last executing test programs:

4.976902558s ago: executing program 2 (id=1096):
bind$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

4.459444636s ago: executing program 0 (id=1101):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x8, 0x0, 0x0}}, 0x10)

4.400891673s ago: executing program 0 (id=1102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bd89"], 0x0)

4.158954333s ago: executing program 0 (id=1104):
r0 = msgget$private(0x0, 0x210)
msgsnd(r0, &(0x7f00000009c0)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000040)={0x2}, 0x8, 0x800)
msgrcv(r0, 0x0, 0x0, 0x2, 0x2000)

3.609218818s ago: executing program 1 (id=1110):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)

3.166096972s ago: executing program 0 (id=1112):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)={[{@ssd}, {@discard_async}, {@space_cache_v2}]}, 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40789440, &(0x7f0000000140)={0x3000000, 0xff, 0x0, 0xa, 0x2, [0xc5, 0xffffffff, 0x100044, 0x5b]})

2.906393334s ago: executing program 4 (id=1113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.906024179s ago: executing program 3 (id=1114):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

2.797806298s ago: executing program 2 (id=1115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x4000, 0x0, 0x44000}, 0x0)

2.710692433s ago: executing program 4 (id=1116):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0)

2.690598055s ago: executing program 1 (id=1117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e40)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x19aba89248068ba8}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x9, 0x62, 0xffff0c4f}}]}}}]}, 0x6c}}, 0x0)

2.583968738s ago: executing program 2 (id=1118):
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x410d1}, 0x8040)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000000280))

2.511437594s ago: executing program 3 (id=1119):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)

2.510939316s ago: executing program 1 (id=1120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x4000000)

2.465848562s ago: executing program 4 (id=1121):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
syncfs(r0)

2.465587504s ago: executing program 2 (id=1122):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x1d0, 0x138, 0x368, 0x98, 0x0, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x34}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x1, 0x19}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x7}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)

2.234995725s ago: executing program 3 (id=1123):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x8, 0x4)
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="88e0279f061e76fef0aad438680bb8db326922e75ecde6d17f1a7bc8f388489708bf3c897884f970dcd5f9056c419fa5af6e6768165c37fe3b8be42c8bc19287a4821cc88eeaacd584a395a1eff5dbef1cbb47064dccaaee501a3e2b9d29b39952972f80895b58839b5e9e2b0083a634999e0ef2c30bbf96", 0x78}, {&(0x7f0000000040)="bcc0ee9226cee23b0e9e7901d5d105c9b70fb16c8c8d30ab3ef71a1fe7877704fa9480cb29", 0x25}, {&(0x7f00000004c0)="a0f4132124c8d17937b4de2aefed4b67ea71733842323b287aa28e846ce411da3ffa194f940d040d3fc62473d2c726ce3c21fe67c99f6ab7a9018a6594b6c6eda4d978f3938a7c95a0fb937636208c673872bc6ee348b68b8c77e53ff3757c81baf643014d3218e615c5670fe5f9e57bc32ae841d56a4f14af73d4fd269559dacc8f67f79e325289a41c2bfa65743fc45864ec02199a80094ec143a1d57e744780e9879af0dc65716807dac34b908a711ca93998a4619cd086d133d2f7246d8a6406c578915ae0081c272bf62200e5c4b0178d5f0850e35f47b5db4ffe82aa296d0f2a3f0781e191f1832d2749", 0xed}, {&(0x7f0000000280)="7aa9b8f9efa61d3f6ea661265caa39791a379cc2", 0x14}, {&(0x7f00000009c0)="3c8e54828c2c6ad679d73ec8240942a79a2899f550146012042925d6d6c45688fd3e9554c116bb15f9baf0f9258419a78cd3dc5995774b4f93976fccb8b5d9319ae4ba3881b2380a380393e0f6d54cda5cf0faa03a0e2d", 0x57}], 0x5}, 0x20000004)

2.203917749s ago: executing program 2 (id=1124):
r0 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x3c, 0x0}, 0x20004899)

2.106488364s ago: executing program 1 (id=1125):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

1.976598045s ago: executing program 3 (id=1126):
syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYRES8=0x0], 0x1, 0xf23, &(0x7f000001fb40)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

1.798109638s ago: executing program 1 (id=1127):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40000000}}], 0x38, 0x4048800}, 0x0)

1.416566003s ago: executing program 0 (id=1128):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65290b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e606a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2294], 0xff, 0x5e54, &(0x7f0000005d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1.317649517s ago: executing program 4 (id=1129):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$eJzs3U1sHFcdAPD/rNf2bioct03TIFWqaaWCiEjiWC6YSwxCyEgVVEGCs9U4jZXNB7aL3B6IC0hcOXBFKgdzgRMIISEhRSriCLfCzeJUgeDSU9JDB83Xeuzuetdx/FH4/aLJvJk3781//jPzZnclawL4v7VwPpr3ox0L519Zz5a3Nmc6W5szt4pyoxMR4xHRiGjWWiXvRsxHMcWnsxVVRb/9/Gx57up7H2y9Xyw1y6kRxX/t/gE2hzmKjXKKqYgYKecHsKO/1x6tv/HtYtLNTJawF6vEwXEbjYh0h++d3a7pJR2pLfS934FPjqR4btYU9/9kxKmIaFUPtI2isnH0EQ60r7Fo4/DiAAAAgBPj9IN7EesxcdxxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCdJ+f7/pJweVuWpSKr3/4/V3rE/dszh9rd3ZK2qcL9xFMEAAAAAAAAAwOF6/kH86mqaTlTLaRKN74yUC+1y/kasxlIz4kKsx2KsxVqsxHRETNY6GltfXFtbmY4X8qUzH6ZpGk8ULWNlR8vLPVteHjLg9kGPGAAAAAAAAAD+p1yZHc/nP4yFmDjuYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoC6JGClm+XSmKk9GoxkRrYgYy7bbiPhrVT5BmvttcP9w4gAAAIAT5fSDeBDrMVEtp0n+nf9s/r2/FW/E7ViL5ViLTizFtfy3gOJbf2Nrc6aztTlzK5siYnRnv1/5z3b5txMDw8h7jOK3h957Ppdv0Y7rsZyvuRCvxZ3oxLVo5C0z56p4anHVvJ3FlFwppGmMD5Oga+U8O/KflvMj0R60wWSekdFuRi5lsSVFHp/cOxP1szOE3Xuajkb3l58z/ffU/TGmyvmVPfeSfJSmRelUtSbiiW/smfP8ehnd18H097c///tbAzbZnYnLtavv7N45j/js73793Rud2zdvJBvnj+wyeiTP9149/o/qDFWZKGzEUszUMvHs0Jm4vnrCM9HXzl8aG/FMt7wQX49vx/mYildjJZbj+7EYa7EUU/G1vLRYXs/Z/5N7Z2p+x9Krg2IaK8/LyK6YPnO6mO8V0wt524lYjm/GnbgWS/Fy/u9yTMcXYzZmY652hp8ZYqRt9Ljrf98/+Bc/Vxayge8n2wPg47q7DyDL65O1vNbH3Mm8rr6mEWn5ZHlqH8+jvcfGyvYjKzsTP6rdg8evm4lWdJ8SVXRPVxkY7ZmJX+TDymrn9s2VG4t3d/WbbPTe30ux8/BPzkCSXS9PdceInVdHVvd0z7rpvO5Mt66xu+6X7W7doDt1rPwM9/GeLud1z0bEz8tos7pMNoZndedq7bLPW6287sM0TYvPWwCcUB+l3S9Snz811v5X+y/td9o/bt9ov9L66viXxp8bi9E/jX65eWnkpcZzyW/infhBDP6GDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADLT65ls3FzudpZVdhTRN7/WpOpRCNCN2rPnjH2rb5O8ai4jhO8y2nm9E5GuaURaGaP7PiCjX3Hu0w3m7V9V4DG7+9/KcHEnC9ygkQ2/c6nv9lIU7nyoP52Gapkd+ONW72vbdPC0d2yl4zIXqFVkfq0qaEX1aHctwBByhi2u37l5cffOtLyzfWnx96fWl23Ozs3OX5mZfnrl4fbnTOu7wgEOUP+vzzznHHQkAAAAAAAAAAAAwrOH+OCe5uRjFmmavvyIY1BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgABbOR/N+JDF96cKlbHlrc6aTTVU5m4/kWz6MiEZEJFMRybsR81FMMVnrLum3n42Iq+99sPV+sdQsp3z7xsGPYqOcYqoMd6r3dq1eK9N7/fpL8n7u9u9vSEk5jXTXzB+oP3hM/hsAAP//zi8OkA==")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r0)

1.237048219s ago: executing program 2 (id=1130):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

1.180528127s ago: executing program 3 (id=1131):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x1, 0x2, &(0x7f0000000280)=[r1, r1], &(0x7f0000000180), 0x0, 0x0})

824.675905ms ago: executing program 1 (id=1132):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0xfc}}}}}]}}]}}, 0x0)
clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

672.85852ms ago: executing program 4 (id=1133):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8)

491.437057ms ago: executing program 3 (id=1134):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x828a, 0x3, 0x2}, 0x18, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/252, 0xfc)
landlock_restrict_self(r0, 0x8)

361.239346ms ago: executing program 4 (id=1135):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 0 (id=1136):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xffffffffffffffff})

kernel console output (not intermixed with test programs):

 needed: Please wait.
[  150.928633][ T7462] XFS (loop3): Quotacheck: Done.
[  150.962084][ T5942] usb 1-1: Using ep0 maxpacket: 32
[  150.971929][ T5942] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  150.987672][ T5942] usb 1-1: config 0 has no interface number 0
[  151.016915][ T5942] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  151.049340][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.067725][ T5942] usb 1-1: Product: syz
[  151.072921][ T5942] usb 1-1: Manufacturer: syz
[  151.077565][ T5942] usb 1-1: SerialNumber: syz
[  151.097604][ T5942] usb 1-1: config 0 descriptor??
[  151.150077][ T5942] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  151.170423][ T5822] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.348465][ T5942] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  151.443048][ T5942] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  151.792877][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  151.796210][ T5943] usb 1-1: USB disconnect, device number 6
[  151.870182][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  151.968415][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  152.023649][ T5943] quatech2 1-1:0.51: device disconnected
[  152.124957][ T7513] loop4: detected capacity change from 0 to 1024
[  152.183169][ T7513] hfsplus: invalid length 32517 has been corrected to 255
[  152.332615][   T30] audit: type=1800 audit(1771939189.700:31): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.542" name="file1" dev="loop4" ino=20 res=0 errno=0
[  152.424150][ T7513] hfsplus: b-tree write err: -5, ino 20
[  152.591895][ T1316] hfsplus: b-tree write err: -5, ino 4
[  152.605153][ T1316] hfsplus: b-tree write err: -5, ino 2
[  152.635420][ T1316] hfsplus: b-tree write err: -5, ino 20
[  152.661966][ T7526] loop0: detected capacity change from 0 to 4096
[  152.709410][ T7526] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  152.801766][ T7526] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  152.819503][ T7526] ntfs3(loop0): ino=1a, mi_enum_attr
[  152.833912][ T7526] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  152.917009][ T7532] Zero length message leads to an empty skb
[  153.255043][ T7538] loop0: detected capacity change from 0 to 4096
[  153.340022][ T7538] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  153.374362][ T7538] ntfs3(loop0): ino=1a, mi_enum_attr
[  153.382838][ T7538] ntfs3(loop0): ino=1a, mi_enum_attr
[  153.397294][ T7538] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  153.643974][ T7552] input: syz0 as /devices/virtual/input/input8
[  154.225288][ T5143] Bluetooth: hci4: command 0x0405 tx timeout
[  154.524649][ T7553] loop0: detected capacity change from 0 to 32768
[  154.550734][ T7553] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.558 (7553)
[  154.606980][ T7553] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  154.637785][ T7553] BTRFS info (device loop0): using sha256 checksum algorithm
[  154.959251][ T7553] BTRFS info (device loop0): rebuilding free space tree
[  154.968155][ T7559] loop1: detected capacity change from 0 to 32768
[  155.081431][ T7603] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  155.094666][ T7553] BTRFS info (device loop0): disabling free space tree
[  155.101633][ T7553] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  155.114625][ T7553] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  155.131724][ T7559] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.210654][ T7553] BTRFS info (device loop0): setting nodatasum
[  155.228436][ T7571] loop4: detected capacity change from 0 to 32768
[  155.260031][ T7553] BTRFS info (device loop0): setting nodatacow
[  155.281623][ T7553] BTRFS info (device loop0): turning off barriers
[  155.335004][ T7553] BTRFS info (device loop0): force clearing of disk cache
[  155.363821][ T7559] XFS (loop1): Ending clean mount
[  155.639005][ T5834] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.779439][ T5820] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.961707][ T7619] loop4: detected capacity change from 0 to 256
[  155.984022][ T7619] exfat: Deprecated parameter 'namecase'
[  156.096274][ T7619] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  156.209109][ T7623] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  156.522301][ T7631] loop4: detected capacity change from 0 to 1024
[  156.633161][ T7631] hfsplus: b-tree write err: -5, ino 2
[  156.680206][ T7631] hfsplus: bad catalog entry type
[  156.805898][  T170] hfsplus: b-tree write err: -5, ino 25
[  156.842447][  T170] hfsplus: b-tree write err: -5, ino 4
[  156.861240][  T170] hfsplus: b-tree write err: -5, ino 2
[  156.866981][ T7637] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.892781][  T170] hfsplus: b-tree write err: -5, ino 26
[  156.911002][ T7621] loop3: detected capacity change from 0 to 32768
[  156.923289][ T7621] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.582 (7621)
[  156.981045][ T7621] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  157.020287][ T7621] BTRFS info (device loop3): using blake2b checksum algorithm
[  157.058463][ T7643] loop4: detected capacity change from 0 to 256
[  157.113724][ T7654] loop2: detected capacity change from 0 to 64
[  157.126707][ T7650] loop1: detected capacity change from 0 to 256
[  157.142249][ T7643] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  157.216177][ T7621] BTRFS info (device loop3): enabling ssd optimizations
[  157.231553][ T7621] BTRFS info (device loop3): turning on async discard
[  157.251735][ T7650] exFAT-fs (loop1): bogus number of FAT structure
[  157.262229][ T7621] BTRFS info (device loop3): enabling free space tree
[  157.302848][ T7650] exFAT-fs (loop1): failed to read boot sector
[  157.312392][ T7650] exFAT-fs (loop1): failed to recognize exfat type
[  157.547081][ T5822] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  157.587528][ T7665] SQUASHFS error: Failed to read block 0x260685: -5
[  157.669821][ T7665] SQUASHFS error: Unable to read metadata cache entry [260685]
[  157.702342][ T7665] SQUASHFS error: Unable to read directory block [260685:0]
[  158.281243][ T7661] set_capacity_and_notify: 2 callbacks suppressed
[  158.281272][ T7661] loop0: detected capacity change from 0 to 32768
[  158.323643][ T7661] btrfs: Deprecated parameter 'usebackuproot'
[  158.352181][ T7661] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  158.386711][ T7661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.593 (7661)
[  158.441140][ T7661] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.493480][ T7661] BTRFS info (device loop0): using crc32c checksum algorithm
[  158.526077][ T5943] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  158.662068][ T7661] BTRFS info (device loop0): rebuilding free space tree
[  158.696592][ T5943] usb 2-1: Using ep0 maxpacket: 32
[  158.723121][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.734421][ T7661] BTRFS info (device loop0): disabling free space tree
[  158.736919][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.766365][ T7661] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  158.767077][ T5943] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  158.800886][ T7703] loop4: detected capacity change from 0 to 1024
[  158.808241][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.829341][ T7661] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  158.841370][ T5943] usb 2-1: config 0 descriptor??
[  158.848445][ T7703] EXT4-fs: Ignoring removed bh option
[  158.896942][ T7661] BTRFS info (device loop0): setting nodatasum
[  158.917899][ T7703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.934490][ T7661] BTRFS info (device loop0): setting nodatacow
[  158.981492][ T7661] BTRFS info (device loop0): enabling ssd optimizations
[  159.021820][ T7661] BTRFS info (device loop0): turning off barriers
[  159.039982][ T7703] EXT4-fs (loop4): shut down requested (1)
[  159.064454][ T7661] BTRFS info (device loop0): turning on async discard
[  159.092583][ T7680] loop3: detected capacity change from 0 to 32768
[  159.100540][ T7680] btrfs: Deprecated parameter 'usebackuproot'
[  159.106694][ T7680] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  159.109888][ T7661] BTRFS info (device loop0): force clearing of disk cache
[  159.122529][ T7680] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 669bba3f-7a5f-4b51-9c80-53b00bec0932
[  159.151402][ T7680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.601 (7680)
[  159.188835][ T7661] BTRFS info (device loop0): trying to use backup root at mount time
[  159.224374][ T7680] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.232581][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.269302][ T7680] BTRFS info (device loop3): using crc32c checksum algorithm
[  159.287407][   T30] audit: type=1800 audit(1771939196.626:32): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.593" name="file1" dev="loop0" ino=260 res=0 errno=0
[  159.337514][ T5943] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  159.529708][ T7680] BTRFS info (device loop3): rebuilding free space tree
[  159.565422][ T5950] usb 2-1: USB disconnect, device number 6
[  159.641670][ T5820] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.656587][ T7680] BTRFS info (device loop3): enabling ssd optimizations
[  159.681497][ T7722] fido_id[7722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  159.701788][ T7680] BTRFS info (device loop3): using spread ssd allocation scheme
[  159.709490][ T7680] BTRFS info (device loop3): turning on flush-on-commit
[  159.742476][ T7680] BTRFS info (device loop3): enabling free space tree
[  159.753929][ T7680] BTRFS info (device loop3): force clearing of disk cache
[  159.761861][ T7680] BTRFS info (device loop3): trying to use backup root at mount time
[  159.838435][ T7680] BTRFS info (device loop3): force zlib compression, level 3
[  160.261677][ T5822] BTRFS info (device loop3): last unmount of filesystem 669bba3f-7a5f-4b51-9c80-53b00bec0932
[  160.303870][ T7742] loop1: detected capacity change from 0 to 8
[  160.692727][ T7754] syz_tun: entered promiscuous mode
[  160.707404][ T7756] netlink: 9 bytes leftover after parsing attributes in process `syz.4.620'.
[  160.740497][ T7754] macvtap1: entered promiscuous mode
[  160.767246][ T5942] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  160.774309][ T7754] macvtap1: entered allmulticast mode
[  160.780229][ T7754] syz_tun: entered allmulticast mode
[  160.794873][ T7756] netlink: 9 bytes leftover after parsing attributes in process `syz.4.620'.
[  160.814408][ T7759] overlayfs: upper fs does not support tmpfile.
[  160.874662][ T5950] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  160.958114][ T5942] usb 1-1: Using ep0 maxpacket: 16
[  160.992945][ T5942] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  161.022209][ T5942] usb 1-1: config 0 has no interface number 0
[  161.048937][ T5942] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.064030][ T5950] usb 2-1: Using ep0 maxpacket: 16
[  161.105944][ T5942] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  161.118676][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.149929][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.164774][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.181985][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  161.200714][ T5942] usb 1-1: config 0 descriptor??
[  161.225755][ T5950] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  161.245825][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.294177][ T5950] usb 2-1: config 0 descriptor??
[  161.386563][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'.
[  161.650998][ T5942] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input2
[  161.660941][ T7783] tipc: Started in network mode
[  161.666405][ T7783] tipc: Node identity ac14140f, cluster identity 4711
[  161.696286][ T7783] tipc: New replicast peer: 255.255.255.255
[  161.718202][ T7783] tipc: Enabled bearer <udp:syz2>, priority 10
[  161.742713][ T5950] hid_parser_main: 28 callbacks suppressed
[  161.742758][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x2
[  161.773333][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.818925][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.853856][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.871452][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.905029][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.913596][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.933069][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.953301][ T5950] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  161.994765][ T5950] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9
[  162.069093][ T5950] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  162.154385][ T5950] usb 2-1: USB disconnect, device number 7
[  162.209987][ T5943] usb 1-1: USB disconnect, device number 7
[  162.288123][ T7793] fido_id[7793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  162.352118][ T5826] block nbd0: Receive control failed (result -32)
[  162.609942][   T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  162.768816][ T7813] program syz.3.645 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  162.791034][   T24] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.820743][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  162.835699][   T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  162.848045][ T5943] tipc: Node number set to 2886997007
[  162.856070][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.882884][ T5950] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  162.895732][   T24] usb 3-1: config 0 descriptor??
[  162.923046][ T7815] netlink: 'syz.0.646': attribute type 11 has an invalid length.
[  162.940059][ T7815] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.646'.
[  163.051998][ T5950] usb 5-1: Using ep0 maxpacket: 16
[  163.070870][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.101529][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.128545][ T5950] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  163.152368][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.192601][ T5950] usb 5-1: config 0 descriptor??
[  163.201751][ T7821] loop0: detected capacity change from 0 to 2048
[  163.277113][ T7821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.313993][ T7821] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.366445][   T24] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0
[  163.403459][   T24] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v0.03 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[  163.542432][ T7811] loop1: detected capacity change from 0 to 32768
[  163.558769][   T24] playstation 0003:054C:0BA0.0007: Invalid reportID received, expected 18 got 15
[  163.588335][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.597621][   T24] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -22
[  163.610307][   T24] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4
[  163.631352][   T24] playstation 0003:054C:0BA0.0007: Failed to create dualshock4.
[  163.647656][ T5950] gt683r_led 0003:1770:FF00.0008: unbalanced collection at end of report description
[  163.666936][   T24] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -22
[  163.709106][ T5950] gt683r_led 0003:1770:FF00.0008: hid parsing failed
[  163.709983][ T7811] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  163.719619][ T5950] gt683r_led 0003:1770:FF00.0008: probe with driver gt683r_led failed with error -22
[  163.770559][  T796] usb 3-1: USB disconnect, device number 3
[  163.881234][ T5950] usb 5-1: USB disconnect, device number 5
[  163.957921][ T7811] XFS (loop1): Starting recovery (logdev: internal)
[  164.045363][ T7811] XFS (loop1): Ending recovery (logdev: internal)
[  164.065283][ T7840] loop3: detected capacity change from 0 to 512
[  164.079247][ T7840] EXT4-fs: Ignoring removed i_version option
[  164.112286][ T5834] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  164.127904][ T7840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.274462][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.426760][  T796] hid-generic 0007:0006:0003.0009: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  164.605788][ T7849] loop4: detected capacity change from 0 to 1024
[  164.647930][  T796] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  164.690883][ T7849] hfsplus: bad catalog entry type
[  164.766914][ T1316] hfsplus: b-tree write err: -5, ino 25
[  164.780873][ T1316] hfsplus: b-tree write err: -5, ino 4
[  164.791096][ T1316] hfsplus: b-tree write err: -5, ino 2
[  164.847355][  T796] usb 4-1: Using ep0 maxpacket: 16
[  164.868991][  T796] usb 4-1: config 0 has no interfaces?
[  164.914626][  T796] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  164.942819][  T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.958284][  T796] usb 4-1: Product: syz
[  164.967092][  T796] usb 4-1: Manufacturer: syz
[  164.976028][  T796] usb 4-1: SerialNumber: syz
[  164.985598][  T796] usb 4-1: config 0 descriptor??
[  164.996425][ T7839] loop0: detected capacity change from 0 to 40427
[  165.024241][ T7839] F2FS-fs (loop0): invalid crc value
[  165.156309][ T7839] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.176455][ T7839] F2FS-fs (loop0): Start checkpoint disabled!
[  165.186479][ T7839] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  165.199782][ T7839] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  165.229711][ T5943] usb 4-1: USB disconnect, device number 4
[  165.246354][   T30] audit: type=1800 audit(1771939202.566:33): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.651" name="bus" dev="loop0" ino=10 res=0 errno=0
[  165.281370][ T7862] loop1: detected capacity change from 0 to 1764
[  165.342004][ T1316] kworker/u8:8: attempt to access beyond end of device
[  165.342004][ T1316] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  165.372225][ T1316] CPU: 0 UID: 0 PID: 1316 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  165.372269][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  165.372289][ T1316] Workqueue: writeback wb_workfn (flush-7:0)
[  165.372336][ T1316] Call Trace:
[  165.372350][ T1316]  <TASK>
[  165.372363][ T1316]  dump_stack_lvl+0xe8/0x150
[  165.372414][ T1316]  f2fs_handle_critical_error+0x37c/0x540
[  165.372486][ T1316]  f2fs_write_end_io+0xcdb/0xff0
[  165.372543][ T1316]  __submit_merged_bio+0x256/0x700
[  165.372575][ T1316]  __submit_merged_write_cond+0x3c9/0x4e0
[  165.372620][ T1316]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  165.372684][ T1316]  f2fs_write_data_pages+0x2975/0x35e0
[  165.372772][ T1316]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  165.372814][ T1316]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  165.372883][ T1316]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  165.372934][ T1316]  ? __lock_acquire+0x6b5/0x2cf0
[  165.372982][ T1316]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  165.373008][ T1316]  do_writepages+0x32e/0x550
[  165.373045][ T1316]  ? reacquire_held_locks+0x104/0x190
[  165.373073][ T1316]  ? writeback_sb_inodes+0x477/0x1a20
[  165.373106][ T1316]  __writeback_single_inode+0x133/0x11a0
[  165.373134][ T1316]  ? do_raw_spin_unlock+0xf5/0x210
[  165.373161][ T1316]  writeback_sb_inodes+0x992/0x1a20
[  165.373212][ T1316]  ? do_raw_spin_unlock+0xf5/0x210
[  165.373245][ T1316]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  165.373268][ T1316]  ? do_raw_spin_lock+0x12b/0x2f0
[  165.373337][ T1316]  ? rcu_is_watching+0x15/0xb0
[  165.373378][ T1316]  wb_writeback+0x456/0xb70
[  165.373408][ T1316]  ? queue_io+0x231/0x4a0
[  165.373443][ T1316]  ? __pfx_wb_writeback+0x10/0x10
[  165.373465][ T1316]  ? do_raw_spin_lock+0x12b/0x2f0
[  165.373506][ T1316]  wb_workfn+0x414/0xf50
[  165.373530][ T1316]  ? look_up_lock_class+0x57/0x110
[  165.373589][ T1316]  ? __pfx_wb_workfn+0x10/0x10
[  165.373616][ T1316]  ? do_raw_spin_lock+0x12b/0x2f0
[  165.373641][ T1316]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  165.373691][ T1316]  ? process_one_work+0x87c/0x1650
[  165.373717][ T1316]  process_one_work+0x949/0x1650
[  165.373779][ T1316]  ? __pfx_process_one_work+0x10/0x10
[  165.373803][ T1316]  ? do_raw_spin_lock+0x12b/0x2f0
[  165.373846][ T1316]  worker_thread+0xb46/0x1140
[  165.373887][ T1316]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  165.373948][ T1316]  kthread+0x388/0x470
[  165.373988][ T1316]  ? __pfx_worker_thread+0x10/0x10
[  165.374012][ T1316]  ? __pfx_kthread+0x10/0x10
[  165.374035][ T1316]  ret_from_fork+0x51e/0xb90
[  165.374067][ T1316]  ? __pfx_ret_from_fork+0x10/0x10
[  165.374092][ T1316]  ? __switch_to+0xc7d/0x1450
[  165.374122][ T1316]  ? __pfx_kthread+0x10/0x10
[  165.374145][ T1316]  ret_from_fork_asm+0x1a/0x30
[  165.374197][ T1316]  </TASK>
[  165.377012][ T1316] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  165.411394][ T7852] loop2: detected capacity change from 0 to 32768
[  165.804922][ T7852] ialloc: diAlloc returned -28!
[  165.995479][ T7867] loop4: detected capacity change from 0 to 4096
[  166.842939][ T7890] mmap: syz.2.666 (7890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  167.155349][ T7899] loop3: detected capacity change from 0 to 256
[  167.202499][ T7899] exfat: Deprecated parameter 'utf8'
[  167.235260][ T7899] exfat: Deprecated parameter 'namecase'
[  167.241030][ T7899] exfat: Deprecated parameter 'namecase'
[  167.281905][ T7899] exfat: Deprecated parameter 'utf8'
[  167.351627][ T7899] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  167.404007][ T7903] loop1: detected capacity change from 0 to 128
[  167.453448][   T30] audit: type=1800 audit(1771939204.769:34): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.676" name="file2" dev="loop3" ino=1048614 res=0 errno=0
[  167.496158][ T7903] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  167.556718][ T7903] hpfs: filesystem error: improperly stopped
[  167.562804][ T7903] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  167.594508][ T7903] hpfs: You really don't want any checks? You are crazy...
[  167.618499][ T7903] hpfs: hpfs_map_sector(): read error
[  167.624047][ T7903] hpfs: code page support is disabled
[  167.677682][ T7903] hpfs: hpfs_map_4sectors(): unaligned read
[  167.683873][ T7903] hpfs: hpfs_map_4sectors(): unaligned read
[  167.780611][ T7903] hpfs: filesystem error: unable to find root dir
[  167.896951][ T7917] loop3: detected capacity change from 0 to 64
[  168.632393][ T7932] loop3: detected capacity change from 0 to 4096
[  168.855948][ T7936] loop2: detected capacity change from 0 to 4096
[  168.902203][ T7936] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  169.048514][ T7923] loop4: detected capacity change from 0 to 32768
[  169.099752][ T7923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.688 (7923)
[  169.208925][ T7923] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.275869][ T7923] BTRFS info (device loop4): using sha256 checksum algorithm
[  169.586127][ T7923] BTRFS info (device loop4): enabling ssd optimizations
[  169.643377][ T7923] BTRFS info (device loop4): turning on async discard
[  169.650257][ T7923] BTRFS info (device loop4): enabling free space tree
[  170.134860][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.221686][ T7975] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  170.429748][ T7978] loop2: detected capacity change from 0 to 1024
[  170.456434][ T7978] EXT4-fs: Ignoring removed bh option
[  170.491184][ T7978] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  170.614102][ T7978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.688098][  T980] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  170.804942][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.819235][ T7985] loop0: detected capacity change from 0 to 256
[  170.896916][  T980] usb 4-1: Using ep0 maxpacket: 8
[  170.931528][  T980] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  170.959698][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.997191][  T980] usb 4-1: Product: syz
[  171.005006][  T980] usb 4-1: Manufacturer: syz
[  171.025351][  T980] usb 4-1: SerialNumber: syz
[  171.035699][  T980] usb 4-1: config 0 descriptor??
[  171.045352][  T980] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  171.060102][ T7985] FAT-fs (loop0): Directory bread(block 64) failed
[  171.066800][ T7985] FAT-fs (loop0): Directory bread(block 65) failed
[  171.073830][  T980] pctv452e: pctv452e_power_ctrl: 1
[  171.073830][  T980] 
[  171.085346][ T7985] FAT-fs (loop0): Directory bread(block 66) failed
[  171.097941][  T980] usb 4-1: selecting invalid altsetting 3
[  171.103719][  T980] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  171.103719][  T980] 
[  171.142884][ T7985] FAT-fs (loop0): Directory bread(block 67) failed
[  171.164264][  T980] dvb-usb: bulk message failed: -22 (5/0)
[  171.167058][ T7985] FAT-fs (loop0): Directory bread(block 68) failed
[  171.195504][ T7994] loop4: detected capacity change from 0 to 1024
[  171.203395][ T7985] FAT-fs (loop0): Directory bread(block 69) failed
[  171.212611][  T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  171.217475][ T7985] FAT-fs (loop0): Directory bread(block 70) failed
[  171.229770][  T980] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  171.247748][ T7979] dvb-usb: bulk message failed: -22 (7/0)
[  171.259372][ T7985] FAT-fs (loop0): Directory bread(block 71) failed
[  171.266998][ T7979] pctv452e: I2C error -22; AA 01  00 00 00 -> aa 01 31 03 00 00 00
[  171.279946][  T980] usb 4-1: media controller created
[  171.280418][ T7985] FAT-fs (loop0): Directory bread(block 72) failed
[  171.309837][  T980] dvb-usb: bulk message failed: -22 (8/0)
[  171.315825][  T980] pctv452e: I2C error -22; AA 02  A0 01 14 -> aa 02 31 04 a0 01 14
[  171.339058][ T7985] FAT-fs (loop0): Directory bread(block 73) failed
[  171.348610][  T980] dvb-usb: MAC address reading failed.
[  171.403107][  T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  171.497479][  T980] DVB: Unable to find symbol stb0899_attach()
[  171.522426][  T980] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  171.677838][ T8004] loop2: detected capacity change from 0 to 128
[  171.690640][  T980] rc_core: IR keymap rc-tt-1500 not found
[  171.696507][  T980] Registered IR keymap rc-empty
[  171.721644][ T8004] adfs: Bad value for 'gid'
[  171.726841][ T8007] loop4: detected capacity change from 0 to 256
[  171.737196][  T980] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  171.750235][ T8004] adfs: Bad value for 'gid'
[  171.792799][  T980] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10
[  171.855971][  T980] dvb-usb: schedule remote query interval to 100 msecs.
[  171.873529][  T980] pctv452e: pctv452e_power_ctrl: 0
[  171.873529][  T980] 
[  171.917531][  T980] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  171.970028][  T980] usb 4-1: USB disconnect, device number 5
[  172.004152][ T5942] dvb-usb: bulk message failed: -22 (4/0)
[  172.034967][ T5942] dvb-usb: error -22 while querying for an remote control event.
[  172.056229][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'.
[  172.206102][ T7992] loop1: detected capacity change from 0 to 32768
[  172.237663][ T7992] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.711 (7992)
[  172.267147][  T980] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  172.284052][ T7992] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  172.330333][ T7992] BTRFS info (device loop1): using blake2b checksum algorithm
[  172.549286][ T7992] BTRFS info (device loop1): enabling ssd optimizations
[  172.558211][ T7992] BTRFS info (device loop1): turning on async discard
[  172.565566][ T7992] BTRFS info (device loop1): enabling free space tree
[  172.580757][ T7992] BTRFS info (device loop1): use zstd compression, level 3
[  172.634469][ T8041] netem: change failed
[  172.834280][ T5834] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.375534][ T8026] loop4: detected capacity change from 0 to 32768
[  173.533135][ T8026] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  173.651138][ T8026] XFS (loop4): Ending clean mount
[  173.656882][ T8039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.725 (8039)
[  173.712537][ T8026] XFS (loop4): Quotacheck needed: Please wait.
[  173.741312][ T8069] netlink: 'syz.3.736': attribute type 30 has an invalid length.
[  173.808162][ T8039] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  173.861965][ T8039] BTRFS info (device loop0): using sha256 checksum algorithm
[  173.891617][ T8026] XFS (loop4): Quotacheck: Done.
[  174.113296][ T5821] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  174.153030][ T8039] BTRFS info (device loop0): enabling ssd optimizations
[  174.216392][ T8039] BTRFS info (device loop0): turning on async discard
[  174.274137][ T8039] BTRFS info (device loop0): enabling free space tree
[  174.611835][ T8102] netlink: 'syz.2.744': attribute type 5 has an invalid length.
[  174.662110][ T5820] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.802131][ T8111] set_capacity_and_notify: 1 callbacks suppressed
[  174.802149][ T8111] loop2: detected capacity change from 0 to 128
[  174.970759][ T8116] netlink: 'syz.4.748': attribute type 2 has an invalid length.
[  175.096752][ T8118] loop2: detected capacity change from 0 to 16
[  175.142762][ T8118] erofs (device loop2): mounted with root inode @ nid 36.
[  175.542917][ T8129] loop9: detected capacity change from 0 to 7
[  175.569593][ T8132] loop2: detected capacity change from 0 to 8
[  175.586381][ T8129] Dev loop9: unable to read RDB block 7
[  175.689321][ T8129]  loop9: unable to read partition table
[  175.703825][ T8129] loop9: partition table beyond EOD, truncated
[  175.715788][ T8129] loop_reread_partitions: partition scan of loop9 (3��x��C�

) failed (rc=-5)
[  175.737474][ T7315] Dev loop9: unable to read RDB block 7
[  175.753913][ T7315]  loop9: unable to read partition table
[  175.760025][ T7315] loop9: partition table beyond EOD, truncated
[  175.773347][ T8133] Dev loop9: unable to read RDB block 7
[  175.778973][ T8133]  loop9: unable to read partition table
[  175.781728][ T8141] loop4: detected capacity change from 0 to 256
[  175.802155][ T8133] loop9: partition table beyond EOD, truncated
[  175.829864][ T8133] loop_reread_partitions: partition scan of loop9 (3��x��C�

) failed (rc=-5)
[  175.855928][ T8141] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  176.167012][ T8148] pimreg: entered allmulticast mode
[  176.227126][ T8148] pimreg: left allmulticast mode
[  176.663845][ T5826] Bluetooth: hci4: link tx timeout
[  176.670017][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.822232][ T8178] syz.0.776 uses obsolete (PF_INET,SOCK_PACKET)
[  177.099306][ T8164] loop3: detected capacity change from 0 to 32768
[  177.181202][ T8164] JBD2: Ignoring recovery information on journal
[  177.275242][ T8163] loop4: detected capacity change from 0 to 40427
[  177.306490][ T8163] F2FS-fs (loop4): build fault injection rate: 174
[  177.313076][ T8163] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  177.340071][ T8164] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  177.392303][ T8163] F2FS-fs (loop4): invalid crc value
[  177.638496][ T8163] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  177.669550][ T8163] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  177.681684][ T8196] loop1: detected capacity change from 0 to 2048
[  177.715769][ T8196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.782019][ T5822] ocfs2: Unmounting device (7,3) on (node local)
[  177.875113][ T5821] syz-executor: attempt to access beyond end of device
[  177.875113][ T5821] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  177.947339][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  177.947367][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  177.947380][ T5821] Call Trace:
[  177.947388][ T5821]  <TASK>
[  177.947397][ T5821]  dump_stack_lvl+0xe8/0x150
[  177.947431][ T5821]  f2fs_handle_critical_error+0x37c/0x540
[  177.947472][ T5821]  f2fs_write_end_io+0xcdb/0xff0
[  177.947496][ T5821]  ? __submit_merged_bio+0x256/0x700
[  177.947534][ T5821]  __submit_merged_bio+0x256/0x700
[  177.947563][ T5821]  __submit_merged_write_cond+0x3c9/0x4e0
[  177.947606][ T5821]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  177.947663][ T5821]  f2fs_write_data_pages+0x2975/0x35e0
[  177.947724][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.947772][ T5821]  ? css_rstat_updated+0x23a/0x530
[  177.947821][ T5821]  ? rcu_is_watching+0x15/0xb0
[  177.947854][ T5821]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  177.947886][ T5821]  ? __lock_acquire+0x6b5/0x2cf0
[  177.947928][ T5821]  ? __lock_acquire+0x6b5/0x2cf0
[  177.947959][ T5821]  ? do_raw_spin_lock+0x12b/0x2f0
[  177.947992][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  177.948013][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.948039][ T5821]  do_writepages+0x32e/0x550
[  177.948078][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  177.948104][ T5821]  filemap_fdatawrite+0x1e9/0x2f0
[  177.948136][ T5821]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  177.948214][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  177.948239][ T5821]  f2fs_sync_dirty_inodes+0x30e/0x860
[  177.948283][ T5821]  f2fs_write_checkpoint+0x9df/0x26a0
[  177.948343][ T5821]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  177.948427][ T5821]  kill_f2fs_super+0x314/0x720
[  177.948460][ T5821]  ? __pfx_kill_f2fs_super+0x10/0x10
[  177.948499][ T5821]  ? lockdep_hardirqs_on+0x7a/0x110
[  177.948536][ T5821]  deactivate_locked_super+0xbc/0x130
[  177.948569][ T5821]  cleanup_mnt+0x437/0x4d0
[  177.948588][ T5821]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.948613][ T5821]  task_work_run+0x1d9/0x270
[  177.948638][ T5821]  ? __pfx_task_work_run+0x10/0x10
[  177.948671][ T5821]  exit_to_user_mode_loop+0xed/0x480
[  177.948694][ T5821]  ? rcu_is_watching+0x15/0xb0
[  177.948725][ T5821]  do_syscall_64+0x32d/0xf80
[  177.948753][ T5821]  ? trace_irq_disable+0x3b/0x150
[  177.948781][ T5821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.948801][ T5821]  ? clear_bhb_loop+0x40/0x90
[  177.948827][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.948847][ T5821] RIP: 0033:0x7f70a739d897
[  177.948866][ T5821] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  177.948883][ T5821] RSP: 002b:00007ffe73c1f5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  177.948904][ T5821] RAX: 0000000000000000 RBX: 00007f70a7431ef0 RCX: 00007f70a739d897
[  177.948918][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe73c1f670
[  177.948930][ T5821] RBP: 00007ffe73c1f670 R08: 00007ffe73c20670 R09: 00000000ffffffff
[  177.948943][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe73c20700
[  177.948955][ T5821] R13: 00007f70a7431ef0 R14: 000000000002b5ed R15: 00007ffe73c20740
[  177.948989][ T5821]  </TASK>
[  178.334768][ T5821] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  178.390020][ T8186] loop0: detected capacity change from 0 to 32768
[  178.397516][ T8186] xfs: Deprecated parameter 'ikeep'
[  178.465261][ T8186] XFS: ikeep mount option is deprecated.
[  178.505799][ T8202] loop2: detected capacity change from 0 to 1024
[  178.512508][ T8186] xfs: Deprecated parameter 'ikeep'
[  178.517746][ T8186] XFS: ikeep mount option is deprecated.
[  178.583239][ T8202] hfsplus: b-tree write err: -5, ino 2
[  178.605539][ T8186] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  178.615334][ T8186] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  178.646873][ T8186] XFS (loop0): Ending clean mount
[  178.660008][ T8186] XFS (loop0): Quotacheck needed: Please wait.
[  178.703219][ T5826] Bluetooth: hci4: command 0x0405 tx timeout
[  178.745704][ T8186] XFS (loop0): Quotacheck: Done.
[  178.801391][   T63] hfsplus: b-tree write err: -5, ino 25
[  178.807393][   T63] hfsplus: b-tree write err: -5, ino 4
[  178.848595][   T63] hfsplus: b-tree write err: -5, ino 2
[  178.871254][   T63] hfsplus: b-tree write err: -5, ino 26
[  179.042232][ T5820] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.593051][ T8230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.790410][ T8219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.789 (8219)
[  179.866002][ T8219] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.882050][ T8219] BTRFS info (device loop1): using sha256 checksum algorithm
[  180.011255][ T8219] BTRFS info (device loop1): enabling ssd optimizations
[  180.021165][ T8219] BTRFS info (device loop1): turning on async discard
[  180.028570][ T8219] BTRFS info (device loop1): enabling free space tree
[  180.045165][ T8226] set_capacity_and_notify: 2 callbacks suppressed
[  180.045182][ T8226] loop2: detected capacity change from 0 to 40427
[  180.121899][ T8226] F2FS-fs (loop2): invalid crc value
[  180.161564][ T5834] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.328356][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'.
[  180.565319][ T8226] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.625893][ T8226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  180.683301][  T170] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 234: padding at end of block bitmap is not set
[  180.760032][  T170] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  180.786996][ T5829] syz-executor: attempt to access beyond end of device
[  180.786996][ T5829] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.806853][  T170] EXT4-fs (loop0): This should not happen!! Data will be lost
[  180.806853][  T170] 
[  180.807151][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  180.807222][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  180.807255][ T5829] Call Trace:
[  180.807275][ T5829]  <TASK>
[  180.807303][ T5829]  dump_stack_lvl+0xe8/0x150
[  180.807387][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[  180.807500][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[  180.807626][ T5829]  __submit_merged_bio+0x256/0x700
[  180.807700][ T5829]  __submit_merged_write_cond+0x3c9/0x4e0
[  180.807807][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  180.807976][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[  180.808125][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.808234][ T5829]  ? css_rstat_updated+0x23a/0x530
[  180.808380][ T5829]  ? rcu_is_watching+0x15/0xb0
[  180.808477][ T5829]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  180.808573][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  180.808703][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  180.808780][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  180.808865][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  180.808925][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.808992][ T5829]  do_writepages+0x32e/0x550
[  180.809096][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  180.809161][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[  180.809245][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  180.809441][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  180.809512][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[  180.809628][ T5829]  f2fs_write_checkpoint+0x9df/0x26a0
[  180.809795][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  180.810021][ T5829]  kill_f2fs_super+0x314/0x720
[  180.810083][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  180.810235][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[  180.810328][ T5829]  deactivate_locked_super+0xbc/0x130
[  180.810414][ T5829]  cleanup_mnt+0x437/0x4d0
[  180.810467][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.810536][ T5829]  task_work_run+0x1d9/0x270
[  180.810601][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  180.810687][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  180.810735][ T5829]  ? rcu_is_watching+0x15/0xb0
[  180.810804][ T5829]  do_syscall_64+0x32d/0xf80
[  180.810859][ T5829]  ? trace_irq_disable+0x3b/0x150
[  180.810935][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.810989][ T5829]  ? clear_bhb_loop+0x40/0x90
[  180.811057][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.811110][ T5829] RIP: 0033:0x7f8d4879d897
[  180.811169][ T5829] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  180.811235][ T5829] RSP: 002b:00007ffe37e63de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.811296][ T5829] RAX: 0000000000000000 RBX: 00007f8d48831ef0 RCX: 00007f8d4879d897
[  180.811337][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe37e63ea0
[  180.811368][ T5829] RBP: 00007ffe37e63ea0 R08: 00007ffe37e64ea0 R09: 00000000ffffffff
[  180.811402][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe37e64f30
[  180.811434][ T5829] R13: 00007f8d48831ef0 R14: 000000000002c13c R15: 00007ffe37e64f70
[  180.811525][ T5829]  </TASK>
[  180.827631][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  180.948580][  T170] EXT4-fs (loop0): Total free blocks count 0
[  181.164240][ T8274] loop4: detected capacity change from 0 to 512
[  181.182831][  T170] EXT4-fs (loop0): Free/Dirty block details
[  181.204027][  T170] EXT4-fs (loop0): free_blocks=0
[  181.212763][  T170] EXT4-fs (loop0): dirty_blocks=2368
[  181.218502][  T170] EXT4-fs (loop0): Block reservation details
[  181.224645][  T170] EXT4-fs (loop0): i_reserved_data_blocks=148
[  181.282583][  T170] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 310 with error 28
[  181.330085][ T8274] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  181.340289][ T8274] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  181.364017][ T8274] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  181.372878][ T8274] System zones: 0-2, 18-18, 34-35
[  181.381521][ T8274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  181.423922][ T8274] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  181.528981][ T8274] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  181.537533][ T8274] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  181.747773][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.905277][ T8288] loop4: detected capacity change from 0 to 128
[  181.916610][ T8280] loop3: detected capacity change from 0 to 32768
[  181.926663][ T8280] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.805 (8280)
[  181.950945][ T8288] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  182.026347][ T8280] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.058258][ T8288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.081016][ T8280] BTRFS info (device loop3): using blake2b checksum algorithm
[  182.244394][ T8280] BTRFS info (device loop3): enabling ssd optimizations
[  182.293412][ T8280] BTRFS info (device loop3): turning on async discard
[  182.351661][ T8280] BTRFS info (device loop3): enabling free space tree
[  182.391991][ T8280] BTRFS info (device loop3): use zstd compression, level 3
[  182.472316][ T5826] Bluetooth: hci4: command 0x0405 tx timeout
[  182.519004][ T8315] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  182.541856][ T8315] netlink: 96 bytes leftover after parsing attributes in process `syz.2.811'.
[  182.568077][ T8315] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  182.623250][ T8315] netlink: 'syz.2.811': attribute type 8 has an invalid length.
[  182.673168][ T5822] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.684782][ T8315] netlink: 582 bytes leftover after parsing attributes in process `syz.2.811'.
[  182.719485][ T8315] netlink: 1 bytes leftover after parsing attributes in process `syz.2.811'.
[  183.155146][ T8327] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  183.758911][ T8317] loop0: detected capacity change from 0 to 131072
[  183.775455][ T8317] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  183.783604][ T8317] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  183.796437][ T8317] F2FS-fs (loop0): invalid crc value
[  183.831994][ T8336] loop3: detected capacity change from 0 to 128
[  183.865218][ T5943] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  183.900855][ T8317] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  183.926616][ T8317] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  183.933723][ T8317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  184.040574][ T8336] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.066981][ T8336] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  184.089074][ T5943] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  184.118965][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.139867][ T8336] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x18)
[  184.150003][ T8319] loop4: detected capacity change from 0 to 40427
[  184.156808][ T5943] usb 2-1: Product: syz
[  184.161167][ T5943] usb 2-1: Manufacturer: syz
[  184.165808][ T5943] usb 2-1: SerialNumber: syz
[  184.180346][ T8319] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  184.200301][ T8319] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  184.219256][ T5943] usb 2-1: config 0 descriptor??
[  184.288009][ T8319] F2FS-fs (loop4): invalid crc value
[  184.301779][ T5822] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.621961][ T8319] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.637269][ T8319] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  184.650551][ T8319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  184.660642][ T5943] usb 2-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4)
[  184.874687][ T5943] usb 2-1: failed to fetch extended address, random address set
[  185.020009][ T5943] usb 2-1: USB disconnect, device number 8
[  185.216059][ T8357] loop3: detected capacity change from 0 to 4096
[  185.239191][ T8341] loop2: detected capacity change from 0 to 32768
[  185.268319][ T8341] btrfs: Deprecated parameter 'usebackuproot'
[  185.302075][ T8341] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  185.364613][ T8341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.820 (8341)
[  185.473150][ T8341] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.500194][ T8341] BTRFS info (device loop2): using crc32c checksum algorithm
[  185.728724][ T8377] loop3: detected capacity change from 0 to 128
[  185.780473][ T8341] BTRFS info (device loop2): rebuilding free space tree
[  185.852778][ T8341] BTRFS info (device loop2): enabling ssd optimizations
[  185.919084][ T8341] BTRFS info (device loop2): using spread ssd allocation scheme
[  185.966627][ T8341] BTRFS info (device loop2): turning on flush-on-commit
[  186.009040][ T8341] BTRFS info (device loop2): enabling free space tree
[  186.067348][ T8341] BTRFS info (device loop2): force clearing of disk cache
[  186.085857][ T8341] BTRFS info (device loop2): trying to use backup root at mount time
[  186.135725][ T8341] BTRFS info (device loop2): force zlib compression, level 3
[  186.219666][ T8392] loop4: detected capacity change from 0 to 256
[  186.412369][ T8392] FAT-fs (loop4): Directory bread(block 64) failed
[  186.439828][ T8392] FAT-fs (loop4): Directory bread(block 65) failed
[  186.499795][ T8392] FAT-fs (loop4): Directory bread(block 66) failed
[  186.516160][ T8341] BTRFS info (device loop2): balance: start -s
[  186.516502][ T8392] FAT-fs (loop4): Directory bread(block 67) failed
[  186.577329][ T8392] FAT-fs (loop4): Directory bread(block 68) failed
[  186.592457][ T8392] FAT-fs (loop4): Directory bread(block 69) failed
[  186.611686][ T8392] FAT-fs (loop4): Directory bread(block 70) failed
[  186.624997][ T8392] FAT-fs (loop4): Directory bread(block 71) failed
[  186.631813][ T8392] FAT-fs (loop4): Directory bread(block 72) failed
[  186.639688][ T8341] BTRFS info (device loop2): relocating block group 1048576 flags system
[  186.654379][ T8392] FAT-fs (loop4): Directory bread(block 73) failed
[  186.758489][ T8341] BTRFS info (device loop2): balance: ended with status: 0
[  186.862722][ T8402] FAT-fs (loop4): Filesystem has been set read-only
[  187.001509][ T8407] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size.
[  187.209872][ T8411] loop1: detected capacity change from 0 to 256
[  187.319850][ T8394] loop3: detected capacity change from 0 to 40427
[  187.509477][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.553658][ T8394] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.600948][ T8394] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  187.799751][ T5822] syz-executor: attempt to access beyond end of device
[  187.799751][ T5822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.836537][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  187.841400][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  187.841473][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.841506][ T5822] Call Trace:
[  187.841534][ T5822]  <TASK>
[  187.841556][ T5822]  dump_stack_lvl+0xe8/0x150
[  187.841644][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[  187.841758][ T5822]  f2fs_write_end_io+0xcdb/0xff0
[  187.841867][ T5822]  __submit_merged_bio+0x256/0x700
[  187.841941][ T5822]  __submit_merged_write_cond+0x3c9/0x4e0
[  187.842056][ T5822]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  187.842211][ T5822]  f2fs_write_data_pages+0x2975/0x35e0
[  187.842429][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.842533][ T5822]  ? css_rstat_updated+0x23a/0x530
[  187.842662][ T5822]  ? rcu_is_watching+0x15/0xb0
[  187.842735][ T5822]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  187.842813][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  187.842919][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  187.843002][ T5822]  ? do_raw_spin_lock+0x12b/0x2f0
[  187.843094][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  187.843158][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.843227][ T5822]  do_writepages+0x32e/0x550
[  187.843324][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  187.843393][ T5822]  filemap_fdatawrite+0x1e9/0x2f0
[  187.843470][ T5822]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  187.843677][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  187.843739][ T5822]  f2fs_sync_dirty_inodes+0x30e/0x860
[  187.843835][ T5822]  f2fs_write_checkpoint+0x9df/0x26a0
[  187.843990][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  187.844115][ T5822]  kill_f2fs_super+0x314/0x720
[  187.844147][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[  187.844184][ T5822]  ? lockdep_hardirqs_on+0x7a/0x110
[  187.844218][ T5822]  deactivate_locked_super+0xbc/0x130
[  187.844250][ T5822]  cleanup_mnt+0x437/0x4d0
[  187.844269][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.844291][ T5822]  task_work_run+0x1d9/0x270
[  187.844315][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  187.844347][ T5822]  exit_to_user_mode_loop+0xed/0x480
[  187.844369][ T5822]  ? rcu_is_watching+0x15/0xb0
[  187.844399][ T5822]  do_syscall_64+0x32d/0xf80
[  187.844419][ T5822]  ? trace_irq_disable+0x3b/0x150
[  187.844445][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.844466][ T5822]  ? clear_bhb_loop+0x40/0x90
[  187.844490][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.844518][ T5822] RIP: 0033:0x7f10d919d897
[  187.844581][ T5822] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  187.844674][ T5822] RSP: 002b:00007ffcf5738458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  187.844728][ T5822] RAX: 0000000000000000 RBX: 00007f10d9231ef0 RCX: 00007f10d919d897
[  187.844811][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf5738510
[  187.844844][ T5822] RBP: 00007ffcf5738510 R08: 00007ffcf5739510 R09: 00000000ffffffff
[  187.844884][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf57395a0
[  187.844916][ T5822] R13: 00007f10d9231ef0 R14: 000000000002dca5 R15: 00007ffcf57395e0
[  187.844996][ T5822]  </TASK>
[  188.029825][ T5822] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  188.137738][ T5943] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  188.358099][ T5943] usb 2-1: Using ep0 maxpacket: 16
[  188.363421][   T24] usb 1-1: Using ep0 maxpacket: 16
[  188.371484][ T5943] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.399129][ T5943] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.421301][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  188.430649][ T5943] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  188.469416][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0
[  188.477142][   T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  188.486525][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.508567][ T5943] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  188.517788][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.526868][   T24] usb 1-1: Product: syz
[  188.532208][   T24] usb 1-1: Manufacturer: syz
[  188.536847][   T24] usb 1-1: SerialNumber: syz
[  188.571751][   T24] usb 1-1: config 0 descriptor??
[  188.580231][ T5943] usb 2-1: config 0 descriptor??
[  188.599922][   T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  188.630662][   T24] usb 1-1: Detected FT232R
[  188.796030][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  189.031921][   T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  189.214867][ T5942] usb 1-1: USB disconnect, device number 8
[  189.235822][   T24] usb 2-1: USB disconnect, device number 9
[  189.258122][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  189.290185][ T5942] ftdi_sio 1-1:0.0: device disconnected
[  189.382801][ T8432] loop4: detected capacity change from 0 to 32768
[  189.399630][ T8432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.851 (8432)
[  189.434942][ T8432] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.471683][ T8432] BTRFS info (device loop4): using sha256 checksum algorithm
[  189.492218][ T8432] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  189.511125][ T8437] loop2: detected capacity change from 0 to 32768
[  189.548302][ T8437] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 6cec6b38-038f-4ecd-bad6-4542f41afa69
[  189.588580][ T8437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.852 (8437)
[  189.631650][ T8437] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.667580][ T8437] BTRFS info (device loop2): using sha256 checksum algorithm
[  189.683867][ T8432] BTRFS info (device loop4): rebuilding free space tree
[  189.692359][ T8440] loop3: detected capacity change from 0 to 32768
[  189.715592][ T8440] btrfs: Deprecated parameter 'usebackuproot'
[  189.752167][ T8440] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  189.777938][ T8432] BTRFS info (device loop4): disabling free space tree
[  189.823377][ T8432] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  189.845363][ T8440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.854 (8440)
[  189.919842][ T8432] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  189.967120][ T8437] BTRFS info (device loop2): enabling ssd optimizations
[  189.995593][ T8437] BTRFS info (device loop2): turning on async discard
[  190.003323][ T8432] BTRFS info (device loop4): enabling ssd optimizations
[  190.010324][ T8432] BTRFS info (device loop4): turning on async discard
[  190.026328][ T8437] BTRFS info (device loop2): enabling free space tree
[  190.033644][ T8432] BTRFS info (device loop4): enabling disk space caching
[  190.041557][ T8432] BTRFS info (device loop4): force clearing of disk cache
[  190.049568][ T8432] BTRFS info (device loop4): enabling auto defrag
[  190.058850][ T8432] BTRFS info (device loop4): force zlib compression, level 3
[  190.069676][ T8432] BTRFS info (device loop4): max_inline set to 0
[  190.088104][ T8440] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.107281][ T8440] BTRFS info (device loop3): using crc32c checksum algorithm
[  190.197507][ T5829] BTRFS info (device loop2): last unmount of filesystem 6cec6b38-038f-4ecd-bad6-4542f41afa69
[  190.247189][   T49] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  190.286199][ T8440] BTRFS info (device loop3): rebuilding free space tree
[  190.357391][ T8440] BTRFS info (device loop3): disabling free space tree
[  190.368069][ T8440] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  190.388944][ T8440] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  190.412723][ T8440] BTRFS info (device loop3): setting nodatasum
[  190.425992][ T8440] BTRFS info (device loop3): setting nodatacow
[  190.442571][ T8440] BTRFS info (device loop3): enabling ssd optimizations
[  190.465530][ T8440] BTRFS info (device loop3): turning off barriers
[  190.480116][ T8440] BTRFS info (device loop3): turning on async discard
[  190.497351][ T8440] BTRFS info (device loop3): force clearing of disk cache
[  190.519789][ T8440] BTRFS info (device loop3): trying to use backup root at mount time
[  190.614292][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  190.645621][   T30] audit: type=1800 audit(1771939227.890:35): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.854" name="file1" dev="loop3" ino=260 res=0 errno=0
[  190.767678][   T13] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  190.827915][   T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  190.840511][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.879330][   T24] usb 1-1: config 0 descriptor??
[  190.914577][ T5822] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.926283][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.941926][   T24] cp210x 1-1:0.0: cp210x converter detected
[  191.389142][   T24] usb 1-1: cp210x converter now attached to ttyUSB0
[  191.446801][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  191.637267][    T9] usb 2-1: Using ep0 maxpacket: 32
[  191.668395][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.704413][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.745529][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  191.765767][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.799122][    T9] usb 2-1: config 0 descriptor??
[  191.839284][    T9] hub 2-1:0.0: USB hub found
[  192.044531][ T8495] loop2: detected capacity change from 0 to 40427
[  192.056089][ T8495] F2FS-fs (loop2): Image doesn't support compression
[  192.073831][    T9] hub 2-1:0.0: 1 port detected
[  192.095208][ T8495] F2FS-fs (loop2): build fault injection rate: 690
[  192.109542][ T8495] F2FS-fs (loop2): build fault injection type: 0x4
[  192.124170][ T8495] F2FS-fs (loop2): invalid crc value
[  192.301090][ T8495] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.324554][ T8495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  192.413168][   T30] audit: type=1800 audit(1771939229.655:36): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.858" name="file0" dev="loop2" ino=14 res=0 errno=0
[  192.466533][ T8515] program syz.3.866 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.476929][ T5829] syz-executor: attempt to access beyond end of device
[  192.476929][ T5829] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  192.507979][    T9] usb 2-1: USB disconnect, device number 10
[  192.545408][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  192.545437][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  192.545449][ T5829] Call Trace:
[  192.545458][ T5829]  <TASK>
[  192.545467][ T5829]  dump_stack_lvl+0xe8/0x150
[  192.545502][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[  192.545545][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[  192.545594][ T5829]  __submit_merged_bio+0x256/0x700
[  192.545625][ T5829]  __submit_merged_write_cond+0x3c9/0x4e0
[  192.545677][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  192.545741][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[  192.545811][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.545854][ T5829]  ? css_rstat_updated+0x23a/0x530
[  192.545909][ T5829]  ? rcu_is_watching+0x15/0xb0
[  192.545939][ T5829]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  192.545972][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  192.546017][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  192.546049][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  192.546085][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  192.546107][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.546134][ T5829]  do_writepages+0x32e/0x550
[  192.546175][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  192.546203][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[  192.546236][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  192.546322][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  192.546349][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[  192.546393][ T5829]  f2fs_write_checkpoint+0x9df/0x26a0
[  192.546461][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  192.546538][ T5829]  ? kfree+0x1c1/0x630
[  192.546567][ T5829]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  192.546607][ T5829]  kill_f2fs_super+0x314/0x720
[  192.546649][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  192.546692][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[  192.546732][ T5829]  deactivate_locked_super+0xbc/0x130
[  192.546766][ T5829]  cleanup_mnt+0x437/0x4d0
[  192.546786][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.546812][ T5829]  task_work_run+0x1d9/0x270
[  192.546839][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  192.546875][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  192.546898][ T5829]  ? rcu_is_watching+0x15/0xb0
[  192.546932][ T5829]  do_syscall_64+0x32d/0xf80
[  192.546953][ T5829]  ? trace_irq_disable+0x3b/0x150
[  192.546982][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.547004][ T5829]  ? clear_bhb_loop+0x40/0x90
[  192.547031][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.547052][ T5829] RIP: 0033:0x7f8d4879d897
[  192.547071][ T5829] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  192.547089][ T5829] RSP: 002b:00007ffe37e63de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  192.547109][ T5829] RAX: 0000000000000000 RBX: 00007f8d48831ef0 RCX: 00007f8d4879d897
[  192.547123][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe37e63ea0
[  192.547136][ T5829] RBP: 00007ffe37e63ea0 R08: 00007ffe37e64ea0 R09: 00000000ffffffff
[  192.547150][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe37e64f30
[  192.547162][ T5829] R13: 00007f8d48831ef0 R14: 000000000002eef6 R15: 00007ffe37e64f70
[  192.547199][ T5829]  </TASK>
[  192.547207][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  192.879391][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  192.879436][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  192.879449][ T5829] Call Trace:
[  192.879457][ T5829]  <TASK>
[  192.879466][ T5829]  dump_stack_lvl+0xe8/0x150
[  192.879499][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[  192.879556][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[  192.879606][ T5829]  __submit_merged_bio+0x256/0x700
[  192.879643][ T5829]  __submit_merged_write_cond+0x3c9/0x4e0
[  192.879688][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  192.879749][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[  192.879819][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.879863][ T5829]  ? css_rstat_updated+0x23a/0x530
[  192.879917][ T5829]  ? rcu_is_watching+0x15/0xb0
[  192.879948][ T5829]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  192.879982][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  192.880027][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  192.880060][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  192.880097][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  192.880119][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.880144][ T5829]  do_writepages+0x32e/0x550
[  192.880190][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  192.880217][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[  192.880250][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  192.880335][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  192.880362][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[  192.880407][ T5829]  f2fs_write_checkpoint+0x9df/0x26a0
[  192.880475][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  192.880550][ T5829]  ? kfree+0x1c1/0x630
[  192.880578][ T5829]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  192.880623][ T5829]  kill_f2fs_super+0x314/0x720
[  192.880657][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  192.880701][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[  192.880733][ T5829]  deactivate_locked_super+0xbc/0x130
[  192.880766][ T5829]  cleanup_mnt+0x437/0x4d0
[  192.880782][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.880808][ T5829]  task_work_run+0x1d9/0x270
[  192.880837][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  192.880865][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  192.880884][ T5829]  ? rcu_is_watching+0x15/0xb0
[  192.880926][ T5829]  do_syscall_64+0x32d/0xf80
[  192.880943][ T5829]  ? trace_irq_disable+0x3b/0x150
[  192.880972][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.880989][ T5829]  ? clear_bhb_loop+0x40/0x90
[  192.881010][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.881026][ T5829] RIP: 0033:0x7f8d4879d897
[  192.881042][ T5829] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  192.881057][ T5829] RSP: 002b:00007ffe37e63de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  192.881075][ T5829] RAX: 0000000000000000 RBX: 00007f8d48831ef0 RCX: 00007f8d4879d897
[  192.881086][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe37e63ea0
[  192.881096][ T5829] RBP: 00007ffe37e63ea0 R08: 00007ffe37e64ea0 R09: 00000000ffffffff
[  192.881107][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe37e64f30
[  192.881117][ T5829] R13: 00007f8d48831ef0 R14: 000000000002eef6 R15: 00007ffe37e64f70
[  192.881145][ T5829]  </TASK>
[  193.223778][   T30] audit: type=1326 audit(1771939230.473:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.271496][   T30] audit: type=1326 audit(1771939230.493:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.298289][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  193.367692][   T30] audit: type=1326 audit(1771939230.493:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.474409][   T24] usb 1-1: USB disconnect, device number 9
[  193.483532][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  193.505115][   T24] cp210x 1-1:0.0: device disconnected
[  193.548321][   T30] audit: type=1326 audit(1771939230.493:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.652850][   T30] audit: type=1326 audit(1771939230.493:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.689962][ T8526] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.872'.
[  193.707469][ T8527] loop4: detected capacity change from 0 to 256
[  193.744182][   T30] audit: type=1326 audit(1771939230.493:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.819074][   T30] audit: type=1326 audit(1771939230.493:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  193.908019][   T30] audit: type=1326 audit(1771939230.493:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f70a739c629 code=0x7ffc0000
[  194.031890][ T8535] loop3: detected capacity change from 0 to 512
[  194.064117][ T8535] EXT4-fs: Ignoring removed i_version option
[  194.070187][ T8535] EXT4-fs: Ignoring removed bh option
[  194.121999][ T8535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.160522][ T8535] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  194.366792][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.510792][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.520822][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.842530][ T8566] loop0: detected capacity change from 0 to 256
[  194.926025][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  194.965658][ T8566] Invalid ELF header magic: != ELF
[  195.097524][   T24] usb 2-1: Using ep0 maxpacket: 8
[  195.107548][   T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  195.148303][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.199340][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  195.220343][ T8576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.255172][   T24] pvrusb2: **********
[  195.263095][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  195.285195][   T24] pvrusb2: Important functionality might not be entirely working.
[  195.325707][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  195.373769][   T24] pvrusb2: **********
[  195.413685][ T2345] pvrusb2: Invalid write control endpoint
[  195.570692][ T2345] pvrusb2: Invalid write control endpoint
[  195.576484][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  195.621542][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  195.642385][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  195.652756][ T2345] pvrusb2: Device being rendered inoperable
[  195.660914][ T8558] pvrusb2: Attempted to execute control transfer when device not ok
[  195.669496][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  195.676684][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  195.693179][ T5942] usb 2-1: USB disconnect, device number 11
[  195.710600][ T2345] pvrusb2: Attached sub-driver cx25840
[  195.717144][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  195.735240][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  196.186568][ T8593] loop0: detected capacity change from 0 to 32768
[  196.242792][ T8593] (syz.0.899,8593,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  196.294560][ T8593] (syz.0.899,8593,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  196.370049][ T8593] JBD2: Ignoring recovery information on journal
[  196.476237][ T8611] loop9: detected capacity change from 0 to 7
[  196.524797][ T8593] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  196.545721][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.570443][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.579572][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.616021][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.627449][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.636383][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.644660][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.667932][ T8611] ldm_validate_partition_table(): Disk read failed.
[  196.700392][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.737733][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.798625][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.861207][ T8611] Dev loop9: unable to read RDB block 0
[  196.897796][ T8611]  loop9: unable to read partition table
[  196.931396][ T8611] loop9: partition table beyond EOD, truncated
[  196.961875][ T8611] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  196.961875][ T8611] 
) failed (rc=-5)
[  197.011488][ T8622] loop2: detected capacity change from 0 to 1024
[  197.032130][ T8601] loop4: detected capacity change from 0 to 40427
[  197.044407][ T8601] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(1)
[  197.091310][ T8601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  197.113987][ T8601] F2FS-fs (loop4): invalid crc value
[  197.121114][ T5820] ocfs2: Unmounting device (7,0) on (node local)
[  197.263698][ T8626] loop1: detected capacity change from 0 to 128
[  197.298823][ T8629] sp0: Synchronizing with TNC
[  197.306874][ T8626] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.332069][  T170] hfsplus: b-tree write err: -5, ino 25
[  197.337810][  T170] hfsplus: b-tree write err: -5, ino 4
[  197.361135][  T170] hfsplus: b-tree write err: -5, ino 2
[  197.402808][  T170] hfsplus: b-tree write err: -5, ino 20
[  197.420758][ T8626] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.446682][ T8601] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.495385][ T8601] F2FS-fs (loop4): Start checkpoint disabled!
[  197.539398][ T8601] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  197.561404][   T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.588909][ T8601] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  197.622796][ T8601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  197.823496][ T8637] tipc: Started in network mode
[  197.834662][ T8637] tipc: Node identity ac14140f, cluster identity 4711
[  197.853547][ T8637] tipc: New replicast peer: 255.255.255.255
[  197.870816][ T8637] tipc: Enabled bearer <udp:syz2>, priority 10
[  198.034535][ T5942] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  198.235723][ T5942] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  198.245907][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  198.254036][ T5942] usb 1-1: Product: syz
[  198.284656][ T5942] usb 1-1: Manufacturer: syz
[  198.289331][ T5942] usb 1-1: SerialNumber: syz
[  198.300338][ T8644] loop3: detected capacity change from 0 to 256
[  198.325428][ T5942] usb 1-1: config 0 descriptor??
[  198.341081][ T8633] loop1: detected capacity change from 0 to 32768
[  198.343027][ T8644] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  198.473993][ T8633] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  198.581352][ T5942] usb 1-1: USB disconnect, device number 10
[  198.710088][ T7460] udevd[7460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.743305][ T8639] loop2: detected capacity change from 0 to 40427
[  198.801776][ T8651] loop3: detected capacity change from 0 to 512
[  198.810890][ T8651] EXT4-fs: Ignoring removed oldalloc option
[  198.822524][ T8639] F2FS-fs: heap/no_heap options were deprecated
[  198.831031][ T5834] ocfs2: Unmounting device (7,1) on (node local)
[  198.843732][ T8639] F2FS-fs (loop2): build fault injection rate: 19
[  198.871310][ T8651] EXT4-fs (loop3): 1 truncate cleaned up
[  198.877287][ T5950] tipc: Node number set to 2886997007
[  198.900992][ T8639] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  198.928693][ T8651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.949766][ T8639] F2FS-fs (loop2): invalid crc value
[  199.010102][ T8639] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  199.031778][ T8651] EXT4-fs (loop3): shut down requested (1)
[  199.165621][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.235210][ T8639] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  199.273805][ T8639] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.326149][ T8639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  199.384091][ T8664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.922'.
[  199.543960][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'.
[  199.575983][    C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  199.578119][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  199.591626][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  199.591699][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.591731][    C0] Call Trace:
[  199.591752][    C0]  <TASK>
[  199.591774][    C0]  dump_stack_lvl+0xe8/0x150
[  199.591880][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  199.591998][    C0]  f2fs_write_end_io+0xcdb/0xff0
[  199.592060][    C0]  ? blk_update_request+0x57e/0xe60
[  199.592183][    C0]  blk_update_request+0x57e/0xe60
[  199.592289][    C0]  blk_mq_end_request+0x3e/0x70
[  199.592369][    C0]  blk_flush_complete_seq+0x678/0xcc0
[  199.592476][    C0]  flush_end_io+0xbaa/0xe60
[  199.592615][    C0]  __blk_mq_end_request+0x4f8/0x630
[  199.592696][    C0]  blk_done_softirq+0x10a/0x160
[  199.592767][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  199.592841][    C0]  handle_softirqs+0x22a/0x870
[  199.592914][    C0]  ? schedule+0x90/0x360
[  199.592958][    C0]  ? run_ksoftirqd+0x36/0x60
[  199.593052][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  199.593124][    C0]  run_ksoftirqd+0x36/0x60
[  199.593196][    C0]  smpboot_thread_fn+0x541/0xa50
[  199.593279][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  199.593375][    C0]  kthread+0x388/0x470
[  199.593427][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  199.593500][    C0]  ? __pfx_kthread+0x10/0x10
[  199.593561][    C0]  ret_from_fork+0x51e/0xb90
[  199.593636][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  199.593707][    C0]  ? __switch_to+0xc7d/0x1450
[  199.593778][    C0]  ? __pfx_kthread+0x10/0x10
[  199.593832][    C0]  ret_from_fork_asm+0x1a/0x30
[  199.593965][    C0]  </TASK>
[  199.593985][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  199.756238][ T5829] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint
[  199.779425][   T24] usb 1-1: Using ep0 maxpacket: 8
[  199.816122][   T24] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  199.858296][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.873972][ T8653] loop4: detected capacity change from 0 to 32768
[  199.888497][   T24] usb 1-1: Product: syz
[  199.892715][   T24] usb 1-1: Manufacturer: syz
[  199.927865][   T24] usb 1-1: SerialNumber: syz
[  199.954063][   T24] usb 1-1: config 0 descriptor??
[  199.988362][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[  200.135480][ T8670] loop1: detected capacity change from 0 to 8192
[  200.391562][   T24] gspca_se401: Frame size: 0x0 1/16th janggu
[  200.397620][   T24] gspca_se401: Frame size: 0x0 1/16th janggu
[  200.428160][   T24] gspca_se401: Frame size: 0x0 1/16th janggu
[  200.601880][   T24] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  200.668287][   T24] usb 1-1: USB disconnect, device number 11
[  200.691817][ T8666] loop3: detected capacity change from 0 to 32768
[  200.755051][ T8666] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.927 (8666)
[  201.162644][ T8676] loop1: detected capacity change from 0 to 65536
[  201.221243][ T8666] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.238149][ T8676] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  201.273678][ T8666] BTRFS info (device loop3): using sha256 checksum algorithm
[  201.291246][ T8676] XFS (loop1): Ending clean mount
[  201.310107][ T8676] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x26 dinode
[  201.321337][ T8676] XFS (loop1): Unmount and run xfs_repair
[  201.328512][ T8676] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  201.336016][ T8676] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  201.343442][ T8700] loop2: detected capacity change from 0 to 128
[  201.345020][ T8676] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  201.355053][ T8700] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  201.360932][ T8676] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  201.381792][ T8676] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[  201.391093][ T8676] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  201.400101][ T8676] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[  201.409042][ T8676] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[  201.418349][ T8676] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  201.440859][ T8700] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.516820][ T5834] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  201.697922][ T1316] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.714853][ T8666] BTRFS info (device loop3): rebuilding free space tree
[  201.830596][ T8666] BTRFS info (device loop3): disabling free space tree
[  201.857937][ T8666] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.900732][ T8666] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.985874][ T8722] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.011630][ T8666] BTRFS info (device loop3): setting nodatasum
[  202.059640][ T8666] BTRFS info (device loop3): setting nodatacow
[  202.080678][ T8666] BTRFS info (device loop3): turning off barriers
[  202.112356][ T8666] BTRFS info (device loop3): force clearing of disk cache
[  202.472309][ T8729] set_capacity_and_notify: 1 callbacks suppressed
[  202.472330][ T8729] loop1: detected capacity change from 0 to 1024
[  202.613247][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  202.613267][   T30] audit: type=1800 audit(1771939239.829:46): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.946" name="file1" dev="loop1" ino=20 res=0 errno=0
[  202.721156][ T5822] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.747801][ T8730] loop4: detected capacity change from 0 to 4096
[  202.990821][ T8730] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  203.056150][ T8730] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  203.134357][ T8735] kvm: kvm [8734]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff
[  203.162144][   T30] audit: type=1800 audit(1771939240.378:47): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="file1" dev="loop4" ino=30 res=0 errno=0
[  203.187032][ T8730] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex
[  203.227876][ T8728] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex
[  203.235235][ T8721] loop2: detected capacity change from 0 to 32768
[  203.286973][ T8721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.941 (8721)
[  203.360773][   T63] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  203.371290][ T8721] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.387648][ T5821] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  203.394219][ T5821] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  203.445698][ T5821] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  203.457627][ T8721] BTRFS info (device loop2): using sha256 checksum algorithm
[  203.484940][   T13] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  203.559971][ T8742] binder: 8740:8742 ioctl c0306201 200000000640 returned -22
[  203.622415][ T8747] loop3: detected capacity change from 0 to 2048
[  203.676373][ T8747] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  203.694755][ T8747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.704582][   T49] hfsplus: b-tree write err: -5, ino 25
[  203.731567][ T8754] loop4: detected capacity change from 0 to 128
[  203.748916][   T49] hfsplus: b-tree write err: -5, ino 4
[  203.754539][   T49] hfsplus: b-tree write err: -5, ino 2
[  203.779307][ T8721] BTRFS info (device loop2): enabling ssd optimizations
[  203.789292][ T8754] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  203.812325][   T49] hfsplus: b-tree write err: -5, ino 20
[  203.819873][ T8721] BTRFS info (device loop2): turning on async discard
[  203.826701][ T8721] BTRFS info (device loop2): enabling free space tree
[  203.845667][ T8754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.049011][ T5829] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.133203][ T8760] tipc: Started in network mode
[  204.178761][ T8760] tipc: Node identity ac14141b, cluster identity 4711
[  204.185898][ T8760] tipc: New replicast peer: 255.255.255.255
[  204.222368][ T8760] tipc: Enabled bearer <udp:syz2>, priority 10
[  204.293555][ T8769] loop2: detected capacity change from 0 to 1024
[  204.325770][ T8769] hfsplus: invalid length 32517 has been corrected to 255
[  204.396376][   T30] audit: type=1800 audit(1771939241.605:48): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.955" name="file1" dev="loop2" ino=20 res=0 errno=0
[  204.444868][ T8765] loop0: detected capacity change from 0 to 4096
[  204.473563][ T8765] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  204.511071][ T8762] loop3: detected capacity change from 0 to 8192
[  204.614632][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  204.639816][ T8769] hfsplus: b-tree write err: -5, ino 20
[  204.884243][ T8776] loop1: detected capacity change from 0 to 256
[  205.067299][ T8776] FAT-fs (loop1): Directory bread(block 64) failed
[  205.105105][ T8776] FAT-fs (loop1): Directory bread(block 65) failed
[  205.117267][ T8782] loop0: detected capacity change from 0 to 24
[  205.137244][ T8776] FAT-fs (loop1): Directory bread(block 66) failed
[  205.154710][ T8782] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  205.191858][ T8776] FAT-fs (loop1): Directory bread(block 67) failed
[  205.219207][ T8782] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  205.243283][ T8776] FAT-fs (loop1): Directory bread(block 68) failed
[  205.249981][ T8776] FAT-fs (loop1): Directory bread(block 69) failed
[  205.291664][ T8776] FAT-fs (loop1): Directory bread(block 70) failed
[  205.298281][ T8776] FAT-fs (loop1): Directory bread(block 71) failed
[  205.338877][ T8776] FAT-fs (loop1): Directory bread(block 72) failed
[  205.343439][  T796] tipc: Node number set to 2886997019
[  205.360510][ T8776] FAT-fs (loop1): Directory bread(block 73) failed
[  205.836420][ T8801] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  206.069325][ T8774] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.202067][ T8774] XFS (loop4): Ending clean mount
[  206.468674][ T5821] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.717955][ T8829] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  206.871570][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  206.878250][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  206.884323][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  206.915223][ T8829] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.983: bg 0: block 104: invalid block bitmap
[  206.980314][ T8829] loop1: lost filesystem error report for type 5 error -117
[  206.982306][ T8829] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  206.989766][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  206.989804][    C0] EXT4-fs (loop1): initial error at time 1771939244: ext4_validate_block_bitmap:432
[  206.989829][    C0] EXT4-fs (loop1): last error at time 1771939244: ext4_validate_block_bitmap:432
[  207.028499][ T8829] loop1: lost filesystem error report for type 5 error -117
[  207.049639][ T8829] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.983: invalid indirect mapped block 1 (level 1)
[  207.085444][ T8803] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.110480][ T8820] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.140584][ T8829] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  207.144805][ T8829] EXT4-fs (loop1): 1 truncate cleaned up
[  207.164559][ T8829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.195105][   T30] audit: type=1800 audit(1771939244.398:49): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.983" name="file1" dev="loop1" ino=18 res=0 errno=0
[  207.257483][ T8803] XFS (loop2): Ending clean mount
[  207.290956][ T8820] XFS (loop3): Ending clean mount
[  207.312539][ T8803] XFS (loop2): Quotacheck needed: Please wait.
[  207.409007][ T8835] ntfs3(loop4): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  207.491122][ T8803] XFS (loop2): Quotacheck: Done.
[  207.513388][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.692480][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.702089][ T5822] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  208.336169][ T8875] set_capacity_and_notify: 6 callbacks suppressed
[  208.336188][ T8875] loop2: detected capacity change from 0 to 512
[  208.404274][ T8873] loop3: detected capacity change from 0 to 2048
[  208.463871][ T8875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.518120][ T8880] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.535429][ T8875] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.756060][ T8868] loop4: detected capacity change from 0 to 32768
[  208.814302][ T8868] (syz.4.993,8868,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.867608][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.881524][ T8868] (syz.4.993,8868,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.977990][ T8868] JBD2: Ignoring recovery information on journal
[  209.141987][ T8868] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  209.411734][ T5950] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  209.439516][ T5821] ocfs2: Unmounting device (7,4) on (node local)
[  209.458549][ T8879] loop0: detected capacity change from 0 to 32768
[  209.503343][ T8879] JBD2: Ignoring recovery information on journal
[  209.574392][ T5950] usb 4-1: config 0 has no interfaces?
[  209.581172][ T5950] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  209.591549][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  209.599763][ T5950] usb 4-1: SerialNumber: syz
[  209.613561][ T5950] usb 4-1: config 0 descriptor??
[  209.637243][ T8879] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  209.848387][  T796] usb 4-1: USB disconnect, device number 6
[  209.976734][ T8904] loop4: detected capacity change from 0 to 2048
[  209.999708][ T5820] ocfs2: Unmounting device (7,0) on (node local)
[  210.041813][ T8904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.119209][   T30] audit: type=1800 audit(1771939247.321:50): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1002" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  210.379194][ T8895] loop2: detected capacity change from 0 to 40427
[  210.435958][ T8895] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  210.475590][ T8895] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  210.505481][ T8895] F2FS-fs (loop2): invalid crc value
[  210.588632][ T8913] ALSA: mixer_oss: invalid OSS volume ''
[  210.618130][ T8917] netlink: 'syz.3.1009': attribute type 6 has an invalid length.
[  210.669534][ T8917] netlink: 'syz.3.1009': attribute type 6 has an invalid length.
[  210.833043][ T8895] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.903470][ T8895] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  210.943099][ T8895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  211.285219][ T8908] loop0: detected capacity change from 0 to 40427
[  211.315757][ T8908] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  211.331932][ T8908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  211.371440][ T8908] F2FS-fs (loop0): invalid crc_offset: 33558524
[  211.578204][ T5950] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  211.683110][ T8908] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  211.714624][ T8908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  211.723578][ T8908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  211.780968][ T5950] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  211.819538][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.830838][ T8908] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  211.854858][ T5950] usb 2-1: Product: syz
[  211.871205][ T5950] usb 2-1: Manufacturer: syz
[  211.880826][ T8908] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  211.900674][ T5950] usb 2-1: SerialNumber: syz
[  211.963869][ T8941] loop3: detected capacity change from 0 to 256
[  211.994823][ T8941] exfat: Deprecated parameter 'utf8'
[  212.018289][ T8941] exfat: Deprecated parameter 'utf8'
[  212.068875][ T8941] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  212.770376][ T5950] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  212.793738][ T5950] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  212.815727][ T5950] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  212.827602][ T5950] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  212.865881][ T8952] loop4: detected capacity change from 0 to 1024
[  212.881275][ T5950] usb 2-1: USB disconnect, device number 12
[  212.959553][ T5942] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  213.129862][ T5942] usb 1-1: Using ep0 maxpacket: 32
[  213.149215][ T5942] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  213.159869][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.165249][ T8946] loop3: detected capacity change from 0 to 40427
[  213.178419][ T8946] F2FS-fs: heap/no_heap options were deprecated
[  213.208827][ T8946] F2FS-fs (loop3): build fault injection rate: 690
[  213.212820][ T5942] usb 1-1: config 0 descriptor??
[  213.220251][  T796] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  213.228892][ T8946] F2FS-fs (loop3): invalid crc value
[  213.257105][ T5942] gspca_main: sq930x-2.14.0 probing 041e:403c
[  213.342725][ T8946] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  213.372262][ T8946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  213.386198][  T796] usb 3-1: Using ep0 maxpacket: 16
[  213.406402][  T796] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  213.437209][  T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.459829][  T796] usb 3-1: config 0 has no interface number 0
[  213.478341][  T796] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  213.498786][  T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.520251][  T796] usb 3-1: config 0 descriptor??
[  213.557742][  T796] uvcvideo 3-1:0.64: Found UVC 0.00 device <unnamed> (0bd3:0555)
[  213.586390][  T796] uvcvideo 3-1:0.64: No valid video chain found.
[  213.609946][ T5822] syz-executor: attempt to access beyond end of device
[  213.609946][ T5822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.661206][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  213.661234][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  213.661247][ T5822] Call Trace:
[  213.661254][ T5822]  <TASK>
[  213.661262][ T5822]  dump_stack_lvl+0xe8/0x150
[  213.661297][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[  213.661336][ T5822]  f2fs_write_end_io+0xcdb/0xff0
[  213.661379][ T5822]  __submit_merged_bio+0x256/0x700
[  213.661408][ T5822]  __submit_merged_write_cond+0x3c9/0x4e0
[  213.661452][ T5822]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  213.661509][ T5822]  f2fs_write_data_pages+0x2975/0x35e0
[  213.661573][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.661643][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  213.661680][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  213.661723][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  213.661754][ T5822]  ? do_raw_spin_lock+0x12b/0x2f0
[  213.661787][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  213.661808][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.661833][ T5822]  do_writepages+0x32e/0x550
[  213.661872][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  213.661898][ T5822]  filemap_fdatawrite+0x1e9/0x2f0
[  213.661930][ T5822]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  213.662007][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  213.662032][ T5822]  f2fs_sync_dirty_inodes+0x30e/0x860
[  213.662074][ T5822]  f2fs_write_checkpoint+0x9df/0x26a0
[  213.662147][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  213.662230][ T5822]  kill_f2fs_super+0x314/0x720
[  213.662264][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[  213.662302][ T5822]  ? lockdep_hardirqs_on+0x7a/0x110
[  213.662340][ T5822]  deactivate_locked_super+0xbc/0x130
[  213.662372][ T5822]  cleanup_mnt+0x437/0x4d0
[  213.662394][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.662418][ T5822]  task_work_run+0x1d9/0x270
[  213.662444][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  213.662478][ T5822]  exit_to_user_mode_loop+0xed/0x480
[  213.662500][ T5822]  ? rcu_is_watching+0x15/0xb0
[  213.662533][ T5822]  do_syscall_64+0x32d/0xf80
[  213.662554][ T5822]  ? trace_irq_disable+0x3b/0x150
[  213.662583][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.662604][ T5822]  ? clear_bhb_loop+0x40/0x90
[  213.662630][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.662650][ T5822] RIP: 0033:0x7f10d919d897
[  213.662669][ T5822] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  213.662687][ T5822] RSP: 002b:00007ffcf5738458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  213.662709][ T5822] RAX: 0000000000000000 RBX: 00007f10d9231ef0 RCX: 00007f10d919d897
[  213.662722][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf5738510
[  213.662735][ T5822] RBP: 00007ffcf5738510 R08: 00007ffcf5739510 R09: 00000000ffffffff
[  213.662748][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf57395a0
[  213.662760][ T5822] R13: 00007f10d9231ef0 R14: 000000000003410c R15: 00007ffcf57395e0
[  213.662795][ T5822]  </TASK>
[  213.662897][ T5822] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  213.917707][  T980] usb 3-1: USB disconnect, device number 4
[  214.118037][ T8968] loop4: detected capacity change from 0 to 512
[  214.136253][ T5942] gspca_sq930x: reg_w 0105 bf00 failed -71
[  214.202724][ T5942] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  214.230814][ T5942] usb 1-1: USB disconnect, device number 12
[  214.825202][ T8990] loop3: detected capacity change from 0 to 1024
[  214.865639][ T8990] hfsplus: invalid length 32517 has been corrected to 255
[  214.938515][ T8994] loop2: detected capacity change from 0 to 4096
[  214.950099][ T8990] hfsplus: b-tree write err: -5, ino 2
[  214.974294][ T8990] hfsplus: invalid length 32517 has been corrected to 255
[  214.984774][ T8990] hfsplus: invalid length 32517 has been corrected to 255
[  214.992811][ T8990] hfsplus: invalid length 32517 has been corrected to 255
[  215.065053][ T5942] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  215.084380][ T8999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.110247][  T170] hfsplus: b-tree write err: -5, ino 4
[  215.160800][  T170] hfsplus: b-tree write err: -5, ino 2
[  215.235540][ T5942] usb 1-1: Using ep0 maxpacket: 8
[  215.256950][ T5942] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  215.281851][ T5942] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  215.302839][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.339096][ T5942] usb 1-1: Product: syz
[  215.349396][ T5942] usb 1-1: Manufacturer: syz
[  215.354088][ T5942] usb 1-1: SerialNumber: syz
[  215.377919][ T5942] usb 1-1: config 0 descriptor??
[  215.407873][ T5942] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  215.455576][ T5942] usb 1-1: setting power ON
[  215.460521][ T5942] dvb-usb: bulk message failed: -22 (2/0)
[  215.479565][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  215.490569][ T5942] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  215.500002][ T5942] usb 1-1: media controller created
[  215.570778][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  215.635091][ T8991] dvb-usb: bulk message failed: -22 (3/0)
[  215.666470][ T8991] dvb-usb: bulk message failed: -22 (4/0)
[  215.674002][ T5942] usb 1-1: selecting invalid altsetting 6
[  215.682211][ T9012] loop3: detected capacity change from 0 to 128
[  215.705991][ T5942] usb 1-1: digital interface selection failed (-22)
[  215.712683][ T5942] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  215.712759][ T8991] dvb-usb: bulk message failed: -22 (3/0)
[  215.772853][ T5942] usb 1-1: setting power OFF
[  215.812739][ T5942] dvb-usb: bulk message failed: -22 (2/0)
[  215.826057][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  215.842423][ T5942] (NULL device *): no alternate interface
[  215.958633][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  215.999537][ T5942] usb 1-1: USB disconnect, device number 13
[  216.145475][ T8998] loop4: detected capacity change from 0 to 32768
[  216.223098][ T8998] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  216.266719][ T8998] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.439490][ T8998] XFS (loop4): Ending clean mount
[  216.480528][ T8998] XFS (loop4): Quotacheck needed: Please wait.
[  216.540794][ T9037] delete_channel: no stack
[  216.605227][ T8998] XFS (loop4): Quotacheck: Done.
[  216.853085][ T5821] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.000738][ T9048] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  217.663965][ T9045] loop0: detected capacity change from 0 to 32768
[  217.726038][ T9063] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  217.748786][ T9045] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  217.761585][ T9045] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.844399][ T9045] XFS (loop0): Ending clean mount
[  217.883116][ T9045] XFS (loop0): Quotacheck needed: Please wait.
[  217.958529][ T9045] XFS (loop0): Quotacheck: Done.
[  218.210918][ T5820] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.246295][ T9083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1076'.
[  218.255830][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1076'.
[  218.269668][ T9070] loop3: detected capacity change from 0 to 32768
[  218.292821][ T9081] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1074'.
[  218.330732][ T9070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1069 (9070)
[  218.370852][ T9070] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.390219][ T9085] loop7: detected capacity change from 0 to 7
[  218.407599][ T9070] BTRFS info (device loop3): using crc32c checksum algorithm
[  218.422127][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.431800][    C0] buffer_io_error: 14 callbacks suppressed
[  218.431820][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.453039][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.462804][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.472970][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.482604][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.492907][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.502567][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.520075][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.529780][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.596216][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.605900][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.614541][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.624200][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.632199][ T9085] ldm_validate_partition_table(): Disk read failed.
[  218.640325][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.649979][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.669100][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.678764][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.690152][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.699830][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  218.709178][ T9085] Dev loop7: unable to read RDB block 0
[  218.720926][ T9085]  loop7: unable to read partition table
[  218.727306][ T9085] loop7: partition table beyond EOD, truncated
[  218.729426][   T49] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  218.749157][ T9085] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  218.785335][ T9070] BTRFS warning (device loop3): couldn't read tree root
[  218.842511][ T9070] BTRFS warning (device loop3): try to load backup roots slot 1
[  218.857392][   T63] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  218.982861][ T9070] BTRFS warning (device loop3): couldn't read tree root
[  219.003935][ T9070] BTRFS warning (device loop3): try to load backup roots slot 2
[  219.033177][   T63] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  219.083910][ T9070] BTRFS warning (device loop3): couldn't read tree root
[  219.090930][ T9070] BTRFS warning (device loop3): try to load backup roots slot 3
[  219.174471][ T9070] BTRFS info (device loop3): checking UUID tree
[  219.199027][ T9108] loop4: detected capacity change from 0 to 2048
[  219.199168][ T9070] BTRFS info (device loop3): setting nodatasum
[  219.222567][ T9070] BTRFS info (device loop3): enabling ssd optimizations
[  219.271256][ T9070] BTRFS info (device loop3): turning on flush-on-commit
[  219.279587][ T9070] BTRFS info (device loop3): turning on async discard
[  219.290461][ T9070] BTRFS info (device loop3): enabling free space tree
[  219.307045][ T9117] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.378628][ T9070] BTRFS info (device loop3): trying to use backup root at mount time
[  219.438589][ T9070] BTRFS info (device loop3): max_inline set to 0
[  219.504061][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1085'.
[  219.606510][   T30] audit: type=1800 audit(1771939256.780:51): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1069" name="file1" dev="loop3" ino=257 res=0 errno=0
[  219.805675][ T9131] loop2: detected capacity change from 0 to 512
[  219.869360][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.919660][ T5822] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.936877][ T9131] ext4 filesystem being mounted at /235/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.997715][ T9131] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #12: comm syz.2.1090: invalid size
[  220.119509][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.576143][ T5942] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  220.746661][ T5942] usb 3-1: Using ep0 maxpacket: 16
[  220.758887][ T5942] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  220.781343][ T5942] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.806468][ T5942] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.830141][ T5942] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  220.896937][ T5942] usb 3-1: config 7 interface 0 has no altsetting 0
[  220.904117][ T5942] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  220.967358][ T9139] loop4: detected capacity change from 0 to 32768
[  220.974009][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.042125][ T9139] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  221.195123][ T9139] XFS (loop4): Starting recovery (logdev: internal)
[  221.212796][ T9179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1106'.
[  221.259366][ T9139] XFS (loop4): Ending recovery (logdev: internal)
[  221.378408][ T5821] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  221.455638][ T5942] hid (null): nested delimiters
[  221.483803][ T9183] loop3: detected capacity change from 0 to 64
[  221.503831][ T5942] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.000B/input/input12
[  221.572271][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.581911][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.600384][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.608364][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.616287][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.642271][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.652221][ T5942] kye 0003:0458:5010.000B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  221.688628][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.725134][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.734875][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.748855][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.757872][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.765965][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.808889][ T5942] usb 3-1: USB disconnect, device number 5
[  221.848831][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.872609][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.934553][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.968725][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  221.977955][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.007122][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.022643][ T9188] fido_id[9188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  222.037934][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.045896][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.070290][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.089179][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.110833][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.148552][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa653253bd0 returned -22
[  222.208358][ T9185] binder: 9184:9185 ioctl 4020ae46 7fa6532538d0 returned -22
[  222.252341][ T9194] netlink: 'syz.4.1113': attribute type 4 has an invalid length.
[  222.274555][ T9196] loop3: detected capacity change from 0 to 128
[  222.317501][ T9196] syz.3.1114: attempt to access beyond end of device
[  222.317501][ T9196] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[  222.463939][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'.
[  222.468761][ T9202] netem: change failed
[  222.730692][ T9212] loop4: detected capacity change from 0 to 128
[  222.893564][ T1316] kworker/u8:8: attempt to access beyond end of device
[  222.893564][ T1316] loop4: rw=1, sector=145, nr_sectors = 16 limit=128
[  222.914523][ T9191] loop0: detected capacity change from 0 to 32768
[  222.940725][ T1316] kworker/u8:8: attempt to access beyond end of device
[  222.940725][ T1316] loop4: rw=1, sector=169, nr_sectors = 8 limit=128
[  222.965947][ T9191] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1112 (9191)
[  222.995149][ T1316] kworker/u8:8: attempt to access beyond end of device
[  222.995149][ T1316] loop4: rw=1, sector=185, nr_sectors = 8 limit=128
[  223.047020][ T9191] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  223.057419][ T1316] kworker/u8:8: attempt to access beyond end of device
[  223.057419][ T1316] loop4: rw=1, sector=201, nr_sectors = 8 limit=128
[  223.094650][ T9191] BTRFS info (device loop0): using blake2b checksum algorithm
[  223.102795][ T1316] kworker/u8:8: attempt to access beyond end of device
[  223.102795][ T1316] loop4: rw=1, sector=217, nr_sectors = 8 limit=128
[  223.169196][ T1316] kworker/u8:8: attempt to access beyond end of device
[  223.169196][ T1316] loop4: rw=1, sector=233, nr_sectors = 8 limit=128
[  223.196644][ T1316] kworker/u8:8: attempt to access beyond end of device
[  223.196644][ T1316] loop4: rw=1, sector=249, nr_sectors = 8 limit=128
[  223.211436][ T1316] kworker/u8:8: attempt to access beyond end of device
[  223.211436][ T1316] loop4: rw=1, sector=265, nr_sectors = 8 limit=128
[  223.230175][ T1316] kworker/u8:8: attempt to access beyond end of device
[  223.230175][ T1316] loop4: rw=1, sector=281, nr_sectors = 8 limit=128
[  223.344430][ T9191] BTRFS info (device loop0): enabling ssd optimizations
[  223.394585][ T9191] BTRFS info (device loop0): turning on async discard
[  223.411055][ T9191] BTRFS info (device loop0): enabling free space tree
[  223.422860][ T9228] loop3: detected capacity change from 0 to 4096
[  223.509771][ T9243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.624010][ T9228] overlayfs: upper fs does not support tmpfile.
[  223.633878][ T5820] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  223.663785][ T9228] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  223.700603][ T9228] overlayfs: failed to set xattr on upper
[  223.716415][ T9228] overlayfs: ...falling back to redirect_dir=nofollow.
[  223.737687][ T9228] overlayfs: ...falling back to metacopy=off.
[  223.749360][ T9228] overlayfs: ...falling back to index=off.
[  223.774735][ T9228] overlayfs: ...falling back to uuid=null.
[  224.057553][ T5822] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  224.059691][ T9250] loop4: detected capacity change from 0 to 1024
[  224.086147][ T5822] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  224.146098][ T5822] Remounting filesystem read-only
[  224.152803][ T5822] NILFS (loop3): error -5 truncating bmap (ino=12)
[  224.216435][ T5822] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  224.417265][  T170] hfsplus: b-tree write err: -5, ino 8
[  224.616466][ T5950] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  224.709337][ T9247] loop2: detected capacity change from 0 to 32768
[  224.782324][ T9247] JBD2: Ignoring recovery information on journal
[  224.798997][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.816264][ T5950] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  224.835565][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.857627][ T5950] usb 2-1: config 0 descriptor??
[  224.904285][ T9247] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  224.949403][ T9248] loop0: detected capacity change from 0 to 32768
[  225.011664][ T9247] overlayfs: upper fs does not support tmpfile.
[  225.053828][ T9247] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  225.088164][ T9247] 
[  225.090554][ T9247] ======================================================
[  225.097595][ T9247] WARNING: possible circular locking dependency detected
[  225.104775][ T9247] syzkaller #0 Tainted: G             L     
[  225.110777][ T9247] ------------------------------------------------------
[  225.117825][ T9247] syz.2.1130/9247 is trying to acquire lock:
[  225.123835][ T9247] ffff8880575d89c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  225.137382][ T9247] 
[  225.137382][ T9247] but task is already holding lock:
[  225.144776][ T9247] ffff8880561db1b8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0
[  225.154321][ T9247] 
[  225.154321][ T9247] which lock already depends on the new lock.
[  225.154321][ T9247] 
[  225.164757][ T9247] 
[  225.164757][ T9247] the existing dependency chain (in reverse order) is:
[  225.173876][ T9247] 
[  225.173876][ T9247] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  225.181876][ T9247]        down_read+0x47/0x2e0
[  225.186581][ T9247]        ocfs2_init_acl+0x2fd/0x7e0
[  225.191808][ T9247]        ocfs2_mknod+0x1679/0x2290
[  225.196981][ T9247]        vfs_mknod+0x447/0x610
[  225.201781][ T9247]        filename_mknodat+0x3cb/0x660
[  225.207180][ T9247]        __se_sys_mknod+0x3a/0x150
[  225.212320][ T9247]        do_syscall_64+0x14d/0xf80
[  225.217553][ T9247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.224017][ T9247] 
[  225.224017][ T9247] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  225.232553][ T9247]        down_read+0x47/0x2e0
[  225.237267][ T9247]        ocfs2_start_trans+0x3ab/0x700
[  225.242747][ T9247]        ocfs2_reserve_local_alloc_bits+0xb43/0x26f0
[  225.249444][ T9247]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  225.256320][ T9247]        ocfs2_extend_dir+0x754/0x4a60
[  225.261806][ T9247]        ocfs2_prepare_dir_for_insert+0x34b0/0x5360
[  225.268431][ T9247]        ocfs2_mknod+0xa1b/0x2290
[  225.273481][ T9247]        ocfs2_mkdir+0x181/0x490
[  225.278532][ T9247]        vfs_mkdir+0x413/0x630
[  225.283326][ T9247]        filename_mkdirat+0x285/0x510
[  225.288797][ T9247]        __se_sys_mkdirat+0x35/0x150
[  225.294146][ T9247]        do_syscall_64+0x14d/0xf80
[  225.299285][ T9247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.305820][ T9247] 
[  225.305820][ T9247] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  225.313334][ T9247]        ocfs2_start_trans+0x2ac/0x700
[  225.318913][ T9247]        ocfs2_extend_dir+0xfd8/0x4a60
[  225.324580][ T9247]        ocfs2_prepare_dir_for_insert+0x34b0/0x5360
[  225.331200][ T9247]        ocfs2_mknod+0xa1b/0x2290
[  225.336257][ T9247]        ocfs2_mkdir+0x181/0x490
[  225.341209][ T9247]        vfs_mkdir+0x413/0x630
[  225.345999][ T9247]        filename_mkdirat+0x285/0x510
[  225.351484][ T9247]        __se_sys_mkdirat+0x35/0x150
[  225.356790][ T9247]        do_syscall_64+0x14d/0xf80
[  225.361921][ T9247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.368359][ T9247] 
[  225.368359][ T9247] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  225.378984][ T9247]        down_write+0x96/0x200
[  225.383777][ T9247]        ocfs2_reserve_local_alloc_bits+0x11f/0x26f0
[  225.390486][ T9247]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  225.397368][ T9247]        ocfs2_mknod+0x111f/0x2290
[  225.402587][ T9247]        ocfs2_mkdir+0x181/0x490
[  225.407539][ T9247]        vfs_mkdir+0x413/0x630
[  225.412322][ T9247]        filename_mkdirat+0x285/0x510
[  225.417717][ T9247]        __se_sys_mkdirat+0x35/0x150
[  225.423028][ T9247]        do_syscall_64+0x14d/0xf80
[  225.428159][ T9247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.434598][ T9247] 
[  225.434598][ T9247] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  225.445304][ T9247]        __lock_acquire+0x15a5/0x2cf0
[  225.450702][ T9247]        lock_acquire+0xf0/0x2e0
[  225.455659][ T9247]        down_write+0x96/0x200
[  225.460523][ T9247]        ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  225.466954][ T9247]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  225.473913][ T9247]        ocfs2_init_xattr_set_ctxt+0x2f5/0x790
[  225.480093][ T9247]        ocfs2_xattr_set+0xc42/0x13e0
[  225.485494][ T9247]        __vfs_setxattr+0x43c/0x480
[  225.490719][ T9247]        __vfs_setxattr_noperm+0x12d/0x660
[  225.496561][ T9247]        vfs_setxattr+0x163/0x360
[  225.501616][ T9247]        ovl_fill_super+0x4b20/0x5e00
[  225.507023][ T9247]        get_tree_nodev+0xbb/0x150
[  225.512157][ T9247]        vfs_get_tree+0x92/0x2a0
[  225.517120][ T9247]        do_new_mount+0x341/0xd30
[  225.522167][ T9247]        __se_sys_mount+0x31d/0x420
[  225.527392][ T9247]        do_syscall_64+0x14d/0xf80
[  225.532522][ T9247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.539068][ T9247] 
[  225.539068][ T9247] other info that might help us debug this:
[  225.539068][ T9247] 
[  225.549331][ T9247] Chain exists of:
[  225.549331][ T9247]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  225.549331][ T9247] 
[  225.566713][ T9247]  Possible unsafe locking scenario:
[  225.566713][ T9247] 
[  225.574199][ T9247]        CPU0                    CPU1
[  225.579582][ T9247]        ----                    ----
[  225.584959][ T9247]   lock(&oi->ip_xattr_sem);
[  225.589572][ T9247]                                lock(&journal->j_trans_barrier);
[  225.597398][ T9247]                                lock(&oi->ip_xattr_sem);
[  225.604528][ T9247]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  225.612008][ T9247] 
[  225.612008][ T9247]  *** DEADLOCK ***
[  225.612008][ T9247] 
[  225.620161][ T9247] 4 locks held by syz.2.1130/9247:
[  225.625285][ T9247]  #0: ffff8880263460e0 (&type->s_umount_key#65/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  225.635449][ T9247]  #1: ffff88802230a420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  225.644706][ T9247]  #2: ffff8880561db480 (&sb->s_type->i_mutex_key#39){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  225.655205][ T9247]  #3: ffff8880561db1b8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0
[  225.665251][ T9247] 
[  225.665251][ T9247] stack backtrace:
[  225.671164][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.2.1130 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  225.671194][ T9247] Tainted: [L]=SOFTLOCKUP
[  225.671201][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  225.671211][ T9247] Call Trace:
[  225.671218][ T9247]  <TASK>
[  225.671226][ T9247]  dump_stack_lvl+0xe8/0x150
[  225.671251][ T9247]  print_circular_bug+0x2e1/0x300
[  225.671279][ T9247]  check_noncircular+0x12e/0x150
[  225.671311][ T9247]  __lock_acquire+0x15a5/0x2cf0
[  225.671337][ T9247]  ? _raw_spin_unlock+0x28/0x50
[  225.671364][ T9247]  ? ocfs2_get_system_file_inode+0x202/0x7e0
[  225.671392][ T9247]  lock_acquire+0xf0/0x2e0
[  225.671412][ T9247]  ? ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  225.671437][ T9247]  down_write+0x96/0x200
[  225.671457][ T9247]  ? ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  225.671474][ T9247]  ? __pfx_down_write+0x10/0x10
[  225.671498][ T9247]  ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  225.671522][ T9247]  ? do_raw_spin_lock+0x12b/0x2f0
[  225.671543][ T9247]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  225.671560][ T9247]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.671581][ T9247]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  225.671606][ T9247]  ? stack_depot_save_flags+0x3f3/0x810
[  225.671628][ T9247]  ? kasan_save_track+0x4f/0x80
[  225.671642][ T9247]  ? kasan_save_track+0x3e/0x80
[  225.671657][ T9247]  ? __kasan_kmalloc+0x93/0xb0
[  225.671672][ T9247]  ? __kmalloc_cache_noprof+0x31c/0x660
[  225.671688][ T9247]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  225.671708][ T9247]  ? ocfs2_init_xattr_set_ctxt+0x2f5/0x790
[  225.671728][ T9247]  ? ocfs2_xattr_set+0xc42/0x13e0
[  225.671747][ T9247]  ? __vfs_setxattr+0x43c/0x480
[  225.671768][ T9247]  ? __vfs_setxattr_noperm+0x12d/0x660
[  225.671789][ T9247]  ? vfs_setxattr+0x163/0x360
[  225.671810][ T9247]  ? ovl_fill_super+0x4b20/0x5e00
[  225.671829][ T9247]  ? get_tree_nodev+0xbb/0x150
[  225.671847][ T9247]  ? vfs_get_tree+0x92/0x2a0
[  225.671862][ T9247]  ? do_new_mount+0x341/0xd30
[  225.671882][ T9247]  ? __se_sys_mount+0x31d/0x420
[  225.671902][ T9247]  ? do_syscall_64+0x14d/0xf80
[  225.671919][ T9247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.671954][ T9247]  ? __kasan_kmalloc+0x93/0xb0
[  225.671972][ T9247]  ? __kmalloc_cache_noprof+0x31c/0x660
[  225.671991][ T9247]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  225.672008][ T9247]  ? __kmalloc_cache_noprof+0x15b/0x660
[  225.672026][ T9247]  ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  225.672046][ T9247]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  225.672063][ T9247]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  225.672094][ T9247]  ocfs2_init_xattr_set_ctxt+0x2f5/0x790
[  225.672120][ T9247]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  225.672143][ T9247]  ? ocfs2_xattr_set+0xc08/0x13e0
[  225.672164][ T9247]  ? up_write+0x1ab/0x410
[  225.672178][ T9247]  ? __kmalloc_cache_noprof+0x15b/0x660
[  225.672201][ T9247]  ocfs2_xattr_set+0xc42/0x13e0
[  225.672220][ T9247]  ? __lock_acquire+0x6b5/0x2cf0
[  225.672253][ T9247]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  225.672281][ T9247]  ? do_raw_spin_lock+0x12b/0x2f0
[  225.672301][ T9247]  ? do_raw_spin_unlock+0xf5/0x210
[  225.672319][ T9247]  ? posix_xattr_acl+0x93/0xc0
[  225.672334][ T9247]  ? evm_protect_xattr+0x4d4/0xac0
[  225.672357][ T9247]  ? __pfx_ocfs2_permission+0x10/0x10
[  225.672385][ T9247]  ? ocfs2_xattr_user_set+0xab/0x100
[  225.672408][ T9247]  ? __pfx_ocfs2_xattr_user_set+0x10/0x10
[  225.672429][ T9247]  __vfs_setxattr+0x43c/0x480
[  225.672456][ T9247]  __vfs_setxattr_noperm+0x12d/0x660
[  225.672481][ T9247]  vfs_setxattr+0x163/0x360
[  225.672506][ T9247]  ? __pfx_vfs_setxattr+0x10/0x10
[  225.672530][ T9247]  ? __dentry_kill+0x4b2/0x5e0
[  225.672549][ T9247]  ? finish_dput+0xad/0x480
[  225.672571][ T9247]  ? finish_dput+0x3da/0x480
[  225.672593][ T9247]  ovl_fill_super+0x4b20/0x5e00
[  225.672620][ T9247]  ? stack_depot_save_flags+0x33/0x810
[  225.672640][ T9247]  ? __lock_acquire+0x6b5/0x2cf0
[  225.672668][ T9247]  ? __pfx_ovl_fill_super+0x10/0x10
[  225.672693][ T9247]  ? __pfx___mutex_trylock_common+0x10/0x10
[  225.672721][ T9247]  ? trace_contention_end+0x3d/0x150
[  225.672749][ T9247]  ? shrinker_register+0x124/0x230
[  225.672772][ T9247]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  225.672795][ T9247]  ? __pfx___mutex_lock+0x10/0x10
[  225.672814][ T9247]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  225.672834][ T9247]  ? __raw_spin_lock_init+0x45/0x100
[  225.672855][ T9247]  ? sget_fc+0x962/0xa40
[  225.672880][ T9247]  ? __pfx_set_anon_super_fc+0x10/0x10
[  225.672894][ T9247]  ? __pfx_ovl_fill_super+0x10/0x10
[  225.672914][ T9247]  get_tree_nodev+0xbb/0x150
[  225.672934][ T9247]  vfs_get_tree+0x92/0x2a0
[  225.672953][ T9247]  do_new_mount+0x341/0xd30
[  225.672974][ T9247]  ? apparmor_capable+0x126/0x170
[  225.672999][ T9247]  ? __pfx_do_new_mount+0x10/0x10
[  225.673020][ T9247]  ? ns_capable+0x89/0xe0
[  225.673041][ T9247]  ? path_mount+0x690/0x10e0
[  225.673068][ T9247]  ? user_path_at+0xd4/0x160
[  225.673095][ T9247]  __se_sys_mount+0x31d/0x420
[  225.673119][ T9247]  ? __pfx___se_sys_mount+0x10/0x10
[  225.673144][ T9247]  ? __x64_sys_mount+0x20/0xc0
[  225.673167][ T9247]  do_syscall_64+0x14d/0xf80
[  225.673184][ T9247]  ? trace_irq_disable+0x3b/0x150
[  225.673223][ T9247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.673239][ T9247]  ? clear_bhb_loop+0x40/0x90
[  225.673257][ T9247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.673273][ T9247] RIP: 0033:0x7f8d4879c629
[  225.673290][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.673305][ T9247] RSP: 002b:00007f8d495d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  225.673322][ T9247] RAX: ffffffffffffffda RBX: 00007f8d48a15fa0 RCX: 00007f8d4879c629
[  225.673338][ T9247] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000
[  225.673350][ T9247] RBP: 00007f8d48832b39 R08: 0000200000000780 R09: 0000000000000000
[  225.673361][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.673371][ T9247] R13: 00007f8d48a16038 R14: 00007f8d48a15fa0 R15: 00007ffe37e64b78
[  225.673391][ T9247]  </TASK>
[  226.292536][ T9247] overlayfs: upper fs missing required features.
[  226.317436][ T5950] hid_parser_main: 19 callbacks suppressed
[  226.317461][ T5950] dragonrise 0003:0079:0006.000C: unknown main item tag 0x0
[  226.332503][ T5950] dragonrise 0003:0079:0006.000C: unknown main item tag 0x0
[  226.340703][ T5950] dragonrise 0003:0079:0006.000C: unknown main item tag 0x0
[  226.348189][ T5950] dragonrise 0003:0079:0006.000C: item fetching failed at offset 3/5
[  226.356756][ T5950] dragonrise 0003:0079:0006.000C: parse failed
[  226.363077][ T5950] dragonrise 0003:0079:0006.000C: probe with driver dragonrise failed with error -22
[  226.404655][ T5829] ocfs2: Unmounting device (7,2) on (node local)
[  226.497867][ T5950] usb 2-1: USB disconnect, device number 13
[  226.724065][ T9266] loop0: detected capacity change from 0 to 32768
[  226.749485][ T9266] JBD2: Ignoring recovery information on journal
[  226.808804][ T9266] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  226.865785][ T5820] ocfs2: Unmounting device (7,0) on (node local)