05AC:0265.000D: magicmouse input not registered [ 248.976999][ T6374] magicmouse: probe of 0003:05AC:0265.000D failed with error -12 [ 249.023507][ T3978] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 249.045824][ T6374] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 249.085855][ T3978] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 249.093758][ T3978] pac7311: probe of 2-1:0.0 failed with error -71 [ 249.155893][ T3978] usb 2-1: USB disconnect, device number 16 [ 249.175491][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.201860][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.255924][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.275878][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.337428][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.345581][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.375998][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.405868][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.436634][ T7523] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.444787][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.495910][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.504062][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.515873][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 249.557059][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 249.565209][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 249.616039][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 250.238323][ T3987] usb 1-1: USB disconnect, device number 15 [ 250.555831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 250.976377][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 251.112825][ T7893] sctp: [Deprecated]: syz.4.1501 (pid 7893) Use of int in max_burst socket option deprecated. [ 251.112825][ T7893] Use struct sctp_assoc_value instead [ 251.277623][ T7899] loop3: detected capacity change from 0 to 1024 [ 251.518315][ T102] hfsplus: b-tree write err: -5, ino 3 [ 251.567670][ T7905] loop4: detected capacity change from 0 to 1024 [ 251.595831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 251.644531][ T7905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.840533][ T7411] EXT4-fs (loop4): unmounting filesystem. [ 251.853191][ T7903] loop0: detected capacity change from 0 to 32768 [ 251.885063][ T7910] loop3: detected capacity change from 0 to 256 [ 251.956907][ T7910] exfat: Unknown parameter 'dm00000000000230' [ 252.004431][ T7912] loop4: detected capacity change from 0 to 128 [ 252.069847][ T7895] loop2: detected capacity change from 0 to 32768 [ 252.107612][ T7912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.139158][ T7912] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 252.210116][ T7897] overlayfs: overlapping lowerdir path [ 252.211855][ T7915] loop3: detected capacity change from 0 to 2048 [ 252.353505][ T7915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 252.385344][ T7411] EXT4-fs (loop4): unmounting filesystem. [ 252.543030][ T7929] loop0: detected capacity change from 0 to 1024 [ 252.554099][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.573560][ T7927] loop4: detected capacity change from 0 to 64 [ 252.575929][ T3652] Bluetooth: hci5: command 0x0406 tx timeout [ 252.589198][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 252.603113][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 252.603113][ T9] [ 252.618627][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 252.629481][ T9] EXT4-fs (loop3): Free/Dirty block details [ 252.635914][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 252.644472][ T9] EXT4-fs (loop3): free_blocks=2415919104 [ 252.650509][ T9] EXT4-fs (loop3): dirty_blocks=16 [ 252.655824][ T9] EXT4-fs (loop3): Block reservation details [ 252.670656][ T9] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 252.676829][ T6374] psmouse serio3: Failed to reset mouse on : -5 [ 252.687962][ T6829] EXT4-fs (loop3): unmounting filesystem. [ 252.951104][ T7943] loop4: detected capacity change from 0 to 128 [ 253.298416][ T7950] loop4: detected capacity change from 0 to 32768 [ 253.306270][ T7950] XFS: attr2 mount option is deprecated. [ 253.319026][ T7950] XFS (loop4): Mounting V5 Filesystem [ 253.363602][ T7950] XFS (loop4): Ending clean mount [ 253.381317][ T7950] XFS (loop4): Quotacheck needed: Please wait. [ 253.442449][ T7950] XFS (loop4): Quotacheck: Done. [ 253.551955][ T7411] XFS (loop4): Unmounting Filesystem [ 253.676120][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 253.746840][ T102] lo_write_bvec: 68 callbacks suppressed [ 253.746859][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 253.781538][ T7971] loop3: detected capacity change from 0 to 1024 [ 253.806345][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 253.814494][ C1] blk_print_req_error: 68 callbacks suppressed [ 253.814511][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 253.842223][ T33] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 253.866059][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 253.880072][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 253.928017][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 253.943605][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 253.986820][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 254.001852][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.010272][ T7977] loop0: detected capacity change from 0 to 1024 [ 254.045925][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 254.056641][ T7977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 254.075561][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.085272][ T5044] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 254.132730][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 254.132745][ T26] audit: type=1800 audit(1725989531.989:205): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1535" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 254.167738][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 254.196265][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.227247][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 254.235406][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.255741][ T33] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.283118][ T33] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.297639][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 254.312951][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.332844][ T33] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.350603][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.366595][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 254.390601][ T7967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.408746][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 254.443112][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.459986][ T7979] loop4: detected capacity change from 0 to 32768 [ 254.467123][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 254.480903][ T7979] XFS: ikeep mount option is deprecated. [ 254.555308][ T7979] XFS (loop4): Mounting V5 Filesystem [ 254.627910][ T33] usb 3-1: USB disconnect, device number 10 [ 254.693685][ T7979] XFS (loop4): Ending clean mount [ 254.702378][ T7979] XFS (loop4): Quotacheck needed: Please wait. [ 254.716153][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 254.776375][ T7979] XFS (loop4): Quotacheck: Done. [ 254.889358][ T7411] XFS (loop4): Unmounting Filesystem [ 255.291499][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 255.420211][ T8002] loop3: detected capacity change from 0 to 32768 [ 255.468640][ T8002] XFS (loop3): Mounting V5 Filesystem [ 255.511795][ T8002] XFS (loop3): Ending clean mount [ 255.562615][ T3987] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.601953][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.608380][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.617120][ T33] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 255.686801][ T6829] XFS (loop3): Unmounting Filesystem [ 255.755889][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.006053][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 256.025799][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 256.030381][ T3987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.054906][ T3987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.064757][ T33] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.065017][ T3987] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 256.090549][ T3987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.096529][ T8014] loop0: detected capacity change from 0 to 40427 [ 256.106197][ T8014] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 256.106822][ T3987] usb 3-1: config 0 descriptor?? [ 256.114884][ T8014] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 256.120160][ T33] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.165770][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.176992][ T33] usb 5-1: config 0 descriptor?? [ 256.196175][ T8008] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.207140][ T8014] F2FS-fs (loop0): Found nat_bits in checkpoint [ 256.222447][ T8023] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.286747][ T6374] misc userio: Buffer overflowed, userio client isn't keeping up [ 256.325378][ T8014] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 256.335258][ T8014] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 256.402524][ T4545] syz-executor: attempt to access beyond end of device [ 256.402524][ T4545] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 256.627573][ T3987] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 256.648711][ T3987] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 256.697720][ T33] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 256.711296][ T33] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 256.731956][ T33] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 256.805881][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.839457][ T8029] loop0: detected capacity change from 0 to 32768 [ 256.847976][ T3987] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 256.857440][ T8029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1547 (8029) [ 256.875289][ T8029] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.887876][ T8029] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 256.896742][ T8029] BTRFS info (device loop0): setting nodatacow, compression disabled [ 256.904836][ T8029] BTRFS info (device loop0): turning on flush-on-commit [ 256.912243][ T8029] BTRFS info (device loop0): enabling auto defrag [ 256.918916][ T8029] BTRFS info (device loop0): max_inline at 0 [ 256.924934][ T8029] BTRFS info (device loop0): using free space tree [ 256.954273][ T8029] BTRFS info (device loop0): enabling ssd optimizations [ 256.991806][ T4545] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.516532][ T3987] cp2112 0003:10C4:EA90.000E: error reading lock byte: -71 [ 257.528202][ T3987] usb 3-1: USB disconnect, device number 11 [ 257.556651][ T6374] input: PS/2 Generic Mouse as /devices/serio3/input/input15 [ 257.695818][ T3731] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 257.775814][ T6374] psmouse serio3: Failed to enable mouse on [ 257.835912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.056087][ T3731] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.081441][ T3731] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.102707][ T3731] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.114441][ T3731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.146298][ T8059] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 258.420692][ T3627] usb 1-1: USB disconnect, device number 16 [ 258.466999][ T8072] loop2: detected capacity change from 0 to 2048 [ 258.488654][ T8072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.498560][ T8074] loop3: detected capacity change from 0 to 8 [ 258.505265][ T8074] squashfs: Unknown parameter 'F$d-;YD<3X߮Nq4Sŕs۵ZQPu2%lW\Yf:?x|:BE}Ce2f' [ 258.593135][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 258.703913][ T8083] loop2: detected capacity change from 0 to 1024 [ 258.755290][ T8083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.779942][ T102] lo_write_bvec: 67 callbacks suppressed [ 258.779959][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 258.815043][ T26] audit: type=1800 audit(1725989536.669:206): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1562" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 258.846303][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 258.875834][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.891221][ C0] blk_print_req_error: 67 callbacks suppressed [ 258.891241][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 258.927033][ T7225] EXT4-fs (loop2): unmounting filesystem. [ 258.934789][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 258.943134][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 258.985929][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.005054][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.045918][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.054058][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.105888][ T6374] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 259.116130][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.129571][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.139299][ T7] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 259.171554][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.174994][ T6374] usb 5-1: device reset changed ep0 maxpacket size! [ 259.181668][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.201322][ T5044] usb 5-1: USB disconnect, device number 9 [ 259.236384][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.244506][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.296030][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.304269][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.361393][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 259.366062][ T5044] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 259.379230][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.422278][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 259.559413][ T8109] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.603180][ T8097] loop2: detected capacity change from 0 to 32768 [ 259.625831][ T5044] usb 5-1: Using ep0 maxpacket: 32 [ 259.639211][ T8097] XFS (loop2): Mounting V5 Filesystem [ 259.698432][ T8097] XFS (loop2): Ending clean mount [ 259.742201][ T8097] syz.2.1566 (8097) used greatest stack depth: 18520 bytes left [ 259.750227][ T5044] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 259.766076][ T5044] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 259.775004][ T5044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.790135][ T5044] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 259.803577][ T5044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.826019][ T3987] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.827269][ T7225] XFS (loop2): Unmounting Filesystem [ 259.842687][ T5044] usb 5-1: config 0 descriptor?? [ 259.886185][ T5044] hub 5-1:0.0: USB hub found [ 259.915882][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.010015][ T8128] loop0: detected capacity change from 0 to 1024 [ 260.018069][ T8128] EXT4-fs: Ignoring removed oldalloc option [ 260.028313][ T8128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 260.066402][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 260.185918][ T5044] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 260.207046][ T3987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 260.222390][ T3987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 260.233802][ T3987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.247222][ T3987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.256349][ T3987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.265462][ T3987] usb 4-1: config 0 descriptor?? [ 260.295970][ T8107] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 260.415983][ T5555] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 260.448438][ T5044] hid-generic 0003:046D:C314.0010: unknown main item tag 0x0 [ 260.470537][ T5044] hid-generic 0003:046D:C314.0010: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 260.489648][ T154] kernel read not supported for file /video37 (pid: 154 comm: kworker/1:2) [ 260.592228][ T8143] netlink: 'syz.1.1584': attribute type 2 has an invalid length. [ 260.642905][ T8145] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1585'. [ 260.652084][ T8145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1585'. [ 260.675982][ T5555] usb 1-1: Using ep0 maxpacket: 8 [ 260.737694][ T3987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 260.746178][ T3987] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 260.757793][ T3987] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 260.776217][ T5044] usb 5-1: USB disconnect, device number 10 [ 260.971428][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.990894][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 261.016152][ T5555] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.025216][ T5555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.047774][ T5555] usb 1-1: Product: syz [ 261.051968][ T5555] usb 1-1: Manufacturer: syz [ 261.065739][ T5555] usb 1-1: SerialNumber: syz [ 261.113895][ T8149] loop2: detected capacity change from 0 to 1024 [ 261.152622][ T2476] hfsplus: b-tree write err: -5, ino 4 [ 261.230433][ T8153] Falling back ldisc for ttyS3. [ 261.245932][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 261.348482][ T5555] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 261.366021][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 261.383893][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.404007][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.596024][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.609620][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.625883][ T7] usb 2-1: Product: syz [ 261.634595][ T7] usb 2-1: Manufacturer: syz [ 261.644805][ T7] usb 2-1: SerialNumber: syz [ 261.728737][ T8157] loop4: detected capacity change from 0 to 40427 [ 261.739392][ T8157] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 261.747393][ T8157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 261.760539][ T8157] F2FS-fs (loop4): invalid crc value [ 261.770402][ T8157] F2FS-fs (loop4): Found nat_bits in checkpoint [ 261.814293][ T8157] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 261.822020][ T8157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 261.857058][ T8157] syz.4.1590: attempt to access beyond end of device [ 261.857058][ T8157] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 261.874672][ T2476] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 261.897760][ T8175] loop2: detected capacity change from 0 to 128 [ 261.927282][ T8177] syz.4.1590: attempt to access beyond end of device [ 261.927282][ T8177] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 261.927615][ T2476] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 261.995884][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 262.136285][ T7] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 262.811400][ T8193] loop4: detected capacity change from 0 to 40427 [ 262.819091][ T8193] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 262.827014][ T8193] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.841642][ T8193] F2FS-fs (loop4): Found nat_bits in checkpoint [ 262.872425][ T8193] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 262.883200][ T6374] usb 4-1: USB disconnect, device number 11 [ 262.883359][ T8193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 262.904615][ T26] audit: type=1800 audit(1725989540.759:207): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1601" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 262.951426][ T8192] syz.4.1601: attempt to access beyond end of device [ 262.951426][ T8192] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 262.995876][ T7] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 263.022388][ T8208] loop3: detected capacity change from 0 to 64 [ 263.036328][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.074444][ T7] usb 2-1: USB disconnect, device number 17 [ 263.096863][ T11] kworker/u4:1: attempt to access beyond end of device [ 263.096863][ T11] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 263.159135][ T6374] usb 1-1: USB disconnect, device number 17 [ 263.199031][ T6374] usblp1: removed [ 263.239621][ T8212] loop0: detected capacity change from 0 to 512 [ 263.261505][ T8214] loop3: detected capacity change from 0 to 128 [ 263.287302][ T8212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 263.332511][ T8212] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038 (0x7fffffff) [ 263.522791][ T4545] EXT4-fs (loop0): unmounting filesystem. [ 263.622134][ T8223] loop0: detected capacity change from 0 to 512 [ 263.635636][ T8225] loop4: detected capacity change from 0 to 512 [ 263.662667][ T8223] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 263.674192][ T8223] UDF-fs: Scanning with blocksize 512 failed [ 263.698383][ T8223] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 263.709790][ T8225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.718847][ T8223] UDF-fs: Scanning with blocksize 1024 failed [ 263.725544][ T8223] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 263.733375][ T8225] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 263.770581][ T8223] UDF-fs: Scanning with blocksize 2048 failed [ 263.806626][ T102] lo_write_bvec: 72 callbacks suppressed [ 263.806645][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 263.844104][ T8223] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 263.849541][ T8234] loop3: detected capacity change from 0 to 256 [ 263.861304][ T7411] EXT4-fs (loop4): unmounting filesystem. [ 263.867297][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 263.872344][ T8223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.931840][ T8210] loop2: detected capacity change from 0 to 32768 [ 263.933557][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 263.957116][ C0] blk_print_req_error: 73 callbacks suppressed [ 263.957132][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 263.986838][ T3788] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.018803][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.048239][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.075898][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.091346][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.106040][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.115866][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 264.123662][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.169069][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.187111][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.196976][ T5044] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 264.226641][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.244995][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.285909][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.294041][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.337002][ T8247] device syzkaller1 entered promiscuous mode [ 264.345999][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 264.360341][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.414124][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.466165][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 264.506014][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 264.533041][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 264.554488][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.580488][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.597666][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.623630][ T7] usb 2-1: config 0 descriptor?? [ 264.646931][ T8232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.863523][ T8260] loop2: detected capacity change from 0 to 1024 [ 264.902639][ T11] hfsplus: b-tree write err: -5, ino 4 [ 265.056034][ T6374] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 265.097986][ T7] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 265.115821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.125163][ T7] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 265.148093][ T7] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 265.306095][ T6374] usb 1-1: Using ep0 maxpacket: 16 [ 265.426151][ T6374] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 265.449141][ T6374] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.473879][ T6374] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.510206][ T8284] loop3: detected capacity change from 0 to 64 [ 265.646384][ T6374] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.661174][ T6374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.682258][ T6374] usb 1-1: Product: syz [ 265.692689][ T6374] usb 1-1: Manufacturer: syz [ 265.704841][ T6374] usb 1-1: SerialNumber: syz [ 266.083797][ T8294] netlink: 'syz.4.1638': attribute type 21 has an invalid length. [ 266.091857][ T8294] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1638'. [ 266.101153][ T8294] netlink: 'syz.4.1638': attribute type 5 has an invalid length. [ 266.109361][ T8294] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1638'. [ 266.165849][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 266.196008][ T6374] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 266.226047][ T5555] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 266.233707][ T5044] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 266.260864][ T8299] device syzkaller1 entered promiscuous mode [ 266.493805][ T8304] loop4: detected capacity change from 0 to 8 [ 266.501480][ T8304] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 266.605895][ T5044] usb 3-1: config 0 has no interfaces? [ 266.611576][ T5044] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 266.620728][ T5044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.625994][ T5555] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.640104][ T5555] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.644393][ T5044] usb 3-1: config 0 descriptor?? [ 266.653269][ T5555] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.653298][ T5555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.932789][ T5044] usb 3-1: USB disconnect, device number 12 [ 266.946135][ T5555] usb 4-1: usb_control_msg returned -32 [ 266.951768][ T5555] usbtmc 4-1:16.0: can't read capabilities [ 267.095991][ T6374] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 267.136723][ T6374] usb 1-1: USB disconnect, device number 18 [ 267.195829][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 267.217072][ T7] usb 2-1: USB disconnect, device number 18 [ 267.710656][ T8323] loop4: detected capacity change from 0 to 2048 [ 267.769517][ T8323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.811572][ T26] audit: type=1800 audit(1725989545.669:208): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1651" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 267.820044][ T8323] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 267.928937][ T8323] EXT4-fs (loop4): Remounting filesystem read-only [ 267.965932][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 268.018812][ T7411] EXT4-fs (loop4): unmounting filesystem. [ 268.097849][ T8327] loop2: detected capacity change from 0 to 32768 [ 268.122142][ T8327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1653 (8327) [ 268.123713][ T8334] loop4: detected capacity change from 0 to 1024 [ 268.152642][ T8327] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.175280][ T8327] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 268.194282][ T8327] BTRFS info (device loop2): using free space tree [ 268.225811][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 268.232840][ T102] hfsplus: b-tree write err: -5, ino 4 [ 268.245820][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 268.355963][ T8327] BTRFS info (device loop2): enabling ssd optimizations [ 268.443481][ T8355] loop4: detected capacity change from 0 to 1024 [ 268.454264][ T7225] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.468679][ T8355] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 268.480208][ T8355] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.494505][ T8355] EXT4-fs error (device loop4): ext4_map_blocks:744: inode #3: block 3: comm syz.4.1657: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.521752][ T8355] Quota error (device loop4): write_blk: dquota write failed [ 268.529888][ T8355] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 268.545854][ T7] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 268.546156][ T8355] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 268.554905][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.581313][ T7] usb 1-1: Product: syz [ 268.585726][ T7] usb 1-1: Manufacturer: syz [ 268.590614][ T7] usb 1-1: SerialNumber: syz [ 268.612418][ T8355] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1657: Failed to acquire dquot type 0 [ 268.646264][ T7] usb 1-1: config 0 descriptor?? [ 268.659608][ T8355] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 3: comm syz.4.1657: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.694610][ T7] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 268.704152][ T8355] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 268.721277][ T8355] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1657: Failed to acquire dquot type 0 [ 268.734281][ T8355] EXT4-fs error (device loop4): ext4_free_blocks:6212: comm syz.4.1657: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.790949][ T8355] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 3: comm syz.4.1657: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.835896][ T8355] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 268.846977][ T8355] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1657: Failed to acquire dquot type 0 [ 268.867702][ T11] lo_write_bvec: 71 callbacks suppressed [ 268.867719][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 268.894942][ T8355] EXT4-fs (loop4): 1 orphan inode deleted [ 268.916416][ T8355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 268.926903][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 268.954171][ T8355] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.1657: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 268.989051][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 268.990887][ T6374] usb 4-1: USB disconnect, device number 12 [ 269.008154][ C0] blk_print_req_error: 71 callbacks suppressed [ 269.008171][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.045981][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.065815][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.096655][ T7411] EXT4-fs (loop4): unmounting filesystem. [ 269.109191][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.120587][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.167221][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.192293][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.226749][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.244320][ T8371] loop3: detected capacity change from 0 to 256 [ 269.251064][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.256542][ T8371] exfat: Deprecated parameter 'namecase' [ 269.263854][ T6374] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 269.278840][ T8371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 269.291199][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.346913][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.355083][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.391207][ T26] audit: type=1804 audit(1725989547.249:209): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1663" name=2F6E6577726F6F742F3130322F66696C65302FB7DB7DE6B6BA6D6EBBDBE176BA5DBF dev="loop3" ino=1048711 res=1 errno=0 [ 269.408071][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.416932][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.468928][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.530934][ T102] loop: Write error at byte offset 9223372036854808575, length 4096. [ 269.539304][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.586017][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.646007][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 269.789395][ T8395] loop4: detected capacity change from 0 to 1024 [ 269.875293][ T9] hfsplus: b-tree write err: -5, ino 4 [ 269.895867][ T6374] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 269.934368][ T8389] loop3: detected capacity change from 0 to 32768 [ 269.949254][ T8389] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1669 (8389) [ 269.971635][ T8389] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.990318][ T8389] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 269.999752][ T7] gspca_ov534_9: reg_w failed -71 [ 270.015320][ T8389] BTRFS info (device loop3): setting nodatacow, compression disabled [ 270.023700][ T8389] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 270.040714][ T8389] BTRFS info (device loop3): force lzo compression, level 0 [ 270.050416][ T8389] BTRFS info (device loop3): metadata ratio 8 [ 270.059355][ T8389] BTRFS info (device loop3): doing ref verification [ 270.066186][ T8389] BTRFS info (device loop3): metadata ratio 32769 [ 270.072714][ T8389] BTRFS info (device loop3): turning off barriers [ 270.079402][ T8389] BTRFS info (device loop3): enabling ssd optimizations [ 270.086521][ T8389] BTRFS info (device loop3): using spread ssd allocation scheme [ 270.095163][ T8389] BTRFS info (device loop3): turning on barriers [ 270.101683][ T8389] BTRFS info (device loop3): using free space tree [ 270.248802][ T26] audit: type=1800 audit(1725989548.109:210): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1669" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 270.265929][ T6374] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.281307][ T6374] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.318895][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.366305][ T6374] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.380084][ T6374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.382632][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 270.393507][ T6374] usb 3-1: SerialNumber: syz [ 270.398302][ T7] gspca_ov534_9: Unknown sensor 0000 [ 270.404486][ T7] ov534_9: probe of 1-1:0.0 failed with error -22 [ 270.406827][ T7] usb 1-1: USB disconnect, device number 19 [ 270.467338][ T6829] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 270.604466][ T8433] loop4: detected capacity change from 0 to 16 [ 270.654550][ T8433] erofs: (device loop4): mounted with root inode @ nid 36. [ 270.798523][ T6374] usb 3-1: 0:2 : does not exist [ 270.803477][ T6374] usb 3-1: unit 5 not found! [ 270.866094][ T6374] usb 3-1: USB disconnect, device number 13 [ 271.194186][ T8456] loop4: detected capacity change from 0 to 512 [ 271.222442][ T8456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 271.231788][ T8456] ext4 filesystem being mounted at /78/bus supports timestamps until 2038 (0x7fffffff) [ 271.276857][ T7411] EXT4-fs (loop4): unmounting filesystem. [ 271.298623][ T8462] loop3: detected capacity change from 0 to 512 [ 271.306802][ T8462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.332377][ T8462] EXT4-fs (loop3): 1 truncate cleaned up [ 271.345483][ T8462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 271.355816][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 271.805802][ T6829] EXT4-fs (loop3): unmounting filesystem. [ 271.866066][ T6374] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 271.907700][ T8477] loop2: detected capacity change from 0 to 8192 [ 271.965173][ T8477] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.986770][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.106001][ T6374] usb 2-1: Using ep0 maxpacket: 32 [ 272.146761][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.226087][ T6374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.255325][ T6374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.263124][ T8483] loop0: detected capacity change from 0 to 1024 [ 272.284035][ T6374] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.305421][ T6374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.323260][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.334943][ T6374] usb 2-1: config 0 descriptor?? [ 272.366969][ T8483] hfsplus: request for non-existent node 134217728 in B*Tree [ 272.389724][ T8483] hfsplus: request for non-existent node 134217728 in B*Tree [ 272.389807][ T6374] hub 2-1:0.0: USB hub found [ 272.405814][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 272.537632][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.606952][ T6374] hub 2-1:0.0: 1 port detected [ 272.638270][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.649757][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.659257][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.667665][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.697100][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.707831][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.090683][ T6374] usb 2-1: USB disconnect, device number 19 [ 273.362575][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 273.435827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 273.886458][ T2476] lo_write_bvec: 63 callbacks suppressed [ 273.886478][ T2476] loop: Write error at byte offset 9223372036854808575, length 4096. [ 273.965948][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.005923][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.035817][ C1] blk_print_req_error: 63 callbacks suppressed [ 274.035836][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.098352][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.115782][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.157028][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.165176][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.215937][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.224082][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.276281][ T9] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.284431][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.294126][ T3685] XFS (loop1): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x40 len 32 error 5 [ 274.396340][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.404483][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.485842][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 274.493112][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.505769][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.516753][ T11] loop: Write error at byte offset 9223372036854808575, length 4096. [ 274.535777][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.596206][ C1] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.676336][ C0] I/O error, dev loop1, sector 64 op 0x1:(WRITE) flags 0x1000 phys_seg 4 prio class 2 [ 274.796638][ T48] Bluetooth: hci0: command tx timeout [ 274.797261][ T27] INFO: task syz.1.397:4864 blocked for more than 143 seconds. [ 274.814912][ T27] Not tainted 6.1.109-syzkaller #0 [ 274.820737][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.831120][ T27] task:syz.1.397 state:D stack:23176 pid:4864 ppid:3810 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.855729][ T27] Call Trace: [ 274.861953][ T27] [ 274.864924][ T27] __schedule+0x143f/0x4570 [ 274.875186][ T8525] loop0: detected capacity change from 0 to 512 [ 274.882063][ T27] ? xlog_grant_head_wait+0x1ee/0xa00 [ 274.888831][ T27] ? release_firmware_map_entry+0x186/0x186 [ 274.902516][ T8525] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 274.912211][ T27] ? xlog_space_left+0xa9/0x2b0 [ 274.925746][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 274.970507][ T27] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 274.995352][ T8528] loop4: detected capacity change from 0 to 16 [ 275.001966][ T27] schedule+0xbf/0x180 [ 275.025730][ T27] xlog_grant_head_wait+0x3b6/0xa00 [ 275.030101][ T8528] erofs: (device loop4): mounted with root inode @ nid 36. [ 275.030977][ T27] xlog_grant_head_check+0x295/0x480 [ 275.071483][ T27] ? xlog_grant_push_ail+0xd0/0xd0 [ 275.076839][ T27] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 275.082675][ T27] xfs_log_reserve+0x3e1/0xc30 [ 275.105781][ T27] ? xlog_grant_head_check+0x480/0x480 [ 275.111338][ T27] ? xfs_mod_freecounter+0x1e2/0x490 [ 275.119743][ T27] xfs_trans_reserve+0x239/0x6a0 [ 275.124727][ T27] xfs_trans_alloc+0x41e/0x890 [ 275.129566][ T27] xfs_trans_alloc_inode+0x129/0x450 [ 275.135090][ T27] ? xfs_trans_dup+0x6a0/0x6a0 [ 275.139951][ T27] ? xfs_da_hashname+0x26a/0x370 [ 275.144927][ T27] ? xfs_attr_leaf_newentsize+0xd5/0x1d0 [ 275.150591][ T27] xfs_attr_set+0xa4e/0x1660 [ 275.155307][ T27] ? xfs_attr_leaf_shrink+0x410/0x410 [ 275.160785][ T27] ? look_up_lock_class+0x77/0x140 [ 275.166747][ T27] ? register_lock_class+0x100/0x990 [ 275.172119][ T27] ? handle_mm_fault+0x3715/0x5340 [ 275.177388][ T27] ? is_dynamic_key+0x260/0x260 [ 275.182421][ T27] xfs_xattr_set+0x227/0x3a0 [ 275.187105][ T27] ? xfs_xattr_get+0x2f0/0x2f0 [ 275.191867][ T27] ? evm_protect_xattr+0x366/0xb10 [ 275.197267][ T27] ? xfs_xattr_get+0x2f0/0x2f0 [ 275.202052][ T27] __vfs_setxattr+0x3e7/0x420 [ 275.206811][ T27] __vfs_setxattr_noperm+0x12a/0x5e0 [ 275.212132][ T27] vfs_setxattr+0x21d/0x420 [ 275.216708][ T27] ? xattr_permission+0x4f0/0x4f0 [ 275.221747][ T27] ? _copy_from_user+0x31/0x170 [ 275.226654][ T27] ? copy_user_enhanced_fast_string+0xa/0x40 [ 275.232622][ T27] ? _copy_from_user+0x109/0x170 [ 275.237884][ T27] setxattr+0x250/0x2b0 [ 275.242057][ T27] ? path_setxattr+0x2a0/0x2a0 [ 275.246855][ T27] ? __mnt_want_write+0x222/0x2a0 [ 275.251868][ T27] path_setxattr+0x1bc/0x2a0 [ 275.256500][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 275.261795][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 275.267825][ T27] __x64_sys_setxattr+0xb7/0xd0 [ 275.272719][ T27] do_syscall_64+0x3b/0xb0 [ 275.278576][ T27] ? clear_bhb_loop+0x45/0xa0 [ 275.283450][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.289391][ T27] RIP: 0033:0x7fedf817def9 [ 275.293791][ T27] RSP: 002b:00007fedf8f90038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 275.302229][ T27] RAX: ffffffffffffffda RBX: 00007fedf8335f80 RCX: 00007fedf817def9 [ 275.310253][ T27] RDX: 0000000020000100 RSI: 0000000020000340 RDI: 0000000020000040 [ 275.318305][ T27] RBP: 00007fedf81f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 275.326345][ T27] R10: 000000000000fc21 R11: 0000000000000246 R12: 0000000000000000 [ 275.334320][ T27] R13: 0000000000000000 R14: 00007fedf8335f80 R15: 00007ffca9f4f278 [ 275.342706][ T27] [ 275.345881][ T27] INFO: task syz.1.397:4885 blocked for more than 143 seconds. [ 275.353514][ T27] Not tainted 6.1.109-syzkaller #0 [ 275.359713][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.368530][ T27] task:syz.1.397 state:D stack:27616 pid:4885 ppid:3810 flags:0x00004004 [ 275.378303][ T27] Call Trace: [ 275.381596][ T27] [ 275.384770][ T27] __schedule+0x143f/0x4570 [ 275.389614][ T27] ? xlog_grant_head_wait+0x1ee/0xa00 [ 275.395007][ T27] ? release_firmware_map_entry+0x186/0x186 [ 275.400932][ T27] ? xlog_space_left+0xa9/0x2b0 [ 275.405973][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 275.411262][ T27] ? xlog_grant_push_threshold+0x166/0x1f0 [ 275.417109][ T27] schedule+0xbf/0x180 [ 275.421226][ T27] xlog_grant_head_wait+0x3b6/0xa00 [ 275.427337][ T27] xlog_grant_head_check+0x295/0x480 [ 275.432628][ T27] ? xlog_grant_push_ail+0xd0/0xd0 [ 275.438422][ T27] ? xlog_grant_push_threshold+0x166/0x1f0 [ 275.444270][ T27] xfs_log_reserve+0x3e1/0xc30 [ 275.449393][ T27] ? xlog_grant_head_check+0x480/0x480 [ 275.454868][ T27] ? xfs_mod_freecounter+0x1e2/0x490 [ 275.460199][ T27] xfs_trans_reserve+0x239/0x6a0 [ 275.465141][ T27] xfs_trans_alloc+0x41e/0x890 [ 275.469955][ T27] xfs_trans_alloc_icreate+0xc5/0x2b0 [ 275.475322][ T27] ? xfs_trans_alloc_inode+0x450/0x450 [ 275.481053][ T27] ? get_cached_acl+0xf7/0x600 [ 275.486372][ T27] xfs_create+0x749/0x1360 [ 275.490811][ T27] ? xfs_inode_inherit_flags2+0x340/0x340 [ 275.496612][ T27] ? posix_acl_create+0x155/0x420 [ 275.501638][ T27] xfs_generic_create+0x48d/0xd70 [ 275.506920][ T27] ? xfs_vn_tmpfile+0xc0/0xc0 [ 275.511621][ T27] ? from_kgid+0x1a3/0x730 [ 275.516083][ T27] ? common_perm+0x16a/0x1c0 [ 275.520691][ T27] ? apparmor_path_mkdir+0x204/0x2a0 [ 275.525919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.526007][ T27] ? generic_permission+0x21c/0x4f0 [ 275.538666][ T27] ? inode_permission+0xf7/0x450 [ 275.543811][ T27] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 275.548926][ T27] ? security_inode_mkdir+0xb4/0x100 [ 275.554286][ T27] vfs_mkdir+0x3b6/0x590 [ 275.558578][ T27] do_mkdirat+0x225/0x360 [ 275.562942][ T27] ? vfs_mkdir+0x590/0x590 [ 275.567639][ T27] ? getname_flags+0x1f9/0x4f0 [ 275.572416][ T27] __x64_sys_mkdirat+0x85/0x90 [ 275.577200][ T27] do_syscall_64+0x3b/0xb0 [ 275.581851][ T27] ? clear_bhb_loop+0x45/0xa0 [ 275.586598][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.592766][ T27] RIP: 0033:0x7fedf817def9 [ 275.597233][ T27] RSP: 002b:00007fedf8f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 275.605649][ T27] RAX: ffffffffffffffda RBX: 00007fedf8336058 RCX: 00007fedf817def9 [ 275.613655][ T27] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 275.621665][ T27] RBP: 00007fedf81f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 275.629714][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.637731][ T27] R13: 0000000000000000 R14: 00007fedf8336058 R15: 00007ffca9f4f278 [ 275.647137][ T27] [ 275.650211][ T27] [ 275.650211][ T27] Showing all locks held in the system: [ 275.660467][ T27] 3 locks held by kworker/u4:1/11: [ 275.665613][ T27] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.695902][ T27] #1: ffffc90000107d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.725801][ T27] #2: ffffffff8e4f8ee8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 275.734842][ T27] 1 lock held by rcu_tasks_kthre/12: [ 275.765761][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 275.786561][ T27] 1 lock held by rcu_tasks_trace/13: [ 275.791886][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 275.804724][ T27] 1 lock held by khungtaskd/27: [ 275.809726][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 275.828081][ T27] 4 locks held by kworker/u4:4/102: [ 275.833315][ T27] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.854687][ T27] #1: ffffc900015e7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.864731][ T27] #2: ffffffff8e4ecb90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 275.881460][ T27] #3: ffffffff8e4f8ee8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x22f/0xb10 [ 275.891040][ T27] 3 locks held by kworker/0:2/151: [ 275.896372][ T27] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.906798][ T27] #1: ffffc90002d5fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.918649][ T27] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 275.929609][ T27] 2 locks held by getty/3392: [ 275.934263][ T27] #0: ffff88814bad8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 275.944273][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 275.954571][ T27] 2 locks held by kworker/0:11/3979: [ 275.960025][ T27] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.970486][ T27] #1: ffffc9000388fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 275.981952][ T27] 3 locks held by syz.1.397/4864: [ 275.987028][ T27] #0: ffff88802da14460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 275.996867][ T27] #1: ffff8880716db978 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 276.008625][ T27] #2: ffff88802da14650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 276.018764][ T27] 3 locks held by syz.1.397/4885: [ 276.023786][ T27] #0: ffff88802da14460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 276.033040][ T27] #1: ffff8880716d92b8 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 276.044829][ T27] #2: ffff88802da14650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0 [ 276.056081][ T27] 3 locks held by syz-executor/7225: [ 276.061471][ T27] #0: ffff8880741a90b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 276.071562][ T27] #1: ffff8880741a8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 276.086971][ T27] #2: ffffffff8e650288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 276.097947][ T27] 1 lock held by syz-executor/7411: [ 276.103541][ T27] #0: ffff8880742740e0 (&type->s_umount_key#60){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 276.113948][ T27] 2 locks held by syz-executor/8491: [ 276.119439][ T27] #0: ffffffff8e4f8ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 276.129705][ T27] #1: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 276.140614][ T27] 3 locks held by syz.1.1715/8522: [ 276.145749][ T27] #0: ffffffff8e557f70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 276.153947][ T27] #1: ffffffff8e557e28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x125/0xf70 [ 276.163344][ T27] #2: ffffffff8e4f8ee8 (rtnl_mutex){+.+.}-{3:3}, at: team_nl_cmd_options_set+0x97/0x1050 [ 276.173354][ T27] 3 locks held by syz.0.1718/8525: [ 276.178741][ T27] #0: ffff88806759d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 276.188727][ T27] #1: ffff88806759c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 276.198651][ T27] #2: ffffffff8e650288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 276.209122][ T27] [ 276.215981][ T27] ============================================= [ 276.215981][ T27] [ 276.252427][ T27] NMI backtrace for cpu 1 [ 276.256807][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0 [ 276.264709][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 276.274778][ T27] Call Trace: [ 276.278074][ T27] [ 276.281019][ T27] dump_stack_lvl+0x1e3/0x2cb [ 276.285722][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 276.291214][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 276.296705][ T27] ? panic+0x764/0x764 [ 276.300793][ T27] ? vprintk_emit+0x622/0x740 [ 276.305503][ T27] ? printk_sprint+0x490/0x490 [ 276.310382][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 276.315526][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 276.320477][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 276.326628][ T27] ? _printk+0xd1/0x111 [ 276.330775][ T27] ? panic+0x764/0x764 [ 276.334831][ T27] ? __wake_up_klogd+0xcc/0x100 [ 276.339670][ T27] ? panic+0x764/0x764 [ 276.343747][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 276.349829][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 276.355904][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 276.361885][ T27] watchdog+0xf88/0xfd0 [ 276.366041][ T27] ? watchdog+0x1f8/0xfd0 [ 276.370364][ T27] kthread+0x28d/0x320 [ 276.374418][ T27] ? hungtask_pm_notify+0x50/0x50 [ 276.379521][ T27] ? kthread_blkcg+0xd0/0xd0 [ 276.384101][ T27] ret_from_fork+0x1f/0x30 [ 276.388520][ T27] [ 276.392657][ T27] Sending NMI from CPU 1 to CPUs 0: [ 276.398639][ C0] NMI backtrace for cpu 0 [ 276.398650][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.109-syzkaller #0 [ 276.398665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 276.398674][ C0] Workqueue: bat_events batadv_nc_worker [ 276.398696][ C0] RIP: 0010:__lock_acquire+0x49d/0x1f80 [ 276.398716][ C0] Code: 12 00 00 44 89 33 44 89 fb 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 b2 1d 91 be 08 00 00 00 e8 db a2 77 00 48 0f a3 1d 93 24 b3 0f <73> 25 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 31 bb 90 48 ba 00 00 00 [ 276.398733][ C0] RSP: 0018:ffffc90000107940 EFLAGS: 00000057 [ 276.398744][ C0] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff816a8d85 [ 276.398754][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911db220 [ 276.398763][ C0] RBP: ffff888017ed4644 R08: dffffc0000000000 R09: fffffbfff223b645 [ 276.398773][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888017ed4658 [ 276.398783][ C0] R13: ffff888017ed3b80 R14: 0000000000000000 R15: 000000000000002c [ 276.398792][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 276.398804][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.398813][ C0] CR2: 00007f2cfa524d58 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 276.398826][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.398834][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.398842][ C0] Call Trace: [ 276.398846][ C0] [ 276.398851][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 276.398871][ C0] ? read_lock_is_recursive+0x10/0x10 [ 276.398889][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 276.398913][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 276.398932][ C0] ? nmi_handle+0x12e/0x440 [ 276.398950][ C0] ? nmi_handle+0x25/0x440 [ 276.398967][ C0] ? __lock_acquire+0x49d/0x1f80 [ 276.398983][ C0] ? default_do_nmi+0x62/0x150 [ 276.398996][ C0] ? exc_nmi+0xa8/0x100 [ 276.399007][ C0] ? end_repeat_nmi+0x16/0x31 [ 276.399027][ C0] ? __lock_acquire+0x495/0x1f80 [ 276.399044][ C0] ? __lock_acquire+0x49d/0x1f80 [ 276.399060][ C0] ? __lock_acquire+0x49d/0x1f80 [ 276.399077][ C0] ? __lock_acquire+0x49d/0x1f80 [ 276.399093][ C0] [ 276.399097][ C0] [ 276.399107][ C0] lock_acquire+0x1f8/0x5a0 [ 276.399122][ C0] ? batadv_nc_process_nc_paths+0xb5/0x390 [ 276.399142][ C0] ? read_lock_is_recursive+0x10/0x10 [ 276.399159][ C0] ? batadv_nc_process_nc_paths+0xb5/0x390 [ 276.399176][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 276.399191][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 276.399209][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 276.399230][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 276.399249][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 276.399265][ C0] batadv_nc_process_nc_paths+0xd6/0x390 [ 276.399281][ C0] ? batadv_nc_process_nc_paths+0xb5/0x390 [ 276.399299][ C0] ? batadv_nc_process_nc_paths+0xb5/0x390 [ 276.399317][ C0] batadv_nc_worker+0x528/0x610 [ 276.399334][ C0] ? process_one_work+0x7a9/0x11d0 [ 276.399349][ C0] process_one_work+0x8a9/0x11d0 [ 276.399367][ C0] ? worker_detach_from_pool+0x260/0x260 [ 276.399383][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 276.399397][ C0] ? kthread_data+0x4e/0xc0 [ 276.399416][ C0] ? wq_worker_running+0x97/0x190 [ 276.399434][ C0] worker_thread+0xa47/0x1200 [ 276.399457][ C0] kthread+0x28d/0x320 [ 276.399467][ C0] ? worker_clr_flags+0x190/0x190 [ 276.399481][ C0] ? kthread_blkcg+0xd0/0xd0 [ 276.399493][ C0] ret_from_fork+0x1f/0x30 [ 276.399514][ C0] [ 276.752983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 276.833108][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 276.839998][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0 [ 276.847902][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 276.857969][ T27] Call Trace: [ 276.861249][ T27] [ 276.864183][ T27] dump_stack_lvl+0x1e3/0x2cb [ 276.868975][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 276.874452][ T27] ? panic+0x764/0x764 [ 276.878532][ T27] ? llist_add_batch+0x160/0x1d0 [ 276.883484][ T27] ? vscnprintf+0x59/0x80 [ 276.887821][ T27] panic+0x318/0x764 [ 276.891723][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 276.895790][ T3652] Bluetooth: hci0: command tx timeout [ 276.903247][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 276.908632][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 276.914799][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 276.920974][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 276.927147][ T27] watchdog+0xfc7/0xfd0 [ 276.931323][ T27] ? watchdog+0x1f8/0xfd0 [ 276.935661][ T27] kthread+0x28d/0x320 [ 276.939726][ T27] ? hungtask_pm_notify+0x50/0x50 [ 276.944752][ T27] ? kthread_blkcg+0xd0/0xd0 [ 276.949341][ T27] ret_from_fork+0x1f/0x30 [ 276.953771][ T27] [ 276.957004][ T27] Kernel Offset: disabled [ 276.961320][ T27] Rebooting in 86400 seconds..