last executing test programs: 2m2.827140527s ago: executing program 5 (id=5317): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 2m2.470379463s ago: executing program 5 (id=5321): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000ec0)={[{@force}, {@nls={'nls', 0x3d, 'macgreek'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@gid}, {@gid}, {@gid}]}, 0x44, 0x70f, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m1.896759604s ago: executing program 5 (id=5327): r0 = eventfd2(0x0, 0x80000) ppoll(&(0x7f0000000140)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) 2m1.435104667s ago: executing program 5 (id=5331): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m0.287782518s ago: executing program 5 (id=5340): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x10c6b, 0x7ffd) 1m59.412012659s ago: executing program 5 (id=5351): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000200)={[{}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@force}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {}, {@creator={'creator', 0x3d, "ef6a7415"}}]}, 0xff, 0x6ea, &(0x7f0000000f80)="$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") llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x20) 1m58.885701483s ago: executing program 32 (id=5351): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000200)={[{}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@force}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {}, {@creator={'creator', 0x3d, "ef6a7415"}}]}, 0xff, 0x6ea, &(0x7f0000000f80)="$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") llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x20) 1m51.748476768s ago: executing program 1 (id=5409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x4500, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 1m48.904184214s ago: executing program 1 (id=5421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1m46.687982899s ago: executing program 1 (id=5443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.337966826s ago: executing program 1 (id=5452): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x38, &(0x7f0000000080)) 1m44.147517541s ago: executing program 1 (id=5456): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1000801, &(0x7f00000000c0)=ANY=[], 0x8, 0x1d9, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 1m43.424402277s ago: executing program 1 (id=5462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x7, 0x6, @mcast2}]}, 0x44}}, 0x0) 1m27.51337888s ago: executing program 33 (id=5462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x7, 0x6, @mcast2}]}, 0x44}}, 0x0) 1m16.290920603s ago: executing program 4 (id=5645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310301000000000000000900000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 1m15.878979167s ago: executing program 4 (id=5650): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m15.448214228s ago: executing program 4 (id=5656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000220000000a0001007770610d00e1"], 0x20}}, 0x4000000) 1m15.045983026s ago: executing program 4 (id=5659): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m14.098844705s ago: executing program 4 (id=5663): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x81) 1m13.268860192s ago: executing program 4 (id=5667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) 1m12.699747785s ago: executing program 34 (id=5667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) 3.935970325s ago: executing program 8 (id=6204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x220, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0xfffffffffffffddd, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xa}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x220}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.494049246s ago: executing program 8 (id=6211): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 2.920322618s ago: executing program 0 (id=6220): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdc00, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x120}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.524328056s ago: executing program 0 (id=6223): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x81, 0xffffffff}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10, 0x7}) 2.178188032s ago: executing program 2 (id=6227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.107980142s ago: executing program 7 (id=6228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}}, 0x14}}, 0x0) 2.096512381s ago: executing program 0 (id=6229): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 1.86394803s ago: executing program 7 (id=6231): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x29d, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 1.850740823s ago: executing program 6 (id=6232): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101880, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) 1.842672309s ago: executing program 2 (id=6233): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x404, 0x1, 0x80d6}) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x4004012, r0, 0x100000000) 1.71615017s ago: executing program 3 (id=6234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.557544699s ago: executing program 6 (id=6235): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x6, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0xa10}]) 1.465803747s ago: executing program 0 (id=6236): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80, 0xfe}, 'port0\x00', 0x2, 0x140435, 0x7, 0x4, 0x1ff, 0x2f3, 0x6}) 1.450095779s ago: executing program 8 (id=6237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.439762621s ago: executing program 7 (id=6238): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x5, 0x9}, {0x1}]}) 1.354119286s ago: executing program 2 (id=6239): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.330656815s ago: executing program 3 (id=6240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xb3}) 1.19826574s ago: executing program 0 (id=6241): r0 = timerfd_create(0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.149958357s ago: executing program 7 (id=6242): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[], 0x2, 0x247, &(0x7f0000000840)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.037368675s ago: executing program 6 (id=6243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) 924.611007ms ago: executing program 3 (id=6244): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, 0x0) 901.496815ms ago: executing program 8 (id=6245): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 854.457415ms ago: executing program 2 (id=6246): r0 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1000000, 0x4) 748.014317ms ago: executing program 7 (id=6247): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 697.435006ms ago: executing program 6 (id=6248): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff0000010003"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) 609.098516ms ago: executing program 3 (id=6249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) memfd_secret(0x0) 544.840464ms ago: executing program 8 (id=6250): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 499.015786ms ago: executing program 2 (id=6251): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2b, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xbd, 0x0, @void}}}}}}}, 0x0) 401.55257ms ago: executing program 6 (id=6252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) 365.636449ms ago: executing program 7 (id=6253): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "39bb1651"}]}}, 0x0}, 0x0) 318.132104ms ago: executing program 3 (id=6254): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 154.692971ms ago: executing program 2 (id=6255): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 153.393922ms ago: executing program 0 (id=6256): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7, 0x0, 0x0, 0x7, 0x24, 0x0, 0x6, 0x6a}) 80.756482ms ago: executing program 6 (id=6257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 7.337776ms ago: executing program 8 (id=6258): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 0s ago: executing program 3 (id=6259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 604.381880][T18945] loop4: detected capacity change from 0 to 32768 [ 604.394917][T18941] F2FS-fs (loop2): Start checkpoint disabled! [ 604.401623][T18945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5502 (18945) [ 604.504833][T18494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.514322][T18945] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 604.525024][T18941] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 604.573546][T18945] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 604.576103][T18941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 604.825400][T18945] BTRFS info (device loop4): rebuilding free space tree [ 604.841486][ T5920] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 604.866262][T18945] BTRFS info (device loop4): disabling free space tree [ 604.906590][T18945] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 604.954712][T18945] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 605.002601][T18945] BTRFS info (device loop4): enabling ssd optimizations [ 605.009595][T18945] BTRFS info (device loop4): turning on async discard [ 605.027277][T18945] BTRFS info (device loop4): force clearing of disk cache [ 605.045524][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 605.053584][T18945] BTRFS info (device loop4): enabling auto defrag [ 605.077667][T18945] BTRFS info (device loop4): max_inline set to 4096 [ 605.081387][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 605.114263][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.187874][ T5920] usb 4-1: config 0 descriptor?? [ 605.251778][T18993] bond1: (slave bond_slave_1): Device is not our slave [ 605.295636][T18993] bond1: option active_slave: invalid value (bond_slave_1) [ 605.331865][T18993] bond1 (unregistering): Released all slaves [ 605.501483][ T5955] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 605.594571][ T5824] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 605.664764][ T5955] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.678379][ T5955] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 605.689598][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.780153][ T5955] usb 1-1: config 0 descriptor?? [ 605.888356][ T5920] video4linux radio48: keene_cmd_set failed (-71) [ 605.923048][ T5920] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 605.972904][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5519'. [ 605.994604][ T5920] usb 4-1: USB disconnect, device number 29 [ 606.274302][T19007] loop4: detected capacity change from 0 to 2048 [ 606.276675][ T5955] elo 0003:04E7:0009.000B: unknown main item tag 0x0 [ 606.331963][ T5955] elo 0003:04E7:0009.000B: unknown main item tag 0x0 [ 606.350251][T19007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.371183][ T5955] elo 0003:04E7:0009.000B: hidraw0: USB HID v80.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 606.552704][T18999] usb 1-1: USB disconnect, device number 30 [ 606.715029][T19012] fido_id[19012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 606.824464][T19018] loop3: detected capacity change from 0 to 256 [ 606.872475][T19017] loop4: detected capacity change from 0 to 1024 [ 606.896436][T19018] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 606.918651][T19017] EXT4-fs: Ignoring removed bh option [ 606.945220][T19017] EXT4-fs: inline encryption not supported [ 606.963670][T19020] loop2: detected capacity change from 0 to 256 [ 606.998727][T19017] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 607.066074][T19020] FAT-fs (loop2): Directory bread(block 64) failed [ 607.104982][T19017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 607.141526][T19020] FAT-fs (loop2): Directory bread(block 65) failed [ 607.148186][T19020] FAT-fs (loop2): Directory bread(block 66) failed [ 607.204550][T19017] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.5524: lblock 2 mapped to illegal pblock 2 (length 1) [ 607.237221][T19020] FAT-fs (loop2): Directory bread(block 67) failed [ 607.281727][T19020] FAT-fs (loop2): Directory bread(block 68) failed [ 607.289499][T19017] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 607.308852][T19017] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.5524: lblock 0 mapped to illegal pblock 48 (length 1) [ 607.323422][T19020] FAT-fs (loop2): Directory bread(block 69) failed [ 607.330247][T19020] FAT-fs (loop2): Directory bread(block 70) failed [ 607.361155][T19020] FAT-fs (loop2): Directory bread(block 71) failed [ 607.381639][T19017] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 607.388810][T19020] FAT-fs (loop2): Directory bread(block 72) failed [ 607.390451][T19017] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.5524: Failed to acquire dquot type 0 [ 607.439596][T19020] FAT-fs (loop2): Directory bread(block 73) failed [ 607.490625][T19011] loop6: detected capacity change from 0 to 32768 [ 607.506216][T19017] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 607.548343][T19017] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.5524: mark_inode_dirty error [ 607.573308][T19011] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5521 (19011) [ 607.622323][T19017] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 607.661540][T19017] EXT4-fs (loop4): 1 orphan inode deleted [ 607.684678][ T1130] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 607.685408][T19011] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 607.717310][T19017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.747287][ T1130] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 607.773778][ T1130] EXT4-fs error (device loop4): ext4_release_dquot:7020: comm kworker/u8:7: Failed to release dquot type 0 [ 607.801546][T19011] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm [ 607.961904][T19017] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.5524: lblock 0 mapped to illegal pblock 48 (length 1) [ 608.032243][T19017] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 608.143243][T19011] BTRFS info (device loop6): enabling ssd optimizations [ 608.161629][T19044] netlink: 'syz.0.5532': attribute type 10 has an invalid length. [ 608.169476][T19044] batadv0: left promiscuous mode [ 608.182472][T19011] BTRFS info (device loop6): turning on async discard [ 608.198811][T19011] BTRFS info (device loop6): enabling free space tree [ 608.209860][T19047] netlink: 'syz.0.5532': attribute type 10 has an invalid length. [ 608.245287][T19044] batadv0: entered allmulticast mode [ 608.269794][T19047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5532'. [ 608.313762][T19044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.359520][T19044] batadv0: entered promiscuous mode [ 608.375277][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.384423][ T31] audit: type=1800 audit(2000000192.939:267): pid=19011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5521" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 608.394194][T19044] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 608.567993][T19047] bond0: (slave batadv0): Releasing backup interface [ 608.646036][T18494] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 608.657171][T19047] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 609.468232][T19071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.768528][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.231913][T19090] CIFS: Unable to determine destination address [ 610.323942][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.762556][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.983419][ T6080] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 611.054153][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.183321][ T6080] usb 3-1: Using ep0 maxpacket: 16 [ 611.231422][ T6080] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.239527][ T6080] usb 3-1: config 0 has no interface number 0 [ 611.277636][ T6080] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.339430][ T6080] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.393455][ T6080] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 611.441994][ T6080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.475914][ T6080] usb 3-1: config 0 descriptor?? [ 611.631051][ T50] bridge_slave_1: left allmulticast mode [ 611.650570][ T50] bridge_slave_1: left promiscuous mode [ 611.660923][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.702165][ T50] bridge_slave_0: left allmulticast mode [ 611.707953][ T50] bridge_slave_0: left promiscuous mode [ 611.722455][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.148827][ T6080] uclogic 0003:28BD:0071.000C: failed retrieving string descriptor #100: -71 [ 612.178142][T19129] loop3: detected capacity change from 0 to 1024 [ 612.189290][ T6080] uclogic 0003:28BD:0071.000C: failed retrieving pen parameters: -71 [ 612.206614][ T6080] uclogic 0003:28BD:0071.000C: pen probing failed: -71 [ 612.215761][ T6080] uclogic 0003:28BD:0071.000C: failed probing parameters: -71 [ 612.227431][ T6080] uclogic 0003:28BD:0071.000C: probe with driver uclogic failed with error -71 [ 612.240175][T19129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.296917][ T6080] usb 3-1: USB disconnect, device number 24 [ 612.363487][ T5899] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 612.403450][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.411598][ T113] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 612.423254][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.434490][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 612.446362][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 612.456956][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.503876][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.586318][ T5899] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 612.601431][ T113] usb 5-1: Using ep0 maxpacket: 16 [ 612.608007][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.616410][ T5899] usb 1-1: Product: syz [ 612.620653][ T5899] usb 1-1: Manufacturer: syz [ 612.633311][ T5899] usb 1-1: SerialNumber: syz [ 612.635125][ T113] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 612.651574][ T50] team0: Port device geneve0 removed [ 612.664967][ T113] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 612.688923][ T113] usb 5-1: config 0 interface 0 has no altsetting 0 [ 612.691172][ T5899] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 612.707331][ T113] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 612.735682][ T5955] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 612.735765][ T113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.755113][ T113] usb 5-1: Product: syz [ 612.759374][ T113] usb 5-1: Manufacturer: syz [ 612.771906][ T113] usb 5-1: SerialNumber: syz [ 612.784980][ T113] usb 5-1: config 0 descriptor?? [ 613.031718][ T113] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 613.360145][ T113] usb 5-1: USB disconnect, device number 31 [ 613.360243][ C1] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 613.423535][ T974] usb 1-1: USB disconnect, device number 31 [ 613.507952][T19149] loop2: detected capacity change from 0 to 4096 [ 613.515264][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.528400][T19149] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 613.537865][ T50] bond_slave_0: left promiscuous mode [ 613.565620][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.580477][ T50] bond_slave_1: left promiscuous mode [ 613.587543][T19149] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 613.591415][ T50] bond0 (unregistering): Released all slaves [ 613.599253][T19149] ntfs3(loop2): ino=1a, mi_enum_attr [ 613.613272][T19149] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 613.643613][ T50] bond1 (unregistering): Released all slaves [ 613.683491][ T50] bond2 (unregistering): Released all slaves [ 613.729838][ T50] bond3 (unregistering): Released all slaves [ 613.847017][ T5955] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 613.876981][ T5955] ath9k_htc: Failed to initialize the device [ 613.881940][T19152] loop2: detected capacity change from 0 to 256 [ 613.903117][ T974] usb 1-1: ath9k_htc: USB layer deinitialized [ 613.948223][T19152] FAT-fs (loop2): Directory bread(block 1285) failed [ 614.057791][T19152] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 614.348880][T19162] loop4: detected capacity change from 0 to 128 [ 614.422601][T19162] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 614.563187][ T5144] Bluetooth: hci4: command tx timeout [ 614.602919][T19162] hpfs: filesystem error: improperly stopped [ 614.608989][T19162] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 614.681766][T19162] hpfs: You really don't want any checks? You are crazy... [ 614.694239][T19162] hpfs: hpfs_map_sector(): read error [ 614.721961][T19162] hpfs: code page support is disabled [ 614.727471][T19162] hpfs: hpfs_map_4sectors(): unaligned read [ 614.768767][T19172] tipc: Enabling of bearer rejected, failed to enable media [ 614.779712][T19162] hpfs: hpfs_map_4sectors(): unaligned read [ 614.833418][T19162] hpfs: filesystem error: unable to find root dir [ 614.899194][T19180] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5578'. [ 614.925438][T19162] hpfs: hpfs_map_4sectors(): unaligned read [ 615.021246][T19137] chnl_net:caif_netlink_parms(): no params data found [ 615.471603][T19193] loop4: detected capacity change from 0 to 2048 [ 615.612945][T19188] loop0: detected capacity change from 0 to 4096 [ 615.616115][T19205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.635844][T19207] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.653842][ T50] IPVS: stopping backup sync thread 17874 ... [ 615.668312][T19188] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 615.807118][T19188] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 615.856507][T19188] ntfs3(loop0): ino=1a, mi_enum_attr [ 615.908217][T19188] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 615.941207][T19207] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 615.974356][T19137] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.999954][T19207] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 616.014232][T19137] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.054077][T19137] bridge_slave_0: entered allmulticast mode [ 616.086957][T19207] Remounting filesystem read-only [ 616.094494][T19137] bridge_slave_0: entered promiscuous mode [ 616.184261][T19217] syz.2.5591 (19217) used obsolete PPPIOCDETACH ioctl [ 616.316922][T19137] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.351548][T19137] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.400164][T19137] bridge_slave_1: entered allmulticast mode [ 616.419177][T19137] bridge_slave_1: entered promiscuous mode [ 616.613395][T19227] loop4: detected capacity change from 0 to 512 [ 616.642306][ T5144] Bluetooth: hci4: command tx timeout [ 616.672526][T19229] loop6: detected capacity change from 0 to 256 [ 616.705034][T19227] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.4.5595: corrupted xattr block 95: invalid header [ 616.733516][T19229] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 616.749443][T19227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.5595: bg 0: block 7: invalid block bitmap [ 616.788761][T19227] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 616.800178][T19227] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #11: comm syz.4.5595: corrupted xattr block 95: invalid header [ 616.844349][T19227] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 616.876245][T19227] EXT4-fs (loop4): 1 orphan inode deleted [ 616.891911][T19233] loop0: detected capacity change from 0 to 256 [ 616.910018][T19227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.938914][T19233] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 617.021506][T18999] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 617.070082][T19137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.169956][T19137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.191927][T18999] usb 3-1: Using ep0 maxpacket: 16 [ 617.213049][T18999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.289020][T18999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.315494][T18999] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.317680][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.395903][T18999] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.461661][T18999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.502871][T18999] usb 3-1: config 0 descriptor?? [ 617.766298][T19137] team0: Port device team_slave_0 added [ 617.852682][T19137] team0: Port device team_slave_1 added [ 617.973077][T18999] microsoft 0003:045E:07DA.000D: unknown main item tag 0x2 [ 617.981684][ T50] hsr_slave_0: left promiscuous mode [ 617.998890][T18999] microsoft 0003:045E:07DA.000D: item 0 2 0 11 parsing failed [ 618.013502][ T50] hsr_slave_1: left promiscuous mode [ 618.028625][T18999] microsoft 0003:045E:07DA.000D: parse failed [ 618.049581][T18999] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 618.061570][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.083433][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.131676][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.218970][ T50] veth1_macvtap: left promiscuous mode [ 618.233018][ T50] veth0_macvtap: left promiscuous mode [ 618.245974][ T50] veth1_vlan: left promiscuous mode [ 618.253066][T18999] usb 3-1: USB disconnect, device number 25 [ 618.253566][ T50] veth0_vlan: left promiscuous mode [ 618.327760][T19269] loop6: detected capacity change from 0 to 2048 [ 618.345899][T19269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051 [ 618.392247][T19269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.634687][T19276] loop4: detected capacity change from 0 to 4096 [ 618.668069][T19276] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 618.721521][ T5144] Bluetooth: hci4: command tx timeout [ 618.798142][T19276] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 618.847613][T19280] loop6: detected capacity change from 0 to 256 [ 618.857004][T19276] ntfs3(loop4): ino=1a, mi_enum_attr [ 618.875217][T19276] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 619.553114][ T5955] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 619.560837][T18999] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 619.597048][T19293] loop4: detected capacity change from 0 to 64 [ 619.726114][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.742446][T18999] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 619.760862][T18999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.779471][ T5955] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 619.798824][ T5955] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 619.814528][T18999] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 619.825762][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.833943][T18999] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 619.834508][ T50] team0 (unregistering): Port device team_slave_1 removed [ 619.844880][T18999] usb 7-1: Manufacturer: syz [ 619.856150][ T5955] usb 3-1: config 0 descriptor?? [ 619.872051][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 619.881116][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 619.901290][T18999] usb 7-1: config 0 descriptor?? [ 619.929567][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 619.949386][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 619.966872][ T5955] usb 3-1: media controller created [ 619.979056][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.033446][ T50] team0 (unregistering): Port device team_slave_0 removed [ 620.040180][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 620.050213][T18999] rc_core: IR keymap rc-hauppauge not found [ 620.068733][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 620.077478][T18999] Registered IR keymap rc-empty [ 620.086638][T18999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 620.089158][T19286] dvb-usb: bulk message failed: -22 (2/0) [ 620.107368][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 620.138611][T18999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input38 [ 620.173459][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 620.188500][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 620.215088][ T5955] usb 3-1: USB disconnect, device number 26 [ 620.307320][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 620.652694][ T5955] usb 7-1: USB disconnect, device number 2 [ 620.802525][ T5144] Bluetooth: hci4: command tx timeout [ 621.096895][T19272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5611'. [ 621.332114][T19137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.358737][T19137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.368878][T19314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5627'. [ 621.455580][T19137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.514604][T19137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.537980][T19137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.614381][T19137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.917528][T19325] loop3: detected capacity change from 0 to 512 [ 621.943496][T19325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 622.019144][T19325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.078704][T19325] ext4 filesystem being mounted at /926/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.124433][T19137] hsr_slave_0: entered promiscuous mode [ 622.167019][T19137] hsr_slave_1: entered promiscuous mode [ 622.222395][T19137] debugfs: 'hsr0' already exists in 'hsr' [ 622.245759][T19137] Cannot create hsr debugfs directory [ 622.301907][T19325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.378570][T19325] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 622.418732][T19325] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 622.478152][T19337] loop2: detected capacity change from 0 to 8192 [ 622.712314][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.604859][T19137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 623.633350][T19375] loop2: detected capacity change from 0 to 256 [ 623.676762][T19376] autofs: Bad value for 'fd' [ 623.716337][T19375] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 623.752508][T19137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 623.812028][T19137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 623.846234][T19137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.116346][T19394] loop6: detected capacity change from 0 to 1024 [ 624.226186][T19394] hfsplus: bad catalog entry type [ 624.270701][T19393] loop2: detected capacity change from 0 to 4096 [ 624.402051][T19137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.443879][ T6032] hfsplus: b-tree write err: -5, ino 4 [ 624.517231][T19137] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.591973][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.599191][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.710693][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.717892][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.819173][T19406] loop4: detected capacity change from 0 to 2048 [ 624.889669][T19406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.003373][T18999] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 625.004646][T19406] overlayfs: upper fs needs to support d_type. [ 625.083325][T19406] overlayfs: cleanup of 'work/#3' failed (-2) [ 625.112841][T19406] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 625.122361][T19416] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5661'. [ 625.133669][T19406] overlayfs: failed to set xattr on upper [ 625.155889][T19406] overlayfs: ...falling back to redirect_dir=nofollow. [ 625.181532][T18999] usb 7-1: Using ep0 maxpacket: 16 [ 625.185247][T19406] overlayfs: ...falling back to index=off. [ 625.186826][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5661'. [ 625.216119][T19406] overlayfs: ...falling back to uuid=null. [ 625.223164][T18999] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 625.255832][T18999] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 625.290836][T18999] usb 7-1: config 0 interface 0 has no altsetting 0 [ 625.314102][T18999] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 625.331417][T18999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.373630][T18999] usb 7-1: Product: syz [ 625.377845][T18999] usb 7-1: Manufacturer: syz [ 625.394931][T18999] usb 7-1: SerialNumber: syz [ 625.435552][T18999] usb 7-1: config 0 descriptor?? [ 625.551567][ T5824] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 625.581759][ T5824] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 625.719831][T18999] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input40 [ 625.780654][T19428] loop2: detected capacity change from 0 to 64 [ 625.953242][T19428] syz.2.5664: attempt to access beyond end of device [ 625.953242][T19428] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 625.991698][T19404] loop0: detected capacity change from 0 to 32768 [ 626.031736][T19428] Buffer I/O error on dev loop2, logical block 512, async page read [ 626.045893][T19404] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5657 (19404) [ 626.069432][ T113] usb 7-1: USB disconnect, device number 3 [ 626.080446][T19428] syz.2.5664: attempt to access beyond end of device [ 626.080446][T19428] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 626.148179][T19428] Buffer I/O error on dev loop2, logical block 56576, async page read [ 626.176223][T19404] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 626.218782][T19404] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 626.480436][T19404] BTRFS info (device loop0): rebuilding free space tree [ 626.565677][ T3770] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.575936][T19404] BTRFS info (device loop0): disabling free space tree [ 626.612091][T19404] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 626.661450][T19404] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 626.689504][T19137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.754344][T19404] BTRFS info (device loop0): enabling ssd optimizations [ 626.782255][T19404] BTRFS info (device loop0): turning on async discard [ 626.789127][T19404] BTRFS info (device loop0): force clearing of disk cache [ 626.824822][T19404] BTRFS info (device loop0): enabling auto defrag [ 626.841412][T19404] BTRFS info (device loop0): max_inline set to 4096 [ 626.952684][ T3770] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.443714][ T5825] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 627.467517][ T3770] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.546104][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 627.560627][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 627.569967][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 627.579406][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 627.589235][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 627.651498][ T5920] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 627.782178][T19468] loop6: detected capacity change from 0 to 4096 [ 627.847258][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 627.865096][ T3770] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.878856][ T5920] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 627.919423][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.977783][ T5920] usb 4-1: config 0 descriptor?? [ 628.286024][T19137] veth0_vlan: entered promiscuous mode [ 628.477265][ T5920] elo 0003:04E7:0009.000E: unknown main item tag 0x0 [ 628.524898][T19137] veth1_vlan: entered promiscuous mode [ 628.530769][ T5920] elo 0003:04E7:0009.000E: unknown main item tag 0x0 [ 628.606334][ T5920] elo 0003:04E7:0009.000E: hidraw0: USB HID v80.00 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 628.742238][ T6080] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 628.795197][ T5899] usb 4-1: USB disconnect, device number 30 [ 628.912599][ T3770] veth0_to_bridge: left allmulticast mode [ 628.942567][ T3770] veth0_to_bridge: left promiscuous mode [ 628.948481][ T3770] bridge0: port 1(veth0_to_bridge) entered disabled state [ 628.971466][ T6080] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 628.985162][T19494] fido_id[19494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 629.002735][ T6080] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.038640][ T6080] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 629.071438][ T6080] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 629.079493][ T6080] usb 3-1: Manufacturer: syz [ 629.104708][ T6080] usb 3-1: config 0 descriptor?? [ 629.311744][ T6080] rc_core: IR keymap rc-hauppauge not found [ 629.317685][ T6080] Registered IR keymap rc-empty [ 629.344982][ T6080] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 629.406036][ T6080] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 629.504337][T19486] loop0: detected capacity change from 0 to 32768 [ 629.518155][T19486] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5687 (19486) [ 629.566737][T19486] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 629.614123][T19486] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm [ 629.693020][ T5144] Bluetooth: hci0: command tx timeout [ 629.889976][T19486] BTRFS info (device loop0): enabling ssd optimizations [ 629.915902][T19486] BTRFS info (device loop0): turning on async discard [ 629.925326][ T113] usb 3-1: USB disconnect, device number 27 [ 629.951422][T19486] BTRFS info (device loop0): enabling free space tree [ 630.069583][ T31] audit: type=1800 audit(2000000214.629:268): pid=19486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5687" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 630.174674][T19528] loop3: detected capacity change from 0 to 4096 [ 630.253837][ T5825] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 630.681577][ T6080] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 630.854467][ T6080] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.883147][ T6080] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 630.916089][ T6080] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 630.945789][ T6080] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.002398][ T6080] usb 7-1: config 0 descriptor?? [ 631.042469][ T6080] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 631.049915][ T6080] dvb-usb: bulk message failed: -22 (3/0) [ 631.095886][ T6080] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 631.116133][ T6080] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 631.159287][ T6080] usb 7-1: media controller created [ 631.187549][ T6080] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 631.215912][T19532] dvb-usb: bulk message failed: -22 (2/0) [ 631.269093][ T3770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.279438][ T6080] dvb-usb: bulk message failed: -22 (6/0) [ 631.298936][ T6080] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 631.314008][ T3770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.336018][ T6080] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input42 [ 631.354587][ T3770] bond0 (unregistering): Released all slaves [ 631.391279][ T6080] dvb-usb: schedule remote query interval to 150 msecs. [ 631.398313][ T6080] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 631.491704][ T6080] usb 7-1: USB disconnect, device number 4 [ 631.592829][ T6080] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 631.761576][ T5144] Bluetooth: hci0: command tx timeout [ 631.823946][ T3770] IPVS: stopping backup sync thread 17931 ... [ 631.840286][T19137] veth0_macvtap: entered promiscuous mode [ 631.852046][T19550] autofs: Bad value for 'fd' [ 631.892913][T19137] veth1_macvtap: entered promiscuous mode [ 632.157639][T19539] loop3: detected capacity change from 0 to 32768 [ 632.212336][T19472] chnl_net:caif_netlink_parms(): no params data found [ 632.279630][T19137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.291918][T19539] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 632.291918][T19539] [ 632.331638][T19539] ERROR: (device loop3): remounting filesystem as read-only [ 632.574661][T19137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.073662][ T1008] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.191718][T19583] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 633.271652][ T1008] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.330286][ T1008] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.393989][ T1008] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.535359][ T3770] hsr_slave_0: left promiscuous mode [ 633.599652][ T3770] hsr_slave_1: left promiscuous mode [ 633.616415][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.646172][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.675723][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.690177][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.706912][T19561] loop2: detected capacity change from 0 to 32768 [ 633.763476][T19561] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5698 (19561) [ 633.811896][ T3770] veth1_macvtap: left promiscuous mode [ 633.835689][ T3770] veth0_macvtap: left promiscuous mode [ 633.841871][ T5144] Bluetooth: hci0: command tx timeout [ 633.850046][T19561] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 633.870892][ T3770] veth1_vlan: left promiscuous mode [ 633.881605][T19561] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 633.901569][ T3770] veth0_vlan: left promiscuous mode [ 633.941923][ T5955] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 634.108847][T19561] BTRFS info (device loop2): enabling ssd optimizations [ 634.119737][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.125851][T19561] BTRFS info (device loop2): turning on async discard [ 634.136722][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 634.161710][ T5955] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 634.181024][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.187732][T19561] BTRFS info (device loop2): enabling free space tree [ 634.202643][ T5955] usb 4-1: config 0 descriptor?? [ 634.233999][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 634.240646][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 634.285949][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 634.320483][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 634.337421][ T5955] usb 4-1: media controller created [ 634.350527][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.361688][ T31] audit: type=1800 audit(2000000218.919:269): pid=19561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5698" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 634.425776][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 634.426084][T19614] Invalid logical block size (2310) [ 634.453660][T19594] dvb-usb: bulk message failed: -22 (2/0) [ 634.460245][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 634.504882][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 634.525471][T19586] loop6: detected capacity change from 0 to 40427 [ 634.542660][T19586] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 634.564028][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 634.570988][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 634.581704][ T5829] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 634.583168][T19586] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 634.646356][ T5955] usb 4-1: USB disconnect, device number 31 [ 634.803024][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 634.947467][T19586] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 634.998135][T19586] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 635.015668][T19586] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 635.270623][T18494] syz-executor: attempt to access beyond end of device [ 635.270623][T18494] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 635.331919][T18494] CPU: 1 UID: 0 PID: 18494 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 635.331980][T18494] Tainted: [L]=SOFTLOCKUP [ 635.331994][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.332017][T18494] Call Trace: [ 635.332029][T18494] [ 635.332044][T18494] dump_stack_lvl+0x16c/0x1f0 [ 635.332108][T18494] f2fs_handle_critical_error+0x624/0x9f0 [ 635.332153][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.332199][T18494] ? f2fs_build_fault_attr+0x53/0x1f0 [ 635.332275][T18494] f2fs_write_end_io+0x958/0xcf0 [ 635.332325][T18494] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 635.332377][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.332432][T18494] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 635.332476][T18494] bio_endio+0x751/0x8a0 [ 635.332537][T18494] submit_bio_noacct+0x306/0x1f40 [ 635.332592][T18494] __submit_merged_bio+0x33c/0x710 [ 635.332643][T18494] __submit_merged_write_cond+0x315/0x3f0 [ 635.332701][T18494] f2fs_write_cache_pages+0x2075/0x2570 [ 635.332781][T18494] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 635.332841][T18494] ? __lock_acquire+0x436/0x2890 [ 635.332898][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.332944][T18494] ? __lock_acquire+0x436/0x2890 [ 635.333026][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.333116][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.333163][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.333222][T18494] f2fs_write_data_pages+0x5ac/0x1080 [ 635.333286][T18494] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 635.333356][T18494] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 635.333413][T18494] do_writepages+0x27a/0x600 [ 635.333461][T18494] ? __pfx_do_writepages+0x10/0x10 [ 635.333502][T18494] ? do_raw_spin_unlock+0x172/0x230 [ 635.333557][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.333602][T18494] ? _raw_spin_unlock+0x28/0x50 [ 635.333660][T18494] filemap_writeback+0x225/0x2d0 [ 635.333707][T18494] ? __pfx_filemap_writeback+0x10/0x10 [ 635.333804][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.333849][T18494] ? find_held_lock+0x2b/0x80 [ 635.333908][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.333965][T18494] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 635.334044][T18494] block_operations+0x2b0/0xff0 [ 635.334097][T18494] ? bpf_ksym_find+0x124/0x1c0 [ 635.334150][T18494] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 635.334200][T18494] ? __pfx_block_operations+0x10/0x10 [ 635.334260][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.334307][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.334404][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.334453][T18494] ? ktime_get+0x200/0x310 [ 635.334495][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.334540][T18494] ? lockdep_hardirqs_on+0x7c/0x110 [ 635.334599][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.334645][T18494] ? rcu_is_watching+0x12/0xc0 [ 635.334686][T18494] f2fs_write_checkpoint+0x326/0x52f0 [ 635.334772][T18494] kill_f2fs_super+0x3d0/0x480 [ 635.334828][T18494] ? __pfx_kill_f2fs_super+0x10/0x10 [ 635.334902][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.334962][T18494] deactivate_locked_super+0xc1/0x1a0 [ 635.335004][T18494] deactivate_super+0xde/0x100 [ 635.335045][T18494] cleanup_mnt+0x225/0x450 [ 635.335093][T18494] task_work_run+0x150/0x240 [ 635.335145][T18494] ? __pfx_task_work_run+0x10/0x10 [ 635.335209][T18494] exit_to_user_mode_loop+0xfb/0x540 [ 635.335269][T18494] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.335321][T18494] do_syscall_64+0x4ee/0xf80 [ 635.335384][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.335423][T18494] RIP: 0033:0x7f849bb90a77 [ 635.335452][T18494] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 635.335489][T18494] RSP: 002b:00007ffd31147dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 635.335525][T18494] RAX: 0000000000000000 RBX: 00007f849bc13d7d RCX: 00007f849bb90a77 [ 635.335551][T18494] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd31147e80 [ 635.335575][T18494] RBP: 00007ffd31147e80 R08: 0000000000000000 R09: 0000000000000000 [ 635.335599][T18494] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd31148f10 [ 635.335624][T18494] R13: 00007f849bc13d7d R14: 000000000009b10a R15: 00007ffd31148f50 [ 635.335676][T18494] [ 635.766299][T18494] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 635.790319][T19622] loop0: detected capacity change from 0 to 4096 [ 635.799786][T19622] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 635.922952][ T5144] Bluetooth: hci0: command tx timeout [ 636.204220][ T5955] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 636.391380][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 636.403920][ T5955] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 636.417358][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.426068][ T5955] usb 4-1: Product: syz [ 636.430241][ T5955] usb 4-1: Manufacturer: syz [ 636.504802][ T5955] usb 4-1: SerialNumber: syz [ 636.542457][ T5955] usb 4-1: config 0 descriptor?? [ 636.554947][ T5955] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 636.596879][ T5955] usb 4-1: Detected FT-X [ 636.787155][ T3770] team0 (unregistering): Port device team_slave_1 removed [ 636.924980][ T3770] team0 (unregistering): Port device team_slave_0 removed [ 636.970507][ T5955] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 636.993617][ T5955] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 637.014790][ T5955] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 637.045868][ T5955] usb 4-1: USB disconnect, device number 32 [ 637.062696][ T5955] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 637.078847][ T5955] ftdi_sio 4-1:0.0: device disconnected [ 637.663151][T19472] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.670441][T19472] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.714777][T19472] bridge_slave_0: entered allmulticast mode [ 637.760736][T19472] bridge_slave_0: entered promiscuous mode [ 637.784435][T19651] loop2: detected capacity change from 0 to 256 [ 637.790662][T19472] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.812549][T19472] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.813550][T19651] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 637.819795][T19472] bridge_slave_1: entered allmulticast mode [ 637.883490][T19472] bridge_slave_1: entered promiscuous mode [ 638.000587][T19655] loop3: detected capacity change from 0 to 4096 [ 638.001673][ T5948] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 638.153265][T19655] ntfs3(loop3): ino=b, Correct links count -> 1. [ 638.179359][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.179891][T19655] ntfs3(loop3): ino=18, mi_enum_attr [ 638.214866][ T5948] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 638.256136][ T5948] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 638.289692][T19472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.329269][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.338254][T19658] loop2: detected capacity change from 0 to 256 [ 638.367597][ T5948] usb 1-1: config 0 descriptor?? [ 638.404375][T19472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.418852][T19658] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 638.437400][ T5948] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 638.464012][ T5948] dvb-usb: bulk message failed: -22 (3/0) [ 638.490584][T19655] ntfs3(loop3): ino=5, "/" indx_read [ 638.491564][ T5948] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 638.522258][T19655] ntfs3(loop3): ino=5, "/" ntfs_readdir [ 638.561867][ T5948] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 638.564973][ T31] audit: type=1800 audit(2000000223.099:270): pid=19658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5730" name="bus" dev="loop2" ino=1048746 res=0 errno=0 [ 638.590958][ T5948] usb 1-1: media controller created [ 638.598323][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 638.623179][ T5948] dvb-usb: bulk message failed: -22 (6/0) [ 638.629666][ T5948] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 638.679883][T19650] dvb-usb: bulk message failed: -22 (2/0) [ 638.696318][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 638.746416][ T5948] dvb-usb: schedule remote query interval to 150 msecs. [ 638.753749][ T5948] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 638.783419][ T5948] usb 1-1: USB disconnect, device number 32 [ 638.977657][T19472] team0: Port device team_slave_0 added [ 638.998080][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.027871][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.050075][T19472] team0: Port device team_slave_1 added [ 639.054016][ T5948] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 639.173269][T19668] loop3: detected capacity change from 0 to 64 [ 639.370852][T19472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.392556][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.435319][T19653] loop6: detected capacity change from 0 to 32768 [ 639.461562][T19472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.536155][T19653] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 639.544791][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.555990][T19472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.627473][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.654131][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.663298][T19472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.729270][T19653] XFS (loop6): Ending clean mount [ 639.750482][T19681] loop3: detected capacity change from 0 to 2048 [ 639.862044][T19681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.974724][T18494] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 640.116945][T19472] hsr_slave_0: entered promiscuous mode [ 640.166631][T19472] hsr_slave_1: entered promiscuous mode [ 640.511533][T19700] netlink: 'syz.3.5739': attribute type 11 has an invalid length. [ 641.358369][T19472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 641.418531][T19472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 641.482413][T19472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 641.524916][T19472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 641.553323][T19690] loop0: detected capacity change from 0 to 32768 [ 641.649064][T19690] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root [ 641.649064][T19690] [ 641.706924][T19690] ERROR: (device loop0): remounting filesystem as read-only [ 641.867384][T19697] loop6: detected capacity change from 0 to 32768 [ 641.971765][T19697] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5737 (19697) [ 642.017221][T19732] loop2: detected capacity change from 0 to 2048 [ 642.048529][T19697] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 642.065811][T19472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.120980][T19732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.138206][T19697] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm [ 642.154732][T19472] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.261856][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.269086][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.388686][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.395949][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.489420][T19697] BTRFS info (device loop6): enabling ssd optimizations [ 642.581600][T19697] BTRFS info (device loop6): turning on async discard [ 642.588451][T19697] BTRFS info (device loop6): enabling free space tree [ 643.173926][T18494] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 643.490844][T19772] loop2: detected capacity change from 0 to 256 [ 643.558932][T19772] exfat: Deprecated parameter 'namecase' [ 643.604862][T19772] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 643.662269][T19772] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 643.996953][T19780] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5759'. [ 644.028275][T19472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.031667][T19782] loop6: detected capacity change from 0 to 64 [ 644.104441][ T31] audit: type=1326 audit(2000000228.669:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.3.5760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1acb8f749 code=0x0 [ 644.267609][T19782] hfs: keylen 1794 too large [ 644.294368][T19782] hfs: keylen 1794 too large [ 644.952281][T19801] loop7: detected capacity change from 0 to 4096 [ 645.001690][T19801] EXT4-fs: Ignoring removed mblk_io_submit option [ 645.065396][ T5920] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 645.241381][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 645.281682][ T5920] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 645.281732][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.281770][ T5920] usb 3-1: Product: syz [ 645.281798][ T5920] usb 3-1: Manufacturer: syz [ 645.281827][ T5920] usb 3-1: SerialNumber: syz [ 645.287335][ T5920] usb 3-1: config 0 descriptor?? [ 645.319254][ T5920] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 645.320608][ T5920] usb 3-1: Detected FT-X [ 645.437012][T19812] loop7: detected capacity change from 0 to 512 [ 645.460321][T19472] veth0_vlan: entered promiscuous mode [ 645.513627][T19472] veth1_vlan: entered promiscuous mode [ 645.653272][T19472] veth0_macvtap: entered promiscuous mode [ 645.664867][T19472] veth1_macvtap: entered promiscuous mode [ 645.675868][T19778] loop0: detected capacity change from 0 to 32768 [ 645.733203][ T5920] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 645.733871][ T5920] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 645.735751][ T5920] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 645.759147][ T5920] usb 3-1: USB disconnect, device number 28 [ 645.763495][T19472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.770642][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 645.780731][ T5920] ftdi_sio 3-1:0.0: device disconnected [ 645.825557][T19472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.865117][T19816] add_index: next_index = 0. Resetting! [ 645.865177][T19816] find_entry called with index >= next_index [ 645.865194][T19816] find_entry called with index >= next_index [ 645.865209][T19816] find_entry called with index >= next_index [ 645.865224][T19816] find_entry called with index >= next_index [ 645.883462][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.883552][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.883721][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.883788][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.227868][T19798] loop6: detected capacity change from 0 to 32768 [ 646.274250][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.274284][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.293687][T19798] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root [ 646.293687][T19798] [ 646.294007][T19798] ERROR: (device loop6): remounting filesystem as read-only [ 646.534453][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.534489][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.158121][T19838] loop3: detected capacity change from 0 to 128 [ 647.289302][T19838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.372717][T19838] ext4 filesystem being mounted at /957/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 647.659706][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.993976][T19858] loop3: detected capacity change from 0 to 512 [ 648.066369][T19858] EXT4-fs (loop3): 1 truncate cleaned up [ 648.126583][T19858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.308753][T19870] loop2: detected capacity change from 0 to 64 [ 648.548927][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.926603][T19884] loop2: detected capacity change from 0 to 1024 [ 648.965362][T19885] loop3: detected capacity change from 0 to 256 [ 648.977921][T19884] EXT4-fs: Ignoring removed bh option [ 648.992515][T19884] EXT4-fs: inline encryption not supported [ 649.039301][T19884] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 649.052714][T19885] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 649.130346][T19884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 649.220117][T19834] loop8: detected capacity change from 0 to 40427 [ 649.247987][T19884] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.5789: lblock 2 mapped to illegal pblock 2 (length 1) [ 649.308378][T19834] F2FS-fs (loop8): invalid crc value [ 649.357210][T19884] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 649.392465][T19884] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.5789: lblock 0 mapped to illegal pblock 48 (length 1) [ 649.517573][T19884] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 649.551432][T19884] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.5789: Failed to acquire dquot type 0 [ 649.611042][T19884] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 649.662278][T19884] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.5789: mark_inode_dirty error [ 649.702703][T19884] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 649.726302][T19884] EXT4-fs (loop2): 1 orphan inode deleted [ 649.749931][T19834] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 649.770135][T19884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.791601][ T37] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 649.819259][T19834] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 649.835512][ T37] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 649.892206][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7020: comm kworker/u8:2: Failed to release dquot type 0 [ 650.188858][T19884] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.5789: lblock 0 mapped to illegal pblock 48 (length 1) [ 650.212751][T19884] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 650.239718][T19472] syz-executor: attempt to access beyond end of device [ 650.239718][T19472] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 650.287746][T19472] CPU: 1 UID: 0 PID: 19472 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 650.287807][T19472] Tainted: [L]=SOFTLOCKUP [ 650.287821][T19472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.287844][T19472] Call Trace: [ 650.287856][T19472] [ 650.287871][T19472] dump_stack_lvl+0x16c/0x1f0 [ 650.287936][T19472] f2fs_handle_critical_error+0x624/0x9f0 [ 650.287982][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.288038][T19472] ? f2fs_build_fault_attr+0x53/0x1f0 [ 650.288111][T19472] f2fs_write_end_io+0x958/0xcf0 [ 650.288163][T19472] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 650.288215][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.288271][T19472] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 650.288315][T19472] bio_endio+0x751/0x8a0 [ 650.288377][T19472] submit_bio_noacct+0x306/0x1f40 [ 650.288435][T19472] __submit_merged_bio+0x33c/0x710 [ 650.288488][T19472] __submit_merged_write_cond+0x315/0x3f0 [ 650.288549][T19472] f2fs_write_cache_pages+0x2075/0x2570 [ 650.288670][T19472] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 650.288743][T19472] ? __lock_acquire+0x436/0x2890 [ 650.288908][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.288955][T19472] ? rcu_is_watching+0x12/0xc0 [ 650.289002][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.289056][T19472] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 650.289143][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.289208][T19472] f2fs_write_data_pages+0x5ac/0x1080 [ 650.289273][T19472] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 650.289340][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.289391][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.289435][T19472] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 650.289493][T19472] do_writepages+0x27a/0x600 [ 650.289543][T19472] ? __pfx_do_writepages+0x10/0x10 [ 650.289583][T19472] ? do_raw_spin_unlock+0x172/0x230 [ 650.289646][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.289693][T19472] ? _raw_spin_unlock+0x28/0x50 [ 650.289774][T19472] filemap_writeback+0x225/0x2d0 [ 650.289826][T19472] ? __pfx_filemap_writeback+0x10/0x10 [ 650.289933][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.289979][T19472] ? find_held_lock+0x2b/0x80 [ 650.290047][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.290106][T19472] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 650.290185][T19472] block_operations+0x2b0/0xff0 [ 650.290236][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.290280][T19472] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.290368][T19472] ? finish_task_switch.isra.0+0x8c3/0xbd0 [ 650.290439][T19472] ? __pfx_block_operations+0x10/0x10 [ 650.290490][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.290536][T19472] ? __schedule+0x10b9/0x6150 [ 650.290648][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.290699][T19472] ? ktime_get+0x200/0x310 [ 650.290742][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.290797][T19472] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.290866][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.290911][T19472] ? rcu_is_watching+0x12/0xc0 [ 650.290953][T19472] f2fs_write_checkpoint+0x326/0x52f0 [ 650.291021][T19472] ? __pfx_try_to_wake_up+0x10/0x10 [ 650.291085][T19472] ? f2fs_stop_gc_thread+0x79/0xd0 [ 650.291150][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.291195][T19472] ? rcu_is_watching+0x12/0xc0 [ 650.291229][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.291274][T19472] ? kthread_stop+0x272/0x5d0 [ 650.291347][T19472] kill_f2fs_super+0x3d0/0x480 [ 650.291420][T19472] ? __pfx_kill_f2fs_super+0x10/0x10 [ 650.291498][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.291568][T19472] deactivate_locked_super+0xc1/0x1a0 [ 650.291625][T19472] deactivate_super+0xde/0x100 [ 650.291677][T19472] cleanup_mnt+0x225/0x450 [ 650.291739][T19472] task_work_run+0x150/0x240 [ 650.291792][T19472] ? __pfx_task_work_run+0x10/0x10 [ 650.291859][T19472] exit_to_user_mode_loop+0xfb/0x540 [ 650.291913][T19472] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.291967][T19472] do_syscall_64+0x4ee/0xf80 [ 650.292040][T19472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.292077][T19472] RIP: 0033:0x7f70e6190a77 [ 650.292107][T19472] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 650.292144][T19472] RSP: 002b:00007ffe52d76508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 650.292180][T19472] RAX: 0000000000000000 RBX: 00007f70e6213d7d RCX: 00007f70e6190a77 [ 650.292205][T19472] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe52d765c0 [ 650.292229][T19472] RBP: 00007ffe52d765c0 R08: 0000000000000000 R09: 0000000000000000 [ 650.292253][T19472] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe52d77650 [ 650.292277][T19472] R13: 00007f70e6213d7d R14: 000000000009eac4 R15: 00007ffe52d77690 [ 650.292341][T19472] [ 650.862540][T19472] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 651.107129][T19922] loop7: detected capacity change from 0 to 64 [ 651.245818][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.499874][T19924] loop3: detected capacity change from 0 to 4096 [ 651.569534][T19933] netlink: 'syz.2.5804': attribute type 1 has an invalid length. [ 651.582584][T19924] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 651.611470][T19933] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5804'. [ 651.736710][T19924] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 651.799783][T19924] ntfs3(loop3): ino=5, mi_enum_attr [ 651.958159][T19924] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 652.179034][T19946] loop2: detected capacity change from 0 to 256 [ 652.198049][T19946] exfat: Deprecated parameter 'namecase' [ 652.215672][ T6014] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 652.236164][T19946] exfat: Deprecated parameter 'namecase' [ 652.315573][T19946] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 652.433833][ T6014] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 652.479844][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.533692][ T6014] usb 7-1: config 0 descriptor?? [ 652.577364][ T6014] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 653.067630][T19970] loop0: detected capacity change from 0 to 512 [ 653.166413][T19970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.192521][ T6014] gp8psk: usb out operation failed. [ 653.208432][ T6014] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 653.247757][ T6014] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 653.269818][ T6014] usb 7-1: USB disconnect, device number 5 [ 653.381200][T19970] EXT4-fs: Ignoring sb option on remount [ 653.401781][T19970] EXT4-fs: Ignoring removed orlov option [ 653.471000][T19970] EXT4-fs: can't change dax mount option while remounting [ 653.654034][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.501709][ T971] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 654.701550][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 654.724293][ T971] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 654.748709][ T971] usb 1-1: config 6 has no interface number 0 [ 654.781423][ T971] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 654.791109][ T971] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.891884][ T971] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.923164][ T971] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 654.973490][ T971] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 654.998672][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.054153][ T971] usb 1-1: Product: syz [ 655.058373][ T971] usb 1-1: Manufacturer: syz [ 655.081758][ T971] usb 1-1: SerialNumber: syz [ 655.130851][ T971] hso 1-1:6.2: Failed to find BULK IN ep [ 655.405483][T19489] usb 1-1: USB disconnect, device number 33 [ 655.442998][ T971] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 655.528104][T20041] loop8: detected capacity change from 0 to 64 [ 655.627471][T20041] hfs: keylen 1794 too large [ 655.632424][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 655.654984][ T971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.667393][T20041] hfs: keylen 1794 too large [ 655.687785][ T971] usb 4-1: config 0 has no interface number 0 [ 655.705513][ T971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.730730][ T971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.757083][ T971] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.771542][T20045] netlink: 'syz.7.5845': attribute type 1 has an invalid length. [ 655.773988][ T971] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 655.791433][T20045] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5845'. [ 655.822430][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.882698][ T971] usb 4-1: config 0 descriptor?? [ 656.043337][T20020] loop2: detected capacity change from 0 to 32768 [ 656.129450][T20020] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5836 (20020) [ 656.197785][T20020] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 656.232118][T20020] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 656.274494][T20054] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5848'. [ 656.324914][ T971] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 656.389585][ T971] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 656.442495][ T971] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 656.508862][ T971] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x0 [ 656.573305][T20020] BTRFS info (device loop2): enabling ssd optimizations [ 656.621904][T20020] BTRFS info (device loop2): turning on async discard [ 656.628721][T20020] BTRFS info (device loop2): enabling free space tree [ 656.636785][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5852'. [ 656.651267][T20080] loop6: detected capacity change from 0 to 1024 [ 656.653178][ T971] holtek_mouse 0003:04D9:A072.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input1 [ 656.683710][T20080] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 656.750670][ T971] usb 4-1: USB disconnect, device number 33 [ 656.751345][T20080] hfsplus: bad catalog entry type [ 656.826549][T20082] loop7: detected capacity change from 0 to 1024 [ 657.157533][ T5829] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 657.214659][T20084] loop8: detected capacity change from 0 to 4096 [ 657.284878][T20084] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 657.302546][T20088] fido_id[20088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 657.342774][T20086] ALSA: seq fatal error: cannot create timer (-19) [ 657.515804][T20084] ntfs3(loop8): ino=19, mi_enum_attr [ 657.521213][T20084] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 657.640787][T20095] loop3: detected capacity change from 0 to 512 [ 657.754627][T20095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 657.861423][T20095] EXT4-fs (loop3): 1 truncate cleaned up [ 657.930525][T20095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.229890][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.524846][T20118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5868'. [ 658.592066][T20121] loop6: detected capacity change from 0 to 64 [ 658.689892][T20121] Trying to free block not in datazone [ 658.741404][T20121] Trying to free block not in datazone [ 658.800597][T20121] Trying to free block not in datazone [ 658.897655][T20124] loop2: detected capacity change from 0 to 4096 [ 658.993001][T20133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 660.232866][ T5920] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 660.426278][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.454421][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.482087][ T5920] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 660.501658][ T5920] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 660.516331][T20179] loop2: detected capacity change from 0 to 1024 [ 660.533276][ T5920] usb 8-1: Manufacturer: syz [ 660.552906][ T5920] usb 8-1: config 0 descriptor?? [ 660.560931][T20179] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 660.607992][T20179] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.5892: Invalid block bitmap block 0 in block_group 0 [ 660.720269][T20179] Quota error (device loop2): write_blk: dquota write failed [ 660.729229][T20179] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 660.753431][T20179] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.5892: Failed to acquire dquot type 0 [ 660.789583][T20179] EXT4-fs error (device loop2): ext4_free_blocks:6727: comm syz.2.5892: Freeing blocks not in datazone - block = 0, count = 4096 [ 660.815455][T20179] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm syz.2.5892: Invalid inode bitmap blk 0 in block_group 0 [ 660.831489][T20179] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 660.855473][ T3770] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 660.873806][T20179] EXT4-fs (loop2): 1 orphan inode deleted [ 660.891722][ T3770] EXT4-fs error (device loop2): ext4_release_dquot:7020: comm kworker/u8:11: Failed to release dquot type 0 [ 660.910239][T20179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.053595][T20190] netlink: 'syz.6.5897': attribute type 3 has an invalid length. [ 661.091651][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5897'. [ 661.213756][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.231906][ T5920] uclogic 0003:256C:006D.0010: failed retrieving Huion firmware version: -71 [ 661.261009][ T5920] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 661.307935][ T5920] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 661.380650][ T5920] usb 8-1: USB disconnect, device number 2 [ 661.551167][T20205] loop6: detected capacity change from 0 to 1024 [ 661.617576][ T5955] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 661.821541][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 661.859900][ T5955] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 661.872575][T20202] loop2: detected capacity change from 0 to 40427 [ 661.890562][T20202] F2FS-fs (loop2): invalid crc value [ 661.914473][ T5955] usb 4-1: config 6 has no interface number 0 [ 661.920648][ T5955] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 661.988630][T20202] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:1,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 662.004522][T20202] F2FS-fs (loop2): Failed to read root inode [ 662.028848][ T5955] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.132971][ T5955] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 662.192174][ T1008] hfsplus: b-tree write err: -5, ino 4 [ 662.209062][ T5955] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 662.243253][ T5955] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 662.265073][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.309719][ T5955] usb 4-1: Product: syz [ 662.330887][ T5955] usb 4-1: Manufacturer: syz [ 662.361386][ T5955] usb 4-1: SerialNumber: syz [ 662.395930][ T5955] hso 4-1:6.2: Failed to find BULK IN ep [ 662.682220][ T5955] usb 4-1: USB disconnect, device number 34 [ 662.735343][T20217] loop0: detected capacity change from 0 to 4096 [ 663.114087][T20231] xt_l2tp: v2 sid > 0xffff: 1114112 [ 663.471833][T20238] Bluetooth: MGMT ver 1.23 [ 664.045754][T20253] loop0: detected capacity change from 0 to 256 [ 664.072564][T20253] exfat: Deprecated parameter 'namecase' [ 664.099212][T20253] exfat: Deprecated parameter 'namecase' [ 664.155931][T20253] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 664.371023][T20227] loop6: detected capacity change from 0 to 32768 [ 664.818141][T20264] loop3: detected capacity change from 0 to 2048 [ 664.929030][T20264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.265970][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.281175][T20311] loop2: detected capacity change from 0 to 128 [ 666.327211][T20311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 666.364643][T20311] EXT4-fs (loop2): Test dummy encryption mode enabled [ 666.382258][T20315] netlink: 'syz.8.5948': attribute type 10 has an invalid length. [ 666.423582][T20311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.436785][T20308] loop6: detected capacity change from 0 to 4096 [ 666.466706][T20314] netlink: 'syz.7.5947': attribute type 4 has an invalid length. [ 666.475297][T20315] batadv0: entered allmulticast mode [ 666.493413][T20276] loop0: detected capacity change from 0 to 32768 [ 666.522766][T20311] ext4 filesystem being mounted at /1036/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.552517][T20314] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5947'. [ 666.564044][T20319] netlink: 'syz.8.5948': attribute type 10 has an invalid length. [ 666.632796][T20319] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5948'. [ 666.645410][T20324] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 666.646619][T20311] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 666.668814][T20276] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 666.703995][T20315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.756914][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.817490][T20315] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 666.910186][T20319] batadv0: entered promiscuous mode [ 666.978446][T20276] XFS (loop0): Ending clean mount [ 666.994433][T20319] bond0: (slave batadv0): Releasing backup interface [ 667.014745][T20276] XFS (loop0): Quotacheck needed: Please wait. [ 667.124892][T20319] bridge0: port 3(batadv0) entered blocking state [ 667.151735][T20319] bridge0: port 3(batadv0) entered disabled state [ 667.160969][T20276] XFS (loop0): Quotacheck: Done. [ 667.317644][T20338] netlink: 'syz.3.5953': attribute type 3 has an invalid length. [ 667.358621][T20335] loop2: detected capacity change from 0 to 4096 [ 667.483756][ T6086] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 667.493113][ T6086] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 667.494349][ T5825] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 667.553624][T20342] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 667.725863][T20347] loop8: detected capacity change from 0 to 8 [ 667.733099][T20335] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 667.884344][T20347] SQUASHFS error: Unable to read directory block [247:50] [ 668.245035][T20356] loop3: detected capacity change from 0 to 2048 [ 668.357185][T20356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.446425][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5961'. [ 668.756141][T20373] sp0: Synchronizing with TNC [ 668.825313][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.112063][T20385] netlink: 'syz.6.5968': attribute type 10 has an invalid length. [ 669.185607][T20385] batadv0: entered allmulticast mode [ 669.231833][T20388] netlink: 'syz.6.5968': attribute type 10 has an invalid length. [ 669.246721][T20386] loop3: detected capacity change from 0 to 4096 [ 669.266974][T20386] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 669.295329][T20388] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5968'. [ 669.313049][T20385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.363369][T20386] ntfs3(loop3): ino=19, mi_enum_attr [ 669.368730][T20386] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 669.387134][T20385] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 669.422964][T20388] batadv0: entered promiscuous mode [ 669.484137][T20388] bond0: (slave batadv0): Releasing backup interface [ 669.573772][T20388] bridge0: port 3(batadv0) entered blocking state [ 669.591532][T20388] bridge0: port 3(batadv0) entered disabled state [ 669.659319][T20395] sp0: Synchronizing with TNC [ 669.821905][T20400] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 670.141919][ T6032] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 670.151174][ T6032] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 670.236343][T20412] loop6: detected capacity change from 0 to 1764 [ 670.656673][T20422] loop3: detected capacity change from 0 to 4096 [ 670.811875][T20422] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 670.834717][T20431] futex_wake_op: syz.0.5984 tries to shift op by 144; fix this program [ 670.878686][T20422] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 671.033267][T20422] ntfs3(loop3): ino=21, "blkio.bfq.io_queued_recursive" fallocate(0x10) is not supported [ 671.386879][T20444] loop6: detected capacity change from 0 to 256 [ 671.435395][T20444] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 671.470293][T20446] netlink: 'syz.7.5989': attribute type 10 has an invalid length. [ 671.511969][T20446] batadv0: entered allmulticast mode [ 671.553967][T20451] netlink: 'syz.7.5989': attribute type 10 has an invalid length. [ 671.562078][T18999] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 671.625630][T20452] loop3: detected capacity change from 0 to 1024 [ 671.635143][T20451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5989'. [ 671.665445][T20446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.724979][T20446] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 671.751621][T20451] batadv0: entered promiscuous mode [ 671.773541][T18999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.794835][T18999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.826027][T18999] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 671.895576][T20451] bond0: (slave batadv0): Releasing backup interface [ 671.904458][T18999] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 671.932058][T18999] usb 1-1: Manufacturer: syz [ 671.974590][T18999] usb 1-1: config 0 descriptor?? [ 671.995707][T20451] bridge0: port 3(batadv0) entered blocking state [ 672.024773][ T1033] hfsplus: b-tree write err: -5, ino 4 [ 672.053892][T20451] bridge0: port 3(batadv0) entered disabled state [ 672.073045][T20458] loop6: detected capacity change from 0 to 1764 [ 672.201847][T20259] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 672.211175][T20259] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 672.422258][T20423] loop8: detected capacity change from 0 to 32768 [ 672.497915][T20464] loop2: detected capacity change from 0 to 64 [ 672.508594][T20465] loop6: detected capacity change from 0 to 64 [ 672.532087][T20423] jfs_strtoUCS: char2uni returned -22. [ 672.561579][T20423] charset = cp950, char = 0xbb [ 672.566610][T20423] jfs_strtoUCS: char2uni returned -22. [ 672.618104][T20423] charset = cp950, char = 0xbb [ 672.681530][T18999] uclogic 0003:256C:006D.0011: failed retrieving Huion firmware version: -71 [ 672.690409][T18999] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 672.751484][T18999] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71 [ 672.817541][T18999] usb 1-1: USB disconnect, device number 34 [ 673.658063][ T31] audit: type=1326 audit(2000000258.219:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 673.751790][ T5955] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 673.785416][ T31] audit: type=1326 audit(2000000258.249:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 673.873239][ T31] audit: type=1326 audit(2000000258.249:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 673.931519][ T5955] usb 7-1: Using ep0 maxpacket: 32 [ 673.957037][ T5955] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 673.971418][ T31] audit: type=1326 audit(2000000258.269:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 674.004809][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.031654][ T5955] usb 7-1: Product: syz [ 674.046278][ T5955] usb 7-1: Manufacturer: syz [ 674.061101][ T5955] usb 7-1: SerialNumber: syz [ 674.066680][ T31] audit: type=1326 audit(2000000258.269:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13b058df90 code=0x7ffc0000 [ 674.101955][T20491] loop3: detected capacity change from 0 to 4096 [ 674.133740][ T5955] usb 7-1: config 0 descriptor?? [ 674.149422][T20491] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 674.155850][ T5955] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 674.197082][ T31] audit: type=1326 audit(2000000258.269:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 674.250669][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 674.285175][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.312016][ T31] audit: type=1326 audit(2000000258.269:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 674.364463][ T5955] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 674.375590][T20491] ntfs3(loop3): ino=1d, mi_enum_attr [ 674.386698][T20485] dvb-usb: bulk message failed: -22 (3/0) [ 674.412176][T20491] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 674.416628][ T5955] usb 7-1: media controller created [ 674.463120][T20491] ntfs3(loop3): ino=1d, mi_enum_attr [ 674.466881][ T31] audit: type=1326 audit(2000000258.269:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 674.483652][T20491] ntfs3(loop3): ino=1d, mi_enum_attr [ 674.515851][T20509] netlink: 'syz.2.6011': attribute type 10 has an invalid length. [ 674.529074][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.564083][ T31] audit: type=1326 audit(2000000258.269:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 674.592119][T20509] batadv0: entered allmulticast mode [ 674.595311][T20510] netlink: 'syz.2.6011': attribute type 10 has an invalid length. [ 674.632747][T20510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6011'. [ 674.667556][ T5955] usb 7-1: selecting invalid altsetting 7 [ 674.681500][ T31] audit: type=1326 audit(2000000258.279:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f13b058f749 code=0x7ffc0000 [ 674.704715][ T5955] cxusb: set interface failed [ 674.709413][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 674.768376][T20509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.780193][T20509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 674.792641][T20510] batadv0: entered promiscuous mode [ 674.885173][T20510] bond0: (slave batadv0): Releasing backup interface [ 674.972668][T20510] bridge0: port 3(batadv0) entered blocking state [ 674.997156][ T5955] DVB: Unable to find symbol lgdt330x_attach() [ 675.012504][ T5955] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 675.071565][T20510] bridge0: port 3(batadv0) entered disabled state [ 675.245633][ T1033] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 675.254993][ T1033] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 675.314776][T20524] loop0: detected capacity change from 0 to 64 [ 675.364861][T20484] loop7: detected capacity change from 0 to 32768 [ 675.391790][ T5955] rc_core: IR keymap rc-dvico-portable not found [ 675.431139][ T5955] Registered IR keymap rc-empty [ 675.440790][ T5955] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 675.505075][ T5955] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input45 [ 675.587277][ T5955] dvb-usb: schedule remote query interval to 100 msecs. [ 675.611582][ T5955] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 675.679100][ T5955] usb 7-1: USB disconnect, device number 6 [ 676.017457][ T5955] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 676.197849][T20548] loop8: detected capacity change from 0 to 256 [ 677.209723][T20573] loop0: detected capacity change from 0 to 1024 [ 677.540014][ T3836] hfsplus: b-tree write err: -5, ino 4 [ 677.558808][T20581] loop6: detected capacity change from 0 to 4096 [ 677.627363][T20540] loop3: detected capacity change from 0 to 32768 [ 677.669840][T20583] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.672846][ T6014] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 677.928202][ T6014] usb 3-1: Using ep0 maxpacket: 8 [ 677.965695][ T6014] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 678.021460][ T6014] usb 3-1: config 0 has no interface number 0 [ 678.058079][ T6014] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 678.121542][ T6014] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 678.186251][ T6014] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 678.243228][ T6014] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 678.305138][ T6014] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 678.352003][ T6014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.402027][ T6014] usb 3-1: config 0 descriptor?? [ 678.456050][ T6014] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 678.517007][T20558] loop8: detected capacity change from 0 to 32768 [ 678.637905][T20558] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 678.752395][ T6014] usb 3-1: USB disconnect, device number 29 [ 678.831846][ T6014] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 679.013085][T20619] loop6: detected capacity change from 0 to 128 [ 679.054248][T20558] XFS (loop8): Ending clean mount [ 679.074227][T20619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 679.126065][T20619] EXT4-fs (loop6): Test dummy encryption mode enabled [ 679.213113][T20619] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 679.353015][T20619] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 679.469897][T19472] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 679.740188][T18494] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.045623][T20641] loop3: detected capacity change from 0 to 128 [ 680.182471][T20641] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 680.256885][T20641] FAT-fs (loop3): Filesystem has been set read-only [ 680.751738][ T6014] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 680.939374][ T6014] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 680.987921][ T6014] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 681.004956][T20669] loop8: detected capacity change from 0 to 256 [ 681.040689][ T6014] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 681.057640][T20669] exfat: Deprecated parameter 'utf8' [ 681.081545][ T6014] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 681.094074][T20669] exfat: Deprecated parameter 'namecase' [ 681.111084][T20669] exfat: Deprecated parameter 'utf8' [ 681.142054][ T6014] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 681.168995][T20678] loop7: detected capacity change from 0 to 64 [ 681.180967][T20669] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 681.196466][ T6014] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 681.236535][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 681.295373][ T6014] usb 3-1: Product: syz [ 681.310451][ T6014] usb 3-1: Manufacturer: syz [ 681.409685][ T6014] cdc_wdm 3-1:1.0: skipping garbage [ 681.441836][ T6014] cdc_wdm 3-1:1.0: skipping garbage [ 681.478291][ T6014] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 681.512433][ T6014] cdc_wdm 3-1:1.0: Unknown control protocol [ 681.653884][ T5955] usb 3-1: USB disconnect, device number 30 [ 681.741457][ T6014] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 681.931368][ T6014] usb 1-1: Using ep0 maxpacket: 32 [ 681.982672][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 681.982699][ T31] audit: type=1326 audit(2000000266.549:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 681.989759][ T6014] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 682.111905][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.117117][ T31] audit: type=1326 audit(2000000266.579:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.175979][ T6014] usb 1-1: Product: syz [ 682.197141][ T6014] usb 1-1: Manufacturer: syz [ 682.219490][ T31] audit: type=1326 audit(2000000266.589:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.221366][ T6014] usb 1-1: SerialNumber: syz [ 682.311406][ T31] audit: type=1326 audit(2000000266.599:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.315566][ T6014] usb 1-1: config 0 descriptor?? [ 682.439755][ T6014] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 682.449420][ T31] audit: type=1326 audit(2000000266.599:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.561362][ T31] audit: type=1326 audit(2000000266.599:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.612368][ T5955] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 682.681379][ T31] audit: type=1326 audit(2000000266.599:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.765213][ T31] audit: type=1326 audit(2000000266.599:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1acb8f749 code=0x7ffc0000 [ 682.810790][T20719] loop7: detected capacity change from 0 to 128 [ 682.825857][ T5955] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 682.837276][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 682.843989][ T5955] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 682.922119][T20719] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 682.942381][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.979825][ T5955] usb 4-1: config 0 descriptor?? [ 683.008500][T20705] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 683.019932][T20719] hpfs: filesystem error: improperly stopped [ 683.026532][ T6014] gspca_ov534_9: reg_w failed -71 [ 683.091548][T20719] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 683.120670][T20719] hpfs: You really don't want any checks? You are crazy... [ 683.169191][T20719] hpfs: hpfs_map_sector(): read error [ 683.182957][T20719] hpfs: code page support is disabled [ 683.206708][T20719] hpfs: hpfs_map_4sectors(): unaligned read [ 683.233544][T20719] hpfs: hpfs_map_4sectors(): unaligned read [ 683.241492][T20719] hpfs: filesystem error: unable to find root dir [ 683.331456][T20719] hpfs: hpfs_map_4sectors(): unaligned read [ 683.451444][ T6014] gspca_ov534_9: Unknown sensor 0000 [ 683.451560][ T6014] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 683.541035][ T6014] usb 1-1: USB disconnect, device number 35 [ 683.558332][ T5955] waltop 0003:172F:0500.0012: collection stack underflow [ 683.606828][ T5955] waltop 0003:172F:0500.0012: item 0 2 0 12 parsing failed [ 683.652887][ T5955] waltop 0003:172F:0500.0012: probe with driver waltop failed with error -22 [ 683.746636][ T5920] usb 4-1: USB disconnect, device number 35 [ 683.853298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 683.981483][ T5955] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 684.171699][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 684.208684][ T5955] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 684.231503][ T5955] usb 3-1: config 179 has no interface number 0 [ 684.237828][ T5955] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 684.326882][ T5955] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 684.357576][ T5955] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 684.400813][ T5955] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 684.475613][ T5955] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 684.542428][ T5955] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 684.560520][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.601033][T20736] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 684.652473][T20728] loop6: detected capacity change from 0 to 32768 [ 684.806618][ T31] audit: type=1800 audit(2000000269.369:295): pid=20728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6088" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 685.104013][T20762] loop3: detected capacity change from 0 to 128 [ 685.160589][T20736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.187536][T20762] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 685.262286][T20736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.497423][T20772] loop6: detected capacity change from 0 to 512 [ 685.538460][T20772] EXT4-fs: Ignoring removed mblk_io_submit option [ 685.636110][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 685.644457][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 685.712454][ T5955] usb 3-1: USB disconnect, device number 31 [ 685.728648][T20772] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 685.805408][T20772] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.6101: attempt to clear invalid blocks 2 len 1 [ 685.870781][T20772] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 685.893858][T20780] loop3: detected capacity change from 0 to 512 [ 685.956654][T20772] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.6101: invalid indirect mapped block 1819239214 (level 0) [ 685.982594][T20780] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.6105: inode has both inline data and extents flags [ 686.001996][T20780] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.6105: couldn't read orphan inode 15 (err -117) [ 686.016015][T20772] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.6101: invalid indirect mapped block 1819239214 (level 1) [ 686.032652][T20780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.065226][T20780] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 686.113358][T20772] EXT4-fs (loop6): 1 truncate cleaned up [ 686.157937][T20772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.375597][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.405278][T20772] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 686.676217][T18494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.796202][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6112'. [ 686.879505][T20771] loop0: detected capacity change from 0 to 32768 [ 686.969682][T20771] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6102 (20771) [ 687.039972][T20771] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 687.082130][T20771] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 687.403985][T20771] BTRFS info (device loop0): enabling ssd optimizations [ 687.430598][T20812] loop6: detected capacity change from 0 to 4096 [ 687.461583][T20771] BTRFS info (device loop0): turning on sync discard [ 687.508295][T20826] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.521675][T20771] BTRFS info (device loop0): enabling free space tree [ 687.570927][T20812] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.' [ 687.671999][T20812] Remounting filesystem read-only [ 687.817069][T20771] BTRFS info (device loop0): balance: start [ 687.835269][T20771] BTRFS info (device loop0): balance: ended with status: 0 [ 687.938680][T18494] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 688.067315][ T31] audit: type=1326 audit(2000000272.629:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6b98f749 code=0x7ffc0000 [ 688.091405][ T5920] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 688.196280][ T31] audit: type=1326 audit(2000000272.649:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6b98f749 code=0x7ffc0000 [ 688.228191][T20837] loop2: detected capacity change from 0 to 1024 [ 688.249073][ T5825] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 688.270462][ T31] audit: type=1326 audit(2000000272.739:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a6b98f749 code=0x7ffc0000 [ 688.294477][ T5920] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.307101][T20837] EXT4-fs: Ignoring removed bh option [ 688.342031][T20837] EXT4-fs: inline encryption not supported [ 688.351473][ T5920] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.391407][ T31] audit: type=1326 audit(2000000272.739:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a6b98f783 code=0x7ffc0000 [ 688.409853][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 688.423748][T20837] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 688.463636][ T31] audit: type=1326 audit(2000000272.739:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a6b98e1ff code=0x7ffc0000 [ 688.487066][ T5920] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 688.487116][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.514397][ T5920] usb 4-1: config 0 descriptor?? [ 688.544323][T20837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 688.588122][ T31] audit: type=1326 audit(2000000272.789:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6a6b98f7d7 code=0x7ffc0000 [ 688.611558][ T31] audit: type=1326 audit(2000000272.789:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6b98df90 code=0x7ffc0000 [ 688.649849][ T31] audit: type=1326 audit(2000000272.789:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a6b98f34b code=0x7ffc0000 [ 688.676677][ T31] audit: type=1326 audit(2000000272.859:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a6b98e3aa code=0x7ffc0000 [ 688.737269][ T31] audit: type=1326 audit(2000000272.879:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a6b98e3aa code=0x7ffc0000 [ 688.773517][T20837] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.6124: lblock 2 mapped to illegal pblock 2 (length 1) [ 688.841248][T20837] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.6124: lblock 0 mapped to illegal pblock 48 (length 1) [ 688.883436][T20837] EXT4-fs error (device loop2): ext4_acquire_dquot:6984: comm syz.2.6124: Failed to acquire dquot type 0 [ 688.937651][T20837] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 688.974755][T20837] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.6124: mark_inode_dirty error [ 689.003877][T20837] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 689.026393][ T5920] mcp2200 0003:04D8:00DF.0013: unknown main item tag 0x0 [ 689.122557][ T5920] mcp2200 0003:04D8:00DF.0013: USB HID v0.08 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 689.140966][T20837] EXT4-fs (loop2): 1 orphan inode deleted [ 689.154932][ T6032] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 689.186911][T20837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.263371][ T6032] EXT4-fs error (device loop2): ext4_release_dquot:7020: comm kworker/u8:15: Failed to release dquot type 0 [ 689.320971][ T5920] usb 4-1: USB disconnect, device number 36 [ 689.387725][T20837] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz.2.6124: Invalid inode table block 1 in block_group 0 [ 689.484818][T20837] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 689.550339][T20837] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.6124: mark_inode_dirty error [ 689.718133][ T4513] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm kworker/u8:13: Invalid inode table block 1 in block_group 0 [ 689.777417][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.815229][ T5829] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 689.856970][ T5829] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 689.887152][ T5829] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 690.280899][T20892] loop7: detected capacity change from 0 to 1024 [ 690.313312][T20892] EXT4-fs: Ignoring removed nobh option [ 690.369249][T20892] EXT4-fs: Ignoring removed bh option [ 690.416143][T20890] loop8: detected capacity change from 0 to 4096 [ 690.704506][T20890] ntfs3(loop8): failed to convert "0080" to cp869 [ 690.991408][ T5899] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 691.047392][T20912] loop7: detected capacity change from 0 to 256 [ 691.171941][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.214229][ T5899] usb 7-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 691.252718][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.295512][ T5899] usb 7-1: config 0 descriptor?? [ 691.512893][T20921] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 691.527846][T20924] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6159'. [ 691.748708][ T5899] semitek 0003:1EA7:0907.0014: item fetching failed at offset 2/5 [ 691.790955][ T5899] semitek 0003:1EA7:0907.0014: probe with driver semitek failed with error -22 [ 691.870833][T20929] sp0: Synchronizing with TNC [ 691.974411][T20898] loop0: detected capacity change from 0 to 40427 [ 692.011688][ T5899] usb 7-1: USB disconnect, device number 7 [ 692.018790][T20898] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 692.035006][T20898] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 692.061133][T20898] F2FS-fs (loop0): invalid crc value [ 692.116165][T20937] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6164'. [ 692.357159][T20898] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 692.442613][T20898] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 692.473608][T20898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 692.528600][T20950] loop7: detected capacity change from 0 to 256 [ 692.788501][ T5825] syz-executor: attempt to access beyond end of device [ 692.788501][ T5825] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 692.822134][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 692.822193][ T5825] Tainted: [L]=SOFTLOCKUP [ 692.822207][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 692.822230][ T5825] Call Trace: [ 692.822251][ T5825] [ 692.822266][ T5825] dump_stack_lvl+0x16c/0x1f0 [ 692.822332][ T5825] f2fs_handle_critical_error+0x624/0x9f0 [ 692.822378][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.822425][ T5825] ? f2fs_build_fault_attr+0x53/0x1f0 [ 692.822504][ T5825] f2fs_write_end_io+0x958/0xcf0 [ 692.822556][ T5825] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 692.822613][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.822671][ T5825] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 692.822716][ T5825] bio_endio+0x751/0x8a0 [ 692.822779][ T5825] submit_bio_noacct+0x306/0x1f40 [ 692.822836][ T5825] __submit_merged_bio+0x33c/0x710 [ 692.822889][ T5825] __submit_merged_write_cond+0x315/0x3f0 [ 692.822951][ T5825] f2fs_write_cache_pages+0x2075/0x2570 [ 692.823037][ T5825] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 692.823099][ T5825] ? __lock_acquire+0x436/0x2890 [ 692.823159][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.823204][ T5825] ? __lock_acquire+0x436/0x2890 [ 692.823303][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.823391][ T5825] ? __lock_acquire+0x436/0x2890 [ 692.823445][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.823499][ T5825] f2fs_write_data_pages+0x5ac/0x1080 [ 692.823566][ T5825] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 692.823641][ T5825] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 692.823696][ T5825] do_writepages+0x27a/0x600 [ 692.823746][ T5825] ? __pfx_do_writepages+0x10/0x10 [ 692.823786][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 692.823838][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.823881][ T5825] ? _raw_spin_unlock+0x28/0x50 [ 692.823938][ T5825] filemap_writeback+0x225/0x2d0 [ 692.823985][ T5825] ? __pfx_filemap_writeback+0x10/0x10 [ 692.824093][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.824138][ T5825] ? find_held_lock+0x2b/0x80 [ 692.824199][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.824265][ T5825] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 692.824345][ T5825] block_operations+0x2b0/0xff0 [ 692.824414][ T5825] ? __pfx_block_operations+0x10/0x10 [ 692.824534][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.824582][ T5825] ? ktime_get+0x200/0x310 [ 692.824626][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.824672][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 692.824732][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.824777][ T5825] ? rcu_is_watching+0x12/0xc0 [ 692.824819][ T5825] f2fs_write_checkpoint+0x326/0x52f0 [ 692.824886][ T5825] ? f2fs_stop_gc_thread+0x79/0xd0 [ 692.824951][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.824996][ T5825] ? rcu_is_watching+0x12/0xc0 [ 692.825031][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.825076][ T5825] ? kthread_stop+0x272/0x5d0 [ 692.825127][ T5825] kill_f2fs_super+0x3d0/0x480 [ 692.825184][ T5825] ? __pfx_kill_f2fs_super+0x10/0x10 [ 692.825267][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.825332][ T5825] deactivate_locked_super+0xc1/0x1a0 [ 692.825375][ T5825] deactivate_super+0xde/0x100 [ 692.825416][ T5825] cleanup_mnt+0x225/0x450 [ 692.825463][ T5825] task_work_run+0x150/0x240 [ 692.825514][ T5825] ? __pfx_task_work_run+0x10/0x10 [ 692.825577][ T5825] exit_to_user_mode_loop+0xfb/0x540 [ 692.825629][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.825681][ T5825] do_syscall_64+0x4ee/0xf80 [ 692.825745][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.825784][ T5825] RIP: 0033:0x7f13b0590a77 [ 692.825819][ T5825] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 692.825856][ T5825] RSP: 002b:00007ffd32918ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 692.825891][ T5825] RAX: 0000000000000000 RBX: 00007f13b0613d7d RCX: 00007f13b0590a77 [ 692.825916][ T5825] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd32918fa0 [ 692.825940][ T5825] RBP: 00007ffd32918fa0 R08: 0000000000000000 R09: 0000000000000000 [ 692.825965][ T5825] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3291a030 [ 692.825989][ T5825] R13: 00007f13b0613d7d R14: 00000000000a9166 R15: 00007ffd3291a070 [ 692.826045][ T5825] [ 693.283901][ T5825] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 693.285335][T20956] devpts: Bad value for 'max' [ 693.533743][T20957] loop2: detected capacity change from 0 to 2048 [ 693.626342][T20957] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 693.645676][T20964] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 693.681783][T20957] syz.2.6172: attempt to access beyond end of device [ 693.681783][T20957] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 693.798148][T20965] loop0: detected capacity change from 0 to 512 [ 693.809936][T20957] syz.2.6172: attempt to access beyond end of device [ 693.809936][T20957] loop2: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 693.852924][T20965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 693.907316][T20957] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 693.923218][T20965] EXT4-fs (loop0): 1 truncate cleaned up [ 693.933389][T20965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.976801][T20957] NILFS (loop2): error -5 reading inode: ino=15 [ 694.032118][T20972] syz.2.6172: attempt to access beyond end of device [ 694.032118][T20972] loop2: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 694.136759][T20972] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 694.164756][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.179512][T20972] NILFS (loop2): error -5 reading inode: ino=12 [ 694.418333][T20984] loop7: detected capacity change from 0 to 64 [ 694.964971][T20996] netlink: 'syz.3.6191': attribute type 1 has an invalid length. [ 695.000269][T20996] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6191'. [ 695.201217][T21004] netlink: 'syz.7.6195': attribute type 3 has an invalid length. [ 695.874536][T21026] overlay: ./bus is not a directory [ 695.891712][T21025] netlink: 'syz.6.6205': attribute type 3 has an invalid length. [ 695.959440][T21030] loop7: detected capacity change from 0 to 512 [ 696.061551][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'. [ 696.219563][T21037] loop8: detected capacity change from 0 to 512 [ 696.268764][T21039] loop6: detected capacity change from 0 to 256 [ 696.356381][T21045] loop7: detected capacity change from 0 to 47 [ 696.381582][T21037] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.6211: invalid block [ 696.439282][T21039] exfat: Deprecated parameter 'utf8' [ 696.479438][T21037] EXT4-fs (loop8): Remounting filesystem read-only [ 696.522255][T21039] exfat: Deprecated parameter 'utf8' [ 696.532083][T21037] EXT4-fs (loop8): 2 truncates cleaned up [ 696.561486][T21039] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 696.562647][T21037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.707177][T21053] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6219'. [ 696.760156][T21053] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6219'. [ 697.343841][T21067] sp0: Synchronizing with TNC [ 697.491003][T21069] xt_l2tp: v2 sid > 0xffff: 1114112 [ 697.816371][T21077] loop7: detected capacity change from 0 to 128 [ 697.915087][T21081] faux_driver vgem: [drm] Unknown color mode 32982; guessing buffer size. [ 698.146648][T19472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.404125][T21093] loop2: detected capacity change from 0 to 1024 [ 698.498590][T21093] hfsplus: bad catalog entry type [ 698.581844][T21101] loop7: detected capacity change from 0 to 128 [ 698.689764][ T50] hfsplus: b-tree write err: -5, ino 4 [ 698.776319][T21107] vivid-007: disconnect [ 698.782770][T21105] vivid-007: reconnect [ 699.259136][T21117] loop8: detected capacity change from 0 to 2048 [ 699.363176][T21117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.572486][ T50] [ 699.574847][ T50] ====================================================== [ 699.581863][ T50] WARNING: possible circular locking dependency detected [ 699.588886][ T50] syzkaller #0 Tainted: G L [ 699.594878][ T50] ------------------------------------------------------ [ 699.601900][ T50] kworker/u8:3/50 is trying to acquire lock: [ 699.607885][ T50] ffff888053417448 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x2d/0xe0 [ 699.617714][ T50] [ 699.617714][ T50] but task is already holding lock: [ 699.621423][ T6014] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 699.625074][ T50] ffff88803faacb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 699.625165][ T50] [ 699.625165][ T50] which lock already depends on the new lock. [ 699.625165][ T50] [ 699.625178][ T50] [ 699.625178][ T50] the existing dependency chain (in reverse order) is: [ 699.625193][ T50] [ 699.625193][ T50] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 699.625247][ T50] ext4_writepages+0x224/0x7d0 [ 699.625288][ T50] do_writepages+0x27a/0x600 [ 699.625325][ T50] __writeback_single_inode+0x168/0x14a0 [ 699.625364][ T50] writeback_single_inode+0x425/0x10f0 [ 699.625404][ T50] write_inode_now+0x170/0x1e0 [ 699.625441][ T50] iput.part.0+0x815/0x1190 [ 699.625496][ T50] iput+0x35/0x40 [ 699.625544][ T50] ext4_xattr_block_set+0x67c/0x3640 [ 699.713153][ T50] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 699.719603][ T50] __ext4_expand_extra_isize+0x346/0x480 [ 699.725778][ T50] __ext4_mark_inode_dirty+0x544/0x840 [ 699.731767][ T50] ext4_evict_inode+0x713/0x1730 [ 699.737233][ T50] evict+0x3c2/0xad0 [ 699.741843][ T50] iput.part.0+0x621/0x1190 [ 699.746891][ T50] iput+0x35/0x40 [ 699.751065][ T50] ext4_orphan_cleanup+0x731/0x11e0 [ 699.756798][ T50] ext4_fill_super+0x7ec1/0xb570 [ 699.762275][ T50] get_tree_bdev_flags+0x38c/0x620 [ 699.767916][ T50] vfs_get_tree+0x8e/0x330 [ 699.772887][ T50] path_mount+0x7bf/0x23a0 [ 699.777848][ T50] __x64_sys_mount+0x293/0x310 [ 699.783242][ T50] do_syscall_64+0xcd/0xf80 [ 699.788551][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.794976][ T50] [ 699.794976][ T50] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 699.802562][ T50] __lock_acquire+0x1669/0x2890 [ 699.807944][ T50] lock_acquire+0x179/0x330 [ 699.812978][ T50] down_write+0x92/0x200 [ 699.817748][ T50] ext4_destroy_inline_data+0x2d/0xe0 [ 699.823658][ T50] ext4_do_writepages+0x1154/0x3c80 [ 699.829385][ T50] ext4_writepages+0x37a/0x7d0 [ 699.834673][ T50] do_writepages+0x27a/0x600 [ 699.839791][ T50] __writeback_single_inode+0x168/0x14a0 [ 699.846039][ T50] writeback_sb_inodes+0x72e/0x1ce0 [ 699.851767][ T50] wb_writeback+0x419/0xae0 [ 699.856800][ T50] wb_workfn+0x14d/0xbb0 [ 699.861567][ T50] process_one_work+0x9ba/0x1b20 [ 699.867042][ T50] worker_thread+0x6c8/0xf10 [ 699.872167][ T50] kthread+0x3c5/0x780 [ 699.876768][ T50] ret_from_fork+0x983/0xb10 [ 699.881886][ T50] ret_from_fork_asm+0x1a/0x30 [ 699.887199][ T50] [ 699.887199][ T50] other info that might help us debug this: [ 699.887199][ T50] [ 699.897600][ T50] Possible unsafe locking scenario: [ 699.897600][ T50] [ 699.905042][ T50] CPU0 CPU1 [ 699.910400][ T50] ---- ---- [ 699.915753][ T50] rlock(&sbi->s_writepages_rwsem); [ 699.921132][ T50] lock(&ei->xattr_sem); [ 699.927997][ T50] lock(&sbi->s_writepages_rwsem); [ 699.935721][ T50] lock(&ei->xattr_sem); [ 699.940056][ T50] [ 699.940056][ T50] *** DEADLOCK *** [ 699.940056][ T50] [ 699.948188][ T50] 3 locks held by kworker/u8:3/50: [ 699.953306][ T50] #0: ffff8881416fb948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 699.964070][ T50] #1: ffffc90000bb7c90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 699.975961][ T50] #2: ffff88803faacb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 699.986293][ T50] [ 699.986293][ T50] stack backtrace: [ 699.992185][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.992238][ T50] Tainted: [L]=SOFTLOCKUP [ 699.992252][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 699.992280][ T50] Workqueue: writeback wb_workfn (flush-7:8) [ 699.992330][ T50] Call Trace: [ 699.992342][ T50] [ 699.992357][ T50] dump_stack_lvl+0x116/0x1f0 [ 699.992415][ T50] print_circular_bug+0x275/0x340 [ 699.992458][ T50] check_noncircular+0x146/0x160 [ 699.992502][ T50] __lock_acquire+0x1669/0x2890 [ 699.992550][ T50] lock_acquire+0x179/0x330 [ 699.992588][ T50] ? ext4_destroy_inline_data+0x2d/0xe0 [ 699.992636][ T50] ? __pfx___might_resched+0x10/0x10 [ 699.992667][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.992714][ T50] down_write+0x92/0x200 [ 699.992746][ T50] ? ext4_destroy_inline_data+0x2d/0xe0 [ 699.992790][ T50] ? __pfx_down_write+0x10/0x10 [ 699.992824][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.992864][ T50] ? ext4_journal_check_start+0x22b/0x340 [ 699.992903][ T50] ext4_destroy_inline_data+0x2d/0xe0 [ 699.992949][ T50] ext4_do_writepages+0x1154/0x3c80 [ 699.992986][ T50] ? look_up_lock_class+0x59/0x130 [ 699.993046][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993087][ T50] ? register_lock_class+0x41/0x4b0 [ 699.993127][ T50] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 699.993185][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993230][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993270][ T50] ? __lock_acquire+0x436/0x2890 [ 699.993310][ T50] ? __pfx_ext4_do_writepages+0x10/0x10 [ 699.993352][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993395][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993439][ T50] ? ext4_writepages+0x37a/0x7d0 [ 699.993474][ T50] ext4_writepages+0x37a/0x7d0 [ 699.993511][ T50] ? __pfx_ext4_writepages+0x10/0x10 [ 699.993548][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993598][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993641][ T50] ? __pfx_ext4_writepages+0x10/0x10 [ 699.993679][ T50] do_writepages+0x27a/0x600 [ 699.993720][ T50] ? __pfx_do_writepages+0x10/0x10 [ 699.993757][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993798][ T50] ? reacquire_held_locks+0xcd/0x1f0 [ 699.993839][ T50] __writeback_single_inode+0x168/0x14a0 [ 699.993877][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993919][ T50] ? __pfx___writeback_single_inode+0x10/0x10 [ 699.993955][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.993999][ T50] ? do_raw_spin_unlock+0x172/0x230 [ 699.994047][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994090][ T50] writeback_sb_inodes+0x72e/0x1ce0 [ 699.994136][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 699.994199][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994239][ T50] ? rcu_is_watching+0x12/0xc0 [ 699.994271][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994312][ T50] ? queue_io+0x3f6/0x4f0 [ 699.994366][ T50] wb_writeback+0x419/0xae0 [ 699.994405][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 699.994438][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994484][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994524][ T50] ? mark_held_locks+0x49/0x80 [ 699.994565][ T50] wb_workfn+0x14d/0xbb0 [ 699.994603][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994643][ T50] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 699.994695][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 699.994732][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994775][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994819][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.994859][ T50] ? rcu_is_watching+0x12/0xc0 [ 699.994893][ T50] process_one_work+0x9ba/0x1b20 [ 699.994945][ T50] ? __pfx_process_one_work+0x10/0x10 [ 699.994990][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.995040][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.995080][ T50] ? assign_work+0x1a0/0x250 [ 699.995122][ T50] worker_thread+0x6c8/0xf10 [ 699.995175][ T50] ? __pfx_worker_thread+0x10/0x10 [ 699.995219][ T50] kthread+0x3c5/0x780 [ 699.995258][ T50] ? __pfx_kthread+0x10/0x10 [ 699.995298][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.995339][ T50] ? rcu_is_watching+0x12/0xc0 [ 699.995370][ T50] ? __pfx_kthread+0x10/0x10 [ 699.995410][ T50] ret_from_fork+0x983/0xb10 [ 699.995448][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 699.995486][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 699.995526][ T50] ? __switch_to+0x7af/0x10d0 [ 699.995570][ T50] ? __pfx_kthread+0x10/0x10 [ 699.995611][ T50] ret_from_fork_asm+0x1a/0x30 [ 699.995672][ T50] [ 700.510635][ T50] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 700.520910][T21133] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 700.526381][ T50] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 700.533359][ T6014] usb 8-1: Using ep0 maxpacket: 16 [ 700.545415][ T50] EXT4-fs (loop8): This should not happen!! Data will be lost [ 700.545415][ T50] [ 700.545443][ T50] EXT4-fs (loop8): Total free blocks count 0 [ 700.567208][ T50] EXT4-fs (loop8): Free/Dirty block details [ 700.573186][ T50] EXT4-fs (loop8): free_blocks=2415919504 [ 700.578976][ T50] EXT4-fs (loop8): dirty_blocks=32 [ 700.584641][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.584702][ T6014] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 700.584743][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.586459][ T6014] usb 8-1: config 0 descriptor?? [ 700.595751][ T50] EXT4-fs (loop8): Block reservation details [ 700.595778][ T50] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 700.636112][ T6323] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 700.863784][T21140] loop8: detected capacity change from 0 to 2048 [ 700.896149][T21140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.009379][T19472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.069275][ T6014] hkems 0003:2006:0118.0015: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.7-1/input0 [ 701.082159][ T6014] hkems 0003:2006:0118.0015: no inputs found [ 701.088185][ T6014] hkems 0003:2006:0118.0015: force feedback init failed [ 701.289806][ T6014] usb 8-1: USB disconnect, device number 3 [ 707.681395][ T5843] Bluetooth: hci2: command 0x0406 tx timeout