last executing test programs: 5.978215504s ago: executing program 1 (id=520): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) file_getattr(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000006c0), 0x18, 0x1000) 5.705957792s ago: executing program 1 (id=522): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x6000, @fd=r0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)="00000000042000", 0x7}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 5.520649956s ago: executing program 3 (id=524): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 5.40356452s ago: executing program 1 (id=526): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 4.445150916s ago: executing program 3 (id=532): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 4.028911782s ago: executing program 3 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000004000000200000008000300", @ANYRES32=r1, @ANYBLOB="080027000300000008002600a809"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 3.83910003s ago: executing program 1 (id=537): r0 = syz_io_uring_setup(0x42e3, &(0x7f0000000240)={0x0, 0xf9ed, 0x3000, 0x0, 0x100028f}, &(0x7f0000000140), &(0x7f0000001440)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x6) 3.769609074s ago: executing program 3 (id=539): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 3.483196168s ago: executing program 3 (id=542): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[], 0x1, 0x553e, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 3.304862137s ago: executing program 1 (id=543): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)={0x0, 0x8, 0x5, "4a27970700"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.615279525s ago: executing program 4 (id=551): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 2.197796843s ago: executing program 0 (id=554): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x6) 1.806764221s ago: executing program 2 (id=556): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f00000005c0)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) rename(&(0x7f00000062c0)='./file0/file0\x00', &(0x7f0000006280)='./file1\x00') 1.71872297s ago: executing program 3 (id=557): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) 1.489134602s ago: executing program 4 (id=558): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, 0x0) 1.413550561s ago: executing program 2 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60000004}) 1.321468804s ago: executing program 1 (id=560): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000000)={[], [{@flag='lazytime'}]}, 0x4, 0x9655, &(0x7f000001c300)="$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") ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000002c0)={0x4, 0x9, 0x9, 0x1, 0x9e}) 1.032282638s ago: executing program 0 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 983.847647ms ago: executing program 2 (id=562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(r0) 836.786044ms ago: executing program 0 (id=563): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000d40)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000d80)=0x1, 0x12) 764.27421ms ago: executing program 4 (id=564): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 663.497337ms ago: executing program 0 (id=565): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x2, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000180)="99de", 0x2}], 0x1}}], 0x1, 0x4000090) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4}, 0xc) 514.322669ms ago: executing program 2 (id=566): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x7}, {0xa4, "d3d3ee0e7fcf8c66655cda90f6160ff4", "2f3187f90136c02e4e69b48f14c5f719"}}}}, 0x27) unshare(0x2040400) r0 = eventfd(0x3) sync_file_range(r0, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) 514.178904ms ago: executing program 4 (id=567): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 396.25094ms ago: executing program 0 (id=568): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='J'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 358.749707ms ago: executing program 4 (id=569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r2, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 299.593819ms ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x20, {0x0, 0x0, 0x0, r2, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe677}]}}}]}, 0x44}}, 0x20000010) 229.540303ms ago: executing program 0 (id=571): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 143.65992ms ago: executing program 4 (id=572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001500018b"], 0xb8}}, 0x0) 0s ago: executing program 2 (id=573): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 73.277702][ T5804] cgroup: Unknown subsys name 'net' [ 73.411978][ T5804] cgroup: Unknown subsys name 'cpuset' [ 73.421352][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.007963][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.988600][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.996994][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.004929][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.016267][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.029340][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.037410][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.045992][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.055308][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.072054][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.080359][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.142700][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.153787][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.162072][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.170757][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.179368][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.190178][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.201262][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.209024][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.217534][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.228937][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.321796][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.329691][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.337876][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.347087][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.356260][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.945607][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 77.986868][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 78.011182][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.094797][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 78.370856][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.383532][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.391451][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.399026][ T5826] bridge_slave_0: entered allmulticast mode [ 78.406632][ T5826] bridge_slave_0: entered promiscuous mode [ 78.437667][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.445271][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.452654][ T5818] bridge_slave_0: entered allmulticast mode [ 78.460343][ T5818] bridge_slave_0: entered promiscuous mode [ 78.475206][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.482650][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.490390][ T5826] bridge_slave_1: entered allmulticast mode [ 78.497867][ T5826] bridge_slave_1: entered promiscuous mode [ 78.517523][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.525107][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.533232][ T5814] bridge_slave_0: entered allmulticast mode [ 78.540970][ T5814] bridge_slave_0: entered promiscuous mode [ 78.549214][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.556514][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.564821][ T5818] bridge_slave_1: entered allmulticast mode [ 78.572485][ T5818] bridge_slave_1: entered promiscuous mode [ 78.636615][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.643944][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.651462][ T5824] bridge_slave_0: entered allmulticast mode [ 78.659430][ T5824] bridge_slave_0: entered promiscuous mode [ 78.667216][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.674488][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.682142][ T5814] bridge_slave_1: entered allmulticast mode [ 78.689860][ T5814] bridge_slave_1: entered promiscuous mode [ 78.719798][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.744873][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.752332][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.760628][ T5824] bridge_slave_1: entered allmulticast mode [ 78.768505][ T5824] bridge_slave_1: entered promiscuous mode [ 78.812427][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.826810][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.866625][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.897898][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.911874][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.925610][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.938034][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.038911][ T5818] team0: Port device team_slave_0 added [ 79.072759][ T5824] team0: Port device team_slave_0 added [ 79.081515][ T5824] team0: Port device team_slave_1 added [ 79.099331][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.106610][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.114286][ T5829] bridge_slave_0: entered allmulticast mode [ 79.122060][ T5829] bridge_slave_0: entered promiscuous mode [ 79.132812][ T5818] team0: Port device team_slave_1 added [ 79.138869][ T51] Bluetooth: hci0: command tx timeout [ 79.144619][ T5817] Bluetooth: hci1: command tx timeout [ 79.157461][ T5826] team0: Port device team_slave_0 added [ 79.166912][ T5826] team0: Port device team_slave_1 added [ 79.175858][ T5814] team0: Port device team_slave_0 added [ 79.184778][ T5814] team0: Port device team_slave_1 added [ 79.204087][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.211708][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.222813][ T5829] bridge_slave_1: entered allmulticast mode [ 79.230593][ T5829] bridge_slave_1: entered promiscuous mode [ 79.274392][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.281524][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.298718][ T5817] Bluetooth: hci3: command tx timeout [ 79.310738][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.313258][ T51] Bluetooth: hci2: command tx timeout [ 79.347040][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.354297][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.380659][ T5817] Bluetooth: hci4: command tx timeout [ 79.386320][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.424345][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.431378][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.457698][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.482317][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.489439][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.515689][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.528411][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.535397][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.561552][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.574515][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.581566][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.608008][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.632972][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.652188][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.659208][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.685605][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.698582][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.705651][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.732413][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.754880][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.865499][ T5824] hsr_slave_0: entered promiscuous mode [ 79.872521][ T5824] hsr_slave_1: entered promiscuous mode [ 79.913103][ T5814] hsr_slave_0: entered promiscuous mode [ 79.921022][ T5814] hsr_slave_1: entered promiscuous mode [ 79.927847][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 79.934114][ T5814] Cannot create hsr debugfs directory [ 79.947201][ T5818] hsr_slave_0: entered promiscuous mode [ 79.954512][ T5818] hsr_slave_1: entered promiscuous mode [ 79.961327][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 79.967070][ T5818] Cannot create hsr debugfs directory [ 79.996783][ T5829] team0: Port device team_slave_0 added [ 80.056073][ T5826] hsr_slave_0: entered promiscuous mode [ 80.062985][ T5826] hsr_slave_1: entered promiscuous mode [ 80.069799][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 80.075542][ T5826] Cannot create hsr debugfs directory [ 80.085491][ T5829] team0: Port device team_slave_1 added [ 80.203496][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.210596][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.236731][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.302120][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.309531][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.336502][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.646618][ T5829] hsr_slave_0: entered promiscuous mode [ 80.653574][ T5829] hsr_slave_1: entered promiscuous mode [ 80.660738][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 80.666486][ T5829] Cannot create hsr debugfs directory [ 80.934934][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.973379][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.001030][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.034184][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.103315][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.116269][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.127753][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.142641][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.218668][ T5817] Bluetooth: hci1: command tx timeout [ 81.218708][ T51] Bluetooth: hci0: command tx timeout [ 81.259481][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.272740][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.284811][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.318017][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.378763][ T51] Bluetooth: hci3: command tx timeout [ 81.378772][ T5817] Bluetooth: hci2: command tx timeout [ 81.451852][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.458758][ T51] Bluetooth: hci4: command tx timeout [ 81.481762][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.495486][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.511808][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.639812][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.646884][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.669283][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.703306][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.711507][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.730979][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.782735][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.841756][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.863683][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.871157][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.881706][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.888963][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.927316][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.934550][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.945641][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.952895][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.993533][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.033691][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.063471][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.070767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.108626][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.115790][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.185438][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.356469][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.397133][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.442722][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.449940][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.530064][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.561923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.569266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.677508][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.741620][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.772659][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.779915][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.825021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.832512][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.869748][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.045518][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.115562][ T5818] veth0_vlan: entered promiscuous mode [ 83.225239][ T5818] veth1_vlan: entered promiscuous mode [ 83.266399][ T5824] veth0_vlan: entered promiscuous mode [ 83.298479][ T51] Bluetooth: hci1: command tx timeout [ 83.298708][ T5817] Bluetooth: hci0: command tx timeout [ 83.352434][ T5824] veth1_vlan: entered promiscuous mode [ 83.396203][ T5814] veth0_vlan: entered promiscuous mode [ 83.412585][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.459607][ T5817] Bluetooth: hci3: command tx timeout [ 83.460296][ T51] Bluetooth: hci2: command tx timeout [ 83.497700][ T5814] veth1_vlan: entered promiscuous mode [ 83.539552][ T51] Bluetooth: hci4: command tx timeout [ 83.568885][ T5818] veth0_macvtap: entered promiscuous mode [ 83.577167][ T5824] veth0_macvtap: entered promiscuous mode [ 83.595379][ T5818] veth1_macvtap: entered promiscuous mode [ 83.612384][ T5824] veth1_macvtap: entered promiscuous mode [ 83.702978][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.787796][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.803712][ T5814] veth0_macvtap: entered promiscuous mode [ 83.830111][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.841779][ T5814] veth1_macvtap: entered promiscuous mode [ 83.855581][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.894172][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.904541][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.920746][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.935946][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.945244][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.999831][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.031711][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.042106][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.072352][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.081872][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.091848][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.141454][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.172077][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.183115][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.200101][ T5829] veth0_vlan: entered promiscuous mode [ 84.216583][ T5826] veth0_vlan: entered promiscuous mode [ 84.227676][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.276628][ T5829] veth1_vlan: entered promiscuous mode [ 84.300646][ T5826] veth1_vlan: entered promiscuous mode [ 84.330557][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.353205][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.480618][ T5826] veth0_macvtap: entered promiscuous mode [ 84.492858][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.505602][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.531777][ T5829] veth0_macvtap: entered promiscuous mode [ 84.577988][ T5826] veth1_macvtap: entered promiscuous mode [ 84.601746][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.616162][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.627841][ T5829] veth1_macvtap: entered promiscuous mode [ 84.630706][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.643367][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.677013][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.770782][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.774566][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.791403][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.815896][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.856490][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.885887][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.886286][ T5929] loop0: detected capacity change from 0 to 256 [ 84.921031][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.961188][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.981122][ T5929] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 84.992449][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.060498][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070268][ T30] audit: type=1800 audit(1772459487.340:2): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file2" dev="loop0" ino=1048595 res=0 errno=0 [ 85.099443][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.121401][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.303268][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.330614][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.349121][ T5936] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure [ 85.354006][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.379359][ T51] Bluetooth: hci0: command tx timeout [ 85.384821][ T51] Bluetooth: hci1: command tx timeout [ 85.428536][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.437357][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.453999][ T5932] loop1: detected capacity change from 0 to 8192 [ 85.493598][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.505567][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.539378][ T51] Bluetooth: hci2: command tx timeout [ 85.539575][ T5817] Bluetooth: hci3: command tx timeout [ 85.618738][ T5817] Bluetooth: hci4: command tx timeout [ 85.774317][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.803556][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.058291][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.066253][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.260955][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.289758][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.579369][ T5966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.576779][ T6000] loop2: detected capacity change from 0 to 32768 [ 88.681239][ T6000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.27 (6000) [ 88.770078][ T6000] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.786647][ T6000] BTRFS info (device loop2): using crc32c checksum algorithm [ 89.006075][ T30] audit: type=1326 audit(1772459491.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f376259c799 code=0x0 [ 89.100696][ T6000] BTRFS info (device loop2): allowing degraded mounts [ 89.107538][ T6000] BTRFS info (device loop2): enabling ssd optimizations [ 89.127411][ T6012] loop1: detected capacity change from 0 to 32768 [ 89.158923][ T6000] BTRFS info (device loop2): turning on async discard [ 89.165768][ T6000] BTRFS info (device loop2): enabling free space tree [ 89.186847][ T6000] BTRFS info (device loop2): force zlib compression, level 3 [ 89.365751][ T5824] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.495422][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.688179][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 89.717589][ T6043] loop1: detected capacity change from 0 to 512 [ 89.738993][ T5869] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.782201][ T6043] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 89.798186][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.828937][ T5869] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.874602][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.888688][ T6043] ======================================================= [ 89.888688][ T6043] WARNING: The mand mount option has been deprecated and [ 89.888688][ T6043] and is ignored by this kernel. Remove the mand [ 89.888688][ T6043] option from the mount to silence this warning. [ 89.888688][ T6043] ======================================================= [ 89.925969][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.942046][ T5869] usb 4-1: config 0 descriptor?? [ 89.975499][ T6041] loop2: detected capacity change from 0 to 4096 [ 90.400953][ T5869] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 90.556908][ T6056] loop4: detected capacity change from 0 to 1024 [ 90.701725][ T6056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.759432][ T6056] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.801313][ T5898] usb 4-1: USB disconnect, device number 2 [ 90.840844][ T6056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.43: bg 0: block 112: padding at end of block bitmap is not set [ 90.856225][ T6066] loop2: detected capacity change from 0 to 512 [ 90.860304][ T6056] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 117 [ 90.897333][ T6056] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.897333][ T6056] [ 90.933958][ T6066] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 90.994808][ T6066] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.46: iget: bad i_size value: 12154757448730 [ 91.040691][ T6066] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 91.058305][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 91.071053][ T6066] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.46: couldn't read orphan inode 13 (err -117) [ 91.074363][ C1] EXT4-fs (loop2): initial error at time 1772459493: ext4_orphan_get:1391: inode 13 [ 91.095937][ C1] EXT4-fs (loop2): last error at time 1772459493: ext4_orphan_get:1391: inode 13 [ 91.111824][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.151187][ T6070] loop0: detected capacity change from 0 to 128 [ 91.165214][ T6066] loop2: lost filesystem error report for type 5 error -117 [ 91.167563][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.197148][ T6070] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.240809][ T6046] loop1: detected capacity change from 0 to 32768 [ 91.423429][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.586899][ T6076] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.626923][ T6076] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.997415][ T6088] Bluetooth: MGMT ver 1.23 [ 92.137890][ T24] cfg80211: failed to load regulatory.db [ 92.599714][ T6084] loop0: detected capacity change from 0 to 32768 [ 92.760273][ T6084] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 92.873772][ T6084] JBD2: Ignoring recovery information on journal [ 93.078900][ T6084] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.161833][ T6125] loop2: detected capacity change from 0 to 4096 [ 93.293454][ T6130] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.430028][ T6100] loop3: detected capacity change from 0 to 32768 [ 93.461636][ T5818] ocfs2: Unmounting device (7,0) on (node local) [ 93.492871][ T6100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.62 (6100) [ 93.574009][ T6100] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.612348][ T6100] BTRFS info (device loop3): using sha256 checksum algorithm [ 93.865098][ T6100] BTRFS info (device loop3): enabling ssd optimizations [ 93.938158][ T6100] BTRFS info (device loop3): turning on async discard [ 93.945016][ T6100] BTRFS info (device loop3): enabling free space tree [ 93.966383][ T6156] Zero length message leads to an empty skb [ 93.975324][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.025393][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.080609][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.108174][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.165816][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 94.192119][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.389642][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.563372][ T5869] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x41, changing to 0x1 [ 94.563423][ T5869] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.565968][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 94.565999][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 94.566028][ T5869] usb 2-1: Product: syz [ 94.566042][ T5869] usb 2-1: Manufacturer: syz [ 94.566056][ T5869] usb 2-1: SerialNumber: syz [ 94.814772][ T5869] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 95.033306][ C0] usblp0: nonzero write bulk status received: -71 [ 95.044040][ T980] usb 2-1: USB disconnect, device number 2 [ 95.070308][ T980] usblp0: removed [ 95.476781][ T6175] loop2: detected capacity change from 0 to 32768 [ 95.719083][ T6194] loop4: detected capacity change from 0 to 256 [ 95.738957][ T6194] exfat: Deprecated parameter 'utf8' [ 95.765367][ T6194] exfat: Deprecated parameter 'namecase' [ 95.776376][ T1743] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 95.807223][ T6194] exfat: Deprecated parameter 'namecase' [ 95.870958][ T6194] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 96.325167][ T6200] loop3: detected capacity change from 0 to 32768 [ 96.347785][ T6200] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.393985][ T6200] XFS (loop3): Ending clean mount [ 96.486127][ T5829] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.826312][ T6226] loop1: detected capacity change from 0 to 512 [ 97.947769][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.023571][ T6199] loop0: detected capacity change from 0 to 262144 [ 98.050091][ T6199] F2FS-fs (loop0): invalid crc value [ 98.217655][ T6199] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 98.231192][ T6199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.378859][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.471340][ T6242] warning: `syz.4.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.683997][ T6244] loop3: detected capacity change from 0 to 2048 [ 98.750170][ T6244] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.831332][ T6244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.913216][ T6250] loop4: detected capacity change from 0 to 4096 [ 99.058424][ T6253] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.105614][ T6230] loop2: detected capacity change from 0 to 32768 [ 99.172653][ T6230] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.103 (6230) [ 99.214655][ T6256] Context (ID=0x4d4) not attached to queue pair (handle=0x1:0x1) [ 99.231708][ T6230] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 99.275261][ T6230] BTRFS info (device loop2): using blake2b checksum algorithm [ 99.427290][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 99.584181][ T6230] BTRFS info (device loop2): enabling ssd optimizations [ 99.608235][ T6230] BTRFS info (device loop2): turning on async discard [ 99.615078][ T6230] BTRFS info (device loop2): enabling free space tree [ 100.039310][ T6291] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 100.088472][ T5824] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 100.416034][ T6301] loop0: detected capacity change from 0 to 512 [ 100.474044][ T6301] EXT4-fs: Ignoring removed i_version option [ 100.617503][ T6301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.753473][ T6310] sctp: [Deprecated]: syz.4.131 (pid 6310) Use of int in max_burst socket option. [ 100.753473][ T6310] Use struct sctp_assoc_value instead [ 100.858428][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.474802][ T6330] loop0: detected capacity change from 0 to 1024 [ 101.501424][ T6330] EXT4-fs: inline encryption not supported [ 101.580250][ T6330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.712909][ T6341] netlink: 165 bytes leftover after parsing attributes in process `syz.2.146'. [ 101.872687][ T5898] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.885756][ T6344] loop3: detected capacity change from 0 to 2048 [ 101.978696][ T5942] loop3: p1 < > p4 [ 102.000967][ T5942] loop3: p4 size 8388608 extends beyond EOD, truncated [ 102.053552][ T6350] loop4: detected capacity change from 0 to 256 [ 102.081155][ T5898] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 102.092474][ T6344] loop3: p1 < > p4 [ 102.097744][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.118867][ T5898] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 102.131892][ T6350] exfat: Deprecated parameter 'namecase' [ 102.135008][ T6344] loop3: p4 size 8388608 extends beyond EOD, truncated [ 102.139249][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.154323][ T6350] exfat: Deprecated parameter 'utf8' [ 102.207503][ T6350] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 102.220627][ T5898] usb 2-1: Product: syz [ 102.225079][ T5898] usb 2-1: Manufacturer: syz [ 102.259800][ T5898] usb 2-1: SerialNumber: syz [ 102.297023][ T5898] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 103.077495][ T6373] loop3: detected capacity change from 0 to 256 [ 103.133269][ T5898] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 103.159562][ T6373] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 103.182413][ T5898] usb 2-1: USB disconnect, device number 3 [ 103.231380][ T6373] UBIFS error (pid: 6373): cannot open "c:::", error -22 [ 103.235608][ T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.331130][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 103.438150][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 103.456565][ T980] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 103.483947][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 103.506099][ T6377] loop3: detected capacity change from 0 to 4096 [ 103.508731][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.524384][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 103.563595][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 103.575082][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.589781][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.600509][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.608823][ T6380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.643468][ T30] audit: type=1800 audit(1772459505.920:4): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.162" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 103.800274][ T6371] loop4: detected capacity change from 0 to 32768 [ 103.846990][ T980] usb 1-1: GET_CAPABILITIES returned 76 [ 103.869323][ T980] usbtmc 1-1:16.0: can't read capabilities [ 103.884701][ T6371] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 103.941257][ T6389] loop2: detected capacity change from 0 to 1024 [ 104.006621][ T6389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.083827][ T6371] XFS (loop4): Ending clean mount [ 104.136514][ T6371] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 [ 104.167655][ T5898] usb 1-1: USB disconnect, device number 2 [ 104.186006][ T6371] XFS (loop4): Unmount and run xfs_repair [ 104.215908][ T6371] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 104.259337][ T6371] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 104.287353][ T6371] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 104.307364][ T6371] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 104.320743][ T6371] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 104.329739][ T6371] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 104.344721][ T6371] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 104.355558][ T6371] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 104.389042][ T6371] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 104.411375][ T6371] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x20 len 8 error 74 [ 104.445553][ T6371] loop4: lost filesystem error report for type 5 error -117 [ 104.445845][ T6371] XFS (loop4): Failed to initialize disk quotas, err -117. [ 104.609574][ T5826] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 104.648897][ T5826] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 104.930076][ T6394] loop3: detected capacity change from 0 to 32768 [ 104.980004][ T6394] (syz.3.166,6394,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.040570][ T6394] (syz.3.166,6394,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.199341][ T6394] JBD2: Ignoring recovery information on journal [ 105.232625][ T6396] loop2: detected capacity change from 0 to 32768 [ 105.241945][ T6396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.167 (6396) [ 105.279346][ T6396] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.293341][ T6396] BTRFS info (device loop2): using crc32c checksum algorithm [ 105.416820][ T6394] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.460977][ T6396] BTRFS info (device loop2): turning off barriers [ 105.467503][ T6396] BTRFS info (device loop2): turning on async discard [ 105.538856][ T6396] BTRFS info (device loop2): enabling free space tree [ 105.545789][ T6396] BTRFS info (device loop2): use zstd compression, level 3 [ 105.586767][ T6427] loop4: detected capacity change from 0 to 256 [ 105.605384][ T6427] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.400211][ T5824] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.475661][ T6441] process 'syz.0.181' launched './file2' with NULL argv: empty string added [ 106.570061][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 106.851076][ T6446] loop1: detected capacity change from 0 to 1024 [ 107.144004][ T6436] loop4: detected capacity change from 0 to 32768 [ 107.204419][ T49] hfsplus: b-tree write err: -5, ino 25 [ 107.211216][ T6436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.176 (6436) [ 107.224632][ T49] hfsplus: b-tree write err: -5, ino 4 [ 107.253594][ T49] hfsplus: b-tree write err: -5, ino 2 [ 107.283704][ T49] hfsplus: b-tree write err: -5, ino 17 [ 107.305760][ T6436] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.378248][ T6436] BTRFS info (device loop4): using sha256 checksum algorithm [ 107.566543][ T6464] loop0: detected capacity change from 0 to 128 [ 107.629436][ T6436] BTRFS info (device loop4): enabling ssd optimizations [ 107.636633][ T6436] BTRFS info (device loop4): turning on async discard [ 107.653903][ T6464] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 107.718259][ T6436] BTRFS info (device loop4): enabling free space tree [ 107.752731][ T6464] hpfs: filesystem error: improperly stopped [ 107.828220][ T6464] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 107.890492][ T6464] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 107.931533][ T6464] hpfs: You really don't want any checks? You are crazy... [ 107.963454][ T6464] hpfs: hpfs_map_sector(): read error [ 107.988944][ T6464] hpfs: code page support is disabled [ 107.995671][ T6443] loop2: detected capacity change from 0 to 32768 [ 108.009394][ T6464] hpfs: hpfs_map_4sectors(): unaligned read [ 108.015727][ T6464] hpfs: hpfs_map_4sectors(): unaligned read [ 108.051247][ T6443] (syz.2.179,6443,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.079791][ T6464] hpfs: filesystem error: unable to find root dir [ 108.080029][ T5826] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.097903][ T6443] (syz.2.179,6443,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.156992][ T6443] JBD2: Ignoring recovery information on journal [ 108.344398][ T6443] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.693042][ T30] audit: type=1800 audit(1772459510.970:5): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=16978 res=0 errno=0 [ 108.960694][ T5824] ocfs2: Unmounting device (7,2) on (node local) [ 109.669573][ T6526] tipc: Started in network mode [ 109.674825][ T6526] tipc: Node identity ac14140f, cluster identity 4711 [ 109.725026][ T6526] tipc: New replicast peer: 255.255.255.255 [ 109.753275][ T6526] tipc: Enabled bearer , priority 10 [ 110.023888][ T6542] IPv6: Can't replace route, no match found [ 110.048284][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.186325][ T6544] loop2: detected capacity change from 0 to 4096 [ 110.218276][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 110.231714][ T6544] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 110.232242][ T24] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 110.267674][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 110.281935][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.305030][ T24] usb 1-1: Product: syz [ 110.314063][ T24] usb 1-1: Manufacturer: syz [ 110.323287][ T24] usb 1-1: SerialNumber: syz [ 110.348133][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 110.548888][ T6560] loop1: detected capacity change from 0 to 1024 [ 110.726194][ T6560] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 110.750916][ T5941] tipc: Node number set to 2886997007 [ 110.786463][ T24] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 110.803368][ T24] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 110.835533][ T49] hfsplus: b-tree write err: -5, ino 25 [ 110.848462][ T49] hfsplus: b-tree write err: -5, ino 4 [ 110.863006][ T49] hfsplus: b-tree write err: -5, ino 2 [ 111.031711][ T980] usb 1-1: USB disconnect, device number 3 [ 111.678248][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.738036][ T6587] loop3: detected capacity change from 0 to 128 [ 111.747686][ T6587] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 111.761597][ T6569] loop1: detected capacity change from 0 to 32768 [ 111.762661][ T6587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.822789][ T6569] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 111.869560][ T6569] JBD2: Ignoring recovery information on journal [ 111.872130][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 111.887185][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.896268][ T24] usb 5-1: Product: syz [ 111.903477][ T24] usb 5-1: Manufacturer: syz [ 111.908247][ T24] usb 5-1: SerialNumber: syz [ 111.931937][ T24] usb 5-1: config 0 descriptor?? [ 111.948253][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.994601][ T6573] loop2: detected capacity change from 0 to 32768 [ 112.025324][ T6569] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.109578][ T6573] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.141679][ T29] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.159816][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.182616][ T29] usb 1-1: config 0 descriptor?? [ 112.204256][ T29] cp210x 1-1:0.0: cp210x converter detected [ 112.262379][ T6573] XFS (loop2): Ending clean mount [ 112.271673][ T24] usb 5-1: USB disconnect, device number 2 [ 112.524175][ T5824] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.569344][ T5814] ocfs2: Unmounting device (7,1) on (node local) [ 112.682852][ T29] usb 1-1: cp210x converter now attached to ttyUSB0 [ 113.161805][ T6617] capability: warning: `syz.3.243' uses 32-bit capabilities (legacy support in use) [ 113.203325][ T6622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.792494][ T6636] loop3: detected capacity change from 0 to 4096 [ 113.982042][ T6636] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 114.104263][ T13] ntfs3(loop3): ino=5, mi_enum_attr [ 114.507691][ T6640] loop4: detected capacity change from 0 to 40427 [ 114.518905][ T6640] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 114.548268][ T6640] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.565236][ T6640] F2FS-fs (loop4): Image doesn't support compression [ 114.581895][ T6640] F2FS-fs (loop4): build fault injection rate: 690 [ 114.594475][ T6640] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 114.608586][ T6640] F2FS-fs (loop4): invalid crc value [ 114.610479][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.777420][ T29] usb 1-1: USB disconnect, device number 4 [ 114.815820][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.876649][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.877896][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.927622][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.937329][ T6640] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 114.968877][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 114.996875][ T6640] F2FS-fs (loop4): Start checkpoint disabled! [ 115.047921][ T29] cp210x 1-1:0.0: device disconnected [ 115.048377][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.075826][ T6640] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 115.103571][ T6656] loop0: detected capacity change from 0 to 2048 [ 115.127930][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.159676][ T6656] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 115.183269][ T6640] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 115.191466][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.223516][ T6656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.234523][ T6640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 115.248436][ T9] usb 3-1: Product: syz [ 115.252645][ T9] usb 3-1: Manufacturer: syz [ 115.400772][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 115.439643][ T6640] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 115.449844][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 115.490427][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 115.502249][ T6664] F2FS-fs (loop4): Should run fsck to repair first. [ 115.527290][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 115.896409][ T980] usb 3-1: USB disconnect, device number 2 [ 116.217442][ T6658] loop3: detected capacity change from 0 to 131072 [ 116.231317][ T6658] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2048) root(3) [ 116.243020][ T6658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 116.258251][ T6658] F2FS-fs (loop3): Test dummy encryption mode enabled [ 116.274037][ T6658] F2FS-fs (loop3): invalid crc value [ 116.286706][ T6663] loop1: detected capacity change from 0 to 32768 [ 116.354529][ T6663] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.263 (6663) [ 116.411963][ T6658] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.431062][ T6658] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 116.438293][ T6658] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.497708][ T6658] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 116.503557][ T6663] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.580061][ T6663] BTRFS info (device loop1): using crc32c checksum algorithm [ 116.824302][ T6663] BTRFS info (device loop1): enabling ssd optimizations [ 116.878222][ T6663] BTRFS info (device loop1): turning on async discard [ 116.930211][ T6663] BTRFS info (device loop1): enabling free space tree [ 116.964198][ T6692] IPv6: Can't replace route, no match found [ 116.979039][ T6692] IPv6: Can't replace route, no match found [ 117.007500][ T6688] loop2: detected capacity change from 0 to 4096 [ 117.334222][ T5814] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.488251][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.598215][ T980] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.646555][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 118.656320][ T6705] loop2: detected capacity change from 0 to 32768 [ 118.669407][ T5869] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.682324][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.698432][ T5869] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.728569][ T6705] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 118.737432][ T5869] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 118.759438][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.762932][ T6705] JBD2: Ignoring recovery information on journal [ 118.766340][ T5869] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 118.783292][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 118.790824][ T980] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 118.799852][ T980] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 118.809959][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.818230][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 118.830667][ T5869] usb 1-1: config 0 descriptor?? [ 118.846077][ T980] usb 4-1: config 1 has no interface number 0 [ 118.856682][ T980] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.872137][ T980] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 118.885317][ T980] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 118.894567][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 118.921626][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 118.934858][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.948463][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.970100][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.983380][ T6705] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 119.007945][ T980] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 119.039304][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 119.062580][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.068903][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 119.089009][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.117551][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.146895][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.161688][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.217977][ T980] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 119.284402][ T5824] ocfs2: Unmounting device (7,2) on (node local) [ 119.356026][ T5869] hid (null): unknown global tag 0x49 [ 119.389691][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 119.395330][ T9] usbtmc 2-1:16.0: can't read capabilities [ 119.461882][ T6723] loop4: detected capacity change from 0 to 32768 [ 119.504964][ T6723] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.587940][ T6723] XFS (loop4): Ending clean mount [ 119.594847][ T9] usb 1-1: USB disconnect, device number 5 [ 119.630296][ T6723] XFS (loop4): Quotacheck needed: Please wait. [ 119.645414][ T6728] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 119.658920][ T5869] usb 2-1: USB disconnect, device number 4 [ 119.721689][ T5898] usb 4-1: USB disconnect, device number 3 [ 119.730808][ T5898] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 119.734539][ T6723] XFS (loop4): Quotacheck: Done. [ 119.788441][ T5826] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.822404][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.989563][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 120.007732][ T29] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.027900][ T29] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.038492][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.051040][ T29] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 120.062130][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.072686][ T29] usb 3-1: Product: syz [ 120.077007][ T29] usb 3-1: Manufacturer: syz [ 120.082094][ T29] usb 3-1: SerialNumber: syz [ 120.090962][ T29] usb 3-1: config 0 descriptor?? [ 120.362189][ T6749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.447867][ T6753] program syz.3.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.547490][ T29] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 120.742699][ T6764] loop3: detected capacity change from 0 to 512 [ 120.770668][ T6764] EXT4-fs: inline encryption not supported [ 120.787871][ T6764] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.808180][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.839331][ T6764] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.865036][ T6764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.878410][ T6764] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.294: inode #13: comm syz.3.294: iget: illegal inode # [ 120.898575][ T6764] loop3: lost filesystem error report for type 5 error -117 [ 120.899132][ T6764] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.294: couldn't read orphan inode 13 (err -117) [ 120.918344][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 120.918369][ C1] EXT4-fs (loop3): initial error at time 1772459523: ext4_orphan_get:1391 [ 120.918395][ C1] EXT4-fs (loop3): last error at time 1772459523: ext4_orphan_get:1391 [ 120.934817][ T6768] loop1: detected capacity change from 0 to 512 [ 120.953915][ T6768] EXT4-fs: Ignoring removed bh option [ 120.963369][ T6768] EXT4-fs: Ignoring removed oldalloc option [ 120.970141][ T29] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 120.975029][ T6764] loop3: lost filesystem error report for type 5 error -117 [ 120.993397][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.994757][ T6768] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.001598][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.040169][ T6768] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.063162][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.077280][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.087829][ T9] usb 5-1: SerialNumber: syz [ 121.097970][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 121.130403][ T29] usb 3-1: USB disconnect, device number 3 [ 121.144058][ T6768] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.164364][ T6768] EXT4-fs (loop1): 1 truncate cleaned up [ 121.188218][ T6764] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 121.202018][ T6768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.214630][ T6764] EXT4-fs error (device loop3): __ext4_remount:6804: comm syz.3.294: Abort forced by user [ 121.227879][ T6764] EXT4-fs (loop3): Remounting filesystem read-only [ 121.238392][ T6764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 121.313614][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.332201][ T9] usb 5-1: 0:2 : does not exist [ 121.355192][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.462483][ T9] usb 5-1: USB disconnect, device number 3 [ 121.557074][ T6780] loop3: detected capacity change from 0 to 512 [ 121.632179][ T6780] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.299: corrupted in-inode xattr: invalid ea_ino [ 121.685880][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.735681][ T6780] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.738113][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 121.753914][ C0] EXT4-fs (loop3): initial error at time 1772459524: ext4_iget_extra_inode:5025: inode 15 [ 121.764435][ C0] EXT4-fs (loop3): last error at time 1772459524: ext4_iget_extra_inode:5025: inode 15 [ 121.778356][ T6780] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.299: couldn't read orphan inode 15 (err -117) [ 121.823052][ T6780] loop3: lost filesystem error report for type 5 error -117 [ 121.826512][ T6780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.071802][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.621145][ T6818] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 123.188919][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 124.436099][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 124.488614][ T6815] loop3: detected capacity change from 0 to 65536 [ 124.503620][ T6850] loop0: detected capacity change from 0 to 40427 [ 124.543273][ T6850] F2FS-fs: heap/no_heap options were deprecated [ 124.575106][ T6850] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 124.602936][ T6850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.625407][ T6815] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.636459][ T6850] F2FS-fs (loop0): invalid crc value [ 124.808465][ T6861] loop1: detected capacity change from 0 to 40427 [ 124.839624][ T6861] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 124.844701][ T6815] XFS (loop3): Ending clean mount [ 124.847975][ T6857] loop2: detected capacity change from 0 to 32768 [ 124.870470][ T6861] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.889488][ T6861] F2FS-fs (loop1): invalid crc value [ 124.933049][ T6883] loop4: detected capacity change from 0 to 1024 [ 124.963324][ T6883] EXT4-fs: inline encryption not supported [ 125.001325][ T6857] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.052044][ T5829] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 125.075276][ T6850] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.120626][ T6883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.203704][ T6857] XFS (loop2): Ending clean mount [ 125.209229][ T6850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.241993][ T6850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.306488][ T6883] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #18: comm syz.4.331: EA inode hash validation failed [ 125.352291][ T5824] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.374628][ T6861] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.394602][ T6850] syz.0.327: attempt to access beyond end of device [ 125.394602][ T6850] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 125.423019][ T6861] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.431334][ T6850] syz.0.327: attempt to access beyond end of device [ 125.431334][ T6850] loop0: rw=2049, sector=77864, nr_sectors = 16 limit=40427 [ 125.450613][ T6861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.467722][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.475768][ T6850] syz.0.327: attempt to access beyond end of device [ 125.475768][ T6850] loop0: rw=2049, sector=77888, nr_sectors = 8 limit=40427 [ 125.555158][ T6861] syz.1.328: attempt to access beyond end of device [ 125.555158][ T6861] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 125.636652][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 125.636685][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.636697][ T6861] Call Trace: [ 125.636706][ T6861] [ 125.636715][ T6861] dump_stack_lvl+0xe8/0x150 [ 125.636754][ T6861] f2fs_handle_critical_error+0x37c/0x540 [ 125.636798][ T6861] f2fs_write_end_io+0xcdb/0xff0 [ 125.636846][ T6861] __submit_merged_bio+0x256/0x700 [ 125.636887][ T6861] f2fs_submit_merged_write+0x284/0x390 [ 125.636927][ T6861] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 125.636980][ T6861] f2fs_sync_node_pages+0x14bf/0x1680 [ 125.637036][ T6861] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 125.637129][ T6861] f2fs_write_checkpoint+0xeb8/0x26a0 [ 125.637195][ T6861] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 125.637267][ T6861] ? down_write+0x16d/0x200 [ 125.637292][ T6861] ? __pfx_down_write+0x10/0x10 [ 125.637314][ T6861] ? uplift_priority+0xdb/0x730 [ 125.637335][ T6861] ? file_check_and_advance_wb_err+0x175/0x350 [ 125.637378][ T6861] f2fs_issue_checkpoint+0x456/0x790 [ 125.637418][ T6861] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 125.637462][ T6861] ? preempt_schedule_thunk+0x16/0x30 [ 125.637512][ T6861] ? f2fs_sync_fs+0x1f0/0x400 [ 125.637547][ T6861] f2fs_do_sync_file+0x818/0x1a20 [ 125.637607][ T6861] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 125.637684][ T6861] ? __fget_files+0x2a/0x420 [ 125.637714][ T6861] ? __fget_files+0x3a0/0x420 [ 125.637742][ T6861] ? __fget_files+0x2a/0x420 [ 125.637776][ T6861] ? f2fs_sync_file+0xe9/0x160 [ 125.637800][ T6861] __x64_sys_fsync+0x12a/0x180 [ 125.637829][ T6861] do_syscall_64+0x14d/0xf80 [ 125.637850][ T6861] ? trace_irq_disable+0x3b/0x150 [ 125.637868][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.637890][ T6861] ? clear_bhb_loop+0x40/0x90 [ 125.637916][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.637936][ T6861] RIP: 0033:0x7f218dd9c799 [ 125.637958][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.637974][ T6861] RSP: 002b:00007f218ec3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 125.637996][ T6861] RAX: ffffffffffffffda RBX: 00007f218e015fa0 RCX: 00007f218dd9c799 [ 125.638010][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 125.638021][ T6861] RBP: 00007f218de32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 125.638033][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.638045][ T6861] R13: 00007f218e016038 R14: 00007f218e015fa0 R15: 00007ffecfe23bc8 [ 125.638082][ T6861] [ 125.928248][ T6861] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 125.962387][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 125.962418][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.962431][ T6861] Call Trace: [ 125.962440][ T6861] [ 125.962449][ T6861] dump_stack_lvl+0xe8/0x150 [ 125.962483][ T6861] f2fs_handle_critical_error+0x37c/0x540 [ 125.962515][ T6861] f2fs_write_end_io+0xcdb/0xff0 [ 125.962550][ T6861] __submit_merged_bio+0x256/0x700 [ 125.962582][ T6861] f2fs_submit_merged_write+0x284/0x390 [ 125.962611][ T6861] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 125.962650][ T6861] f2fs_sync_node_pages+0x14bf/0x1680 [ 125.962690][ T6861] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 125.962752][ T6861] f2fs_write_checkpoint+0xeb8/0x26a0 [ 125.962883][ T6861] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 125.962937][ T6861] ? down_write+0x16d/0x200 [ 125.962956][ T6861] ? __pfx_down_write+0x10/0x10 [ 125.962972][ T6861] ? uplift_priority+0xdb/0x730 [ 125.962987][ T6861] ? file_check_and_advance_wb_err+0x175/0x350 [ 125.963020][ T6861] f2fs_issue_checkpoint+0x456/0x790 [ 125.963047][ T6861] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 125.963079][ T6861] ? preempt_schedule_thunk+0x16/0x30 [ 125.963116][ T6861] ? f2fs_sync_fs+0x1f0/0x400 [ 125.963141][ T6861] f2fs_do_sync_file+0x818/0x1a20 [ 125.963166][ T6861] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 125.963215][ T6861] ? __fget_files+0x2a/0x420 [ 125.963238][ T6861] ? __fget_files+0x3a0/0x420 [ 125.963258][ T6861] ? __fget_files+0x2a/0x420 [ 125.963282][ T6861] ? f2fs_sync_file+0xe9/0x160 [ 125.963301][ T6861] __x64_sys_fsync+0x12a/0x180 [ 125.963321][ T6861] do_syscall_64+0x14d/0xf80 [ 125.963336][ T6861] ? trace_irq_disable+0x3b/0x150 [ 125.963349][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.963364][ T6861] ? clear_bhb_loop+0x40/0x90 [ 125.963383][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.963398][ T6861] RIP: 0033:0x7f218dd9c799 [ 125.963414][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.963426][ T6861] RSP: 002b:00007f218ec3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 125.963443][ T6861] RAX: ffffffffffffffda RBX: 00007f218e015fa0 RCX: 00007f218dd9c799 [ 125.963453][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 125.963462][ T6861] RBP: 00007f218de32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 125.963470][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.963479][ T6861] R13: 00007f218e016038 R14: 00007f218e015fa0 R15: 00007ffecfe23bc8 [ 125.963506][ T6861] [ 125.963518][ T6861] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 126.254065][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 126.254100][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.254112][ T6861] Call Trace: [ 126.254120][ T6861] [ 126.254129][ T6861] dump_stack_lvl+0xe8/0x150 [ 126.254167][ T6861] f2fs_handle_critical_error+0x37c/0x540 [ 126.254211][ T6861] f2fs_write_end_io+0xcdb/0xff0 [ 126.254259][ T6861] __submit_merged_bio+0x256/0x700 [ 126.254301][ T6861] f2fs_submit_merged_write+0x284/0x390 [ 126.254341][ T6861] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 126.254394][ T6861] f2fs_sync_node_pages+0x14bf/0x1680 [ 126.254450][ T6861] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 126.254537][ T6861] f2fs_write_checkpoint+0xeb8/0x26a0 [ 126.254603][ T6861] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 126.254675][ T6861] ? down_write+0x16d/0x200 [ 126.254701][ T6861] ? __pfx_down_write+0x10/0x10 [ 126.254723][ T6861] ? uplift_priority+0xdb/0x730 [ 126.254743][ T6861] ? file_check_and_advance_wb_err+0x175/0x350 [ 126.254783][ T6861] f2fs_issue_checkpoint+0x456/0x790 [ 126.254821][ T6861] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 126.254866][ T6861] ? preempt_schedule_thunk+0x16/0x30 [ 126.254924][ T6861] ? f2fs_sync_fs+0x1f0/0x400 [ 126.254959][ T6861] f2fs_do_sync_file+0x818/0x1a20 [ 126.254994][ T6861] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 126.255070][ T6861] ? __fget_files+0x2a/0x420 [ 126.255100][ T6861] ? __fget_files+0x3a0/0x420 [ 126.255129][ T6861] ? __fget_files+0x2a/0x420 [ 126.255162][ T6861] ? f2fs_sync_file+0xe9/0x160 [ 126.255187][ T6861] __x64_sys_fsync+0x12a/0x180 [ 126.255216][ T6861] do_syscall_64+0x14d/0xf80 [ 126.255238][ T6861] ? trace_irq_disable+0x3b/0x150 [ 126.255256][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.255278][ T6861] ? clear_bhb_loop+0x40/0x90 [ 126.255305][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.255325][ T6861] RIP: 0033:0x7f218dd9c799 [ 126.255346][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.255362][ T6861] RSP: 002b:00007f218ec3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 126.255384][ T6861] RAX: ffffffffffffffda RBX: 00007f218e015fa0 RCX: 00007f218dd9c799 [ 126.255399][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 126.255410][ T6861] RBP: 00007f218de32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 126.255422][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.255434][ T6861] R13: 00007f218e016038 R14: 00007f218e015fa0 R15: 00007ffecfe23bc8 [ 126.255471][ T6861] [ 126.255479][ T6861] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 126.339884][ T6905] loop3: detected capacity change from 0 to 32768 [ 126.454023][ T6907] loop2: detected capacity change from 0 to 1024 [ 126.489839][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 126.489866][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.489877][ T6861] Call Trace: [ 126.489885][ T6861] [ 126.489893][ T6861] dump_stack_lvl+0xe8/0x150 [ 126.489923][ T6861] f2fs_handle_critical_error+0x37c/0x540 [ 126.489959][ T6861] f2fs_write_end_io+0xcdb/0xff0 [ 126.490001][ T6861] __submit_merged_bio+0x256/0x700 [ 126.490045][ T6861] f2fs_submit_merged_write+0x284/0x390 [ 126.490079][ T6861] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 126.490124][ T6861] f2fs_sync_node_pages+0x14bf/0x1680 [ 126.490171][ T6861] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 126.490243][ T6861] f2fs_write_checkpoint+0xeb8/0x26a0 [ 126.490300][ T6861] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 126.490362][ T6861] ? down_write+0x16d/0x200 [ 126.490383][ T6861] ? __pfx_down_write+0x10/0x10 [ 126.490403][ T6861] ? uplift_priority+0xdb/0x730 [ 126.490421][ T6861] ? file_check_and_advance_wb_err+0x175/0x350 [ 126.490456][ T6861] f2fs_issue_checkpoint+0x456/0x790 [ 126.490489][ T6861] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 126.490525][ T6861] ? preempt_schedule_thunk+0x16/0x30 [ 126.490569][ T6861] ? f2fs_sync_fs+0x1f0/0x400 [ 126.490598][ T6861] f2fs_do_sync_file+0x818/0x1a20 [ 126.490628][ T6861] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 126.490686][ T6861] ? __fget_files+0x2a/0x420 [ 126.490711][ T6861] ? __fget_files+0x3a0/0x420 [ 126.490734][ T6861] ? __fget_files+0x2a/0x420 [ 126.490762][ T6861] ? f2fs_sync_file+0xe9/0x160 [ 126.490784][ T6861] __x64_sys_fsync+0x12a/0x180 [ 126.490808][ T6861] do_syscall_64+0x14d/0xf80 [ 126.490826][ T6861] ? trace_irq_disable+0x3b/0x150 [ 126.490842][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.490860][ T6861] ? clear_bhb_loop+0x40/0x90 [ 126.490882][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.490899][ T6861] RIP: 0033:0x7f218dd9c799 [ 126.490917][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.490931][ T6861] RSP: 002b:00007f218ec3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 126.490950][ T6861] RAX: ffffffffffffffda RBX: 00007f218e015fa0 RCX: 00007f218dd9c799 [ 126.490962][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 126.490972][ T6861] RBP: 00007f218de32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 126.490983][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.490992][ T6861] R13: 00007f218e016038 R14: 00007f218e015fa0 R15: 00007ffecfe23bc8 [ 126.491033][ T6861] [ 126.491041][ T6861] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 126.505366][ T5818] syz-executor: attempt to access beyond end of device [ 126.505366][ T5818] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.528292][ T6905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.332 (6905) [ 126.626110][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 126.626137][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.626149][ T5818] Call Trace: [ 126.626157][ T5818] [ 126.626165][ T5818] dump_stack_lvl+0xe8/0x150 [ 126.626198][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 126.626234][ T5818] f2fs_write_end_io+0xcdb/0xff0 [ 126.626276][ T5818] __submit_merged_bio+0x256/0x700 [ 126.626310][ T5818] __submit_merged_write_cond+0x3c9/0x4e0 [ 126.626347][ T5818] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 126.626399][ T5818] f2fs_write_data_pages+0x2975/0x35e0 [ 126.626459][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.626495][ T5818] ? css_rstat_updated+0x23a/0x530 [ 126.626544][ T5818] ? rcu_is_watching+0x15/0xb0 [ 126.626569][ T5818] ? mod_memcg_lruvec_state+0x1b8/0x360 [ 126.626595][ T5818] ? __bfs+0x153/0x290 [ 126.626615][ T5818] ? __pfx_hlock_conflict+0x10/0x10 [ 126.626660][ T5818] ? lockdep_unlock+0x5d/0xd0 [ 126.626678][ T5818] ? __lock_acquire+0x146e/0x2cf0 [ 126.626725][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.626747][ T5818] do_writepages+0x32e/0x550 [ 126.626793][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 126.626817][ T5818] filemap_fdatawrite+0x1e9/0x2f0 [ 126.626846][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 126.626921][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 126.626944][ T5818] f2fs_sync_dirty_inodes+0x30e/0x860 [ 126.626981][ T5818] f2fs_write_checkpoint+0x9df/0x26a0 [ 126.627040][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 126.627121][ T5818] kill_f2fs_super+0x314/0x720 [ 126.627149][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 126.627184][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.627218][ T5818] deactivate_locked_super+0xbc/0x130 [ 126.627247][ T5818] cleanup_mnt+0x437/0x4d0 [ 126.627267][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.627297][ T5818] task_work_run+0x1d9/0x270 [ 126.627321][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 126.627353][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 126.627373][ T5818] ? rcu_is_watching+0x15/0xb0 [ 126.627401][ T5818] do_syscall_64+0x32d/0xf80 [ 126.627420][ T5818] ? trace_irq_disable+0x3b/0x150 [ 126.627435][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.627453][ T5818] ? clear_bhb_loop+0x40/0x90 [ 126.627476][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.627493][ T5818] RIP: 0033:0x7f807939d9d7 [ 126.627511][ T5818] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 126.627524][ T5818] RSP: 002b:00007ffe12ff3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 126.627544][ T5818] RAX: 0000000000000000 RBX: 00007f8079431f90 RCX: 00007f807939d9d7 [ 126.627556][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe12ff3240 [ 126.627566][ T5818] RBP: 00007ffe12ff3240 R08: 00007ffe12ff4240 R09: 00000000ffffffff [ 126.627577][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe12ff42d0 [ 126.627587][ T5818] R13: 00007f8079431f90 R14: 000000000001ea64 R15: 00007ffe12ff4310 [ 126.627620][ T5818] [ 126.627627][ T5818] F2FS-fs (loop0): Remounting filesystem read-only [ 126.968213][ T30] audit: type=1800 audit(1772459529.180:6): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.336" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 127.201911][ T6905] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.212356][ T6905] BTRFS info (device loop3): using sha256 checksum algorithm [ 127.552881][ T6905] BTRFS info (device loop3): enabling ssd optimizations [ 127.584193][ T6905] BTRFS info (device loop3): turning on async discard [ 127.596090][ T137] hfsplus: b-tree write err: -5, ino 25 [ 127.638305][ T6934] loop0: detected capacity change from 0 to 1024 [ 127.646558][ T137] hfsplus: b-tree write err: -5, ino 4 [ 127.665447][ T6905] BTRFS info (device loop3): enabling free space tree [ 127.681183][ T137] hfsplus: b-tree write err: -5, ino 2 [ 127.686800][ T137] hfsplus: b-tree write err: -5, ino 20 [ 127.735453][ T6934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 127.788451][ T6934] System zones: 0-1, 3-36 [ 127.837838][ T6934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.878015][ T6941] loop1: detected capacity change from 0 to 512 [ 128.031710][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.209077][ T6946] loop4: detected capacity change from 0 to 256 [ 128.216643][ T6946] exfat: Deprecated parameter 'namecase' [ 128.314082][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.379682][ T6946] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 128.524602][ T6955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.649249][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.834484][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 128.854118][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.890454][ T9] usb 4-1: config 0 has no interface number 0 [ 128.958912][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.983659][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.038133][ T9] usb 4-1: Product: syz [ 129.042471][ T9] usb 4-1: Manufacturer: syz [ 129.047089][ T9] usb 4-1: SerialNumber: syz [ 129.109257][ T9] usb 4-1: config 0 descriptor?? [ 129.529893][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 129.571499][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.623154][ T6976] set_capacity_and_notify: 2 callbacks suppressed [ 129.623176][ T6976] loop1: detected capacity change from 0 to 128 [ 129.824519][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 129.851589][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 129.900169][ T9] usb 4-1: USB disconnect, device number 4 [ 129.953557][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 130.640401][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.651034][ T6998] loop1: detected capacity change from 0 to 4096 [ 130.688126][ T6998] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 130.818661][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 130.832564][ T6998] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 130.837478][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 130.858381][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.884084][ T6998] ntfs3(loop1): mft corrupted [ 130.903768][ T6998] ntfs3(loop1): Failed to load $Extend (-22). [ 130.910755][ T9] usb 5-1: config 0 descriptor?? [ 130.922032][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 130.949684][ T6998] ntfs3(loop1): Failed to initialize $Extend. [ 131.270554][ T7016] loop2: detected capacity change from 0 to 256 [ 131.309389][ T7016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 131.355730][ T7016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 131.375864][ T7016] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 131.384475][ T7016] UDF-fs: Scanning with blocksize 512 failed [ 131.394718][ T7016] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 131.442121][ T7016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.733268][ T7033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.383'. [ 131.744647][ T9] gspca_sunplus: reg_r err -71 [ 131.774855][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 131.820310][ T9] usb 5-1: USB disconnect, device number 4 [ 131.859442][ T7035] loop1: detected capacity change from 0 to 512 [ 131.918467][ T7035] EXT4-fs (loop1): 1 truncate cleaned up [ 131.952205][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.999341][ T30] audit: type=1800 audit(1772459534.280:7): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.386" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 132.034830][ T7035] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.386: bg 0: block 465: padding at end of block bitmap is not set [ 132.077092][ T7045] loop3: detected capacity change from 0 to 128 [ 132.187940][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.470907][ T7059] loop4: detected capacity change from 0 to 1024 [ 132.485536][ T7059] EXT4-fs: Ignoring removed bh option [ 132.528530][ T7059] EXT4-fs: inline encryption not supported [ 132.547272][ T7059] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.578515][ T7059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 132.584066][ T5869] hid-generic 0005:4C4A:5505.0003: item fetching failed at offset 0/1 [ 132.609148][ T7059] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.396: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.661432][ T5869] hid-generic 0005:4C4A:5505.0003: probe with driver hid-generic failed with error -22 [ 132.709253][ T7059] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.718127][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 132.734062][ C0] EXT4-fs (loop4): initial error at time 1772459534: ext4_map_blocks:776: inode 3: block 2 [ 132.744152][ C0] EXT4-fs (loop4): last error at time 1772459534: ext4_map_blocks:776: inode 3: block 2 [ 132.769513][ T7059] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 132.780175][ T7059] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.396: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.797311][ T7067] loop1: detected capacity change from 0 to 512 [ 132.840721][ T7059] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.841061][ T7059] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 132.868280][ T7059] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.396: Failed to acquire dquot type 0 [ 132.904137][ T7067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.932470][ T7059] loop4: lost filesystem error report for type 5 error -117 [ 132.968253][ T7067] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.981913][ T7059] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 133.011704][ T7059] loop4: lost filesystem error report for type 5 error -117 [ 133.015488][ T7059] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.396: mark_inode_dirty error [ 133.069844][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.077096][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.108152][ T7059] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.113087][ T7059] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 133.159363][ T7059] EXT4-fs (loop4): 1 orphan inode deleted [ 133.162223][ T7054] loop2: detected capacity change from 0 to 32768 [ 133.172199][ T7059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.187833][ T194] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.209323][ T194] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.211251][ T194] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 133.274898][ T194] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 133.291484][ T7054] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 133.314632][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.370936][ T7059] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.418153][ T5869] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.529371][ T7059] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 133.546024][ T7059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce118, mo2=0000] [ 133.555785][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 133.565241][ T7083] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.591486][ T7054] XFS (loop2): Starting recovery (logdev: internal) [ 133.602520][ T5869] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 133.616699][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.642467][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.671389][ T7054] XFS (loop2): Ending recovery (logdev: internal) [ 133.683286][ T5869] usb 4-1: config 0 descriptor?? [ 133.707139][ T5869] cp210x 4-1:0.0: cp210x converter detected [ 133.869183][ T5824] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 134.125966][ T5869] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 134.191750][ T5869] usb 4-1: cp210x converter now attached to ttyUSB0 [ 134.436433][ T24] usb 4-1: USB disconnect, device number 5 [ 134.480888][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.566180][ T24] cp210x 4-1:0.0: device disconnected [ 134.587625][ T7095] loop4: detected capacity change from 0 to 512 [ 134.648501][ T7095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.744950][ T7095] EXT4-fs (loop4): 1 orphan inode deleted [ 134.791915][ T7095] EXT4-fs (loop4): 1 truncate cleaned up [ 134.834560][ T7095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.905110][ T7095] EXT4-fs (loop4): shut down requested (1) [ 134.991933][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.365012][ T7104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.411'. [ 135.694108][ T7112] sp0: Synchronizing with TNC [ 135.711376][ T7114] loop4: detected capacity change from 0 to 128 [ 135.780511][ T7114] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.808638][ T7111] [U] è [ 135.819139][ T7114] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.966390][ T7127] loop0: detected capacity change from 0 to 1024 [ 135.997849][ T7123] ipvlan0: entered promiscuous mode [ 136.064704][ T5826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.072195][ T7123] ipvlan0: left promiscuous mode [ 136.088272][ T7127] hfsplus: request for non-existent node 3 in B*Tree [ 136.122397][ T7127] hfsplus: request for non-existent node 3 in B*Tree [ 136.242088][ T7127] hfsplus: request for non-existent node 4 in B*Tree [ 136.291535][ T7127] hfsplus: request for non-existent node 4 in B*Tree [ 136.529769][ T7139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.209263][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.368253][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 137.385069][ T29] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 137.418146][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.429108][ T29] usb 3-1: Product: syz [ 137.433335][ T29] usb 3-1: Manufacturer: syz [ 137.437951][ T29] usb 3-1: SerialNumber: syz [ 137.472586][ T29] usb 3-1: config 0 descriptor?? [ 137.494769][ T7143] loop0: detected capacity change from 0 to 32768 [ 137.548775][ T7151] loop4: detected capacity change from 0 to 32768 [ 137.625475][ T7143] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.783877][ T7143] XFS (loop0): Ending clean mount [ 137.825902][ T7174] loop3: detected capacity change from 0 to 512 [ 137.917557][ T30] audit: type=1800 audit(1772459540.180:8): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.428" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 137.946226][ T7174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.965261][ T5818] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 138.017948][ T7174] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.167655][ T30] audit: type=1804 audit(1772459540.440:9): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.441" name="/newroot/84/file2/file2" dev="loop3" ino=16 res=1 errno=0 [ 138.181988][ T7156] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 138.285007][ T29] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 138.356615][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.420875][ T7167] loop1: detected capacity change from 0 to 32768 [ 138.479986][ T29] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 138.503881][ T29] usb 3-1: USB disconnect, device number 4 [ 138.512083][ T7167] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.541770][ T7190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.443'. [ 138.657851][ T7167] XFS (loop1): Ending clean mount [ 138.709836][ T7167] XFS (loop1): Quotacheck needed: Please wait. [ 138.868311][ T7167] XFS (loop1): Quotacheck: Done. [ 139.002307][ T7202] loop0: detected capacity change from 0 to 64 [ 139.037983][ T5814] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.257038][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.257038][ T1002] loop0: rw=8388609, sector=65, nr_sectors = 1 limit=64 [ 139.307412][ T1002] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 139.327745][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.327745][ T1002] loop0: rw=8388609, sector=66, nr_sectors = 1 limit=64 [ 139.358624][ T1002] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 139.399281][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.399281][ T1002] loop0: rw=8388609, sector=67, nr_sectors = 1 limit=64 [ 139.448423][ T1002] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 139.456951][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.456951][ T1002] loop0: rw=8388609, sector=68, nr_sectors = 1 limit=64 [ 139.510035][ T1002] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 139.538508][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.538508][ T1002] loop0: rw=8388609, sector=72, nr_sectors = 1 limit=64 [ 139.559078][ T7210] loop4: detected capacity change from 0 to 4096 [ 139.577690][ T1002] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 139.609488][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.609488][ T1002] loop0: rw=8388609, sector=73, nr_sectors = 1 limit=64 [ 139.652478][ T1002] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 139.681678][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.681678][ T1002] loop0: rw=8388609, sector=76, nr_sectors = 1 limit=64 [ 139.737309][ T1002] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 139.771618][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.771618][ T1002] loop0: rw=8388609, sector=77, nr_sectors = 1 limit=64 [ 139.815217][ T7210] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 139.828860][ T1002] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 139.890273][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.890273][ T1002] loop0: rw=1, sector=78, nr_sectors = 192 limit=64 [ 139.981173][ T1002] kworker/u8:7: attempt to access beyond end of device [ 139.981173][ T1002] loop0: rw=2049, sector=270, nr_sectors = 2696 limit=64 [ 140.043080][ T1002] Buffer I/O error on dev loop0, logical block 4166, lost async page write [ 140.079296][ T1002] Buffer I/O error on dev loop0, logical block 4167, lost async page write [ 140.433496][ T7212] loop2: detected capacity change from 0 to 32768 [ 140.509478][ T7212] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.678886][ T7212] XFS (loop2): Ending clean mount [ 140.784994][ T30] audit: type=1800 audit(1772459543.060:10): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.452" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 141.003500][ T5824] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.033064][ T7238] program syz.4.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.094496][ T7218] loop3: detected capacity change from 0 to 40427 [ 141.179403][ T7218] F2FS-fs (loop3): invalid crc value [ 141.428409][ T7245] loop4: detected capacity change from 0 to 64 [ 141.546015][ T7218] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 141.560209][ T7248] netlink: 'syz.0.458': attribute type 9 has an invalid length. [ 141.599111][ T7218] F2FS-fs (loop3): Start checkpoint disabled! [ 141.626478][ T7218] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 141.647461][ T7218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 141.875722][ T194] CPU: 1 UID: 0 PID: 194 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 141.875813][ T194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.875828][ T194] Workqueue: writeback wb_workfn (flush-7:3) [ 141.875864][ T194] Call Trace: [ 141.875874][ T194] [ 141.875882][ T194] dump_stack_lvl+0xe8/0x150 [ 141.875913][ T194] f2fs_handle_critical_error+0x37c/0x540 [ 141.875949][ T194] f2fs_write_end_io+0xcdb/0xff0 [ 141.876001][ T194] __submit_merged_bio+0x256/0x700 [ 141.876040][ T194] __submit_merged_write_cond+0x3c9/0x4e0 [ 141.876080][ T194] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 141.876137][ T194] f2fs_write_data_pages+0x2975/0x35e0 [ 141.876159][ T194] ? unwind_next_frame+0xa5/0x23c0 [ 141.876187][ T194] ? lock_release+0x4b/0x3d0 [ 141.876253][ T194] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.876291][ T194] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 141.876348][ T194] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 141.876392][ T194] ? __lock_acquire+0x6b5/0x2cf0 [ 141.876434][ T194] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 141.876465][ T194] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.876490][ T194] do_writepages+0x32e/0x550 [ 141.876528][ T194] ? reacquire_held_locks+0x104/0x190 [ 141.876556][ T194] ? writeback_sb_inodes+0x477/0x1a20 [ 141.876592][ T194] __writeback_single_inode+0x133/0x11a0 [ 141.876622][ T194] ? do_raw_spin_unlock+0xf5/0x210 [ 141.876650][ T194] writeback_sb_inodes+0x992/0x1a20 [ 141.876710][ T194] ? __lock_acquire+0x6b5/0x2cf0 [ 141.876741][ T194] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 141.876766][ T194] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.876829][ T194] ? rcu_is_watching+0x15/0xb0 [ 141.876868][ T194] wb_writeback+0x456/0xb70 [ 141.876900][ T194] ? queue_io+0x261/0x4a0 [ 141.876938][ T194] ? __pfx_wb_writeback+0x10/0x10 [ 141.876962][ T194] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.877014][ T194] wb_workfn+0x414/0xf50 [ 141.877040][ T194] ? look_up_lock_class+0x57/0x110 [ 141.877078][ T194] ? __pfx_wb_workfn+0x10/0x10 [ 141.877108][ T194] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.877132][ T194] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.877180][ T194] ? process_one_work+0x87c/0x1650 [ 141.877205][ T194] process_one_work+0x949/0x1650 [ 141.877245][ T194] ? irqentry_exit+0x570/0x620 [ 141.877277][ T194] ? __pfx_process_one_work+0x10/0x10 [ 141.877301][ T194] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.877342][ T194] worker_thread+0xb46/0x1140 [ 141.877381][ T194] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.877430][ T194] kthread+0x388/0x470 [ 141.877452][ T194] ? __pfx_worker_thread+0x10/0x10 [ 141.877477][ T194] ? __pfx_kthread+0x10/0x10 [ 141.877499][ T194] ret_from_fork+0x51e/0xb90 [ 141.877546][ T194] ? __pfx_ret_from_fork+0x10/0x10 [ 141.877571][ T194] ? __switch_to+0xc7d/0x1450 [ 141.877600][ T194] ? __pfx_kthread+0x10/0x10 [ 141.877622][ T194] ret_from_fork_asm+0x1a/0x30 [ 141.877662][ T194] [ 141.928235][ T194] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 142.603610][ T7268] loop1: detected capacity change from 0 to 1024 [ 142.731932][ T7272] CUSE: info not properly terminated [ 142.770228][ T7268] hfsplus: request for non-existent node 33554434 in B*Tree [ 142.777992][ T7268] hfsplus: request for non-existent node 33554434 in B*Tree [ 142.842670][ T7268] hfsplus: request for non-existent node 33554434 in B*Tree [ 142.869327][ T7268] hfsplus: request for non-existent node 33554434 in B*Tree [ 142.890657][ T7273] hfsplus: request for non-existent node 33554434 in B*Tree [ 142.912495][ T7273] hfsplus: request for non-existent node 33554434 in B*Tree [ 142.987700][ T7257] loop0: detected capacity change from 0 to 32768 [ 143.004695][ T137] hfsplus: request for non-existent node 33554434 in B*Tree [ 143.036653][ T137] hfsplus: request for non-existent node 33554434 in B*Tree [ 143.046834][ T7277] loop3: detected capacity change from 0 to 2048 [ 143.083716][ T7257] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.262817][ T7257] XFS (loop0): Ending clean mount [ 143.271731][ T7277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.354242][ T7277] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.409515][ T7275] loop4: detected capacity change from 0 to 40427 [ 143.433965][ T7275] F2FS-fs (loop4): invalid crc value [ 143.589745][ T5818] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.643100][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.832814][ T7275] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 143.846239][ T7275] F2FS-fs (loop4): Start checkpoint disabled! [ 143.863200][ T7275] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 143.896349][ T7275] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 144.087416][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 144.087445][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.087457][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 144.087492][ T13] Call Trace: [ 144.087500][ T13] [ 144.087508][ T13] dump_stack_lvl+0xe8/0x150 [ 144.087541][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 144.087582][ T13] f2fs_write_end_io+0xcdb/0xff0 [ 144.087631][ T13] __submit_merged_bio+0x256/0x700 [ 144.087672][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 144.087714][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 144.087777][ T13] f2fs_write_data_pages+0x2975/0x35e0 [ 144.087849][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.087891][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 144.087971][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 144.088026][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 144.088072][ T13] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 144.088103][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.088129][ T13] do_writepages+0x32e/0x550 [ 144.088169][ T13] ? reacquire_held_locks+0x104/0x190 [ 144.088197][ T13] ? writeback_sb_inodes+0x477/0x1a20 [ 144.088234][ T13] __writeback_single_inode+0x133/0x11a0 [ 144.088264][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 144.088293][ T13] writeback_sb_inodes+0x992/0x1a20 [ 144.088360][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 144.088386][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.088462][ T13] ? rcu_is_watching+0x15/0xb0 [ 144.088504][ T13] wb_writeback+0x456/0xb70 [ 144.088536][ T13] ? queue_io+0x261/0x4a0 [ 144.088575][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 144.088600][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.088644][ T13] wb_workfn+0x414/0xf50 [ 144.088671][ T13] ? look_up_lock_class+0x57/0x110 [ 144.088711][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 144.088740][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.088765][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.088815][ T13] ? process_one_work+0x87c/0x1650 [ 144.088841][ T13] process_one_work+0x949/0x1650 [ 144.088917][ T13] ? __pfx_process_one_work+0x10/0x10 [ 144.088941][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.088993][ T13] worker_thread+0xb46/0x1140 [ 144.089056][ T13] kthread+0x388/0x470 [ 144.089078][ T13] ? __pfx_worker_thread+0x10/0x10 [ 144.089102][ T13] ? __pfx_kthread+0x10/0x10 [ 144.089125][ T13] ret_from_fork+0x51e/0xb90 [ 144.089156][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 144.089181][ T13] ? __switch_to+0xc7d/0x1450 [ 144.089211][ T13] ? __pfx_kthread+0x10/0x10 [ 144.089234][ T13] ret_from_fork_asm+0x1a/0x30 [ 144.089276][ T13] [ 144.097681][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 144.670775][ T7294] loop1: detected capacity change from 0 to 32768 [ 144.708917][ T7294] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 144.781024][ T7294] XFS (loop1): Ending clean mount [ 144.969841][ T5814] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 145.508021][ T7306] loop0: detected capacity change from 0 to 32768 [ 145.551165][ T7306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.482 (7306) [ 145.612791][ T7306] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.648229][ T7306] BTRFS info (device loop0): using sha256 checksum algorithm [ 145.809806][ T7306] BTRFS info (device loop0): enabling ssd optimizations [ 145.880969][ T7306] BTRFS info (device loop0): turning on async discard [ 145.914357][ T7306] BTRFS info (device loop0): enabling free space tree [ 146.032408][ T7350] loop4: detected capacity change from 0 to 4096 [ 146.068225][ T7350] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 146.137348][ T7362] loop1: detected capacity change from 0 to 256 [ 146.170889][ T7350] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 146.242723][ T30] audit: type=1800 audit(1772459548.520:11): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.492" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 146.317843][ T5818] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.648630][ T7367] loop3: detected capacity change from 0 to 256 [ 146.702422][ T137] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22. [ 146.820821][ T7365] loop1: detected capacity change from 0 to 4096 [ 146.962600][ T7370] loop4: detected capacity change from 0 to 1024 [ 146.996743][ T7370] EXT4-fs: Ignoring removed bh option [ 147.077882][ T7372] loop0: detected capacity change from 0 to 512 [ 147.106927][ T7372] EXT4-fs (loop0): Test dummy encryption mode enabled [ 147.130132][ T7370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.202776][ T7372] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.284774][ T7370] EXT4-fs (loop4): shut down requested (1) [ 147.304613][ T7372] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 147.339881][ T7372] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.497: Directory hole found for htree leaf block 0 [ 147.371485][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.417418][ T7372] EXT4-fs (loop0): Remounting filesystem read-only [ 147.611749][ T5818] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 147.680030][ T7387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.902145][ T7387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.932685][ T7398] loop0: detected capacity change from 0 to 64 [ 147.947805][ T7398] hfs: unable to locate alternate MDB [ 147.967992][ T7398] hfs: continuing without an alternate MDB [ 148.115018][ T7387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.270451][ T7410] loop1: detected capacity change from 0 to 8 [ 148.366958][ T7410] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 148.383006][ T5942] udevd[5942]: incorrect cramfs checksum on /dev/loop1 [ 148.394132][ T7387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.467156][ T6123] udevd[6123]: incorrect cramfs checksum on /dev/loop1 [ 148.579994][ T6123] udevd[6123]: incorrect cramfs checksum on /dev/loop1 [ 148.863147][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.938524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.951394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 148.966380][ T1002] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.040813][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.052036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 149.064193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 149.141075][ T194] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.248402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.334688][ T7425] netlink: 76 bytes leftover after parsing attributes in process `syz.0.521'. [ 149.889947][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.049155][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 150.082091][ T9] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 150.099921][ T9] usb 5-1: config 2 has no interface number 0 [ 150.114998][ T7445] loop2: detected capacity change from 0 to 512 [ 150.116411][ T9] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 150.150148][ T9] usb 5-1: config 2 interface 88 has no altsetting 0 [ 150.171462][ T7445] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.181506][ T9] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 150.181539][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.181560][ T9] usb 5-1: Product: syz [ 150.181576][ T9] usb 5-1: Manufacturer: syz [ 150.181592][ T9] usb 5-1: SerialNumber: syz [ 150.186416][ T7439] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.255175][ T7445] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.531: bad orphan inode 131083 [ 150.289623][ T7445] loop2: lost filesystem error report for type 5 error -117 [ 150.294918][ T7445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.353756][ T7438] loop1: detected capacity change from 0 to 32768 [ 150.399515][ T7438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.526 (7438) [ 150.493924][ T7438] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.538837][ T7439] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.566516][ T7438] BTRFS info (device loop1): using sha256 checksum algorithm [ 150.607901][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.782428][ T7438] BTRFS info (device loop1): enabling ssd optimizations [ 150.838255][ T7438] BTRFS info (device loop1): turning on async discard [ 150.845129][ T7438] BTRFS info (device loop1): enabling free space tree [ 151.085058][ T5814] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.191331][ T9] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 151.219897][ T9] asix 5-1:2.88: probe with driver asix failed with error -71 [ 151.264038][ T9] usb 5-1: USB disconnect, device number 5 [ 151.962558][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.149235][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 152.160441][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 152.193806][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 152.218203][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.247322][ T10] usb 2-1: Product: syz [ 152.260460][ T10] usb 2-1: Manufacturer: syz [ 152.267582][ T10] usb 2-1: SerialNumber: syz [ 152.309480][ T10] usb 2-1: config 0 descriptor?? [ 152.340650][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 152.377241][ T10] usb 2-1: Detected FT232R [ 152.466514][ T7485] loop3: detected capacity change from 0 to 40427 [ 152.512956][ T7485] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 152.558468][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 152.569101][ T7485] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.808718][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 152.890297][ T7485] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.921583][ T7485] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.951240][ T7485] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.024077][ T10] usb 2-1: USB disconnect, device number 5 [ 153.071167][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 153.106204][ T10] ftdi_sio 2-1:0.0: device disconnected [ 153.173610][ T7523] loop2: detected capacity change from 0 to 512 [ 153.191041][ T7523] EXT4-fs: Ignoring removed oldalloc option [ 153.235592][ T7523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.556: Parent and EA inode have the same ino 15 [ 153.285163][ T7523] loop2: lost filesystem error report for type 5 error -117 [ 153.288092][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 153.302071][ C1] EXT4-fs (loop2): initial error at time 1772459555: ext4_xattr_inode_iget:437 [ 153.311086][ C1] EXT4-fs (loop2): last error at time 1772459555: ext4_xattr_inode_iget:437 [ 153.321065][ T7523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.556: Parent and EA inode have the same ino 15 [ 153.340085][ T7523] loop2: lost filesystem error report for type 5 error -117 [ 153.340821][ T7523] EXT4-fs (loop2): 1 orphan inode deleted [ 153.377807][ T7523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.431138][ T7523] EXT4-fs error (device loop2): ext4_rename:3810: inode #15: comm syz.2.556: target of rename is already freed [ 153.498318][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.549128][ T7527] loop4: detected capacity change from 0 to 512 [ 153.596023][ T7527] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.686357][ T7527] EXT4-fs (loop4): 1 orphan inode deleted [ 153.706828][ T7527] EXT4-fs (loop4): 1 truncate cleaned up [ 153.779514][ T7527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.935974][ T7527] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 153.978377][ T7527] EXT4-fs (loop4): Remounting filesystem read-only [ 153.986184][ T7527] overlayfs: failed to verify upper root origin [ 154.137674][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.640738][ T7534] loop3: detected capacity change from 0 to 32768 [ 154.754076][ T7534] JBD2: Ignoring recovery information on journal [ 154.832178][ T7530] loop1: detected capacity change from 0 to 32768 [ 154.833247][ T7534] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 154.930986][ T7530] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.965530][ T7534] [ 154.967905][ T7534] ====================================================== [ 154.975019][ T7534] WARNING: possible circular locking dependency detected [ 154.982047][ T7534] syzkaller #0 Not tainted [ 154.986471][ T7534] ------------------------------------------------------ [ 154.993751][ T7534] syz.3.557/7534 is trying to acquire lock: [ 154.999753][ T7534] ffff88805d9e2640 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xba7/0x13e0 [ 155.012232][ T7534] [ 155.012232][ T7534] but task is already holding lock: [ 155.019684][ T7534] ffff88805d9e1538 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 155.029354][ T7534] [ 155.029354][ T7534] which lock already depends on the new lock. [ 155.029354][ T7534] [ 155.040017][ T7534] [ 155.040017][ T7534] the existing dependency chain (in reverse order) is: [ 155.049203][ T7534] [ 155.049203][ T7534] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}: [ 155.057027][ T7534] down_read+0x47/0x2e0 [ 155.061804][ T7534] ocfs2_init_acl+0x2fd/0x7e0 [ 155.067019][ T7534] ocfs2_mknod+0x1679/0x2290 [ 155.072230][ T7534] ocfs2_create+0x195/0x490 [ 155.077260][ T7534] path_openat+0x1395/0x3860 [ 155.082378][ T7534] do_file_open+0x23e/0x4a0 [ 155.087406][ T7534] do_sys_openat2+0x113/0x200 [ 155.092609][ T7534] __x64_sys_open+0x11e/0x150 [ 155.097821][ T7534] do_syscall_64+0x14d/0xf80 [ 155.102949][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.109368][ T7534] [ 155.109368][ T7534] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 155.117973][ T7534] down_read+0x47/0x2e0 [ 155.122662][ T7534] ocfs2_start_trans+0x3ab/0x700 [ 155.128129][ T7534] ocfs2_reserve_local_alloc_bits+0xb43/0x26f0 [ 155.134812][ T7534] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 155.141674][ T7534] ocfs2_extend_dir+0x754/0x4a60 [ 155.147142][ T7534] ocfs2_prepare_dir_for_insert+0x34b0/0x5360 [ 155.153738][ T7534] ocfs2_mknod+0xa1b/0x2290 [ 155.158777][ T7534] ocfs2_mkdir+0x181/0x490 [ 155.163723][ T7534] vfs_mkdir+0x413/0x630 [ 155.168557][ T7534] filename_mkdirat+0x285/0x510 [ 155.173934][ T7534] __se_sys_mkdirat+0x35/0x150 [ 155.179227][ T7534] do_syscall_64+0x14d/0xf80 [ 155.184346][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.190777][ T7534] [ 155.190777][ T7534] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 155.198295][ T7534] ocfs2_start_trans+0x2ac/0x700 [ 155.203879][ T7534] ocfs2_remove_btree_range+0x84c/0x1610 [ 155.210041][ T7534] ocfs2_commit_truncate+0xbc9/0x2340 [ 155.215944][ T7534] ocfs2_evict_inode+0x1023/0x44e0 [ 155.221583][ T7534] evict+0x61e/0xb10 [ 155.226043][ T7534] ocfs2_dentry_iput+0x24d/0x390 [ 155.231971][ T7534] __dentry_kill+0x1a2/0x5e0 [ 155.237240][ T7534] finish_dput+0xc9/0x480 [ 155.242282][ T7534] filename_renameat2+0x61e/0x9c0 [ 155.248022][ T7534] __se_sys_rename+0x55/0x2c0 [ 155.253339][ T7534] do_syscall_64+0x14d/0xf80 [ 155.258631][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.265237][ T7534] [ 155.265237][ T7534] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 155.276453][ T7534] __lock_acquire+0x15a5/0x2cf0 [ 155.281937][ T7534] lock_acquire+0xf0/0x2e0 [ 155.286917][ T7534] down_write+0x96/0x200 [ 155.291697][ T7534] ocfs2_xattr_set+0xba7/0x13e0 [ 155.297081][ T7534] __vfs_setxattr+0x43c/0x480 [ 155.302305][ T7534] __vfs_setxattr_noperm+0x12d/0x660 [ 155.308124][ T7534] vfs_setxattr+0x163/0x360 [ 155.313157][ T7534] file_setxattr+0x1d9/0x2b0 [ 155.318284][ T7534] path_setxattrat+0x3b0/0x440 [ 155.323611][ T7534] __x64_sys_fsetxattr+0xbc/0xe0 [ 155.329260][ T7534] do_syscall_64+0x14d/0xf80 [ 155.334377][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.340800][ T7534] [ 155.340800][ T7534] other info that might help us debug this: [ 155.340800][ T7534] [ 155.351025][ T7534] Chain exists of: [ 155.351025][ T7534] &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 155.351025][ T7534] [ 155.368675][ T7534] Possible unsafe locking scenario: [ 155.368675][ T7534] [ 155.376217][ T7534] CPU0 CPU1 [ 155.381620][ T7534] ---- ---- [ 155.387163][ T7534] lock(&oi->ip_xattr_sem); [ 155.392026][ T7534] lock(&journal->j_trans_barrier); [ 155.400096][ T7534] lock(&oi->ip_xattr_sem); [ 155.407675][ T7534] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 155.415432][ T7534] [ 155.415432][ T7534] *** DEADLOCK *** [ 155.415432][ T7534] [ 155.423618][ T7534] 3 locks held by syz.3.557/7534: [ 155.428836][ T7534] #0: ffff8880588f2420 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 155.438790][ T7534] #1: ffff88805d9e1800 (&sb->s_type->i_mutex_key#35){+.+.}-{4:4}, at: vfs_setxattr+0x13e/0x360 [ 155.449511][ T7534] #2: ffff88805d9e1538 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 155.459636][ T7534] [ 155.459636][ T7534] stack backtrace: [ 155.465568][ T7534] CPU: 0 UID: 0 PID: 7534 Comm: syz.3.557 Not tainted syzkaller #0 PREEMPT(full) [ 155.465586][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.465596][ T7534] Call Trace: [ 155.465604][ T7534] [ 155.465612][ T7534] dump_stack_lvl+0xe8/0x150 [ 155.465641][ T7534] print_circular_bug+0x2e1/0x300 [ 155.465666][ T7534] check_noncircular+0x12e/0x150 [ 155.465689][ T7534] __lock_acquire+0x15a5/0x2cf0 [ 155.465716][ T7534] lock_acquire+0xf0/0x2e0 [ 155.465733][ T7534] ? ocfs2_xattr_set+0xba7/0x13e0 [ 155.465757][ T7534] down_write+0x96/0x200 [ 155.465775][ T7534] ? ocfs2_xattr_set+0xba7/0x13e0 [ 155.465794][ T7534] ? __pfx_down_write+0x10/0x10 [ 155.465810][ T7534] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 155.465829][ T7534] ? __kmalloc_cache_noprof+0x31c/0x660 [ 155.465846][ T7534] ? __kmalloc_cache_noprof+0x15b/0x660 [ 155.465862][ T7534] ocfs2_xattr_set+0xba7/0x13e0 [ 155.465897][ T7534] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 155.465918][ T7534] ? stack_trace_save+0xa9/0x100 [ 155.465936][ T7534] ? check_path+0x21/0x40 [ 155.465955][ T7534] ? check_noncircular+0xda/0x150 [ 155.465977][ T7534] ? add_lock_to_list+0xc7/0x100 [ 155.465998][ T7534] ? __lock_acquire+0x146e/0x2cf0 [ 155.466017][ T7534] ? futex_unqueue+0x22/0x240 [ 155.466036][ T7534] ? posix_xattr_acl+0x93/0xc0 [ 155.466058][ T7534] ? evm_protect_xattr+0x4d4/0xac0 [ 155.466080][ T7534] ? __pfx_evm_protect_xattr+0x10/0x10 [ 155.466100][ T7534] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 155.466121][ T7534] __vfs_setxattr+0x43c/0x480 [ 155.466146][ T7534] __vfs_setxattr_noperm+0x12d/0x660 [ 155.466169][ T7534] vfs_setxattr+0x163/0x360 [ 155.466191][ T7534] ? __pfx_vfs_setxattr+0x10/0x10 [ 155.466211][ T7534] ? sb_start_write+0x114/0x1c0 [ 155.466227][ T7534] ? mnt_want_write_file+0x164/0x200 [ 155.466244][ T7534] file_setxattr+0x1d9/0x2b0 [ 155.466266][ T7534] path_setxattrat+0x3b0/0x440 [ 155.466286][ T7534] ? __pfx_path_setxattrat+0x10/0x10 [ 155.466302][ T7534] ? do_futex+0x333/0x420 [ 155.466328][ T7534] ? rcu_is_watching+0x15/0xb0 [ 155.466350][ T7534] __x64_sys_fsetxattr+0xbc/0xe0 [ 155.466366][ T7534] do_syscall_64+0x14d/0xf80 [ 155.466380][ T7534] ? trace_irq_disable+0x3b/0x150 [ 155.466393][ T7534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.466408][ T7534] ? clear_bhb_loop+0x40/0x90 [ 155.466424][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.466439][ T7534] RIP: 0033:0x7fb67b59c799 [ 155.466454][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.466467][ T7534] RSP: 002b:00007fb67c4cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 155.466484][ T7534] RAX: ffffffffffffffda RBX: 00007fb67b815fa0 RCX: 00007fb67b59c799 [ 155.466496][ T7534] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 155.466505][ T7534] RBP: 00007fb67b632bd9 R08: 0000000000000001 R09: 0000000000000000 [ 155.466515][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.466524][ T7534] R13: 00007fb67b816038 R14: 00007fb67b815fa0 R15: 00007ffdfcb8e4e8 [ 155.466540][ T7534] [ 155.908740][ T5829] ocfs2: Unmounting device (7,3) on (node local) [ 155.923865][ T7530] XFS (loop1): Ending clean mount [ 155.946885][ T5814] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791