last executing test programs: 12m29.408667707s ago: executing program 3 (id=6110): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 12m29.143218607s ago: executing program 3 (id=6116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) 12m28.945048216s ago: executing program 3 (id=6119): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 12m28.588085796s ago: executing program 3 (id=6127): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0), 0x6, 0x51c, &(0x7f0000000700)="$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") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 12m28.006334569s ago: executing program 3 (id=6136): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000002400)={0x2d, 0xffffffffffffffff, 0xfffffffe}, 0xc) 12m27.087198428s ago: executing program 3 (id=6154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x3300}}, 0x1c}}, 0x0) 12m26.356466946s ago: executing program 32 (id=6154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x3300}}, 0x1c}}, 0x0) 9m33.77147403s ago: executing program 2 (id=8713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000080)) 9m33.494592323s ago: executing program 2 (id=8717): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") unlink(&(0x7f0000000080)='./file1\x00') 9m32.548650222s ago: executing program 2 (id=8732): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000007c0)={0x9, 0x3132564e, 0x2, @discrete={0x1, 0x5}}) 9m32.140014515s ago: executing program 2 (id=8741): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 9m31.540692121s ago: executing program 2 (id=8751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x2, 0x0, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x40, 0x6, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in=@broadcast, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200000000000000}, {0x5, 0xfffffffffffffffd}, {0x0, 0x0, 0x4}, 0x70bd2b, 0x0, 0x2, 0x0, 0x7f, 0x6a}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) 9m30.93654241s ago: executing program 2 (id=8762): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m30.462249237s ago: executing program 33 (id=8762): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m55.899647489s ago: executing program 4 (id=13882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) 3m55.664535057s ago: executing program 4 (id=13886): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @default]}, 0x48) 3m55.540295329s ago: executing program 4 (id=13887): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(0x0) 3m55.22884144s ago: executing program 4 (id=13890): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000040)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@gid_ignore}, {@undelete}, {@volume={'volume', 0x3d, 0x7}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m54.761534864s ago: executing program 4 (id=13900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060088480000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m54.167023149s ago: executing program 4 (id=13909): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/90, 0x5a}], 0x2, 0xf, 0x8000) 3m53.688824419s ago: executing program 34 (id=13909): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/90, 0x5a}], 0x2, 0xf, 0x8000) 1m51.155277302s ago: executing program 6 (id=15332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) 1m50.940135511s ago: executing program 6 (id=15335): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, 0x0, 0x177) 1m50.683396418s ago: executing program 6 (id=15337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) 1m50.450668162s ago: executing program 6 (id=15340): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {}, {@barrier}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$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") mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x883042, 0x0) 1m50.095466081s ago: executing program 6 (id=15344): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1005, 0xe0882) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 1m49.562757589s ago: executing program 6 (id=15352): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000440), &(0x7f0000000480)=0x4) 1m49.02621176s ago: executing program 35 (id=15352): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000440), &(0x7f0000000480)=0x4) 9.530850768s ago: executing program 9 (id=16290): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 9.056602409s ago: executing program 9 (id=16297): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) 8.707494419s ago: executing program 0 (id=16301): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 8.682405806s ago: executing program 9 (id=16302): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) open(&(0x7f0000000040)='./file0\x00', 0x108242, 0x1f6) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 8.263106465s ago: executing program 9 (id=16306): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)={[{@inode32}, {@noswap}]}) 7.821838281s ago: executing program 9 (id=16310): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x4, 0x1cf, &(0x7f0000000a00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') 7.668182646s ago: executing program 0 (id=16314): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@dax_never}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a47c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 7.354377357s ago: executing program 9 (id=16317): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 6.783160575s ago: executing program 0 (id=16321): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$eJzs3c9vHGcZAOB3Jia1Qxvs0EORkFiJSiBAlt0T4Eo4jhPXbkxQIBXislnb28Sw9kb2GnGohLlV4oTEAXGoQOLmU+UD1yLxD3DhWK5UggMXJKSIRbs7a++Md/ESdus6eh4pHs/3a971uzPzzWHypZnG4+390vZ+qbJbqm++vf9a6cf12sFONdKPyUUfn+GMPk9JyP3FuXfrznffei3iD1t//qjZbDajZSL6mu/5/Z//eGezd9uVFvq0xu0/2qj8ICJePhNXy5WI+P7vI5KIuJmVLWXbqYi4Hp26t975+cPSiKJ5/8Pq6+Wn6+8eL7y6dvTe8eDPnkT8uva5rz3a+dsXryz85SsjOjwAAAAAAAAAAAAAAAAAAJfcyv17D74zNx8fJDFxlJx9X3cl2w56P7Y5Ml8Y/4cFAAAAAAAAAAAAAAAAAACAT6jT9/9LyY1kIiLy7/8vZ9vFAf2b3xp/jIzP6rfvLd+em8/Wf0/O1H89K/r7zSsx02fd9+L67zcL/fuv//7CyOLvxtc97nQk6WxuP01nZyN+my38/kpyLa3V9xtffbt+sLs1sjAurXz+O6v3574F2YL+w+Z/qTD++Nf//2wUv7Wt/Ydnv8r0kc//lYHtfvezZKj83yr0+zjyz7PL53+iXTbV22CxcwFo5f8XE+fnf7kw/rjyfz0iSkkr1lLubnIj6ZQPmq+Ql8//p9pluUtn9occdP7/q5D/24XxL+r6f1i8EdFXPv9X22WTuRan5/9Mev75f6cw/kXkvxX/ofv/UPL5z66kE7km7b/ksNf/lcL448r/g7Qd51/jepL7BhwlnfgH/X915OXzP3mm/vT5Lx1q/vdGoX///I/u5OzG1z1u+/mv2Wz+NNv/ctJ5/qO/fP6nBrYb9vxfLfQb9/V/MUpDPwFcHWcgl1Q+/9faZfm583T757D5X+vdeTq+/LdnJZPd/J9eT/79Qqf8Nz3zvwfjCOA5kc//pzuFaW+Lw/bP9vwvOX/+/2Zh/P+S/+RwJJ/g7PyvFf9hOpLBn3v5/L84sF0r/38a4v5/t9Bv/PP/iDlz/WeWz/9LA9u1z//J8/O/Xug37vx/aZyDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwCS9l2OpJ0NrefprOzEbey/VfiWrJR2Spv1OqbP9qPWM7KS3EjeVSrb1Rq5e3d+la1XKnV6psRt7P6l2My2a/VG+WdypM7J2NNJY+rlb3GRrXSiIiVrPzz8VJ3rI3txk7lSUS8cVL3mbS+9+RxZbe8tb33zbm5ublYPYlhJqn+pFHdbXSO3qmNWDvpO530BNeufvMklheTH9YP9nYrtXb53Z4+tfpmpdbTZz2r+2XMJI29g93NSqNartUfdY83yB+vPmNy/geL2XZ59f737t+dP1P/MOlsl8YfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/hw8WvvGriJjo7KURUUqyX5LsX877H1ZfLz9df/d44dW1o/eOP+rXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/d+2vdRKS42l5G/H7+/R/nz6V+303fvzjDjJzO00t3/1A35d/TKL8tR6s279PN+usjJmrvZ7Anw306GPcZmtu3ufn6vteRchURbclvUs5VtewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//YvMk6w==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.515315625s ago: executing program 0 (id=16338): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4040, &(0x7f0000000000)=ANY=[], 0x11, 0x214, &(0x7f0000000480)="$eJzs201PE0Ecx/Hf9omKRnyID/FkYmK82CqQkJ6UF+DFo4kHUgtpLGrEC4REeRPevXryJZDo+/ANwMGbJ8bM7tSydO3u1F020O8nofuHzm9nFpih0xYBmFlPw9tAgZphZYz5eFfSi2eSaiUPDkChjDseGQCzpzr11H85XEMAnEmHq1VJTe0H0s9fu90D99HM+PjhcLUSFYF0cCx/IWt+LwiPd2rx/Lyki2Otxzck5kuUv69h3o58t3vJs/95xfvXlaz56Pof3FNdx/KXJS1I4WmuSrom6bo0Z9vekFSJ9d9wn43yt6Mv7GW8DAAAAAAAJrK7z9Z/paVW6gmqclvfMXYfvN4f9B75dTzcPqvu8o/98n81XH5xUiOTnl9KHN1JwaisR4c5l2913w5eeYwbyEPFb/6PPS1of6P3U07wz+ngVob4/K9nH417RnC9/9krAyCytb3zem0w6L3Ps3gyqY3ke0K7IuQ8wuTiqy30O3plpOC+pinsYjttfPiCTN4D+6T0NiZDm/NU1PL9Pn9XcHKe1mKT6Jv72Xqc+XnSXQ3F5mlM9ZQXJgCFa3/YfNfe2t552N9c2+ht9N4sr3Q6K8tLi512+LDc3pqFskcJoAijv/4Jd2Z9Ew8AAAAAAAAAAAAAACjVTUm3wurHkUeMdwYAAAAAZ9Bp/FNU2dcIAAAAAAAAAAAAAMB59ycAAP//QsA2Lg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.730781862s ago: executing program 1 (id=16345): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, &(0x7f0000001d80)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.310957287s ago: executing program 1 (id=16349): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x6000}, 0x0) 3.106855657s ago: executing program 0 (id=16351): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2000002, &(0x7f00000004c0)=ANY=[@ANYBLOB='=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,rootdir=00000000000000000004,iocharset=cp866,unhide,noadinicb,nostrict,uid=forget,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x1e, 0xe1}}, 0x204002) 3.037991014s ago: executing program 1 (id=16353): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="c7ba5eb00caa9ab4ac5a6bdbe0fa681c5a9f2e2141d04da32a70ea6c51d0f6d914d781885d52f42dbd61e081c8994c78a3c68f62caeeb9a96118761d8ddde84bac6ce8fb384e66171b0e2f358dcdf6de00cec324f74a1ad2f98aa11518474437d913d19ea7c17e1820d7b2d7160d56afc7b0f190acfa3c8c3824e085aba99c0d018283ebf045a17b4b74a33aea654ec322e274e226ce1c1c6c5ed48b5c56eda8b76d55106f41ebce3580763bef22214a7527c5f47cde06ee2b5f1463e9c716e9001aeafaebe4cb2a59d7c9dee42cf8ef4e988b88e0cd240326020a820f1d113fc2ecc3e471cb97f3008c604ceb55b19ba3ba7fee9e8a6eea574d8d43c7e08e36") 2.469894405s ago: executing program 1 (id=16357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x307, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x29, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xdd, 0x7, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) 2.276187882s ago: executing program 0 (id=16358): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f00000003c0)) 2.256822142s ago: executing program 8 (id=16360): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 1.854253427s ago: executing program 36 (id=16358): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f00000003c0)) 1.834993575s ago: executing program 8 (id=16363): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 1.707857269s ago: executing program 8 (id=16364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) getpriority(0x0, 0x0) 1.639781783s ago: executing program 5 (id=16365): unshare(0x20060400) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) pidfd_send_signal(r0, 0x3b, &(0x7f0000000140)={0x13, 0xc739, 0x4}, 0x0) 1.635351263s ago: executing program 7 (id=16366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.452214522s ago: executing program 5 (id=16367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1.435846239s ago: executing program 8 (id=16368): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x40000000) 1.271355928s ago: executing program 5 (id=16369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.218540219s ago: executing program 7 (id=16370): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x440, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$eJzs209PE0EYx/Hf7ralIgpi/BMSExMT40WqQEJ6Ul6AF48mHggW0ljUiBcIifImvHv15Esg0ffh0Qs9eDMh6ZrZnabd7trdxW2r5ftJ6A6deWaeLcx0ZykCcG49Dh4dOaoGJd/339+W9OyJpB9LwXO3JpohgFHx7bHj93jdOgBTzuucNfJ5+joxd4llBPhntTfMu31Vx470/efh1on9qsauFEqJ1w/tDTcsONJJX/yFnNchSyUt9MfPSrqYIQf/kxMc76o7vsn8cGsu47jtozB+VtH8tTDQ8NS+YLH48Pzv3VFZffGXJc1LQTdXJC1KuirNmLbX5MqNjF+x3/Xib4ZPHGU8DQAAAAAAhjK7z+W/ipaWUzvwZLe+MWYfvN1sNR7kG7i7fVbZxj/8U4MUFRu/MqzR4KY/IX410+BOr1gODzM2/tR/3XqRMWegKG6++R+7LWh+o49TOginw2JinReb/+Xs2dg7gtvNj7liAIT29g9ebrZajbdFFh4NayPl7dCsCAVnmFz4bAr6Fd7oH/FYaQU3ocostmftsPsHmaJT/aD0Nn6GNtNUKBX7On+VMzhPS5FJ9MX+bHP0/DSpqqLIPI3wxrwwARi52rvdN7W9/YP7zd3NncZO49Xaer2+vra6Uq8Fl+Xm0Z+fdJYARqH37p9QmfdDPAAAAAAAAAAAAAAAYCKuS7oRlL51coTxyQAAAADgPzSOf4qa9DkCAAAAAAAAAAAAADDtfgcAAP//mg0zKQ==") chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 875.993579ms ago: executing program 5 (id=16371): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') pread64(r0, &(0x7f0000000600)=""/4114, 0x1012, 0x5) 780.217579ms ago: executing program 8 (id=16372): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 742.108974ms ago: executing program 7 (id=16373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 484.780541ms ago: executing program 7 (id=16374): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000100)) 467.267211ms ago: executing program 1 (id=16375): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) 414.843867ms ago: executing program 5 (id=16376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050) 248.528465ms ago: executing program 7 (id=16377): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523"], 0x34}}, 0x0) 181.5961ms ago: executing program 1 (id=16378): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 30.911109ms ago: executing program 5 (id=16379): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000002300)={{}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) 14.321675ms ago: executing program 8 (id=16380): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {}, 0xfffe}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x4}, 0x7}) 0s ago: executing program 7 (id=16381): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) kernel console output (not intermixed with test programs): x15/0xb0 [ 1305.220611][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.220650][T26666] wb_writeback+0x43b/0xaf0 [ 1305.220694][T26666] ? queue_io+0x3d1/0x590 [ 1305.220733][T26666] ? __pfx_wb_writeback+0x10/0x10 [ 1305.220781][T26666] ? _raw_spin_unlock_irq+0x23/0x50 [ 1305.220826][T26666] wb_workfn+0x409/0xef0 [ 1305.220873][T26666] ? __pfx_wb_workfn+0x10/0x10 [ 1305.220908][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.220936][T26666] ? __lock_acquire+0xab9/0xd20 [ 1305.220974][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.221007][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.221039][T26666] ? _raw_spin_unlock_irq+0x23/0x50 [ 1305.221069][T26666] ? process_scheduled_works+0x9ef/0x17b0 [ 1305.221095][T26666] ? process_scheduled_works+0x9ef/0x17b0 [ 1305.221126][T26666] process_scheduled_works+0xae1/0x17b0 [ 1305.221189][T26666] ? __pfx_process_scheduled_works+0x10/0x10 [ 1305.221226][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.221265][T26666] worker_thread+0x8a0/0xda0 [ 1305.221297][T26666] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1305.221339][T26666] ? __kthread_parkme+0x7b/0x200 [ 1305.221381][T26666] kthread+0x711/0x8a0 [ 1305.221419][T26666] ? __pfx_worker_thread+0x10/0x10 [ 1305.221447][T26666] ? __pfx_kthread+0x10/0x10 [ 1305.221478][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.221512][T26666] ? _raw_spin_unlock_irq+0x23/0x50 [ 1305.221541][T26666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.221570][T26666] ? lockdep_hardirqs_on+0x9c/0x150 [ 1305.221602][T26666] ? __pfx_kthread+0x10/0x10 [ 1305.221637][T26666] ret_from_fork+0x4bc/0x870 [ 1305.221667][T26666] ? __pfx_ret_from_fork+0x10/0x10 [ 1305.221702][T26666] ? __switch_to_asm+0x39/0x70 [ 1305.221723][T26666] ? __switch_to_asm+0x33/0x70 [ 1305.221742][T26666] ? __pfx_kthread+0x10/0x10 [ 1305.221780][T26666] ret_from_fork_asm+0x1a/0x30 [ 1305.221831][T26666] [ 1305.221841][T26666] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1305.293899][T26234] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1305.628322][T26234] hpfs: filesystem error: improperly stopped [ 1305.635004][T26234] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1305.700780][T26234] hpfs: You really don't want any checks? You are crazy... [ 1305.734077][T31078] dvb-usb: bulk message failed: -22 (3/0) [ 1305.755768][T26234] hpfs: hpfs_map_sector(): read error [ 1305.786270][T31078] dw2102: command 0x0e transfer failed. [ 1305.830010][T31078] dvb-usb: bulk message failed: -22 (3/0) [ 1305.837891][T26234] hpfs: code page support is disabled [ 1305.843372][T26234] hpfs: hpfs_map_4sectors(): unaligned read [ 1305.853658][T31078] dw2102: command 0x0e transfer failed. [ 1305.876799][T26204] loop8: detected capacity change from 0 to 32768 [ 1305.893195][T26234] hpfs: hpfs_map_4sectors(): unaligned read [ 1305.903670][T26234] hpfs: filesystem error: unable to find root dir [ 1306.123612][T26261] loop7: detected capacity change from 0 to 256 [ 1306.149817][T31078] dvb-usb: bulk message failed: -22 (3/0) [ 1306.155566][T31078] dw2102: command 0x0e transfer failed. [ 1306.194454][T31078] dvb-usb: bulk message failed: -22 (3/0) [ 1306.245978][T31078] dw2102: command 0x0e transfer failed. [ 1306.251560][T31078] dvb-usb: bulk message failed: -22 (1/0) [ 1306.308934][T31078] dw2102: command 0x51 transfer failed. [ 1306.367752][T31078] dvb-usb: bulk message failed: -22 (5/0) [ 1306.373491][T31078] dw2102: i2c probe for address 0x68 failed. [ 1306.449219][T31078] dvb-usb: bulk message failed: -22 (5/0) [ 1306.492053][T19649] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1306.495465][T31078] dw2102: i2c probe for address 0x69 failed. [ 1306.507140][T19649] Bluetooth: hci1: Injecting HCI hardware error event [ 1306.516617][T19649] Bluetooth: hci1: hardware error 0x00 [ 1306.611518][T31078] dvb-usb: bulk message failed: -22 (5/0) [ 1306.657902][T31078] dw2102: i2c probe for address 0x6a failed. [ 1306.710038][T31078] dw2102: probing for demodulator failed. Is the external power switched on? [ 1306.774479][T31078] dvb-usb: no frontend was attached by 'TeVii S662' [ 1307.024917][T31078] rc_core: IR keymap rc-tt-1500 not found [ 1307.030670][T31078] Registered IR keymap rc-empty [ 1307.075325][T31078] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1307.130965][T31078] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input84 [ 1307.197908][T31078] dvb-usb: schedule remote query interval to 250 msecs. [ 1307.204896][T31078] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1307.280085][T31078] dvb-usb: TeVii S662 successfully initialized and connected. [ 1307.331200][T31078] usb 6-1: USB disconnect, device number 9 [ 1307.348254][T26314] loop1: detected capacity change from 0 to 1024 [ 1307.405109][T26243] loop0: detected capacity change from 0 to 32768 [ 1307.406690][T26307] loop8: detected capacity change from 0 to 4096 [ 1307.480367][T26314] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1307.489095][T26243] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15636 (26243) [ 1307.545126][T31078] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1307.572967][T26307] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1307.585047][T26243] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1307.616851][T26243] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1307.617481][T26314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.751390][T26307] ntfs3(loop8): ino=1a, mi_enum_attr [ 1307.797964][T26307] ntfs3(loop8): ino=1a, mi_enum_attr [ 1307.858654][T26307] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 1307.918774][T26243] BTRFS info (device loop0): enabling ssd optimizations [ 1307.974930][T26243] BTRFS info (device loop0): turning on async discard [ 1308.008024][T26371] overlayfs: upper fs does not support tmpfile. [ 1308.041098][T26243] BTRFS info (device loop0): enabling free space tree [ 1308.086711][T26371] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1308.217933][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.508872][ T9889] ntfs3(loop8): ino=1a, mi_enum_attr [ 1308.611185][ T5825] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1308.627782][T19649] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1308.935731][T26403] loop1: detected capacity change from 0 to 128 [ 1308.947038][T26300] loop7: detected capacity change from 0 to 32768 [ 1308.953893][T26408] openvswitch: netlink: Message has 536 unknown bytes. [ 1309.005764][T26403] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1309.011506][T26408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.085113][T26300] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1309.142185][T26403] hpfs: filesystem error: improperly stopped [ 1309.213286][T26403] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1309.295300][T26403] hpfs: You really don't want any checks? You are crazy... [ 1309.387656][T26403] hpfs: hpfs_map_sector(): read error [ 1309.393073][T26403] hpfs: code page support is disabled [ 1309.425866][T26403] hpfs: hpfs_map_4sectors(): unaligned read [ 1309.426783][T26300] XFS (loop7): Ending clean mount [ 1309.472230][T26403] hpfs: hpfs_map_4sectors(): unaligned read [ 1309.494532][T26300] XFS (loop7): Quotacheck needed: Please wait. [ 1309.522953][T26403] hpfs: filesystem error: unable to find root dir [ 1309.621471][T26300] XFS (loop7): Quotacheck: Done. [ 1309.631574][T26431] loop0: detected capacity change from 0 to 2048 [ 1309.741165][T26431] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1309.795590][T26379] loop9: detected capacity change from 0 to 32768 [ 1309.799676][T24287] udevd[24287]: incorrect nilfs2 checksum on /dev/loop0 [ 1309.824147][T26379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.15655 (26379) [ 1309.909029][T26446] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1309.991397][T26321] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1310.029557][T26379] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1310.038518][T26452] loop8: detected capacity change from 0 to 64 [ 1310.080517][T26379] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1310.397902][T26379] BTRFS info (device loop9): enabling ssd optimizations [ 1310.404897][T26379] BTRFS info (device loop9): turning on async discard [ 1310.502078][T26379] BTRFS info (device loop9): enabling free space tree [ 1310.853937][T26407] loop5: detected capacity change from 0 to 32768 [ 1310.894922][T24563] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1310.964201][T26407] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1311.149573][T26407] XFS (loop5): Ending clean mount [ 1311.370752][T26508] loop1: detected capacity change from 0 to 40427 [ 1311.421149][T26508] F2FS-fs (loop1): invalid crc value [ 1311.521061][T26508] F2FS-fs (loop1): access invalid blkaddr:2 [ 1311.527022][T26508] CPU: 0 UID: 0 PID: 26508 Comm: syz.1.15673 Not tainted syzkaller #0 PREEMPT(full) [ 1311.527054][T26508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1311.527070][T26508] Call Trace: [ 1311.527080][T26508] [ 1311.527090][T26508] dump_stack_lvl+0x189/0x250 [ 1311.527135][T26508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1311.527169][T26508] ? __pfx___get_meta_folio+0x10/0x10 [ 1311.527225][T26508] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 1311.527266][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527304][T26508] f2fs_get_node_info+0x38f/0x1480 [ 1311.527352][T26508] read_node_folio+0x20a/0x3f0 [ 1311.527389][T26508] ? __pfx_read_node_folio+0x10/0x10 [ 1311.527436][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527464][T26508] ? __filemap_get_folio+0x79f/0xaf0 [ 1311.527499][T26508] __get_node_folio+0x22a/0x14f0 [ 1311.527548][T26508] ? __pfx___get_node_folio+0x10/0x10 [ 1311.527589][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527622][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527649][T26508] ? do_raw_spin_unlock+0x122/0x240 [ 1311.527690][T26508] ? _raw_spin_unlock+0x28/0x50 [ 1311.527718][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527746][T26508] ? iget_locked+0x538/0x580 [ 1311.527779][T26508] f2fs_iget+0x77c/0x5550 [ 1311.527817][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527846][T26508] ? do_raw_spin_lock+0x121/0x290 [ 1311.527886][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527920][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527953][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.527984][T26508] ? f2fs_build_stats+0xb2f/0x1220 [ 1311.528017][T26508] ? f2fs_fill_super+0x495c/0x7170 [ 1311.528050][T26508] f2fs_fill_super+0x4a45/0x7170 [ 1311.528139][T26508] get_tree_bdev_flags+0x40e/0x4d0 [ 1311.528177][T26508] ? __pfx_f2fs_fill_super+0x10/0x10 [ 1311.528205][T26508] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1311.528244][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.528277][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.528311][T26508] vfs_get_tree+0x92/0x2b0 [ 1311.528351][T26508] do_new_mount+0x302/0xa10 [ 1311.528388][T26508] ? apparmor_capable+0x137/0x1b0 [ 1311.528424][T26508] ? __pfx_do_new_mount+0x10/0x10 [ 1311.528462][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.528491][T26508] ? ns_capable+0x8a/0xf0 [ 1311.528520][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.528558][T26508] ? kmem_cache_free+0x19b/0x690 [ 1311.528609][T26508] __se_sys_mount+0x313/0x410 [ 1311.528641][T26508] ? __pfx___se_sys_mount+0x10/0x10 [ 1311.528671][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.528699][T26508] ? __x64_sys_mount+0x20/0xc0 [ 1311.528726][T26508] do_syscall_64+0xfa/0xfa0 [ 1311.528761][T26508] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.528795][T26508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.528818][T26508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1311.528847][T26508] ? exc_page_fault+0xab/0x100 [ 1311.528887][T26508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.528912][T26508] RIP: 0033:0x7fe74179076a [ 1311.528935][T26508] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.528956][T26508] RSP: 002b:00007fe7426eee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1311.528983][T26508] RAX: ffffffffffffffda RBX: 00007fe7426eeef0 RCX: 00007fe74179076a [ 1311.529001][T26508] RDX: 0000200000000080 RSI: 0000200000000240 RDI: 00007fe7426eeeb0 [ 1311.529019][T26508] RBP: 0000200000000080 R08: 00007fe7426eeef0 R09: 0000000000000008 [ 1311.529037][T26508] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000240 [ 1311.529053][T26508] R13: 00007fe7426eeeb0 R14: 0000000000005510 R15: 00002000000002c0 [ 1311.529099][T26508] [ 1312.161653][T26508] F2FS-fs (loop1): f2fs_get_node_info of read_node_folio+0x20a/0x3f0: inconsistent nat entry, ino:3, nid:3, blkaddr:2, ver:0, flag:0 [ 1312.177288][T26508] F2FS-fs (loop1): Failed to read root inode [ 1312.245134][ T5827] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1312.303347][T26531] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1312.310224][T26488] loop0: detected capacity change from 0 to 40427 [ 1312.364178][T26488] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1312.375166][T26531] VFS: Can't find a romfs filesystem on dev nullb0. [ 1312.375166][T26531] [ 1312.432598][T26488] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1312.502202][T26488] F2FS-fs (loop0): invalid crc value [ 1312.712225][ T30] audit: type=1326 audit(1370.238:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1312.836854][T26552] program syz.1.15681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1312.863274][ T30] audit: type=1326 audit(1370.238:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.007384][ T30] audit: type=1326 audit(1370.248:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.140911][ T30] audit: type=1326 audit(1370.248:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.192585][T26488] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1313.272078][ T30] audit: type=1326 audit(1370.248:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.331889][ T30] audit: type=1326 audit(1370.248:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.340579][T26488] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1313.354952][ T30] audit: type=1326 audit(1370.248:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.500593][T26488] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1313.554010][ T30] audit: type=1326 audit(1370.248:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.8.15680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1313.761369][T26590] loop7: detected capacity change from 0 to 512 [ 1313.877605][T26590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.049389][T26590] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15691: bg 0: block 145: padding at end of block bitmap is not set [ 1314.203680][T26616] loop5: detected capacity change from 0 to 128 [ 1314.237408][T26616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1314.291043][T26616] hpfs: filesystem error: improperly stopped [ 1314.327599][T26616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1314.340374][ T5838] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1314.372434][T26616] hpfs: You really don't want any checks? You are crazy... [ 1314.391884][T26321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.410169][T26616] hpfs: hpfs_map_sector(): read error [ 1314.417989][T26616] hpfs: code page support is disabled [ 1314.440533][T26616] hpfs: hpfs_map_4sectors(): unaligned read [ 1314.447562][T26616] hpfs: hpfs_map_4sectors(): unaligned read [ 1314.453457][T26616] hpfs: filesystem error: unable to find root dir [ 1314.524582][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1314.567604][ T5838] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1314.634486][ T5838] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1314.671531][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.744641][ T5838] usb 10-1: config 0 descriptor?? [ 1314.778755][T26606] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1315.177773][ T5838] hkems 0003:2006:0118.0005: item fetching failed at offset 5/7 [ 1315.192029][ T5838] hkems 0003:2006:0118.0005: parse failed [ 1315.226512][ T5838] hkems 0003:2006:0118.0005: probe with driver hkems failed with error -22 [ 1315.389364][ T5838] usb 10-1: USB disconnect, device number 2 [ 1315.396449][T26664] loop1: detected capacity change from 0 to 24 [ 1315.457699][T26618] loop8: detected capacity change from 0 to 32768 [ 1315.479510][T26618] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15698 (26618) [ 1315.486547][T26659] loop7: detected capacity change from 0 to 4096 [ 1315.558843][T26618] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1315.614321][T26618] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1315.637047][T26659] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1315.743518][T26659] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 1315.837162][T26618] BTRFS info (device loop8): enabling ssd optimizations [ 1315.855863][T26618] BTRFS info (device loop8): turning on async discard [ 1315.862640][T26618] BTRFS info (device loop8): enabling free space tree [ 1315.870783][T26704] netlink: 256 bytes leftover after parsing attributes in process `syz.1.15707'. [ 1315.896205][T26321] ntfs3(loop7): ino=1b, "file0" ntfs_readdir [ 1315.964690][ T1102] ntfs3(loop7): ino=9, ntfs3_write_inode failed, -22. [ 1315.991022][T26644] loop5: detected capacity change from 0 to 32768 [ 1316.011786][T26321] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22. [ 1316.077635][T26644] btrfs: Deprecated parameter 'usebackuproot' [ 1316.112875][T26644] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1316.156926][T26644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15701 (26644) [ 1316.224701][ T9889] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1316.292273][T26644] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1316.322270][T23705] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1316.341247][T26644] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 1316.379359][T10445] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1316.511453][T23705] usb 10-1: Using ep0 maxpacket: 32 [ 1316.533077][T23705] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.550074][T23705] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1316.579380][T10445] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1316.589790][T10445] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1316.600204][T23705] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1316.606932][T23705] usb 10-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 1316.642186][T10445] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1316.642434][T26644] BTRFS info (device loop5): rebuilding free space tree [ 1316.657192][T23705] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.667372][T10445] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1316.690432][T10445] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1316.704859][T23705] usb 10-1: config 0 descriptor?? [ 1316.745662][T10445] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1316.769177][T10445] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1316.793290][T26665] loop0: detected capacity change from 0 to 32768 [ 1316.813358][T10445] usb 2-1: Product: syz [ 1316.819985][T10445] usb 2-1: Manufacturer: syz [ 1316.858847][T26644] BTRFS info (device loop5): allowing degraded mounts [ 1316.884001][T26644] BTRFS info (device loop5): enabling ssd optimizations [ 1316.932065][T26665] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1316.942646][T10445] cdc_wdm 2-1:1.0: skipping garbage [ 1316.948324][T10445] cdc_wdm 2-1:1.0: skipping garbage [ 1316.966393][T26644] BTRFS info (device loop5): turning on flush-on-commit [ 1316.981143][T10445] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1316.987079][T10445] cdc_wdm 2-1:1.0: Unknown control protocol [ 1317.024040][T26644] BTRFS info (device loop5): enabling free space tree [ 1317.084746][T26644] BTRFS info (device loop5): force clearing of disk cache [ 1317.091906][T26644] BTRFS info (device loop5): trying to use backup root at mount time [ 1317.127588][T26665] XFS (loop0): Ending clean mount [ 1317.166691][T26644] BTRFS info (device loop5): use zstd compression, level 3 [ 1317.212801][T23705] kye 0003:0458:5014.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1317.248614][T23705] kye 0003:0458:5014.0006: ignoring exceeding usage max [ 1317.281455][T23705] kye 0003:0458:5014.0006: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.9-1/input0 [ 1317.318666][T10445] usb 2-1: USB disconnect, device number 15 [ 1317.349499][T23705] kye 0003:0458:5014.0006: tablet-enabling feature report not found [ 1317.362123][ T5825] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1317.407668][T23705] kye 0003:0458:5014.0006: tablet enabling failed [ 1317.469002][ T30] audit: type=1800 audit(1375.235:439): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15701" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1317.475716][T23705] usb 10-1: USB disconnect, device number 3 [ 1317.603846][ T5827] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1317.647219][T26775] fido_id[26775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1317.972644][T26813] netlink: 'syz.0.15718': attribute type 3 has an invalid length. [ 1318.031178][T26815] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 1318.045701][T26813] netlink: 666 bytes leftover after parsing attributes in process `syz.0.15718'. [ 1318.078855][T26752] loop7: detected capacity change from 0 to 32768 [ 1318.232705][T26752] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1318.333495][T26752] XFS (loop7): Ending clean mount [ 1318.398860][T26752] XFS (loop7): Quotacheck needed: Please wait. [ 1318.457846][T26752] XFS (loop7): Quotacheck: Done. [ 1318.764157][T26321] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1319.056927][T26867] loop0: detected capacity change from 0 to 256 [ 1319.146797][T26867] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1319.176220][T26871] loop9: detected capacity change from 0 to 512 [ 1319.391765][T26871] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.433913][T26810] loop5: detected capacity change from 0 to 32768 [ 1319.516883][T26871] EXT4-fs warning (device loop9): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 1319.606874][T26810] jfs_lookup: iget failed on inum 4 [ 1319.676111][T26810] jfs_lookup: iget failed on inum 4 [ 1319.882607][T24563] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.405780][T26923] loop1: detected capacity change from 0 to 128 [ 1320.464411][T26923] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1320.870240][T26666] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1321.235028][T26873] loop7: detected capacity change from 0 to 32768 [ 1321.275933][T26930] loop5: detected capacity change from 0 to 4096 [ 1321.359912][T26873] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1321.675336][T26897] loop8: detected capacity change from 0 to 40427 [ 1321.733123][T26897] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 1321.758177][T26321] ocfs2: Unmounting device (7,7) on (node local) [ 1321.785464][T26897] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1321.853613][T26897] F2FS-fs (loop8): Image doesn't support compression [ 1321.864235][T26960] loop0: detected capacity change from 0 to 512 [ 1321.894322][T26897] F2FS-fs (loop8): build fault injection type: 0x4 [ 1321.972204][T26897] F2FS-fs (loop8): invalid crc value [ 1322.018911][T26960] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15740: invalid indirect mapped block 4294967295 (level 1) [ 1322.128524][T26972] loop5: detected capacity change from 0 to 2048 [ 1322.132874][T26960] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15740: invalid indirect mapped block 4294967295 (level 1) [ 1322.251894][T26960] EXT4-fs (loop0): 2 truncates cleaned up [ 1322.287921][T26972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1322.310245][T26960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1322.400057][T26986] loop1: detected capacity change from 0 to 256 [ 1322.449115][T26972] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.15743: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1322.487763][T26986] exfat: Deprecated parameter 'namecase' [ 1322.567082][T26972] EXT4-fs (loop5): Remounting filesystem read-only [ 1322.580753][T26897] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1322.623028][T26986] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1322.662388][T26897] F2FS-fs (loop8): Start checkpoint disabled! [ 1322.679813][T26897] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1322.724550][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.766607][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.050849][T27012] loop5: detected capacity change from 0 to 64 [ 1323.406456][T23705] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1323.600851][T23705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.637490][T23705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.705704][T23705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1323.732654][T23705] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1323.753771][T23705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.778127][T23705] usb 2-1: config 0 descriptor?? [ 1323.797019][T27052] loop7: detected capacity change from 0 to 47 [ 1324.127060][T27065] loop7: detected capacity change from 0 to 512 [ 1324.143712][T27065] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1324.176029][T23705] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description [ 1324.191911][T27065] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.15762: bg 0: block 104: invalid block bitmap [ 1324.222033][T23705] plantronics 0003:047F:FFFF.0007: parse failed [ 1324.229010][T27065] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1324.250883][T27065] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.15762: invalid indirect mapped block 1 (level 1) [ 1324.257131][T23705] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 1324.269950][T27065] EXT4-fs (loop7): 1 truncate cleaned up [ 1324.282186][T27065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1324.318522][ T30] audit: type=1800 audit(1382.426:440): pid=27065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15762" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 1324.393959][T11110] usb 2-1: USB disconnect, device number 16 [ 1324.406831][T26321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.649096][T27045] loop0: detected capacity change from 0 to 32768 [ 1324.675021][T27045] BTRFS warning: excessive commit interval 2147483648, use with care [ 1324.715283][T27045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15756 (27045) [ 1324.774822][T27045] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1324.847399][T27045] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 1325.038261][ T1102] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1325.151914][T27045] BTRFS error (device loop0): failed to load root extent [ 1325.170914][T27045] BTRFS warning (device loop0): try to load backup roots slot 1 [ 1325.195133][ T1102] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1325.249307][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15771'. [ 1325.250925][T27045] BTRFS warning (device loop0): couldn't read tree root [ 1325.295119][T27045] BTRFS warning (device loop0): try to load backup roots slot 2 [ 1325.304333][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15771'. [ 1325.345308][ T1102] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1325.365961][T27045] BTRFS warning (device loop0): couldn't read tree root [ 1325.373411][T27045] BTRFS warning (device loop0): try to load backup roots slot 3 [ 1325.410966][T27045] BTRFS info (device loop0): checking UUID tree [ 1325.441762][T27045] BTRFS info (device loop0): setting nodatasum [ 1325.480111][T27045] BTRFS info (device loop0): setting nodatacow [ 1325.489915][T27045] BTRFS info (device loop0): enabling ssd optimizations [ 1325.504405][T27045] BTRFS info (device loop0): turning on flush-on-commit [ 1325.521549][T27045] BTRFS info (device loop0): turning on async discard [ 1325.548469][T27045] BTRFS info (device loop0): enabling free space tree [ 1325.581821][T27045] BTRFS info (device loop0): enabling auto defrag [ 1325.631008][T27045] BTRFS info (device loop0): trying to use backup root at mount time [ 1325.823770][T27153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1325.938928][ T5825] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1326.225577][T27108] loop8: detected capacity change from 0 to 32768 [ 1326.274103][T27108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15768 (27108) [ 1326.341281][T27138] loop7: detected capacity change from 0 to 32768 [ 1326.341393][T27108] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1326.366839][T27177] netlink: 372 bytes leftover after parsing attributes in process `syz.1.15784'. [ 1326.389939][T27108] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1326.419867][T27138] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15772 (27138) [ 1326.538829][T27138] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1326.590214][T27198] loop5: detected capacity change from 0 to 512 [ 1326.623465][T27138] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1326.655801][T27198] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz.5.15787: lblock 0 mapped to illegal pblock 3 (length 1) [ 1326.723824][T27198] EXT4-fs (loop5): Remounting filesystem read-only [ 1326.737219][T27198] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.15787: error -117 reading directory block [ 1326.756858][T27108] BTRFS info (device loop8): enabling ssd optimizations [ 1326.779111][T27108] BTRFS info (device loop8): turning on async discard [ 1326.822232][T27218] tipc: Started in network mode [ 1326.842287][T27108] BTRFS info (device loop8): enabling free space tree [ 1326.856937][T27198] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1326.865876][T27223] loop0: detected capacity change from 0 to 64 [ 1326.866522][T27218] tipc: Node identity ac14140f, cluster identity 4711 [ 1326.922408][T27198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.006488][T27218] tipc: New replicast peer: 172.30.1.10 [ 1327.033790][T27138] BTRFS info (device loop7): enabling ssd optimizations [ 1327.039027][T27218] tipc: Enabled bearer , priority 10 [ 1327.096184][T27198] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.15787: error -117 reading directory block [ 1327.105756][T27138] BTRFS info (device loop7): turning on async discard [ 1327.142933][T27138] BTRFS info (device loop7): enabling free space tree [ 1327.186689][T27198] EXT4-fs: group quota file already specified [ 1327.375172][ T9889] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1327.495903][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.510472][T26321] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1327.733584][T23705] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 1327.761950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.959831][T23705] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1327.984519][T23705] usb 1-1: config 0 has no interface number 0 [ 1328.005392][T23705] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1328.080671][T23705] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1328.119611][T11110] tipc: Node number set to 2886997007 [ 1328.162440][T23705] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1328.225039][T23705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.293244][T23705] usb 1-1: config 0 descriptor?? [ 1328.340199][T27251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1328.415462][T23705] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1328.609884][T11110] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1328.656244][T23705] usb 1-1: USB disconnect, device number 7 [ 1328.814047][T11110] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1328.841102][T11110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.880707][T11110] usb 2-1: Product: syz [ 1328.884900][T11110] usb 2-1: Manufacturer: syz [ 1328.924369][T11110] usb 2-1: SerialNumber: syz [ 1328.953950][T11110] usb 2-1: config 0 descriptor?? [ 1328.996360][T11110] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1329.108559][T27342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.413135][T11110] gspca_sunplus: reg_r err -71 [ 1329.418023][T11110] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1329.448068][T27357] overlayfs: regular lower layers cannot follow data lower layers [ 1329.453524][ T5838] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1329.461069][T27285] loop8: detected capacity change from 0 to 32768 [ 1329.486491][T11110] usb 2-1: USB disconnect, device number 17 [ 1329.548438][T27285] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1329.667503][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 1329.692028][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1329.713647][T27384] loop9: detected capacity change from 0 to 256 [ 1329.715861][ T5838] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1329.729014][T27285] XFS (loop8): Ending clean mount [ 1329.729321][ T5838] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.745889][ T5838] usb 6-1: config 13 has no interface number 0 [ 1329.752467][ T5838] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1329.763065][ T5838] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1329.776312][ T5838] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1329.783670][T27285] XFS (loop8): Quotacheck needed: Please wait. [ 1329.819854][ T5838] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1329.864230][ T5838] usb 6-1: New USB device strings: Mfr=250, Product=1, SerialNumber=67 [ 1329.913390][ T5838] usb 6-1: Product: syz [ 1329.916680][T27285] XFS (loop8): Quotacheck: Done. [ 1329.951584][ T5838] usb 6-1: Manufacturer: syz [ 1329.979238][ T5838] usb 6-1: SerialNumber: syz [ 1330.012591][T27345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1330.127759][T27402] loop0: detected capacity change from 0 to 128 [ 1330.181743][ T9889] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1330.301586][ T5838] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1330.353837][ T5838] usb 6-1: MIDIStreaming interface descriptor not found [ 1330.514340][T27437] loop9: detected capacity change from 0 to 256 [ 1330.540609][ T5838] usb 6-1: USB disconnect, device number 10 [ 1330.743107][T27437] FAT-fs (loop9): Directory bread(block 64) failed [ 1330.767951][T27437] FAT-fs (loop9): Directory bread(block 65) failed [ 1330.768859][T27452] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1330.794352][T27437] FAT-fs (loop9): Directory bread(block 66) failed [ 1330.796509][T23782] udevd[23782]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.818044][T27437] FAT-fs (loop9): Directory bread(block 67) failed [ 1330.859733][T27437] FAT-fs (loop9): Directory bread(block 68) failed [ 1330.876816][T27455] netlink: 'syz.7.15831': attribute type 3 has an invalid length. [ 1330.878015][T27459] tipc: Failed to obtain node identity [ 1330.900481][T27437] FAT-fs (loop9): Directory bread(block 69) failed [ 1330.927877][T27437] FAT-fs (loop9): Directory bread(block 70) failed [ 1330.943607][T27437] FAT-fs (loop9): Directory bread(block 71) failed [ 1330.963477][T27459] tipc: Enabling of bearer rejected, failed to enable media [ 1330.971336][T27437] FAT-fs (loop9): Directory bread(block 72) failed [ 1331.005124][T27437] FAT-fs (loop9): Directory bread(block 73) failed [ 1331.159366][T27468] loop7: detected capacity change from 0 to 47 [ 1331.419891][ T5838] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1331.519734][T27497] loop9: detected capacity change from 0 to 64 [ 1331.584117][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.640096][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.681755][ T5194] udevd[5194]: worker [24287] terminated by signal 33 (Unknown signal 33) [ 1331.691810][ T5838] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1331.707777][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1331.718916][ T5194] udevd[5194]: worker [24287] failed while handling '/devices/virtual/block/loop9' [ 1331.738564][ T5838] usb 2-1: SerialNumber: syz [ 1331.806876][T27516] netlink: 44 bytes leftover after parsing attributes in process `syz.7.15845'. [ 1331.837976][T27511] can0: slcan on ptm0. [ 1331.973101][T27510] can0 (unregistered): slcan off ptm0. [ 1331.991914][ T5838] usb 2-1: 0:2 : does not exist [ 1332.048109][ T5838] usb 2-1: USB disconnect, device number 18 [ 1332.124649][T23705] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1332.168269][T23715] udevd[23715]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.297099][T23705] usb 10-1: Using ep0 maxpacket: 8 [ 1332.304524][T23705] usb 10-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1332.327747][T23705] usb 10-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1332.341135][T31078] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1332.350163][T23705] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1332.359202][T23705] usb 10-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1332.368386][T23705] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.411796][T23705] usb 10-1: config 0 descriptor?? [ 1332.488354][T31078] usb 6-1: Using ep0 maxpacket: 32 [ 1332.512086][T31078] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1332.533412][T31078] usb 6-1: config 0 has no interface number 0 [ 1332.541636][T27580] loop8: detected capacity change from 0 to 64 [ 1332.564941][T31078] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1332.585177][T31078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.615401][T31078] usb 6-1: Product: syz [ 1332.628407][T31078] usb 6-1: Manufacturer: syz [ 1332.640156][T31078] usb 6-1: SerialNumber: syz [ 1332.665328][T31078] usb 6-1: config 0 descriptor?? [ 1332.693399][T31078] quatech2 6-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 1332.818072][T23705] glorious 0003:258A:0033.0008: unknown main item tag 0x0 [ 1332.837463][T23705] glorious 0003:258A:0033.0008: hidraw0: USB HID vf4.f6 Device [Glorious Model D] on usb-dummy_hcd.9-1/input0 [ 1332.875266][T27603] loop8: detected capacity change from 0 to 256 [ 1332.883476][T27603] exfat: Deprecated parameter 'namecase' [ 1332.895790][T27603] exfat: Deprecated parameter 'utf8' [ 1332.909265][T31078] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1332.944740][T27603] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1332.945382][T31078] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1333.020563][T10445] usb 10-1: USB disconnect, device number 4 [ 1333.118617][T27607] fido_id[27607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1333.333665][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1333.335065][T10445] usb 6-1: USB disconnect, device number 11 [ 1333.370055][T10445] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1333.382169][T27637] Bluetooth: MGMT ver 1.23 [ 1333.390860][T10445] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1333.436132][T10445] quatech2 6-1:0.1: device disconnected [ 1333.541360][T27651] loop8: detected capacity change from 0 to 256 [ 1333.645779][T27651] FAT-fs (loop8): Directory bread(block 64) failed [ 1333.659689][T27651] FAT-fs (loop8): Directory bread(block 65) failed [ 1333.676566][T27651] FAT-fs (loop8): Directory bread(block 66) failed [ 1333.686103][T27651] FAT-fs (loop8): Directory bread(block 67) failed [ 1333.716724][T27651] FAT-fs (loop8): Directory bread(block 68) failed [ 1333.725133][T27651] FAT-fs (loop8): Directory bread(block 69) failed [ 1333.741892][T27651] FAT-fs (loop8): Directory bread(block 70) failed [ 1333.759328][T27651] FAT-fs (loop8): Directory bread(block 71) failed [ 1333.777539][T27651] FAT-fs (loop8): Directory bread(block 72) failed [ 1333.796139][T27651] FAT-fs (loop8): Directory bread(block 73) failed [ 1333.878376][T29495] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1334.046886][T29495] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1334.088935][T29495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.106537][T29495] usb 2-1: Product: syz [ 1334.110738][T29495] usb 2-1: Manufacturer: syz [ 1334.115693][T29495] usb 2-1: SerialNumber: syz [ 1334.126162][T29495] usb 2-1: config 0 descriptor?? [ 1334.144871][T29495] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1334.173441][T29495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1334.209182][T29495] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1334.233737][T29495] usb 2-1: media controller created [ 1334.317322][T27681] loop5: detected capacity change from 0 to 4096 [ 1334.333354][T29495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.355418][T27681] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1334.552755][T27681] ntfs3(loop5): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 1334.575148][T27708] loop8: detected capacity change from 0 to 256 [ 1334.637400][T29495] DVB: Unable to find symbol mt352_attach() [ 1334.768129][ T1102] ntfs3(loop5): ino=1e, ntfs3_write_inode failed, -22. [ 1334.844130][T29495] DVB: Unable to find symbol nxt6000_attach() [ 1334.873620][T29495] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1334.951000][T29495] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 1335.037201][T29495] dvb-usb: schedule remote query interval to 1000 msecs. [ 1335.088929][T29495] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1335.134987][T29495] dvb-usb: bulk message failed: -22 (7/0) [ 1335.140761][T29495] dvb-usb: bulk message failed: -22 (7/0) [ 1335.215429][T29495] usb 2-1: USB disconnect, device number 19 [ 1335.399846][T27730] loop1: detected capacity change from 0 to 4096 [ 1335.463362][T29495] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1335.686056][T27764] loop0: detected capacity change from 0 to 512 [ 1335.748578][T27768] loop7: detected capacity change from 0 to 1024 [ 1335.795974][T27774] loop5: detected capacity change from 0 to 512 [ 1335.800376][T27768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1335.830507][T27764] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 1335.867440][T27774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1335.881556][T27764] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.15886: iget: bad i_size value: 12154757448730 [ 1335.898249][T27764] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.15886: couldn't read orphan inode 13 (err -117) [ 1335.903185][T27774] System zones: 1-12 [ 1335.921561][T27768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.921761][T27774] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.15889: corrupted in-inode xattr: e_value size too large [ 1335.969609][T27768] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1335.992080][T27774] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.15889: couldn't read orphan inode 15 (err -117) [ 1336.012653][T27764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.083996][T27774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.122234][ T5194] udevd[5194]: worker [23715] terminated by signal 33 (Unknown signal 33) [ 1336.166455][ T5194] udevd[5194]: worker [23715] failed while handling '/devices/virtual/block/loop5' [ 1336.168654][T26321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.191363][ T5194] udevd[5194]: worker [23755] terminated by signal 33 (Unknown signal 33) [ 1336.245791][ T5194] udevd[5194]: worker [23755] failed while handling '/devices/virtual/block/loop7' [ 1336.284101][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.382136][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.400512][T27806] loop7: detected capacity change from 0 to 8 [ 1336.554328][ T5838] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1336.713212][T27824] loop5: detected capacity change from 0 to 1024 [ 1336.736018][ T5838] usb 9-1: Using ep0 maxpacket: 32 [ 1336.748701][ T5838] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1336.789791][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.821350][T27834] loop0: detected capacity change from 0 to 16 [ 1336.854698][ T5838] usb 9-1: config 0 descriptor?? [ 1336.858692][T27834] erofs (device loop0): mounted with root inode @ nid 36. [ 1337.278554][ T5838] kye 0003:0458:5016.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1337.341485][ T5838] kye 0003:0458:5016.0009: hidraw0: USB HID v1.05 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 1337.382690][ T5838] kye 0003:0458:5016.0009: tablet-enabling feature report not found [ 1337.390680][ T5838] kye 0003:0458:5016.0009: tablet enabling failed [ 1337.469490][T29495] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1337.497961][ T5838] usb 9-1: USB disconnect, device number 7 [ 1337.531664][T27875] loop1: detected capacity change from 0 to 256 [ 1337.550784][T27864] fido_id[27864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1337.559072][T27875] exfat: Deprecated parameter 'utf8' [ 1337.637231][T27875] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1337.682753][T29495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.717481][T29495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 1337.756523][T29495] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 1337.767848][T29495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.785042][T29495] usb 1-1: config 0 descriptor?? [ 1337.794434][T27853] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1337.933502][T27831] loop7: detected capacity change from 0 to 32768 [ 1337.979195][T27831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15902 (27831) [ 1338.021045][T27894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1338.060980][T27831] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1338.061960][T27897] tipc: Started in network mode [ 1338.078073][T27831] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1338.116251][T27897] tipc: Node identity ac141441, cluster identity 4711 [ 1338.124314][T27897] tipc: Enabled bearer , priority 10 [ 1338.216376][T29495] hid-corsair-void 0003:1B1C:0A31.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:0a31] on usb-dummy_hcd.0-1/input0 [ 1338.305239][T27848] loop5: detected capacity change from 0 to 32768 [ 1338.313987][T27831] BTRFS info (device loop7): enabling ssd optimizations [ 1338.345507][T27831] BTRFS info (device loop7): turning on async discard [ 1338.358886][T27831] BTRFS info (device loop7): enabling free space tree [ 1338.452988][T23705] usb 1-1: USB disconnect, device number 8 [ 1338.459541][T10445] hid-corsair-void 0003:1B1C:0A31.000A: failed to request battery (reason: -71) [ 1338.471745][T29495] hid-corsair-void 0003:1B1C:0A31.000A: failed to request firmware (reason: -71) [ 1338.645819][T27925] fido_id[27925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1338.783266][T27953] loop9: detected capacity change from 0 to 512 [ 1338.811174][T26321] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1338.957611][T27953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.980488][T27946] loop8: detected capacity change from 0 to 4096 [ 1339.069328][T29495] tipc: Node number set to 2886997057 [ 1339.116858][T17102] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1339.160324][T27970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15924'. [ 1339.170025][T27946] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1339.246769][T24563] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.327155][T17102] usb 2-1: Using ep0 maxpacket: 8 [ 1339.364100][T17102] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.386201][T17102] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1339.404316][T17102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.422195][T17102] usb 2-1: Product: syz [ 1339.442300][T17102] usb 2-1: Manufacturer: syz [ 1339.468833][T17102] usb 2-1: SerialNumber: syz [ 1339.530947][T17102] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1339.574744][T17102] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1339.749061][T29495] usb 2-1: USB disconnect, device number 20 [ 1339.956441][T23705] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1340.166142][T23705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.176215][T23705] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1340.196912][T23705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.228604][T23705] usb 1-1: config 0 descriptor?? [ 1340.515718][T28037] loop9: detected capacity change from 0 to 2048 [ 1340.610684][T28048] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1340.633954][T28049] netlink: 'syz.7.15943': attribute type 10 has an invalid length. [ 1340.680668][T28037] NILFS (loop9): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 1340.716887][T28037] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1340.745920][T28037] Remounting filesystem read-only [ 1340.751418][T28037] NILFS (loop9): error -5 truncating bmap (ino=16) [ 1340.893429][T28018] loop5: detected capacity change from 0 to 32768 [ 1340.910358][T24563] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 1340.928828][T17102] usb 1-1: USB disconnect, device number 9 [ 1340.935138][T28018] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15934 (28018) [ 1341.021066][T28068] loop7: detected capacity change from 0 to 128 [ 1341.042858][T28068] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1341.043596][T28018] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1341.090221][T28068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1341.108575][T28018] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 1341.137446][T28018] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1341.169426][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15948'. [ 1341.377009][T28018] BTRFS info (device loop5): rebuilding free space tree [ 1341.420922][T28018] BTRFS info (device loop5): disabling free space tree [ 1341.444217][T28018] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1341.454560][T17102] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1341.473893][T28018] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1341.553321][T28018] BTRFS info (device loop5): enabling ssd optimizations [ 1341.572787][T28018] BTRFS info (device loop5): enabling disk space caching [ 1341.620072][T17102] usb 9-1: Using ep0 maxpacket: 32 [ 1341.630299][T28018] BTRFS info (device loop5): force clearing of disk cache [ 1341.647776][T17102] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1341.666269][T28018] BTRFS info (device loop5): force zstd compression, level 3 [ 1341.673971][T17102] usb 9-1: config 0 has no interface number 0 [ 1341.692641][T17102] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1341.743771][T17102] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1341.775460][T17102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.812472][T17102] usb 9-1: Product: syz [ 1341.831319][T17102] usb 9-1: Manufacturer: syz [ 1341.835957][T17102] usb 9-1: SerialNumber: syz [ 1341.895069][T17102] usb 9-1: config 0 descriptor?? [ 1341.931828][T17102] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1341.973477][ T5827] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1341.990045][T17102] em28xx 9-1:0.132: Video interface 132 found: [ 1342.065827][T28061] loop1: detected capacity change from 0 to 32768 [ 1342.123766][T28061] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1342.322852][T17102] em28xx 9-1:0.132: chip ID is em2884 [ 1342.372592][T28146] loop9: detected capacity change from 0 to 256 [ 1342.436074][T28061] XFS (loop1): Ending clean mount [ 1342.437704][T28148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15957'. [ 1342.479655][T28061] XFS (loop1): Quotacheck needed: Please wait. [ 1342.622330][T28061] XFS (loop1): Quotacheck: Done. [ 1342.644872][T17102] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1342.676493][T17102] em28xx 9-1:0.132: board has no eeprom [ 1342.746106][T17102] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1342.792857][T17102] em28xx 9-1:0.132: analog set to bulk mode. [ 1342.814205][T31078] em28xx 9-1:0.132: Registering V4L2 extension [ 1342.857783][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1342.941788][T31078] em28xx 9-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1342.989496][T31078] em28xx 9-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1343.012865][T31078] em28xx 9-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1343.050793][T31078] em28xx 9-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1343.086820][T17102] usb 9-1: USB disconnect, device number 8 [ 1343.104672][T17102] em28xx 9-1:0.132: Disconnecting em28xx [ 1343.510693][T31078] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1343.557893][T31078] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1343.594114][T31078] em28xx 9-1:0.132: No AC97 audio processor [ 1343.617212][T31078] usb 9-1: Decoder not found [ 1343.621841][T31078] em28xx 9-1:0.132: failed to create media graph [ 1343.689170][T31078] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1343.741854][T31078] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1343.775310][T17102] em28xx 9-1:0.132: Closing input extension [ 1343.836586][T17102] em28xx 9-1:0.132: Freeing device [ 1344.453916][T28157] loop7: detected capacity change from 0 to 40427 [ 1344.491288][T28157] F2FS-fs (loop7): build fault injection rate: 771 [ 1344.557282][T28157] F2FS-fs (loop7): invalid crc value [ 1344.907012][T28157] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1344.943856][T28192] loop8: detected capacity change from 0 to 32768 [ 1344.956552][T28157] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1345.014433][T28192] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15967 (28192) [ 1345.102160][T28192] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1345.117402][T28157] syz.7.15960: attempt to access beyond end of device [ 1345.117402][T28157] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1345.163577][T28192] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1345.222119][T28220] loop1: detected capacity change from 0 to 32768 [ 1345.265745][T28220] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15973 (28220) [ 1345.341903][T28220] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1345.409984][T28192] BTRFS info (device loop8): rebuilding free space tree [ 1345.428314][T28220] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 1345.464524][T28192] BTRFS info (device loop8): enabling ssd optimizations [ 1345.507268][T28192] BTRFS info (device loop8): turning on sync discard [ 1345.527392][T28192] BTRFS info (device loop8): enabling free space tree [ 1345.534161][T28192] BTRFS info (device loop8): force clearing of disk cache [ 1345.555801][T28192] BTRFS info (device loop8): enabling auto defrag [ 1345.565698][T28192] BTRFS info (device loop8): max_inline set to 0 [ 1345.744797][T28220] BTRFS info (device loop1): enabling ssd optimizations [ 1345.782624][T28220] BTRFS info (device loop1): turning on async discard [ 1345.813283][T28220] BTRFS info (device loop1): enabling free space tree [ 1345.999541][ T9889] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1346.082448][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15989'. [ 1346.101596][T28249] loop5: detected capacity change from 0 to 32768 [ 1346.793418][ T5822] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1346.802239][T28337] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 1347.545731][T28370] loop8: detected capacity change from 0 to 512 [ 1347.713757][T28370] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 1347.760865][T28370] FAT-fs (loop8): Filesystem has been set read-only [ 1347.872744][T28381] loop9: detected capacity change from 0 to 128 [ 1347.882419][T28381] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1347.962568][T28381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1348.244675][T28393] loop0: detected capacity change from 0 to 1024 [ 1348.481604][T28404] loop8: detected capacity change from 0 to 64 [ 1348.538074][T17463] hfsplus: b-tree write err: -5, ino 4 [ 1348.751344][T28415] loop0: detected capacity change from 0 to 512 [ 1348.771704][T28419] loop9: detected capacity change from 0 to 128 [ 1348.815940][T28419] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1348.848611][T28415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.872581][T28371] loop7: detected capacity change from 0 to 32768 [ 1348.895230][T28419] hpfs: filesystem error: improperly stopped [ 1348.915259][T28371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16004 (28371) [ 1348.966424][T28419] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1348.974188][T28419] hpfs: You really don't want any checks? You are crazy... [ 1349.020145][T28415] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.0.16015: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1349.065441][T28371] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1349.088648][T28419] hpfs: hpfs_map_sector(): read error [ 1349.096926][T28371] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1349.120632][T28419] hpfs: code page support is disabled [ 1349.122523][T28415] EXT4-fs (loop0): Remounting filesystem read-only [ 1349.126110][T28419] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.175640][T28419] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.206452][T28419] hpfs: filesystem error: unable to find root dir [ 1349.235070][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.345043][T28371] BTRFS info (device loop7): turning on async discard [ 1349.413980][T28371] BTRFS info (device loop7): enabling free space tree [ 1349.532911][T28386] loop5: detected capacity change from 0 to 32768 [ 1349.692437][T28386] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1349.708533][T28473] loop9: detected capacity change from 0 to 8 [ 1349.750499][T26321] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1349.800739][T28473] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1349.900133][T28473] SQUASHFS error: Failed to read block 0x9b: -5 [ 1349.907750][T28386] XFS (loop5): Ending clean mount [ 1349.907804][T28473] SQUASHFS error: Unable to read metadata cache entry [99] [ 1349.944327][T28433] loop8: detected capacity change from 0 to 32768 [ 1350.004264][T28473] SQUASHFS error: Unable to read inode 0x127 [ 1350.078937][T28433] ERROR: (device loop8): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 1350.078937][T28433] [ 1350.174001][T28433] ERROR: (device loop8): remounting filesystem as read-only [ 1350.243678][T28433] jfs_readdir: unexpected rc = -5 from dtReadNext [ 1350.268970][ T5827] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1350.589253][T28503] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1351.105258][T28469] loop1: detected capacity change from 0 to 32768 [ 1351.171903][T28469] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1351.289926][T28469] XFS (loop1): Ending clean mount [ 1351.332406][T28469] XFS (loop1): Quotacheck needed: Please wait. [ 1351.492174][T28469] XFS (loop1): Quotacheck: Done. [ 1351.554327][T28541] loop9: detected capacity change from 0 to 512 [ 1351.605650][T28547] loop5: detected capacity change from 0 to 512 [ 1351.644362][T28546] loop7: detected capacity change from 0 to 1024 [ 1351.670667][T28546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1351.694361][T28547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.760545][T28546] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.780739][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1351.854918][T28547] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 1351.993228][T26321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.059624][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.169334][T28571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16040'. [ 1352.254433][T28519] loop8: detected capacity change from 0 to 32768 [ 1352.300173][T28519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.16032 (28519) [ 1352.405422][T28519] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1352.443681][T28519] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1352.894216][T28519] BTRFS info (device loop8): enabling ssd optimizations [ 1352.928683][T28519] BTRFS info (device loop8): turning on async discard [ 1352.935464][T28519] BTRFS info (device loop8): enabling free space tree [ 1352.989054][T28617] loop0: detected capacity change from 0 to 1024 [ 1353.005458][T28620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16049'. [ 1353.007251][T28617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1353.132640][T28617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 1353.178651][T28617] System zones: 0-1, 3-12 [ 1353.193825][ T9889] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1353.226366][T28617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1353.485012][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.884966][T28616] loop7: detected capacity change from 0 to 32768 [ 1353.948395][T28616] ERROR: (device loop7): xtSearch: xt_getpage: xtree page corrupt [ 1353.948395][T28616] [ 1354.005588][T28616] xtLookup: xtSearch returned -5 [ 1354.011413][T28616] add_index: get/read_metapage failed! [ 1354.052832][T28593] loop5: detected capacity change from 0 to 32768 [ 1354.081859][T28647] ialloc: diAlloc returned -5! [ 1354.105644][T28609] loop9: detected capacity change from 0 to 32768 [ 1354.177425][T28593] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1354.266343][T28609] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1354.414726][T28609] XFS (loop9): Ending clean mount [ 1354.466042][ T5827] ocfs2: Unmounting device (7,5) on (node local) [ 1354.603771][T28677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16061'. [ 1354.663110][T24563] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1354.692667][T28677] IPVS: Error connecting to the multicast addr [ 1355.305758][T28706] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16069'. [ 1355.475781][T28708] loop7: detected capacity change from 0 to 1024 [ 1355.500720][T23705] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1355.565750][T28713] @: renamed from vlan0 (while UP) [ 1355.616789][T28714] netlink: 'syz.5.16070': attribute type 5 has an invalid length. [ 1355.651947][T28659] loop8: detected capacity change from 0 to 40427 [ 1355.660878][T17463] hfsplus: b-tree write err: -5, ino 4 [ 1355.691273][T23705] usb 1-1: Using ep0 maxpacket: 16 [ 1355.699742][T23705] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1355.731974][T23705] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1355.753504][T28659] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 1355.769214][T23705] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.792537][T28659] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1355.834142][T28659] F2FS-fs (loop8): build fault injection rate: 14 [ 1355.840730][T23705] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1355.869029][T28659] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 1355.887903][T23705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1355.900629][T23705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.911509][T28722] loop9: detected capacity change from 0 to 1024 [ 1355.927492][T23705] usb 1-1: Product: syz [ 1355.938268][T28659] F2FS-fs (loop8): invalid crc value [ 1355.946388][T23705] usb 1-1: Manufacturer: syz [ 1355.960261][ C1] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1355.992105][T28722] hfsplus: bad catalog entry type [ 1355.997638][T23705] usb 1-1: SerialNumber: syz [ 1356.004804][ C0] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1356.042718][T28726] loop7: detected capacity change from 0 to 4096 [ 1356.159189][T26666] hfsplus: b-tree write err: -5, ino 4 [ 1356.222824][T28659] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1356.278392][T23705] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1356.295027][T28726] ntfs3(loop7): failed to convert "0080" to cp737 [ 1356.311221][T28659] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 1356.323986][T28726] ntfs3(loop7): failed to convert name for inode 1e. [ 1356.384879][T28726] ntfs3(loop7): ino=1f, mi_enum_attr [ 1356.386521][T28659] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 1356.419872][T28726] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1356.425988][T28659] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1356.470722][T17102] usb 1-1: USB disconnect, device number 10 [ 1356.518274][T17102] usblp0: removed [ 1356.633785][T28659] F2FS-fs (loop8): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0 [ 1356.653295][T28659] F2FS-fs (loop8): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 1356.694140][T28699] loop1: detected capacity change from 0 to 32768 [ 1356.760021][T28699] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1356.896643][T28775] Bluetooth: MGMT ver 1.23 [ 1357.032986][T28699] XFS (loop1): Ending clean mount [ 1357.143112][T28783] loop7: detected capacity change from 0 to 128 [ 1357.198846][T28783] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1357.240818][T28783] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1357.294235][T28783] EXT4-fs error (device loop7): htree_dirblock_to_tree:1051: inode #2: comm syz.7.16081: Directory block failed checksum [ 1357.317303][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1357.574699][T26321] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.749219][T28753] loop5: detected capacity change from 0 to 32768 [ 1357.883830][T28815] smc: net device bond0 applied user defined pnetid SYZ0 [ 1357.964257][T28820] loop9: detected capacity change from 0 to 256 [ 1358.232009][T28830] loop7: detected capacity change from 0 to 1024 [ 1358.414756][T28847] loop1: detected capacity change from 0 to 64 [ 1358.620470][T17463] hfsplus: b-tree write err: -5, ino 4 [ 1358.931172][T23705] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1359.197007][T23705] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.284254][T23705] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.366141][T23705] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1359.454351][T23705] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.528035][T28848] loop0: detected capacity change from 0 to 131072 [ 1359.550480][T23705] usb 9-1: config 0 descriptor?? [ 1359.579371][T28848] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1359.594060][T28848] F2FS-fs (loop0): invalid crc value [ 1359.605361][T28848] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1 [ 1359.622463][T28848] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 1360.000218][T23705] samsung 0003:0419:0600.000C: unknown global tag 0xc [ 1360.025147][T23705] samsung 0003:0419:0600.000C: item 0 2 1 12 parsing failed [ 1360.066679][T23705] samsung 0003:0419:0600.000C: parse failed [ 1360.101727][T23705] samsung 0003:0419:0600.000C: probe with driver samsung failed with error -22 [ 1360.202703][T28905] loop7: detected capacity change from 0 to 256 [ 1360.212413][T23705] usb 9-1: USB disconnect, device number 9 [ 1360.285035][T28905] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1360.362485][T28845] loop9: detected capacity change from 0 to 32768 [ 1360.453142][T28845] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1360.537706][T28934] loop0: detected capacity change from 0 to 512 [ 1360.614158][T28934] EXT4-fs: Ignoring removed nobh option [ 1360.664493][T28934] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1360.672645][T28934] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 1360.792659][T28845] XFS (loop9): Ending clean mount [ 1360.814732][T28934] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.16113: inode has both inline data and extents flags [ 1360.850186][T28872] loop5: detected capacity change from 0 to 32768 [ 1360.888258][T28934] EXT4-fs (loop0): Remounting filesystem read-only [ 1360.898733][T28845] XFS (loop9): Quotacheck needed: Please wait. [ 1360.915093][T28934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1360.971297][T28934] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1361.019169][T28872] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1361.094293][T28845] XFS (loop9): Quotacheck: Done. [ 1361.160838][T28961] sit0: entered promiscuous mode [ 1361.181064][T28961] netlink: 'syz.7.16117': attribute type 1 has an invalid length. [ 1361.212840][T28961] netlink: 1 bytes leftover after parsing attributes in process `syz.7.16117'. [ 1361.226043][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.259881][ T5827] ocfs2: Unmounting device (7,5) on (node local) [ 1361.322340][T24563] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1361.469584][T28971] loop0: detected capacity change from 0 to 64 [ 1361.704260][T17102] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1361.892257][T17102] usb 2-1: Using ep0 maxpacket: 16 [ 1361.902034][T28994] loop7: detected capacity change from 0 to 256 [ 1361.918162][T17102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.941229][T28994] exfat: Deprecated parameter 'utf8' [ 1361.946627][T28994] exfat: Deprecated parameter 'namecase' [ 1361.983916][T17102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.020242][T28994] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1362.043314][T17102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1362.106920][T17102] usb 2-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 1362.150969][T17102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.213773][T17102] usb 2-1: config 0 descriptor?? [ 1362.236936][T29007] netlink: 'syz.0.16129': attribute type 1 has an invalid length. [ 1362.273306][T29007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1362.286136][T29006] loop5: detected capacity change from 0 to 1764 [ 1362.502629][T29021] sp0: Synchronizing with TNC [ 1362.674865][T17102] apple 0003:05AC:027B.000D: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.1-1/input0 [ 1362.850171][T10445] usb 2-1: USB disconnect, device number 21 [ 1362.987264][T29065] loop9: detected capacity change from 0 to 64 [ 1363.027749][T29043] fido_id[29043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1363.081213][T28978] loop8: detected capacity change from 0 to 32768 [ 1363.130271][T28978] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1363.139471][T29069] loop0: detected capacity change from 0 to 164 [ 1363.173829][T28978] XFS (loop8): Ending clean mount [ 1363.231744][ T30] audit: type=1800 audit(1423.274:441): pid=28978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.16120" name="file2" dev="loop8" ino=4423 res=0 errno=0 [ 1363.336968][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.357583][T29069] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1363.427695][ T9889] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1363.950677][T10445] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1364.168798][T10445] usb 10-1: Using ep0 maxpacket: 32 [ 1364.186905][T10445] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1364.216377][T10445] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1364.250706][T10445] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1364.285542][T10445] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.329147][T10445] usb 10-1: config 0 descriptor?? [ 1364.747367][T10445] uclogic 0003:145F:0212.000E: interface is invalid, ignoring [ 1364.778201][T29099] loop0: detected capacity change from 0 to 32768 [ 1364.827258][T29099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16145 (29099) [ 1364.895777][T29099] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1364.910852][T29099] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1364.959423][T10445] usb 10-1: USB disconnect, device number 5 [ 1365.106027][T29099] BTRFS info (device loop0): enabling ssd optimizations [ 1365.149941][T29099] BTRFS info (device loop0): turning on async discard [ 1365.170189][T29099] BTRFS info (device loop0): enabling free space tree [ 1365.358791][ T5825] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1365.632390][T29146] loop1: detected capacity change from 0 to 32768 [ 1365.669047][T29215] loop7: detected capacity change from 0 to 256 [ 1365.736431][T29215] exfat: Deprecated parameter 'utf8' [ 1365.795838][T29215] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1366.528681][T29247] loop9: detected capacity change from 0 to 1024 [ 1366.753926][T29257] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16180'. [ 1366.830598][T26666] hfsplus: b-tree write err: -5, ino 4 [ 1367.080329][T29270] loop0: detected capacity change from 0 to 512 [ 1367.173487][T29270] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.16184: inode has both inline data and extents flags [ 1367.262539][T29270] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.16184: couldn't read orphan inode 15 (err -117) [ 1367.262752][T29214] loop5: detected capacity change from 0 to 32768 [ 1367.294173][T29270] EXT4-fs (loop0): mounted filesystem 00000080-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.331301][T31078] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1367.340080][T29210] loop8: detected capacity change from 0 to 40427 [ 1367.346689][T29214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.16168 (29214) [ 1367.373598][T29270] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 1367.395518][T29214] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1367.410922][T29214] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1367.493404][T31078] usb 8-1: Using ep0 maxpacket: 8 [ 1367.510929][T31078] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.545387][ T5825] EXT4-fs (loop0): unmounting filesystem 00000080-0000-0000-0000-000000000000. [ 1367.564857][T31078] usb 8-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1367.577882][T29299] loop1: detected capacity change from 0 to 256 [ 1367.618718][T31078] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.663594][T31078] usb 8-1: config 0 descriptor?? [ 1367.676941][T29299] exfat: Deprecated parameter 'namecase' [ 1367.706971][T29214] BTRFS info (device loop5): enabling ssd optimizations [ 1367.708756][T29299] exfat: Deprecated parameter 'namecase' [ 1367.745009][T29214] BTRFS info (device loop5): turning on async discard [ 1367.781654][T29210] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1367.792125][T29214] BTRFS info (device loop5): enabling free space tree [ 1367.835407][T29299] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1367.850797][T29210] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1368.001914][ T5827] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1368.127578][T31078] wacom 0003:056A:0045.000F: unknown main item tag 0x0 [ 1368.164232][T31078] wacom 0003:056A:0045.000F: unknown main item tag 0x0 [ 1368.218939][T31078] wacom 0003:056A:0045.000F: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 1368.291085][T31078] wacom 0003:056A:0045.000F: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.7-1/input0 [ 1368.334944][T31078] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0045.000F/input/input86 [ 1368.508342][T31078] usb 8-1: USB disconnect, device number 20 [ 1368.808469][T29369] loop5: detected capacity change from 0 to 512 [ 1368.884076][T29369] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1368.943591][T29369] EXT4-fs (loop5): 1 truncate cleaned up [ 1368.965658][T29369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.213230][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.368612][T29403] loop5: detected capacity change from 0 to 1764 [ 1369.462176][T29409] loop9: detected capacity change from 0 to 256 [ 1369.482352][T29409] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1369.766653][T29423] loop7: detected capacity change from 0 to 128 [ 1370.341845][T29457] loop5: detected capacity change from 0 to 8 [ 1370.364258][T29457] squashfs image failed sanity check [ 1370.875144][T19649] Bluetooth: hci2: command tx timeout [ 1371.027296][T29495] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1371.159317][T29447] loop0: detected capacity change from 0 to 32768 [ 1371.196975][T29447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16215 (29447) [ 1371.225363][T29495] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.248419][T29495] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.266356][T29495] usb 10-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1371.279634][T29447] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1371.310761][T29447] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 1371.320245][T29495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.331835][T29447] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1371.348316][T29495] usb 10-1: config 0 descriptor?? [ 1371.509546][T29447] BTRFS info (device loop0): rebuilding free space tree [ 1371.595690][T29447] BTRFS info (device loop0): disabling free space tree [ 1371.656375][T29447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1371.701725][T29447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1371.752886][T29447] BTRFS info (device loop0): checking UUID tree [ 1371.767847][T29495] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 1371.769993][T29447] BTRFS info (device loop0): enabling ssd optimizations [ 1371.817985][T29495] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 1371.830608][T29447] BTRFS info (device loop0): turning off barriers [ 1371.847416][T29495] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 1371.854368][T29495] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 1371.886109][T29447] BTRFS info (device loop0): disabling tree log [ 1371.892365][T29447] BTRFS info (device loop0): turning on flush-on-commit [ 1371.897911][T29495] aureal 0003:0755:2626.0010: unknown main item tag 0x0 [ 1371.939878][T29495] aureal 0003:0755:2626.0010: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.9-1/input0 [ 1371.980146][T29447] BTRFS info (device loop0): enabling disk space caching [ 1372.012048][T29447] BTRFS info (device loop0): force clearing of disk cache [ 1372.032350][T29495] usb 10-1: USB disconnect, device number 6 [ 1372.081727][T29447] BTRFS info (device loop0): use zstd compression, level 3 [ 1372.122897][T29447] BTRFS info (device loop0): max_inline set to 0 [ 1372.239320][T23782] udevd[23782]: 'fido_id' [29551] terminated by signal 33 (Unknown signal 33) [ 1372.531024][ T5825] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1372.563531][T29570] loop8: detected capacity change from 0 to 2048 [ 1372.603480][T29570] EXT4-fs: Ignoring removed bh option [ 1372.680915][T29570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.826851][T29570] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1372.896205][T29570] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 1372.910863][T29589] loop5: detected capacity change from 0 to 512 [ 1372.951658][T29589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1372.962431][T29590] sch_tbf: burst 6 is lower than device ip6gre0 mtu (65485) ! [ 1372.986116][T29570] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1372.986116][T29570] [ 1373.030088][T29570] EXT4-fs (loop8): Total free blocks count 0 [ 1373.043959][T29570] EXT4-fs (loop8): Free/Dirty block details [ 1373.056587][T29589] EXT4-fs (loop5): 1 truncate cleaned up [ 1373.064127][T29589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1373.073922][T29570] EXT4-fs (loop8): free_blocks=2415919104 [ 1373.110645][T29570] EXT4-fs (loop8): dirty_blocks=32 [ 1373.177181][T29600] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1373.199922][T29570] EXT4-fs (loop8): Block reservation details [ 1373.218796][T29570] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 1373.257246][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.403864][T29545] loop1: detected capacity change from 0 to 32768 [ 1373.453697][T29545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.16235 (29545) [ 1373.526501][ T9889] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.557350][T29545] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1373.601660][T29545] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1373.738465][T29634] loop0: detected capacity change from 0 to 256 [ 1373.913905][T29545] BTRFS info (device loop1): enabling ssd optimizations [ 1373.920893][T29545] BTRFS info (device loop1): turning on async discard [ 1373.980614][T29545] BTRFS info (device loop1): enabling free space tree [ 1374.137008][T29648] loop8: detected capacity change from 0 to 4096 [ 1374.176150][T29648] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1374.280733][T29648] ntfs3(loop8): ino=19, mi_enum_attr [ 1374.313557][T29648] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1374.458846][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1374.587482][T29679] loop0: detected capacity change from 0 to 512 [ 1374.633994][T29679] EXT4-fs: inline encryption not supported [ 1374.682999][T29679] EXT4-fs: Ignoring removed mblk_io_submit option [ 1374.804722][T29679] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.16263: inode #13: comm syz.0.16263: iget: illegal inode # [ 1374.913829][T29679] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.16263: couldn't read orphan inode 13 (err -117) [ 1374.965278][T29679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.121278][T29679] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.16263: resize_inode disabled but reserved GDT blocks non-zero [ 1375.245157][T31078] IPVS: starting estimator thread 0... [ 1375.371326][T29717] IPVS: using max 23 ests per chain, 55200 per kthread [ 1375.401004][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.507050][T29724] loop9: detected capacity change from 0 to 64 [ 1375.591716][T29724] Trying to free block not in datazone [ 1375.666189][T29724] Trying to free block not in datazone [ 1375.695064][T29724] minix_free_inode: bit 5 already cleared [ 1375.949578][T29743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16280'. [ 1376.087559][T29751] loop9: detected capacity change from 0 to 512 [ 1376.133063][T29751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1376.210457][T29759] loop0: detected capacity change from 0 to 1024 [ 1376.232291][T29751] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.16282: invalid indirect mapped block 4294967295 (level 1) [ 1376.264134][T29751] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.16282: invalid indirect mapped block 4294967295 (level 1) [ 1376.320949][T29759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.321116][T29710] loop5: detected capacity change from 0 to 32768 [ 1376.341737][T29710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.16272 (29710) [ 1376.381925][T29764] loop1: detected capacity change from 0 to 4096 [ 1376.423898][T29751] EXT4-fs (loop9): 2 truncates cleaned up [ 1376.432441][T29764] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1376.454208][T29710] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1376.457763][T29751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1376.483683][T29771] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 1376.492271][T29764] ntfs3(loop1): ino=3, mi_enum_attr [ 1376.503234][T29710] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1376.545378][T29751] EXT4-fs error (device loop9): ext4_get_parent:1834: inode #11: comm syz.9.16282: bad parent inode number: 3 [ 1376.607629][T29764] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1376.626832][T29764] ntfs3(loop1): Failed to load $Extend (-22). [ 1376.634849][T29764] ntfs3(loop1): Failed to initialize $Extend. [ 1376.731354][T24563] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.787441][T29710] BTRFS info (device loop5): enabling ssd optimizations [ 1376.802980][T29710] BTRFS info (device loop5): turning on async discard [ 1376.822815][T29710] BTRFS info (device loop5): enabling free space tree [ 1377.126783][ T5827] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1377.382891][T29820] loop8: detected capacity change from 0 to 1024 [ 1377.403986][T29820] EXT4-fs: Ignoring removed bh option [ 1377.433429][T29820] EXT4-fs: inline encryption not supported [ 1377.503129][T29832] vlan0: entered promiscuous mode [ 1377.520038][T29820] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1377.530359][T29832] bridge0: entered promiscuous mode [ 1377.606859][T29820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1377.648178][T29820] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.16294: lblock 2 mapped to illegal pblock 2 (length 1) [ 1377.746755][T29850] loop0: detected capacity change from 0 to 256 [ 1377.760172][T29820] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1377.828395][T29820] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.16294: lblock 0 mapped to illegal pblock 48 (length 1) [ 1377.922698][T29850] FAT-fs (loop0): Directory bread(block 64) failed [ 1377.923445][T29820] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1377.968884][T29820] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16294: Failed to acquire dquot type 0 [ 1377.969430][T29850] FAT-fs (loop0): Directory bread(block 65) failed [ 1378.026806][T29850] FAT-fs (loop0): Directory bread(block 66) failed [ 1378.046736][T29820] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1378.078676][T29860] vlan2: entered promiscuous mode [ 1378.092457][T29850] FAT-fs (loop0): Directory bread(block 67) failed [ 1378.105062][T29820] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.16294: mark_inode_dirty error [ 1378.131333][T29850] FAT-fs (loop0): Directory bread(block 68) failed [ 1378.141703][T29860] macvtap0: entered promiscuous mode [ 1378.156582][T29820] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1378.177645][T29850] FAT-fs (loop0): Directory bread(block 69) failed [ 1378.203911][T29820] EXT4-fs (loop8): 1 orphan inode deleted [ 1378.210360][T29850] FAT-fs (loop0): Directory bread(block 70) failed [ 1378.220810][T29869] devtmpfs: Cannot disable swap on remount [ 1378.229792][T29850] FAT-fs (loop0): Directory bread(block 71) failed [ 1378.236513][T29820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.258035][ T50] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1378.282186][T29850] FAT-fs (loop0): Directory bread(block 72) failed [ 1378.314550][T29850] FAT-fs (loop0): Directory bread(block 73) failed [ 1378.372437][ T50] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1378.416554][ T50] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 1378.461155][T29820] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.16294: lblock 0 mapped to illegal pblock 48 (length 1) [ 1378.496726][T29820] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 1378.600046][T29883] loop9: detected capacity change from 0 to 16 [ 1378.619027][T29882] vivid-002: disconnect [ 1378.632005][T29881] vivid-002: reconnect [ 1378.689445][T29883] erofs (device loop9): mounted with root inode @ nid 36. [ 1378.711401][T29892] loop5: detected capacity change from 0 to 512 [ 1378.747677][ T9889] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.748652][T29892] EXT4-fs: Ignoring removed oldalloc option [ 1378.833437][T29892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.16313: Parent and EA inode have the same ino 15 [ 1378.841847][T29899] loop0: detected capacity change from 0 to 128 [ 1378.891652][T29899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1378.916539][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1378.938281][T29892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.16313: Parent and EA inode have the same ino 15 [ 1378.971291][T29899] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1378.992711][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.005781][T29892] EXT4-fs (loop5): 1 orphan inode deleted [ 1379.012283][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.037604][T29892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.052876][T29899] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1379.058337][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.072068][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.082482][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.089513][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.115483][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.125474][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.132265][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.149680][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.189854][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.218348][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.225671][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.232678][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.239692][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.246483][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.275720][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.289815][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.297884][T29899] EXT4-fs: Ignoring removed orlov option [ 1379.304501][T29899] EXT4-fs: can't change dax mount option while remounting [ 1379.312569][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.334221][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.347285][T29912] hugetlbfs: Bad value for 'nr_inodes' [ 1379.391121][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.398244][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.458379][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.465197][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.503357][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.503835][ T5825] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1379.510510][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.530874][T29918] loop5: detected capacity change from 0 to 512 [ 1379.540632][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.561495][T29920] loop8: detected capacity change from 0 to 512 [ 1379.572650][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.582431][T29920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1379.602180][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.625528][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.674933][T29920] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.16320: corrupted in-inode xattr: e_value size too large [ 1379.689949][T29918] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 1379.715722][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.726464][T29930] loop1: detected capacity change from 0 to 64 [ 1379.745558][T29918] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.16319: iget: bad i_size value: 12154757448730 [ 1379.763128][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.769967][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.800735][T29920] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.16320: couldn't read orphan inode 15 (err -117) [ 1379.826901][T29918] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.16319: couldn't read orphan inode 13 (err -117) [ 1379.877550][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.900911][T29918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.900942][T29920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.920761][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.938981][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.961959][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1379.980426][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.026413][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.060215][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.068840][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.095629][T29886] loop7: detected capacity change from 0 to 32768 [ 1380.098041][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.130697][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.148519][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.169357][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.177774][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.186584][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.194053][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.199150][ T9889] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.201358][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.218397][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.225302][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.232633][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.239613][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.246456][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.254320][T29886] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1380.263566][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.274240][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.281379][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.288402][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.295310][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.303127][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.310033][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.317085][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.322774][T29886] XFS (loop7): Ending clean mount [ 1380.324173][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.335182][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.342392][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.351090][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.358010][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.365035][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.389056][T29886] XFS (loop7): Quotacheck needed: Please wait. [ 1380.407616][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.440831][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.469057][T29886] XFS (loop7): Quotacheck: Done. [ 1380.477707][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.484971][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.523940][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.598491][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.607314][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.626851][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.649380][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.664089][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.683511][T26321] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1380.719332][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.745384][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.779458][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.801279][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.829946][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.837188][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.883751][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.945935][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.952996][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1380.995437][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.020647][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.057932][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.071593][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.107510][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.144857][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.163272][T29933] loop0: detected capacity change from 0 to 32768 [ 1381.170640][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.192459][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.214064][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.228019][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.229652][T29933] JBD2: Ignoring recovery information on journal [ 1381.236304][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.249241][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.256149][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.263221][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.270224][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.279206][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.286619][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.293605][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.302223][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.331963][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.392482][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.399362][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.441002][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.451627][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.454764][T29933] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1381.483799][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.541626][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.555469][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.591340][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.611365][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.618881][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.642711][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.649727][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.656573][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.678139][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.685130][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.704976][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.725248][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.736856][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.743720][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.778114][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.818461][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.834261][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.846418][ T5825] ocfs2: Unmounting device (7,0) on (node local) [ 1381.849588][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.864793][T30001] loop5: detected capacity change from 0 to 512 [ 1381.897928][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.904817][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.928494][T30009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16337'. [ 1381.951358][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1381.960349][T30001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.991081][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.017762][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.059901][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.066751][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.097042][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.132044][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.172194][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.175807][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.186658][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.206934][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.240558][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.273764][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.293105][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.319311][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.353569][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.360668][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.406606][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.442479][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.464487][ T30] audit: type=1326 audit(1443.472:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1382.469470][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.501330][T30035] loop0: detected capacity change from 0 to 64 [ 1382.569387][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.575880][ T30] audit: type=1326 audit(1443.493:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1382.584613][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.659046][T30039] overlayfs: upper fs needs to support d_type. [ 1382.690284][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.692545][ T30] audit: type=1326 audit(1443.493:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1382.711413][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.744530][T30039] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1382.752240][T30039] overlayfs: failed to set xattr on upper [ 1382.762632][T30039] overlayfs: ...falling back to redirect_dir=nofollow. [ 1382.771946][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.778984][T30039] overlayfs: ...falling back to index=off. [ 1382.799702][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.805707][ T30] audit: type=1326 audit(1443.493:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1382.813494][T30039] overlayfs: ...falling back to uuid=null. [ 1382.839219][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.867527][ T30] audit: type=1326 audit(1443.493:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1382.867913][T30049] loop5: detected capacity change from 0 to 512 [ 1382.897504][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.904348][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.923067][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.935349][T30049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1382.952121][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.970027][ T30] audit: type=1326 audit(1443.493:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1382.991194][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1382.999805][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.016149][T30049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1383.027607][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.039508][T30049] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1383.049751][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.072910][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.079745][ T30] audit: type=1326 audit(1443.493:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30030 comm="syz.8.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d58efc9 code=0x7ffc0000 [ 1383.096014][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.130703][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.141874][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.186887][ T5825] VFS: Lookup of 'À.' in minix loop0 would have caused loop [ 1383.195709][ T5825] VFS: Lookup of 'À.' in minix loop0 would have caused loop [ 1383.201852][T30049] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.16347: Allocating blocks 41-42 which overlap fs metadata [ 1383.204130][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.248680][T30049] EXT4-fs (loop5): Remounting filesystem read-only [ 1383.256223][T30049] Quota error (device loop5): write_blk: dquota write failed [ 1383.263887][T30049] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1383.274436][T30049] Quota error (device loop5): write_blk: dquota write failed [ 1383.282532][T30049] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1383.292804][T30049] EXT4-fs (loop5): 1 truncate cleaned up [ 1383.304502][T30049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.304731][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.382914][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.420496][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.427410][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.445621][T30069] loop1: detected capacity change from 0 to 2048 [ 1383.473345][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.498266][T30069] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1383.513065][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.545841][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.561753][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.564662][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.621778][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.628697][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.635478][T30080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1383.668641][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.702583][T30076] loop7: detected capacity change from 0 to 4096 [ 1383.704976][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.719523][T30076] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1383.747057][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.767316][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.771556][T30076] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1383.785746][T30076] ntfs3(loop7): mft corrupted [ 1383.790560][T30076] ntfs3(loop7): Failed to load $Extend (-22). [ 1383.798866][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.809403][T30076] ntfs3(loop7): Failed to initialize $Extend. [ 1383.815897][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.816783][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.878223][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.913340][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.941563][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.966143][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1383.987717][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.020353][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.052439][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.079532][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.101597][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.117300][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.131923][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.156489][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.178610][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.200392][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.223971][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.237043][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.244315][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.253444][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.259915][T10445] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1384.272536][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.300071][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.307623][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.314497][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.321796][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.329730][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.337378][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.344232][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.351807][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.359063][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.366547][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.374848][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.381755][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.388874][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.396159][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.403382][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.410362][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.416794][T10445] usb 2-1: Using ep0 maxpacket: 16 [ 1384.423824][T10445] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1384.454459][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.460604][T10445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 1384.480888][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.493176][T10445] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1384.507233][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.514109][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.544133][T10445] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 1384.564909][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.571751][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.591178][T10445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.621482][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.628342][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.640317][T10445] usb 2-1: config 0 descriptor?? [ 1384.673542][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.701000][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.734933][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.742374][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.793184][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.800341][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.827738][T24563] erofs (device loop9): bogus dirent @ nid 36 [ 1384.986401][T30130] loop8: detected capacity change from 0 to 128 [ 1385.040947][T30130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1385.068712][T30130] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1385.117579][T10445] wacom 0003:056A:0307.0011: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.1-1/input0 [ 1385.118494][T30130] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1385.239398][T30145] loop7: detected capacity change from 0 to 64 [ 1385.250745][T10445] usb 2-1: USB disconnect, device number 22 [ 1385.302515][T24079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1385.312748][T24079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1385.320814][T24079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1385.336720][T24079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1385.345305][T24079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1385.357184][T30145] MINIX-fs: deleted inode referenced: 3 [ 1385.393229][T30155] lo speed is unknown, defaulting to 1000 [ 1385.405347][T30145] MINIX-fs: deleted inode referenced: 3 [ 1385.518921][ T9889] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1385.842523][T30179] loop8: detected capacity change from 0 to 2048 [ 1385.961999][T30179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.982631][T30188] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1386.182027][T30155] lo speed is unknown, defaulting to 1000 [ 1386.275000][T17147] [ 1386.277349][T17147] ====================================================== [ 1386.284353][T17147] WARNING: possible circular locking dependency detected [ 1386.291360][T17147] syzkaller #0 Not tainted [ 1386.295766][T17147] ------------------------------------------------------ [ 1386.302772][T17147] kworker/u8:10/17147 is trying to acquire lock: [ 1386.309085][T17147] ffff88804d508a58 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1386.318855][T17147] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1386.318855][T17147] but task is already holding lock: [ 1386.326206][T17147] ffff88805e1e2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 1386.336236][T17147] [ 1386.336236][T17147] which lock already depends on the new lock. [ 1386.336236][T17147] [ 1386.346628][T17147] [ 1386.346628][T17147] the existing dependency chain (in reverse order) is: [ 1386.355632][T17147] [ 1386.355632][T17147] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1386.364056][T17147] lock_acquire+0x120/0x360 [ 1386.369066][T17147] percpu_down_read_internal+0x48/0x1c0 [ 1386.375123][T17147] ext4_writepages+0x1cc/0x350 [ 1386.380400][T17147] do_writepages+0x32e/0x550 [ 1386.385500][T17147] __writeback_single_inode+0x145/0xff0 [ 1386.391558][T17147] writeback_single_inode+0x1f9/0x6a0 [ 1386.397443][T17147] write_inode_now+0x160/0x1d0 [ 1386.402722][T17147] iput+0x830/0xc50 [ 1386.407035][T17147] ext4_xattr_block_set+0x1fce/0x2ac0 [ 1386.412910][T17147] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 1386.419309][T17147] __ext4_expand_extra_isize+0x30d/0x400 [ 1386.425455][T17147] __ext4_mark_inode_dirty+0x46c/0x700 [ 1386.431430][T17147] ext4_evict_inode+0x80d/0xee0 [ 1386.436793][T17147] evict+0x504/0x9c0 [ 1386.441233][T17147] ext4_orphan_cleanup+0xc20/0x1460 [ 1386.446950][T17147] ext4_fill_super+0x5920/0x61e0 [ 1386.452395][T17147] get_tree_bdev_flags+0x40e/0x4d0 [ 1386.458020][T17147] vfs_get_tree+0x92/0x2b0 [ 1386.462950][T17147] do_new_mount+0x302/0xa10 [ 1386.467970][T17147] __se_sys_mount+0x313/0x410 [ 1386.473151][T17147] do_syscall_64+0xfa/0xfa0 [ 1386.478168][T17147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.484571][T17147] [ 1386.484571][T17147] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1386.492129][T17147] validate_chain+0xb9b/0x2140 [ 1386.497414][T17147] __lock_acquire+0xab9/0xd20 [ 1386.502605][T17147] lock_acquire+0x120/0x360 [ 1386.507615][T17147] down_write+0x96/0x1f0 [ 1386.512360][T17147] ext4_destroy_inline_data+0x28/0xe0 [ 1386.518250][T17147] ext4_do_writepages+0x526/0x4610 [ 1386.523883][T17147] ext4_writepages+0x205/0x350 [ 1386.529155][T17147] do_writepages+0x32e/0x550 [ 1386.534257][T17147] __writeback_single_inode+0x145/0xff0 [ 1386.540317][T17147] writeback_sb_inodes+0x6c7/0x1010 [ 1386.546032][T17147] wb_writeback+0x43b/0xaf0 [ 1386.551047][T17147] wb_workfn+0x409/0xef0 [ 1386.555794][T17147] process_scheduled_works+0xae1/0x17b0 [ 1386.561844][T17147] worker_thread+0x8a0/0xda0 [ 1386.566942][T17147] kthread+0x711/0x8a0 [ 1386.571524][T17147] ret_from_fork+0x4bc/0x870 [ 1386.576623][T17147] ret_from_fork_asm+0x1a/0x30 [ 1386.581896][T17147] [ 1386.581896][T17147] other info that might help us debug this: [ 1386.581896][T17147] [ 1386.592102][T17147] Possible unsafe locking scenario: [ 1386.592102][T17147] [ 1386.599533][T17147] CPU0 CPU1 [ 1386.604875][T17147] ---- ---- [ 1386.610219][T17147] rlock(&sbi->s_writepages_rwsem); [ 1386.615492][T17147] lock(&ei->xattr_sem); [ 1386.622331][T17147] lock(&sbi->s_writepages_rwsem); [ 1386.630037][T17147] lock(&ei->xattr_sem); [ 1386.634352][T17147] [ 1386.634352][T17147] *** DEADLOCK *** [ 1386.634352][T17147] [ 1386.642471][T17147] 3 locks held by kworker/u8:10/17147: [ 1386.647907][T17147] #0: ffff888142e96948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1386.659139][T17147] #1: ffffc9000c327ba0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1386.671594][T17147] #2: ffff88805e1e2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 1386.682057][T17147] [ 1386.682057][T17147] stack backtrace: [ 1386.687929][T17147] CPU: 0 UID: 0 PID: 17147 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1386.687953][T17147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1386.687970][T17147] Workqueue: writeback wb_workfn (flush-7:8) [ 1386.688001][T17147] Call Trace: [ 1386.688011][T17147] [ 1386.688019][T17147] dump_stack_lvl+0x189/0x250 [ 1386.688052][T17147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.688081][T17147] ? __pfx__printk+0x10/0x10 [ 1386.688104][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688130][T17147] ? print_lock_name+0xde/0x100 [ 1386.688152][T17147] print_circular_bug+0x2ee/0x310 [ 1386.688182][T17147] check_noncircular+0x134/0x160 [ 1386.688213][T17147] validate_chain+0xb9b/0x2140 [ 1386.688241][T17147] ? ret_from_fork_asm+0x1a/0x30 [ 1386.688262][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688289][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688316][T17147] __lock_acquire+0xab9/0xd20 [ 1386.688341][T17147] ? ext4_destroy_inline_data+0x28/0xe0 [ 1386.688369][T17147] lock_acquire+0x120/0x360 [ 1386.688389][T17147] ? ext4_destroy_inline_data+0x28/0xe0 [ 1386.688419][T17147] ? worker_thread+0x8a0/0xda0 [ 1386.688448][T17147] down_write+0x96/0x1f0 [ 1386.688467][T17147] ? ext4_destroy_inline_data+0x28/0xe0 [ 1386.688496][T17147] ? __pfx_down_write+0x10/0x10 [ 1386.688530][T17147] ? ext4_journal_check_start+0x1cf/0x2b0 [ 1386.688556][T17147] ext4_destroy_inline_data+0x28/0xe0 [ 1386.688587][T17147] ext4_do_writepages+0x526/0x4610 [ 1386.688627][T17147] ? kasan_quarantine_put+0xdd/0x220 [ 1386.688657][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688681][T17147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1386.688710][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688736][T17147] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 1386.688761][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688785][T17147] ? kfree+0x19a/0x6d0 [ 1386.688815][T17147] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 1386.688847][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688871][T17147] ? __lock_acquire+0xab9/0xd20 [ 1386.688894][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688919][T17147] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1386.688955][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.688979][T17147] ? look_up_lock_class+0x74/0x170 [ 1386.689008][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689032][T17147] ? register_lock_class+0x51/0x320 [ 1386.689055][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689079][T17147] ? __lock_acquire+0xab9/0xd20 [ 1386.689102][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689129][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689153][T17147] ? rcu_read_lock_any_held+0xb3/0x120 [ 1386.689184][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689209][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689237][T17147] ext4_writepages+0x205/0x350 [ 1386.689265][T17147] ? __pfx_ext4_writepages+0x10/0x10 [ 1386.689299][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689326][T17147] ? __pfx_ext4_writepages+0x10/0x10 [ 1386.689353][T17147] do_writepages+0x32e/0x550 [ 1386.689383][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689407][T17147] ? reacquire_held_locks+0x127/0x1d0 [ 1386.689432][T17147] ? writeback_sb_inodes+0x384/0x1010 [ 1386.689465][T17147] __writeback_single_inode+0x145/0xff0 [ 1386.689496][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689521][T17147] ? do_raw_spin_unlock+0x122/0x240 [ 1386.689552][T17147] writeback_sb_inodes+0x6c7/0x1010 [ 1386.689599][T17147] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1386.689649][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689673][T17147] ? rcu_is_watching+0x15/0xb0 [ 1386.689697][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689726][T17147] wb_writeback+0x43b/0xaf0 [ 1386.689759][T17147] ? queue_io+0x3d1/0x590 [ 1386.689789][T17147] ? __pfx_wb_writeback+0x10/0x10 [ 1386.689822][T17147] ? _raw_spin_unlock_irq+0x23/0x50 [ 1386.689851][T17147] wb_workfn+0x409/0xef0 [ 1386.689883][T17147] ? __pfx_wb_workfn+0x10/0x10 [ 1386.689909][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689933][T17147] ? __lock_acquire+0xab9/0xd20 [ 1386.689959][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.689984][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.690011][T17147] ? _raw_spin_unlock_irq+0x23/0x50 [ 1386.690037][T17147] ? process_scheduled_works+0x9ef/0x17b0 [ 1386.690059][T17147] ? process_scheduled_works+0x9ef/0x17b0 [ 1386.690083][T17147] process_scheduled_works+0xae1/0x17b0 [ 1386.690121][T17147] ? __pfx_process_scheduled_works+0x10/0x10 [ 1386.690148][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.690179][T17147] worker_thread+0x8a0/0xda0 [ 1386.690216][T17147] kthread+0x711/0x8a0 [ 1386.690246][T17147] ? __pfx_worker_thread+0x10/0x10 [ 1386.690269][T17147] ? __pfx_kthread+0x10/0x10 [ 1386.690296][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.690322][T17147] ? _raw_spin_unlock_irq+0x23/0x50 [ 1386.690348][T17147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.690372][T17147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1386.690399][T17147] ? __pfx_kthread+0x10/0x10 [ 1386.690428][T17147] ret_from_fork+0x4bc/0x870 [ 1386.690451][T17147] ? __pfx_ret_from_fork+0x10/0x10 [ 1386.690477][T17147] ? __switch_to_asm+0x39/0x70 [ 1386.690494][T17147] ? __switch_to_asm+0x33/0x70 [ 1386.690511][T17147] ? __pfx_kthread+0x10/0x10 [ 1386.690540][T17147] ret_from_fork_asm+0x1a/0x30 [ 1386.690568][T17147] [ 1387.409498][T19649] Bluetooth: hci3: command tx timeout [ 1387.421564][T17147] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1387.457514][T17147] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1387.486081][T17147] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1387.486081][T17147] [ 1387.496396][T17147] EXT4-fs (loop8): Total free blocks count 0 [ 1387.502476][T17147] EXT4-fs (loop8): Free/Dirty block details [ 1387.508422][T17147] EXT4-fs (loop8): free_blocks=4096 [ 1387.513612][T17147] EXT4-fs (loop8): dirty_blocks=512 [ 1387.518905][T17147] EXT4-fs (loop8): Block reservation details [ 1387.524875][T17147] EXT4-fs (loop8): i_reserved_data_blocks=32 [ 1387.545705][T17147] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 1387.832638][ T62] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.976495][ T5822] bond0: (slave syz_tun): Releasing backup interface [ 1388.013192][T29982] team0: Port device syz_tun removed [ 1388.072095][ T62] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.134074][ T62] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.216773][ T62] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.303533][ T62] bridge_slave_1: left allmulticast mode [ 1388.310674][ T62] bridge_slave_1: left promiscuous mode [ 1388.316312][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.338030][ T62] bridge_slave_0: left allmulticast mode [ 1388.343676][ T62] bridge_slave_0: left promiscuous mode [ 1388.365291][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.903138][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.913605][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.923704][ T62] bond0 (unregistering): Released all slaves [ 1388.934119][ T62] bond1 (unregistering): Released all slaves [ 1388.944155][ T5838] syz0: Port: 1 Link DOWN [ 1389.452184][ T62] hsr_slave_0: left promiscuous mode [ 1389.458092][ T62] hsr_slave_1: left promiscuous mode [ 1389.465193][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.473258][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.481316][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.488950][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.500877][ T62] veth1_macvtap: left promiscuous mode [ 1389.506380][ T62] veth0_macvtap: left promiscuous mode [ 1389.513482][ T62] veth1_vlan: left promiscuous mode [ 1389.520137][ T62] veth0_vlan: left promiscuous mode [ 1389.612803][ T62] pim6reg (unregistering): left allmulticast mode [ 1389.927830][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1389.964373][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1390.019698][T17147] smc: removing ib device syz0 [ 1390.828208][ T62] IPVS: stop unused estimator thread 0... [ 1390.913535][ T62] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.980475][ T62] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.028711][ T62] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.079855][ T62] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.179363][ T62] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.231094][ T62] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.295327][ T62] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.351295][ T62] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.603376][ T62] team0: Port device netdevsim0 removed [ 1391.708169][ T62] bond0: (slave netdevsim3): Releasing backup interface [ 1391.979132][ T62] bridge_slave_1: left allmulticast mode [ 1391.986329][ T62] bridge_slave_1: left promiscuous mode [ 1391.991975][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.000876][ T62] bridge_slave_0: left allmulticast mode [ 1392.006882][ T62] bridge_slave_0: left promiscuous mode [ 1392.012859][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.021937][ T62] bridge_slave_1: left allmulticast mode [ 1392.027798][ T62] bridge_slave_1: left promiscuous mode [ 1392.033727][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.042367][ T62] bridge_slave_0: left allmulticast mode [ 1392.047990][ T62] bridge_slave_0: left promiscuous mode [ 1392.053948][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.067814][ T62] bridge_slave_1: left allmulticast mode [ 1392.073529][ T62] bridge_slave_1: left promiscuous mode [ 1392.079694][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.087881][ T62] bridge_slave_0: left allmulticast mode [ 1392.093607][ T62] bridge_slave_0: left promiscuous mode [ 1392.099358][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.266127][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.276909][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.287630][ T62] bond0 (unregistering): Released all slaves [ 1392.444282][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.454359][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.464045][ T62] bond0 (unregistering): Released all slaves [ 1392.936241][ T62] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.945680][ T62] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.954929][ T62] .` (unregistering): Released all slaves [ 1393.049617][ T62] bond0 (unregistering): Released all slaves [ 1393.060272][ T62] bond1 (unregistering): Released all slaves [ 1393.148748][ T62] bond2 (unregistering): Released all slaves [ 1393.238804][ T62] bond3 (unregistering): Released all slaves [ 1393.249618][ T62] bond4 (unregistering): Released all slaves [ 1393.259638][ T62] bond5 (unregistering): Released all slaves [ 1393.643796][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.653635][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.666204][ T62] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1393.676166][ T62] bond0 (unregistering): Released all slaves [ 1393.769626][ T62] bond1 (unregistering): Released all slaves [ 1393.779638][ T62] bond2 (unregistering): Released all slaves [ 1393.789543][ T62] bond3 (unregistering): Released all slaves [ 1393.799886][ T62] bond4 (unregistering): Released all slaves [ 1393.951474][ T62] tipc: Disabling bearer [ 1393.958196][ T62] tipc: Left network mode [ 1393.964198][ T62] tipc: Disabling bearer [ 1393.970505][ T62] tipc: Left network mode [ 1394.838757][ T62] team0: Port device 4 removed [ 1394.904942][ T62] batman_adv: batadv0: Removing interface: wlan0 [ 1395.742539][ T62] hsr_slave_0: left promiscuous mode [ 1395.748567][ T62] hsr_slave_1: left promiscuous mode [ 1395.754312][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.761926][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.777540][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.786370][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.805775][ T62] hsr_slave_0: left promiscuous mode [ 1395.811529][ T62] hsr_slave_1: left promiscuous mode [ 1395.817378][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.824916][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.832949][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.840317][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.856366][ T62] hsr_slave_0: left promiscuous mode [ 1395.862588][ T62] hsr_slave_1: left promiscuous mode [ 1395.868322][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.877770][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.888843][ T62] hsr_slave_0: left promiscuous mode [ 1395.896857][ T62] hsr_slave_1: left promiscuous mode [ 1395.907316][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.915834][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.939398][ T62] veth1_macvtap: left promiscuous mode [ 1395.944905][ T62] veth0_macvtap: left promiscuous mode [ 1395.951624][ T62] veth1_vlan: left promiscuous mode [ 1395.957125][ T62] veth0_vlan: left promiscuous mode [ 1395.963267][ T62] veth1_macvtap: left promiscuous mode [ 1395.971071][ T62] veth0_macvtap: left promiscuous mode [ 1396.180783][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1396.193037][ T62] team0 (unregistering): Port device team_slave_0 removed