last executing test programs: 2m32.193749697s ago: executing program 2 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000040) 2m31.805682454s ago: executing program 2 (id=102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x14, 0x0, 0x6df4630f9e4754d4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xf37522b3a0d40204}, 0x20000804) 2m31.468415503s ago: executing program 2 (id=104): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x6, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xcea, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x100000, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m31.207006613s ago: executing program 2 (id=106): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000680)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xc}}]}, 0x22, 0x4b4, &(0x7f0000000780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 2m30.532931045s ago: executing program 2 (id=110): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setns(0xc9, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m29.907066848s ago: executing program 2 (id=113): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600070a0018"], 0x4c}}, 0x0) 2m29.273677025s ago: executing program 32 (id=113): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600070a0018"], 0x4c}}, 0x0) 1m38.183404235s ago: executing program 1 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.771959985s ago: executing program 1 (id=381): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001240)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 1m37.363370254s ago: executing program 1 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "00000013fd00", "5517bd0fa5ecf3d606e5f9c39dd1e9fd", "03c0fd7d", "657e2814e07deaea"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4"], 0x100}, 0x0) 1m37.128836711s ago: executing program 1 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 1m36.88035074s ago: executing program 1 (id=387): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 1m36.147592475s ago: executing program 1 (id=393): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002300), 0x4, &(0x7f0000003140)) sync() 1m35.692428276s ago: executing program 33 (id=393): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002300), 0x4, &(0x7f0000003140)) sync() 48.546592755s ago: executing program 3 (id=642): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r1, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x1, 0x6) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 47.614727391s ago: executing program 3 (id=647): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) 47.454963559s ago: executing program 3 (id=648): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x5, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r0, 0x1) 46.455000858s ago: executing program 3 (id=649): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000680)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xc}}]}, 0x22, 0x4b4, &(0x7f0000000780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 45.818118048s ago: executing program 3 (id=652): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 44.927834782s ago: executing program 3 (id=655): openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r1], 0x28}, 0x4044804) 44.269583293s ago: executing program 34 (id=655): openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r1], 0x28}, 0x4044804) 37.994218543s ago: executing program 0 (id=667): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000004200)={'#! ', './file1/../file0', [{0x20, 'h\x9aA,6\x89\xd5\xb8T\xeb>\xf4=@\xdb[\xcf\xe0\xcb\xaeK\x86\v=Q\xd7\x1f\xc3\xaf{\xc8\x95\xc4E\xd5^[\x7f\x1b\xc3s\x97\xc4\x1d\xfe\x93\x16:\xed\x92\x8bF\x8cy\xe6\xe1\x1a\xdf\xec*p\x15\xac\xf6\x00%Zx\x1e\xae\x02\xcb\xaa\xcb\xb0\'\x87\x18W\x01\x16\x1d\xc5\xe5\xb9\xd9#\xa6e%\xe5\xd5o\x8f\x0e\xcd\x18v\x96\xfd\x15\xc2\xc1\xee\x191Q\'\xd6\x0e\x1c>\x8d\xd2\xc7\x1f\xf0lJE\x00.g\xbb\xf3\xfe\xbb\xce=\x91h3`q\xcd\xfbJ\x9ck\x04Y'}, {0x20, '\x00'}], 0xa, "e39a0e756a544899dc9745f153c7c1c96c278c"}, 0x1aa) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 37.490277307s ago: executing program 0 (id=671): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) unshare(0x22020400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x1000000000000008, 0x3, 0x7, 0x7, 0x7, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 34.305649669s ago: executing program 0 (id=691): socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 34.124316408s ago: executing program 0 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 33.985574532s ago: executing program 0 (id=695): getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000feb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68812300000004000000010000b441bf", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 33.649878058s ago: executing program 0 (id=699): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r0], 0xfdef) 33.098871115s ago: executing program 35 (id=699): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r0], 0xfdef) 6.446481697s ago: executing program 8 (id=810): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d000609058202", @ANYRES8], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000140)={0x40, 0x13, 0x4, "9938c9ca"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.331240179s ago: executing program 4 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf5a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 5.347455481s ago: executing program 7 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x505, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x8, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x9, 0x4, 0x8000, 0x8, 0x3, 0x4, 0x8000000000003, 0xb6, 0x100000000, 0x3, 0x100000000004], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.346936951s ago: executing program 5 (id=817): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291", 0x95}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bad", 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9", 0xc2}], 0x1}}], 0x3, 0x2090) 4.759385309s ago: executing program 4 (id=819): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) flock(0xffffffffffffffff, 0x6) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='..\xeb\xbb\xb0(\x00\x00\x00']}, 0x0, 0x100) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16], 0x3, 0x23a, &(0x7f0000000500)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 4.632396754s ago: executing program 4 (id=820): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x0, 0x56e, &(0x7f0000000640)="$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") chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 4.282693995s ago: executing program 5 (id=821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x3) 4.175221031s ago: executing program 4 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='devtmpfs\x00', &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102000109024300020100c000090400000102020100052400100105240100010424020f0524060001070581030a000909040100020a0000000705020240000007058202400000"], 0x0) (async) nanosleep(&(0x7f0000000200)={0x2}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSBRK(r0, 0x5409, 0x1) 4.148241271s ago: executing program 7 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.923041788s ago: executing program 8 (id=824): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x8, &(0x7f0000006140)=ANY=[@ANYRES16=0x0], 0x1, 0x1f0, &(0x7f0000000280)="$eJzslT1rFEEYx/8zu+6LiB/AxsKAsXCzu6diEzgbGy0EX4KF4GE2IboxGLfQiIitjb2dhR/BUoitH0JygiiINmo9Mi+7Oye3x91yyxV5fpDZ/7w+zzwT/geCIA4tX4Z/D8Sf1W8BgGNYgm/Gvzv1Gm6t/xz8ev7x6uW113feffIPonD0NH/m+C5c7F9yUJi+EELY80vmewO80jfBccboNTBERt8Fxy2jMzDcNvq+pXfk+ija2Mqz6N5Ovi5FLJtENqlseqP5AT9fMqxb+TFr/vHTvQeDPM92OxTjK7f/o8ovAFat/Oz3iqCzja36JeBIjO6B4brRF+GXtdElqe9/5YRbn+9MvL+Hpps8Og5Mce2vAOqRjS4r68lQrbYDrOu3R6BLXI8MXwnRtCtEm1iO3lW+6PyS9zDfavgtt8OdsMbHLAcK336LroWMNvXiD339flWqL3R/tqD9himv1b9W7Z/iLcNpy5+0lbxRPxYrxbb87p3d2h5sZpvZwzTtXYjPxfH5dEUZkW7HW6A6P1T+fLQ+P2xa6zEPTwZFsZvotuqnuh3nuFz5H8fyKRyRfemm3n/n/gZQBmXmj6uvVMtOY/IEQRAL5CSY8mTly6Xoa/96/wzlXHpt0YkSBEEQBEEQBEEQBNGafwEAAP//sk1VmA==") unshare(0x2a020480) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00001f4000/0x2000)=nil, &(0x7f0000178000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.489888174s ago: executing program 7 (id=825): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000100)=@echo=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) 3.439480931s ago: executing program 8 (id=826): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @bt={0xfffffff2, 0x81, 0x9cc9c14, 0x7fff, 0xffffffffffffffff, 0x6, 0x4, 0x3}}) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x2b1b1983) 3.278073561s ago: executing program 5 (id=827): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) llistxattr(&(0x7f0000000100)='mnt/encrypted_dir/file\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt/encrypted_dir/file\x00', 0x42, 0x180) 3.242735014s ago: executing program 7 (id=828): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@auto_da_alloc}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 3.106435642s ago: executing program 6 (id=829): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x34438d2078d8cb3e, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r1, &(0x7f0000000200)=""/251, 0xfb) 2.799215175s ago: executing program 6 (id=830): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="201401"], 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 2.7829282s ago: executing program 5 (id=831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.432071946s ago: executing program 7 (id=832): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[], 0x21, 0x554e, &(0x7f0000000240)="$eJzs3E1vG0UYAOBx0vSbEiEO3LqoQkqk2qrTD8EtQCs+RKqowIETOLZjubG9Uew4IScOHBEH/gkCiRNHfgMHztwQBxA3JJB3JqgpTUGKEzfJ80jrd2d2992ZTWTp3V05AKfWbPbHb6VwJVwIIUyHEC6HUKyX0lJYjOGlEMLVEMLUI0sp9f/TcTaEcDGEcGWUPOYspU1fXR9eu/3ru79//+O5M5e+/u6nyc0amLRXQgjd9bi+1Y0xb8X4MPXXhu0idm8NU4wbumupnce41VwpMmzVdverFfFmK+6fr2/2R3G1U6uPYqu9WvSv9+IJ+8PWbp7igIe1jaLdaK4Usd3Pi9jaiePa3onfbTv9QczTSPk+LdKHwWA3xv7mdjPOZ32tiPXeIPXHvHmjuT2KwxTT6UI97zSKcawc5Eo/015+r93b3M6GzY1+O+9ltyvVVyvVO+XqRt5oDpq3yrVu486tbK7VGe1WHjRr3cVWnrc6zUo9785nc616vVytZnN3myvtWi+rVis3KzfKt+fT2vXsrfsfZp1GNjeKb7R7m4N2p5+t5htZPGI+W6jcfG0+u1bN3l9azpYf3Lu3tPzBx3c/uv/60jtvZjOjv9q/h5XNLdxYWChXb5QXqvMHuwDP9vxT2t1hfZ4GPcb5w4GUJj0AgONH/Q9MwuHV/xsPQnh6/b/73fa0+n/6P+r/oP4fi2NV/572+v8Q5g8Hov4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fp755u1iZTa2L6X+51LXC6ldCiFMhRD+eoLpcHZPzumUZ2af/WceG8MPpVBkGJ3jXFouhhAW0/Ln84d9FQAAAODk+vazq1/Gaj1+zE56QIxZKS1PFG/aTF3+ZIwnm5n9ZUzZpkYfL44pWfH/fSZsjylbcQPr/JiSxVtuZ8aV7X+Z3hPOPxJKMUw9fsTYZgsAAEzM3krgaKsQAAAAjtIX+25ZO9JxcMSKB8PpXfz0Av+5GNLDvgux7dEfAAAAHF/7vhgOAAAAnBhF/e/3/wAAAOBki7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzNzr3cJg7EcQD+G+PF+9Ki1d63ldygjJSQY44RBaQJSiAtpAFqILeUEEHkB1GIiIDYjkX0fZI9sWX9ZsbhwMygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj1ki+ndzf/bpjnrTQNFQNpKdwAAAIA9VtliWv4xrq5/1vd/17f+1tdJRAwiYt/wPY1vO5lpnZO983z2pg33EWVCUceoPn5ExEV1bOJP128BAAAAvqRhcVrO5pN64b08jftuFY0d/T/M63Lw67KlqpOIyMaPLaUNirx/LYWVn+9hXO+t53TlBFbevFWVcspt2FbaUaof22xn7fJXRVIVB95Ka30HAAA+UbpTHBqF+N4PAABwvq76bgBd+H7wiSS2S5kvS4Gjqsh3Igz6AQAA4HwlfTcAAAAA6Fw5/j9l/7/oZ/+/eLL/HwAAAHxYtf8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXVpli+lyNp80zVlvmmmnNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD83Z3P/QEIE5CHIAQSAyzUdUtLN8QAihj4E5Ci1C2hLj/aDLSqkLKwocxdEIwIIYHC1n+AqRtSK3UpWwcPRWJhMbrzXXxpKtVtlDsn+Xykd+9rx7n3fWfJ8vfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI0+mMZJduhM4rh47s7DGytZf/eRPnNr495i1rI4qjPp/eG16oOo21wiAAAAHB5JWd+HEO6nm0tZH3fy+j8tX5PV/D++MInLev7Rur/sy9o/a3/8/uCVrYE6k3Gyk15YHQ5O7kyltXeznG8vPvEVrfzK5/dekvwNiT9ef3mU5tcz+v727Q/beXikjmwBgGdxouyLoPw+lPX9JhMD4NBoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0Xp4royjEMJiaxpn7j68sfK4/tbGvcWynb15c6N6zuwUaQjhwupwcLLGucy7q9euX1oeDgdX6g9eDyE0Nfr7xfQvfTrDi0No5PrsVfDfeDx+qt862nzOuwri4s2el3z2R/Dkz45OtJefTAAAHDRp0bKvkffTzaXsuWghhPFP2+v/typxmLH+f/DZ2TvVsar1f7+2Gc6/3trlr3pXr11/Z/Xy8sXBxcEX757qv9c/fe7MmXO9/F5Jzx0TAAAAdqddtGr9Hy/sXP8/XonDjPX/1z/0v52O9Fd+VP/vNF30azoTAACAw+2lN/7953HbLKN2O3yzvLZ2pT85bj0+NTk2kOpTO1K0av2fLDSdFQAAAFCH0Xq0bf3/fCUOM67/P//zq79Wz5mEEI4V6/8nVr4cnq9vOnOtjj8nbnqOAAAANOtY0arr/2m+/z/e2vIQhxDefnMSF/8GcKb6P/nou1+qYyWV/f+n65viXIq7k+uR990QWt1tP/6zscQAAAA4kI4WLSv2/043lz7/7fgnbfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2fwAAAP//Fwg9JA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) 2.304218265s ago: executing program 5 (id=833): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.983467039s ago: executing program 6 (id=834): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xffffffffffffffcb}, {0x4}}]}, 0x34}}, 0x4040004) 1.950666632s ago: executing program 8 (id=835): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3200041, &(0x7f00000004c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580", @ANYRESOCT], 0x1, 0x9e23, &(0x7f0000013e80)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x80) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x101c) close(0x4) 1.742861376s ago: executing program 6 (id=836): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x800001, @mcast1, 0x43}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.423199777s ago: executing program 8 (id=837): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.338405547s ago: executing program 4 (id=838): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x161400, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0xc379, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d3, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x7, 0x401, 0x2, 0x5], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.102317496s ago: executing program 6 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") creat(&(0x7f00000001c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) chown(&(0x7f0000000000)='./file0\x00', r0, 0xee01) 1.047527695s ago: executing program 8 (id=840): syz_mount_image$xfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1a00c4e, &(0x7f0000000480), 0x4, 0x96ec, &(0x7f000000c7c0)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_SETFLAGS(r1, 0x41009432, 0x0) 663.990573ms ago: executing program 5 (id=841): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(0xee00, r3) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) 610.465825ms ago: executing program 4 (id=842): socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000ebffff0400000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 426.418287ms ago: executing program 7 (id=843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=844): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): 878491][ T6215] ? lockdep_hardirqs_on+0x7b/0x110 [ 197.878529][ T6215] deactivate_locked_super+0xbc/0x110 [ 197.878555][ T6215] cleanup_mnt+0x3d3/0x460 [ 197.878587][ T6215] task_work_run+0x1d9/0x270 [ 197.878615][ T6215] ? __pfx_task_work_run+0x10/0x10 [ 197.878651][ T6215] exit_to_user_mode_loop+0x204/0x770 [ 197.878673][ T6215] ? rcu_is_watching+0x16/0xb0 [ 197.878703][ T6215] do_syscall_64+0x328/0x520 [ 197.878729][ T6215] ? trace_irq_disable+0x3b/0x140 [ 197.878761][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.878844][ T6215] ? clear_bhb_loop+0x70/0xc0 [ 197.878961][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.879024][ T6215] RIP: 0033:0x7f06d4f9f317 [ 197.879077][ T6215] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 197.879130][ T6215] RSP: 002b:00007ffe7afd1398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 197.879192][ T6215] RAX: 0000000000000000 RBX: 00007f06d5034474 RCX: 00007f06d4f9f317 [ 197.879234][ T6215] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7afd1450 [ 197.879268][ T6215] RBP: 00007ffe7afd1450 R08: 00007ffe7afd2450 R09: 00000000ffffffff [ 197.879303][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7afd24e0 [ 197.879338][ T6215] R13: 00007f06d5034474 R14: 00000000000303df R15: 00007ffe7afd2520 [ 197.879433][ T6215] [ 197.985278][ T6215] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 198.023323][ T7632] loop6: detected capacity change from 0 to 32768 [ 198.163924][ T7632] (syz.6.483,7632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.164948][ T7632] (syz.6.483,7632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.282745][ T7642] loop3: detected capacity change from 0 to 136 [ 198.320201][ T7634] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.345610][ T7640] erspan0: left allmulticast mode [ 198.351630][ T7640] erspan0: left promiscuous mode [ 198.356246][ T7632] (syz.6.483,7632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 198.363736][ T7632] (syz.6.483,7632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 198.391737][ T7632] (syz.6.483,7632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x2062707c. Applying ECC. [ 198.407111][ T7634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.413418][ T7632] JBD2: Ignoring recovery information on journal [ 198.425843][ T7640] macvtap1: left promiscuous mode [ 198.431322][ T7640] macvtap1: left allmulticast mode [ 198.437832][ T7634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.472749][ T7634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.502629][ T7634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.509565][ T7634] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.540341][ T7634] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.559134][ T7634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.565678][ T7634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 198.576879][ T7634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 198.625051][ T7632] (syz.6.483,7632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 198.651843][ T7632] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 198.673223][ T7634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.690857][ T7634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.811736][ T7632] (syz.6.483,7632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 198.842360][ T7634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.936294][ T7632] (syz.6.483,7632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x2062707c. Applying ECC. [ 198.980110][ T7632] (syz.6.483,7632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 199.041857][ T7632] (syz.6.483,7632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 199.109327][ T7632] (syz.6.483,7632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 199.124871][ T7632] (syz.6.483,7632,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 199.137915][ T7632] (syz.6.483,7632,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 199.147841][ T7632] (syz.6.483,7632,0):ocfs2_quota_read:201 ERROR: status = -5 [ 199.155434][ T7632] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 5 [ 199.164935][ T7632] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 199.174545][ T7632] (syz.6.483,7632,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 199.198844][ T7632] (syz.6.483,7632,0):ocfs2_mknod:319 ERROR: status = -5 [ 199.198938][ T7632] (syz.6.483,7632,0):ocfs2_mknod:513 ERROR: status = -5 [ 199.198972][ T7632] (syz.6.483,7632,0):ocfs2_create:685 ERROR: status = -5 [ 199.493605][ T7329] ocfs2: Unmounting device (7,6) on (node local) [ 199.527443][ T7654] bridge0: port 3(syz_tun) entered blocking state [ 199.527581][ T7654] bridge0: port 3(syz_tun) entered disabled state [ 199.527942][ T7654] syz_tun: entered allmulticast mode [ 199.558231][ T7654] syz_tun: entered promiscuous mode [ 199.575232][ T7654] bridge0: port 3(syz_tun) entered blocking state [ 199.575443][ T7654] bridge0: port 3(syz_tun) entered forwarding state [ 199.758493][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.782801][ T7657] macsec1: entered promiscuous mode [ 199.782849][ T7657] bridge0: entered promiscuous mode [ 200.094440][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'. [ 200.114936][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'. [ 200.127301][ T7665] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 200.136617][ T7665] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 200.258861][ T7660] loop4: detected capacity change from 0 to 32768 [ 200.288830][ T7660] JBD2: Ignoring recovery information on journal [ 200.381338][ T7660] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 200.388275][ T987] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.477789][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.542830][ T987] usb 6-1: Using ep0 maxpacket: 8 [ 200.548632][ T987] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.556776][ T987] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 200.557971][ T987] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.557999][ T987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.558025][ T987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.558051][ T987] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.558093][ T987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.559644][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.638200][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.653683][ T7660] (syz.4.494,7660,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 200.717967][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.725674][ T7685] loop3: detected capacity change from 0 to 512 [ 200.804852][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.804994][ T7685] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.841266][ T7685] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 200.859151][ T7685] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4255 with max blocks 1 with error 28 [ 200.859209][ T7685] EXT4-fs (loop3): This should not happen!! Data will be lost [ 200.859209][ T7685] [ 200.859228][ T7685] EXT4-fs (loop3): Total free blocks count 0 [ 200.859265][ T7685] EXT4-fs (loop3): Free/Dirty block details [ 200.859459][ T7685] EXT4-fs (loop3): free_blocks=65280 [ 200.859618][ T7685] EXT4-fs (loop3): dirty_blocks=1 [ 200.859659][ T7685] EXT4-fs (loop3): Block reservation details [ 200.859756][ T7685] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 200.911218][ T987] usb 6-1: GET_CAPABILITIES returned 0 [ 200.911268][ T987] usbtmc 6-1:16.0: can't read capabilities [ 200.954677][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 201.114347][ T1597] usb 6-1: USB disconnect, device number 8 [ 201.264308][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.366180][ T7695] loop3: detected capacity change from 0 to 512 [ 201.385878][ T7695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.427187][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.446749][ T7695] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.544365][ T7695] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 3: comm syz.3.506: path /104/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 201.647593][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.838001][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.005990][ T7718] loop3: detected capacity change from 0 to 512 [ 202.030989][ T7717] loop6: detected capacity change from 0 to 256 [ 202.035195][ T7718] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 202.035232][ T7718] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.072361][ T7718] EXT4-fs (loop3): 1 truncate cleaned up [ 202.087516][ T7718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.117539][ T7717] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf3df13ec, utbl_chksum : 0xe619d30d) [ 202.455154][ T7727] loop5: detected capacity change from 0 to 512 [ 202.466333][ T7727] EXT4-fs: Ignoring removed nobh option [ 202.487278][ T7727] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 202.487352][ T7727] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 202.504330][ T7727] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.515: inode has both inline data and extents flags [ 202.504381][ T7727] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 202.517647][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 202.517672][ C0] EXT4-fs (loop5): initial error at time 1786986595: ext4_orphan_get:1403: inode 13 [ 202.517704][ C0] EXT4-fs (loop5): last error at time 1786986595: ext4_orphan_get:1403: inode 13 [ 202.555632][ T7727] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.515: couldn't read orphan inode 13 (err -117) [ 202.555685][ T7727] loop5: lost filesystem error report for type 5 error -117 [ 202.560558][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.590068][ T7727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.614480][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.637793][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.718737][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.781850][ T7727] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 202.803195][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.806921][ T7727] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 202.853766][ T7727] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.005563][ T6215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.146098][ T7738] loop5: detected capacity change from 0 to 7 [ 203.160070][ T7738] Dev loop5: unable to read RDB block 7 [ 203.165891][ T7738] loop5: AHDI p1 p3 p4 [ 203.170628][ T7738] loop5: partition table partially beyond EOD, truncated [ 203.178382][ T7738] loop5: p1 size 100663296 extends beyond EOD, truncated [ 203.191153][ T7738] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 203.225072][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 203.365224][ T7742] team1: entered promiscuous mode [ 203.365267][ T7742] team1: entered allmulticast mode [ 203.414576][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 203.426550][ T5900] udevd[5900]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 203.622780][ T7757] mmap: syz.3.530 (7757) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.919506][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.987058][ T7768] loop6: detected capacity change from 0 to 512 [ 204.011967][ T7768] EXT4-fs: Ignoring removed nobh option [ 204.045883][ T7764] loop3: detected capacity change from 0 to 8192 [ 204.139109][ T7768] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 204.139180][ T7768] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 204.148633][ T7768] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #13: comm syz.6.533: inode has both inline data and extents flags [ 204.148673][ T7768] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 204.157947][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 204.157975][ C1] EXT4-fs (loop6): initial error at time 1786986597: ext4_orphan_get:1403: inode 13 [ 204.158013][ C1] EXT4-fs (loop6): last error at time 1786986597: ext4_orphan_get:1403: inode 13 [ 204.211289][ T7768] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.533: couldn't read orphan inode 13 (err -117) [ 204.212094][ T7768] loop6: lost filesystem error report for type 5 error -117 [ 204.227449][ T7768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.450403][ T7768] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 204.472247][ T7768] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 204.620548][ T7768] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 204.639220][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.665238][ T7782] loop5: detected capacity change from 0 to 256 [ 204.677447][ T7782] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.688460][ T7782] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 204.719274][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.739877][ T7782] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.747069][ T7782] exFAT-fs (loop5): failed to load alloc-bitmap [ 204.747133][ T7782] exFAT-fs (loop5): failed to recognize exfat type [ 204.787052][ T7329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.817726][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.877801][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.956204][ T7782] loop5: detected capacity change from 0 to 512 [ 204.997454][ T7782] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.538: inode has both inline data and extents flags [ 204.997521][ T7782] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.997643][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 204.997667][ C1] EXT4-fs (loop5): initial error at time 1786986598: ext4_orphan_get:1403: inode 15 [ 204.997716][ C1] EXT4-fs (loop5): last error at time 1786986598: ext4_orphan_get:1403: inode 15 [ 205.045978][ T7782] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.538: couldn't read orphan inode 15 (err -117) [ 205.046082][ T7782] loop5: lost filesystem error report for type 5 error -117 [ 205.078623][ T7782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.343102][ T6215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.402633][ T5630] Bluetooth: hci4: unexpected event for opcode 0x080f [ 205.892637][ T7791] loop0: detected capacity change from 0 to 32768 [ 205.933052][ T7791] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.075550][ T7791] XFS (loop0): Ending clean mount [ 206.651542][ T5617] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.718200][ T7841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.886963][ T7827] loop3: detected capacity change from 0 to 32768 [ 206.915906][ T7827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.548 (7827) [ 207.095381][ T7827] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.095444][ T7827] BTRFS info (device loop3): using crc32c checksum algorithm [ 207.445513][ T7827] BTRFS info (device loop3): enabling ssd optimizations [ 207.445571][ T7827] BTRFS info (device loop3): turning on flush-on-commit [ 207.445591][ T7827] BTRFS info (device loop3): enabling free space tree [ 207.445632][ T7827] BTRFS info (device loop3): enabling auto defrag [ 207.445752][ T7827] BTRFS info (device loop3): use lzo compression, level 1 [ 207.445811][ T7827] BTRFS info (device loop3): max_inline set to 4096 [ 207.991956][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.012877][ T7882] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.206227][ T7872] loop4: detected capacity change from 0 to 32768 [ 208.322685][ T31] audit: type=1800 audit(1786986601.357:51): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.555" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 208.387034][ T31] audit: type=1800 audit(1786986601.397:52): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.555" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 209.441382][ T5630] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 209.441536][ T5630] Bluetooth: hci4: Injecting HCI hardware error event [ 209.457990][ T52] Bluetooth: hci4: hardware error 0x00 [ 209.636927][ T7894] loop0: detected capacity change from 0 to 32768 [ 209.669707][ T7894] JBD2: Ignoring recovery information on journal [ 209.749812][ T7894] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 210.191026][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.6.567'. [ 210.229702][ T1597] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.256904][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.6.567'. [ 210.324357][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 210.400699][ T1597] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.412264][ T1597] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 210.412347][ T1597] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.412383][ T1597] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.412428][ T1597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.455677][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.473381][ T1597] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.481731][ T1597] usb 6-1: invalid MIDI out EP 0 [ 210.649320][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.649401][ T5742] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 210.653023][ T5742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.653091][ T5742] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.653218][ T5742] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 210.653320][ T5742] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 210.653443][ T5742] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 210.653518][ T5742] usb 4-1: config 1 interface 1 has no altsetting 0 [ 210.777749][ T5742] usb 4-1: string descriptor 0 read error: -22 [ 210.778103][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.943055][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.086419][ T7924] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 211.109688][ T1597] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 211.135702][ T1597] usb 6-1: USB disconnect, device number 9 [ 211.389804][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 211.519853][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 211.618824][ T5751] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 211.757865][ T7920] loop4: detected capacity change from 0 to 32768 [ 211.774207][ T7920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.569 (7920) [ 211.787977][ T5751] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.798698][ T5751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.798751][ T5751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.798794][ T5751] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.798845][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.855578][ T5751] usb 7-1: config 0 descriptor?? [ 211.921893][ T7920] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.921958][ T7920] BTRFS info (device loop4): using crc32c checksum algorithm [ 212.113614][ T7920] BTRFS info (device loop4): enabling ssd optimizations [ 212.121259][ T7920] BTRFS info (device loop4): turning on flush-on-commit [ 212.128917][ T7920] BTRFS info (device loop4): enabling free space tree [ 212.136093][ T7920] BTRFS info (device loop4): enabling auto defrag [ 212.142979][ T7920] BTRFS info (device loop4): use lzo compression, level 1 [ 212.150763][ T7920] BTRFS info (device loop4): max_inline set to 4096 [ 212.210847][ T5742] usb 4-1: USB disconnect, device number 9 [ 212.307161][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.315820][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.323810][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.323859][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.323892][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.323922][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.323951][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.323981][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.324011][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.324042][ T5751] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 212.416865][ T5751] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 212.634403][ T5751] usb 7-1: USB disconnect, device number 4 [ 212.799953][ T5618] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.090952][ T7932] loop0: detected capacity change from 0 to 32768 [ 213.168555][ T7932] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 213.177015][ T7932] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 213.299988][ T7932] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 213.334661][ T5761] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 213.334699][ T5761] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 213.441165][ T5751] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.489650][ T5761] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 154ms [ 213.505244][ T5761] gfs2: fsid=syz:syz.0: jid=0: Done [ 213.512056][ T7932] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 213.598185][ T5751] usb 5-1: Using ep0 maxpacket: 8 [ 213.605314][ T5751] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.618383][ T5751] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 213.629841][ T5751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.640165][ T5751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.650425][ T5751] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.665931][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.885777][ T5751] usb 5-1: GET_CAPABILITIES returned 0 [ 213.885847][ T5751] usbtmc 5-1:16.0: can't read capabilities [ 214.129129][ T5761] usb 5-1: USB disconnect, device number 9 [ 214.692278][ T7975] loop3: detected capacity change from 0 to 32768 [ 214.754541][ T7975] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.098341][ T7975] XFS (loop3): Ending clean mount [ 215.249929][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.589'. [ 215.331675][ T7975] XFS (loop3): Quotacheck needed: Please wait. [ 215.504759][ T6575] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 215.504835][ T6575] XFS (loop3): Unmount and run xfs_repair [ 215.504863][ T6575] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 215.504885][ T6575] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 215.504904][ T6575] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 215.504923][ T6575] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 215.504942][ T6575] 00000030: 00 00 00 00 ac 5e af 00 01 00 00 00 00 00 00 13 .....^.......... [ 215.504961][ T6575] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 215.504981][ T6575] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.505000][ T6575] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.505019][ T6575] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.505039][ T6575] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 215.605870][ T6575] loop3: lost filesystem error report for type 5 error -117 [ 215.658149][ T7975] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 215.658785][ T7975] loop3: lost filesystem error report for type 5 error -117 [ 215.729708][ T7975] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 215.753609][ T7975] XFS (loop3): Unmount and run xfs_repair [ 215.771039][ T7975] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 215.778802][ T7975] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 215.787996][ T7975] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 215.796982][ T7975] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 215.807240][ T7975] 00000030: 00 00 00 00 ac 5e af 00 01 00 00 00 00 00 00 13 .....^.......... [ 215.816745][ T7975] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 215.837776][ T7975] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.837833][ T7975] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.837863][ T7975] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.837887][ T7975] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 215.955333][ T7975] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 215.955424][ T7975] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 216.036996][ T5619] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.248025][ T5751] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.342186][ T7992] loop6: detected capacity change from 0 to 40427 [ 216.356153][ T7992] F2FS-fs (loop6): build fault injection rate: 19 [ 216.363096][ T7992] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 216.372106][ T7992] F2FS-fs (loop6): invalid crc value [ 216.397384][ T7992] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820 [ 216.409270][ T5751] usb 1-1: Using ep0 maxpacket: 16 [ 216.415154][ T5751] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.425952][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.426020][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.426051][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.426112][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.470387][ T5761] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.481280][ T5751] usb 1-1: config 0 descriptor?? [ 216.630583][ T5761] usb 5-1: Using ep0 maxpacket: 16 [ 216.637005][ T5761] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 216.637010][ T7992] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 216.657886][ T5761] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.657937][ T5761] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.669379][ T7992] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.691803][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.691865][ T5761] usb 5-1: Product: syz [ 216.691900][ T5761] usb 5-1: Manufacturer: syz [ 216.691921][ T5761] usb 5-1: SerialNumber: syz [ 216.725198][ T5761] usb 5-1: config 0 descriptor?? [ 216.780715][ T7992] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 216.864314][ T7992] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 216.892864][ T7992] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 216.911737][ T7992] syz.6.588: attempt to access beyond end of device [ 216.911737][ T7992] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.930444][ T7992] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 216.944817][ T7992] F2FS-fs (loop6): inconsistent node block, node_type:3, nid:15, node_footer[nid:15,ino:3,ofs:355635,cpver:0,blkaddr:0] [ 217.035197][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 217.050113][ T7992] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140 [ 217.079479][ T5751] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input11 [ 217.239453][ C0] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of f2fs_write_end_bio+0x7ed/0x16e0 [ 217.240926][ C0] F2FS-fs (loop6): inconsistent node block, node_type:0, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:10241045589465957861,blkaddr:4103] [ 217.355714][ T5751] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 217.386171][ T7329] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 217.424923][ T5761] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 217.474406][ T5751] usb 1-1: USB disconnect, device number 9 [ 217.513608][ T8020] fido_id[8020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 217.654815][ T5761] imon:send_packet: packet tx failed (-71) [ 217.684866][ T5761] imon 5-1:0.0: panel buttons/knobs setup failed [ 217.813830][ T5761] rc_core: IR keymap rc-imon-pad not found [ 217.813878][ T5761] Registered IR keymap rc-empty [ 217.814027][ T5761] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 217.814093][ T5761] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 217.832616][ T5761] imon:send_packet: packet tx failed (-71) [ 217.848436][ T5761] imon 5-1:0.0: remote input dev register failed [ 217.848911][ T5761] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 218.509250][ T5761] imon 5-1:0.0: unable to initialize intf0, err 0 [ 218.509294][ T5761] imon:imon_probe: failed to initialize context! [ 218.509327][ T5761] imon 5-1:0.0: unable to register, err -19 [ 218.517593][ T5761] usb 5-1: USB disconnect, device number 10 [ 218.789142][ T5348] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.827440][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 218.842824][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 218.909265][ T5761] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 218.938686][ T5348] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 218.941775][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 218.941867][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.941931][ T5348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 218.947567][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.948174][ T5348] usb 4-1: Product: syz [ 218.948194][ T5348] usb 4-1: Manufacturer: syz [ 218.948209][ T5348] usb 4-1: SerialNumber: syz [ 218.977451][ T5348] usb 4-1: config 0 descriptor?? [ 219.035038][ T8042] loop6: detected capacity change from 0 to 32768 [ 219.068094][ T5761] usb 5-1: Using ep0 maxpacket: 16 [ 219.074521][ T5761] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 219.085947][ T5761] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.086000][ T5761] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.107275][ T5761] usb 5-1: string descriptor 0 read error: -22 [ 219.107446][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.127068][ T5761] usb 5-1: config 0 descriptor?? [ 219.154723][ T5761] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 219.219466][ T5348] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 219.278001][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.314898][ T8046] loop5: detected capacity change from 0 to 8192 [ 219.349209][ T8046] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.500635][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 219.508573][ T5761] imon:send_packet: packet tx failed (-71) [ 219.549278][ T5761] imon 5-1:0.0: panel buttons/knobs setup failed [ 219.841489][ T8056] syzkaller1: entered promiscuous mode [ 219.847280][ T8056] syzkaller1: entered allmulticast mode [ 219.858243][ T5761] rc_core: IR keymap rc-imon-pad not found [ 219.858284][ T5761] Registered IR keymap rc-empty [ 219.858384][ T5761] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 219.858408][ T5761] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 219.864595][ T5761] imon:send_packet: packet tx failed (-71) [ 219.880275][ T5761] imon 5-1:0.0: remote input dev register failed [ 219.880443][ T5761] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 219.978272][ T5761] imon 5-1:0.0: unable to initialize intf0, err 0 [ 219.986094][ T5761] imon:imon_probe: failed to initialize context! [ 219.992656][ T5761] imon 5-1:0.0: unable to register, err -19 [ 220.011407][ T5761] usb 5-1: USB disconnect, device number 11 [ 220.339783][ T5761] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 220.358040][ T8051] loop6: detected capacity change from 0 to 32768 [ 220.373468][ T8051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.610 (8051) [ 220.411156][ T8051] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.411214][ T8051] BTRFS info (device loop6): using crc32c checksum algorithm [ 220.494238][ T8062] loop5: detected capacity change from 0 to 4096 [ 220.510212][ T5761] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.524034][ T5761] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.524119][ T5761] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.548683][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.548735][ T5761] usb 5-1: Product: syz [ 220.548776][ T5761] usb 5-1: Manufacturer: syz [ 220.548800][ T5761] usb 5-1: SerialNumber: syz [ 220.578926][ T5761] usb 5-1: config 0 descriptor?? [ 220.592197][ T5761] usb 5-1: selecting invalid altsetting 0 [ 220.611713][ T8051] BTRFS info (device loop6): enabling ssd optimizations [ 220.613249][ T8051] BTRFS info (device loop6): turning on flush-on-commit [ 220.613319][ T8051] BTRFS info (device loop6): enabling free space tree [ 220.613432][ T8051] BTRFS info (device loop6): force zlib compression, level 3 [ 220.613500][ T8051] BTRFS info (device loop6): max_inline set to 4096 [ 220.675464][ T8048] loop0: detected capacity change from 0 to 40427 [ 220.711012][ T8048] F2FS-fs (loop0): build fault injection rate: 7 [ 220.723770][ T8062] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 220.822007][ T5761] usb 5-1: USB disconnect, device number 12 [ 220.854660][ T31] audit: type=1800 audit(1786986613.887:53): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.610" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 220.892346][ T8062] ntfs3(loop5): ino=1a, mi_enum_attr [ 220.892923][ T8062] ntfs3(loop5): ino=1a, mi_enum_attr [ 220.893047][ T8062] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 221.124465][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.404180][ T8048] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 221.516714][ T8048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.633193][ T987] usb 4-1: USB disconnect, device number 10 [ 221.676534][ T7329] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.992162][ T5617] syz-executor: attempt to access beyond end of device [ 221.992162][ T5617] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.041643][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 222.041685][ T5617] Tainted: [L]=SOFTLOCKUP [ 222.041694][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.041708][ T5617] Call Trace: [ 222.041717][ T5617] [ 222.041726][ T5617] dump_stack_lvl+0xe8/0x150 [ 222.041762][ T5617] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 222.041791][ T5617] f2fs_write_end_bio+0x1211/0x16e0 [ 222.041820][ T5617] ? blkg_put+0x22/0x240 [ 222.041855][ T5617] __submit_merged_bio+0x258/0x6a0 [ 222.041877][ T5617] ? rcu_is_watching+0x16/0xb0 [ 222.041904][ T5617] __submit_merged_write_cond+0x3c9/0x4e0 [ 222.041934][ T5617] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 222.041976][ T5617] f2fs_write_data_pages+0x2a27/0x36f0 [ 222.042032][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 222.042057][ T5617] ? is_bpf_text_address+0x26/0x2b0 [ 222.042089][ T5617] ? arch_stack_walk+0xfb/0x150 [ 222.042135][ T5617] ? add_lock_to_list+0xc7/0x100 [ 222.042159][ T5617] ? lockdep_unlock+0x5c/0xd0 [ 222.042194][ T5617] ? __lock_acquire+0x14b9/0x2e50 [ 222.042237][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.042277][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 222.042304][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 222.042332][ T5617] do_writepages+0x338/0x560 [ 222.042365][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 222.042395][ T5617] filemap_fdatawrite+0x1e9/0x2f0 [ 222.042423][ T5617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 222.042486][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 222.042516][ T5617] f2fs_sync_dirty_inodes+0x30e/0x830 [ 222.042556][ T5617] f2fs_write_checkpoint+0xa3d/0x2710 [ 222.042582][ T5617] ? __lock_acquire+0x6df/0x2e50 [ 222.042627][ T5617] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 222.042690][ T5617] ? try_to_wake_up+0x8b6/0x14d0 [ 222.042723][ T5617] kill_f2fs_super+0x2dd/0x700 [ 222.042758][ T5617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 222.042794][ T5617] ? call_rcu+0x64d/0x8b0 [ 222.042816][ T5617] ? lockdep_hardirqs_on+0x7b/0x110 [ 222.042849][ T5617] deactivate_locked_super+0xbc/0x110 [ 222.042871][ T5617] cleanup_mnt+0x3d3/0x460 [ 222.042898][ T5617] task_work_run+0x1d9/0x270 [ 222.042921][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 222.042950][ T5617] exit_to_user_mode_loop+0x204/0x770 [ 222.042969][ T5617] ? rcu_is_watching+0x16/0xb0 [ 222.042995][ T5617] do_syscall_64+0x328/0x520 [ 222.043017][ T5617] ? trace_irq_disable+0x3b/0x140 [ 222.043038][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.043059][ T5617] ? clear_bhb_loop+0x70/0xc0 [ 222.043082][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.043101][ T5617] RIP: 0033:0x7f3274b9f317 [ 222.043122][ T5617] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 222.043139][ T5617] RSP: 002b:00007ffcd39c1e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 222.043159][ T5617] RAX: 0000000000000000 RBX: 00007f3274c34474 RCX: 00007f3274b9f317 [ 222.043172][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd39c1f00 [ 222.043192][ T5617] RBP: 00007ffcd39c1f00 R08: 00007ffcd39c2f00 R09: 00000000ffffffff [ 222.043205][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd39c2f90 [ 222.043216][ T5617] R13: 00007f3274c34474 R14: 0000000000036238 R15: 00007ffcd39c2fd0 [ 222.043245][ T5617] [ 222.158389][ T5617] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.147817][ T1597] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.299105][ T1597] usb 4-1: Using ep0 maxpacket: 32 [ 223.301380][ T1597] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 223.308502][ T1597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.355455][ T8091] loop6: detected capacity change from 0 to 40427 [ 223.356739][ T1597] usb 4-1: config 0 descriptor?? [ 223.387704][ T8091] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 223.387760][ T8091] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 223.405585][ T8091] F2FS-fs (loop6): Image doesn't support compression [ 223.419806][ T8091] F2FS-fs (loop6): invalid crc value [ 223.502603][ T8091] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.518849][ T8091] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 223.526786][ T8091] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 223.538071][ T8091] F2FS-fs (loop6): Start checkpoint disabled! [ 223.559679][ T8091] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 223.576655][ T8091] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 223.576701][ T8091] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 223.615377][ T1597] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 223.631322][ T1597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.654249][ T1597] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 223.668008][ T1597] usb 4-1: media controller created [ 223.786260][ T1597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.932625][ T6557] kworker/u8:16: attempt to access beyond end of device [ 223.932625][ T6557] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.950204][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.950241][ T6557] Tainted: [L]=SOFTLOCKUP [ 223.950249][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.950264][ T6557] Workqueue: writeback wb_workfn (flush-7:6) [ 223.950309][ T6557] Call Trace: [ 223.950319][ T6557] [ 223.950329][ T6557] dump_stack_lvl+0xe8/0x150 [ 223.950364][ T6557] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 223.950399][ T6557] f2fs_write_end_bio+0x1211/0x16e0 [ 223.950436][ T6557] ? blkg_put+0x22/0x240 [ 223.950479][ T6557] __submit_merged_bio+0x258/0x6a0 [ 223.950507][ T6557] ? rcu_is_watching+0x16/0xb0 [ 223.950540][ T6557] __submit_merged_write_cond+0x3c9/0x4e0 [ 223.950587][ T6557] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 223.950646][ T6557] f2fs_write_data_pages+0x2a27/0x36f0 [ 223.950717][ T6557] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 223.950764][ T6557] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 223.950831][ T6557] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 223.950874][ T6557] ? __lock_acquire+0x6df/0x2e50 [ 223.950914][ T6557] ? set_shrinker_bit+0x7c/0x350 [ 223.950948][ T6557] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 223.950982][ T6557] do_writepages+0x338/0x560 [ 223.951021][ T6557] ? reacquire_held_locks+0x117/0x1a0 [ 223.951048][ T6557] ? writeback_sb_inodes+0x450/0x1b00 [ 223.951077][ T6557] __writeback_single_inode+0x136/0x1220 [ 223.951105][ T6557] ? do_raw_spin_unlock+0xf5/0x200 [ 223.951142][ T6557] writeback_sb_inodes+0x9de/0x1b00 [ 223.951163][ T6557] ? __lock_acquire+0x6df/0x2e50 [ 223.951203][ T6557] ? lock_acquire+0x115/0x350 [ 223.951244][ T6557] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 223.951314][ T6557] ? rcu_is_watching+0x16/0xb0 [ 223.951342][ T6557] ? queue_io+0x2d3/0x470 [ 223.951368][ T6557] wb_writeback+0x41c/0xad0 [ 223.951406][ T6557] ? queue_io+0x1f1/0x470 [ 223.951435][ T6557] ? __pfx_wb_writeback+0x10/0x10 [ 223.951468][ T6557] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.951517][ T6557] wb_workfn+0x431/0x10f0 [ 223.951575][ T6557] ? __pfx_wb_workfn+0x10/0x10 [ 223.951621][ T6557] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.951662][ T6557] ? lock_acquire+0x115/0x350 [ 223.951695][ T6557] ? rcu_is_watching+0x16/0xb0 [ 223.951724][ T6557] ? process_scheduled_works+0x97a/0x1630 [ 223.951756][ T6557] process_scheduled_works+0xc3d/0x1630 [ 223.951822][ T6557] ? __pfx_process_scheduled_works+0x10/0x10 [ 223.951861][ T6557] ? assign_work+0x3cf/0x5d0 [ 223.951896][ T6557] worker_thread+0xa47/0xfb0 [ 223.951955][ T6557] kthread+0x38b/0x480 [ 223.951979][ T6557] ? __pfx_worker_thread+0x10/0x10 [ 223.952008][ T6557] ? __pfx_kthread+0x10/0x10 [ 223.952033][ T6557] ret_from_fork+0x514/0xb70 [ 223.952058][ T6557] ? __pfx_ret_from_fork+0x10/0x10 [ 223.952096][ T6557] ? __switch_to+0xc89/0x1420 [ 223.952130][ T6557] ? __pfx_kthread+0x10/0x10 [ 223.952155][ T6557] ret_from_fork_asm+0x1a/0x30 [ 223.952209][ T6557] [ 224.060928][ T8100] loop4: detected capacity change from 0 to 32768 [ 224.101341][ T6557] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 224.267447][ T5761] loop6: lost filesystem error report for type 5 error -108 [ 224.303810][ T8100] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 224.303872][ T8100] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 224.436262][ T8100] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 224.475130][ T5348] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 224.475173][ T5348] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 224.508187][ T1597] az6027: usb out operation failed. (-71) [ 224.508226][ T1597] stb0899_attach: Driver disabled by Kconfig [ 224.508254][ T1597] az6027: no front-end attached [ 224.508254][ T1597] [ 224.514442][ T1597] az6027: usb out operation failed. (-71) [ 224.514461][ T1597] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 224.543602][ T1597] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 224.565656][ T1597] dvb-usb: schedule remote query interval to 400 msecs. [ 224.573148][ T1597] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 224.584475][ T1597] usb 4-1: USB disconnect, device number 11 [ 224.896159][ T1597] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 224.961340][ T5348] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 486ms [ 224.963743][ T5348] gfs2: fsid=syz:syz.0: jid=0: Done [ 224.963870][ T8100] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 225.596222][ T8127] syzkaller1: entered promiscuous mode [ 225.596274][ T8127] syzkaller1: entered allmulticast mode [ 225.649298][ T8119] loop6: detected capacity change from 0 to 32768 [ 225.657460][ T8119] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 225.669185][ T8119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.625 (8119) [ 225.696590][ T8119] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.707687][ T8119] BTRFS info (device loop6): using sha256 checksum algorithm [ 225.964091][ T8119] BTRFS info (device loop6): rebuilding free space tree [ 226.010711][ T8152] loop8: detected capacity change from 0 to 7 [ 226.036150][ T8152] Dev loop8: unable to read RDB block 7 [ 226.036231][ T8152] loop8: unable to read partition table [ 226.036799][ T8152] loop8: partition table beyond EOD, truncated [ 226.036857][ T8152] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 226.114917][ T8119] BTRFS info (device loop6): disabling free space tree [ 226.122964][ T8119] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.138579][ T8119] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.300169][ T8119] BTRFS info (device loop6): enabling ssd optimizations [ 226.300238][ T8119] BTRFS info (device loop6): force clearing of disk cache [ 226.300277][ T8119] BTRFS info (device loop6): enabling auto defrag [ 226.300339][ T8119] BTRFS info (device loop6): max_inline set to 0 [ 226.807095][ T7329] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.851446][ T6555] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 227.109005][ T5348] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.270224][ T5348] usb 1-1: Using ep0 maxpacket: 32 [ 227.290277][ T5348] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 227.301799][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.301863][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.301980][ T5348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.302102][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.363786][ T5348] usb 1-1: config 0 descriptor?? [ 227.847370][ T8171] loop5: detected capacity change from 0 to 32768 [ 227.887030][ T8171] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.899191][ T5348] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000B/input/input17 [ 228.080806][ T5348] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000B/input/input18 [ 228.165707][ T8171] XFS (loop5): Ending clean mount [ 228.183717][ T5348] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 228.224445][ T8171] XFS (loop5): Quotacheck needed: Please wait. [ 228.549121][ T8171] XFS (loop5): Quotacheck: Done. [ 228.720478][ T8178] loop4: detected capacity change from 0 to 32768 [ 228.961138][ T8178] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 229.033090][ T8198] loop3: detected capacity change from 0 to 512 [ 229.058192][ C0] kye 0003:0458:5011.000B: usb_submit_urb(ctrl) failed: -1 [ 229.087084][ T8198] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.649: corrupted in-inode xattr: invalid size in ea xattr [ 229.087144][ T8198] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.091061][ T8198] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.649: couldn't read orphan inode 15 (err -117) [ 229.091157][ T8198] loop3: lost filesystem error report for type 5 error -117 [ 229.140380][ T31] audit: type=1800 audit(1786986622.177:54): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.646" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 229.155402][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.275154][ T5618] ocfs2: Unmounting device (7,4) on (node local) [ 229.411823][ T5619] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 229.432972][ T5619] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: unexpected EA_INODE flag [ 229.439091][ T5619] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: unexpected EA_INODE flag [ 229.536000][ T6215] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.725672][ T5619] bridge0: port 3(syz_tun) entered disabled state [ 229.937297][ T5348] usb 1-1: USB disconnect, device number 10 [ 229.958219][ T5619] syz_tun (unregistering): left allmulticast mode [ 229.958273][ T5619] syz_tun (unregistering): left promiscuous mode [ 229.958522][ T5619] bridge0: port 3(syz_tun) entered disabled state [ 230.093114][ T8206] syz_tun: entered allmulticast mode [ 230.181998][ T8204] syz_tun: left allmulticast mode [ 230.240460][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.541448][ T8213] Bluetooth: MGMT ver 1.23 [ 230.567968][ T8203] loop4: detected capacity change from 0 to 32768 [ 230.653567][ T8203] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 230.668066][ T8203] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 230.692714][ T6575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.723296][ T8203] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 230.745011][ T5761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 230.745081][ T5761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 231.085606][ T5761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 340ms [ 231.086207][ T5761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 231.086355][ T8203] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 231.132845][ T6575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.276003][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.303515][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.316628][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.328325][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.336037][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.372338][ T6575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.400309][ T8223] team0: No ports can be present during mode change [ 231.419288][ T1597] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 231.577763][ T1597] usb 7-1: Using ep0 maxpacket: 16 [ 231.579480][ T1597] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 231.582640][ T1597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.582803][ T1597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 231.582880][ T1597] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 231.582988][ T1597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.613579][ T1597] usb 7-1: config 0 descriptor?? [ 231.660798][ T6575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.139268][ T1597] nintendo 0003:057E:2019.000C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 232.324021][ T6575] bridge_slave_1: left allmulticast mode [ 232.324133][ T6575] bridge_slave_1: left promiscuous mode [ 232.339141][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.379003][ T6575] bridge_slave_0: left allmulticast mode [ 232.382919][ T6575] bridge_slave_0: left promiscuous mode [ 232.403765][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.476213][ T1597] nintendo 0003:057E:2019.000C: Failed to get joycon info; ret=-71 [ 232.476260][ T1597] nintendo 0003:057E:2019.000C: Failed to retrieve controller info; ret=-71 [ 232.476298][ T1597] nintendo 0003:057E:2019.000C: Failed to initialize controller; ret=-71 [ 232.518578][ T1597] nintendo 0003:057E:2019.000C: probe - fail = -71 [ 232.518909][ T1597] nintendo 0003:057E:2019.000C: probe with driver nintendo failed with error -71 [ 232.538622][ T1597] usb 7-1: USB disconnect, device number 5 [ 232.839829][ T6575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.852985][ T6575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.864715][ T6575] bond0 (unregistering): Released all slaves [ 233.071832][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 233.441507][ T52] Bluetooth: hci4: command tx timeout [ 233.480060][ T6575] hsr_slave_0: left promiscuous mode [ 233.488985][ T6575] hsr_slave_1: left promiscuous mode [ 233.495440][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.503257][ T6575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.512315][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.526100][ T6575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.555918][ T6575] veth1_macvtap: left promiscuous mode [ 233.562039][ T6575] veth0_macvtap: left promiscuous mode [ 233.568061][ T6575] veth1_vlan: left promiscuous mode [ 233.573540][ T6575] veth0_vlan: left promiscuous mode [ 233.917140][ T6575] team0 (unregistering): Port device team_slave_1 removed [ 233.939813][ T6575] team0 (unregistering): Port device team_slave_0 removed [ 234.093264][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 234.402290][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.402542][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.402695][ T8224] bridge_slave_0: entered allmulticast mode [ 234.410251][ T8224] bridge_slave_0: entered promiscuous mode [ 234.420281][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.420762][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.421173][ T8224] bridge_slave_1: entered allmulticast mode [ 234.454954][ T8224] bridge_slave_1: entered promiscuous mode [ 234.522021][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.550768][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.644909][ T8224] team0: Port device team_slave_0 added [ 234.654269][ T8224] team0: Port device team_slave_1 added [ 234.666830][ T6575] IPVS: stop unused estimator thread 0... [ 234.732487][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.732536][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.732569][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.742751][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.742803][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.742877][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.906625][ T8224] hsr_slave_0: entered promiscuous mode [ 234.915153][ T8224] hsr_slave_1: entered promiscuous mode [ 234.924218][ T8224] debugfs: 'hsr0' already exists in 'hsr' [ 234.924261][ T8224] Cannot create hsr debugfs directory [ 235.030795][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 235.263149][ T8224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.275242][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.282940][ T8224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.297166][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.302848][ T8224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 235.318244][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.326404][ T8224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 235.338667][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.446258][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.469536][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.487731][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.487861][ T6575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.505966][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.506218][ T6575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.528029][ T52] Bluetooth: hci4: command tx timeout [ 235.876925][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 236.064513][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.325472][ T8224] veth0_vlan: entered promiscuous mode [ 236.337021][ T8224] veth1_vlan: entered promiscuous mode [ 236.375088][ T8224] veth0_macvtap: entered promiscuous mode [ 236.384065][ T8224] veth1_macvtap: entered promiscuous mode [ 236.401790][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.415542][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.451850][ T2211] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.463465][ T6575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.518502][ T6575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.518882][ T6575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.630194][ T6557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.630249][ T6557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.681836][ T6575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.681889][ T6575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.826675][ T8344] loop6: detected capacity change from 0 to 64 [ 236.844721][ T8343] loop5: detected capacity change from 0 to 7 [ 236.865000][ T8343] Dev loop5: unable to read RDB block 7 [ 236.865433][ T8343] loop5: unable to read partition table [ 236.866003][ T8343] loop5: partition table beyond EOD, truncated [ 236.866104][ T8343] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.894755][ T8344] hfs: hfs: Invalid key length: 224 [ 236.948908][ T7329] hfs: node 4:3 still has 1 user(s)! [ 237.228561][ T31] audit: type=1326 audit(1786986630.257:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.233169][ T31] audit: type=1326 audit(1786986630.267:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.265830][ T31] audit: type=1326 audit(1786986630.297:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.269665][ T31] audit: type=1326 audit(1786986630.307:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.269804][ T31] audit: type=1326 audit(1786986630.307:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.269927][ T31] audit: type=1326 audit(1786986630.307:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.270617][ T31] audit: type=1326 audit(1786986630.307:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.276607][ T31] audit: type=1326 audit(1786986630.307:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.291154][ T31] audit: type=1326 audit(1786986630.307:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.308306][ T31] audit: type=1326 audit(1786986630.337:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.4.666" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c85f9e0d9 code=0x7ffc0000 [ 237.584504][ T8361] loop8: detected capacity change from 0 to 8 [ 237.597749][ T52] Bluetooth: hci4: command tx timeout [ 237.604555][ T8361] Dev loop8: unable to read RDB block 8 [ 237.604624][ T8361] loop8: unable to read partition table [ 237.607023][ T8361] loop8: partition table beyond EOD, truncated [ 237.607086][ T8361] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 237.757842][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 237.924408][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.934476][ T9] usb 6-1: config 0 has no interfaces? [ 237.934516][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.953655][ T9] usb 6-1: config 0 descriptor?? [ 238.179868][ T9] usb 6-1: USB disconnect, device number 10 [ 238.207772][ T5751] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.337742][ T5751] usb 1-1: device descriptor read/64, error -71 [ 238.589590][ T5751] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.708041][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 238.728241][ T5751] usb 1-1: device descriptor read/64, error -71 [ 238.841910][ T5751] usb usb1-port1: attempt power cycle [ 238.863254][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 238.863329][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 238.885265][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 238.885337][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 239.029786][ T9] usb 6-1: string descriptor 0 read error: -22 [ 239.029973][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.187809][ T5751] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 239.210583][ T5751] usb 1-1: device descriptor read/8, error -71 [ 239.255211][ T9] usb 6-1: Can't get UAC3 power state for id 10 [ 239.458976][ T5751] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 239.489010][ T5751] usb 1-1: device descriptor read/8, error -71 [ 239.605251][ T5751] usb usb1-port1: unable to enumerate USB device [ 239.677897][ T5630] Bluetooth: hci4: command tx timeout [ 239.707122][ T8374] loop6: detected capacity change from 0 to 32768 [ 239.736878][ T8374] JBD2: Ignoring recovery information on journal [ 239.813130][ T8374] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 239.869822][ T9] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 239.886425][ T9] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 239.895411][ T9] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 239.907016][ T9] usb 6-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 239.943814][ T8385] (syz.6.678,8385,1):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 239.943883][ T8385] (syz.6.678,8385,1):ocfs2_find_entry_id:421 ERROR: status = -117 [ 240.106292][ T9] usb 6-1: USB disconnect, device number 11 [ 240.155727][ T8385] (syz.6.678,8385,1):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 240.155792][ T8385] (syz.6.678,8385,1):ocfs2_assign_bh:2417 ERROR: status = -117 [ 240.155854][ T8385] (syz.6.678,8385,1):ocfs2_inode_lock_full_nested:2512 ERROR: status = -117 [ 240.155924][ T8385] (syz.6.678,8385,1):ocfs2_mknod:277 ERROR: status = -117 [ 240.165621][ T8385] (syz.6.678,8385,1):ocfs2_create:685 ERROR: status = -117 [ 240.311530][ T7329] ocfs2: Unmounting device (7,6) on (node local) [ 240.677783][ T8372] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 241.116485][ T8409] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 241.724297][ T8432] loop5: detected capacity change from 0 to 64 [ 241.743888][ T8432] hfs: unable to locate alternate MDB [ 241.743922][ T8432] hfs: continuing without an alternate MDB [ 242.094740][ T6557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.358747][ T8442] loop5: detected capacity change from 0 to 128 [ 242.383408][ T8443] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.703'. [ 242.573976][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.590553][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.601667][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.614854][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.625293][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.646161][ T6557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.806806][ T6557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.994537][ T6557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.093222][ T8446] loop6: detected capacity change from 0 to 32768 [ 243.139934][ T8446] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 243.161741][ T8452] loop5: detected capacity change from 0 to 32768 [ 243.162879][ T8452] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 243.189361][ T8452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.705 (8452) [ 243.207786][ T8452] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.207839][ T8452] BTRFS info (device loop5): using sha256 checksum algorithm [ 243.367132][ T8446] XFS (loop6): Ending clean mount [ 243.507130][ T8452] BTRFS info (device loop5): rebuilding free space tree [ 243.642236][ T7329] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 243.663762][ T8452] BTRFS info (device loop5): disabling free space tree [ 243.663851][ T8452] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.664395][ T8452] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 243.757324][ T8452] BTRFS info (device loop5): enabling ssd optimizations [ 243.757377][ T8452] BTRFS info (device loop5): force clearing of disk cache [ 243.757396][ T8452] BTRFS info (device loop5): enabling auto defrag [ 243.757416][ T8452] BTRFS info (device loop5): max_inline set to 0 [ 243.960625][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 243.960676][ T31] audit: type=1800 audit(1786986636.997:89): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.705" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 244.206069][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.207912][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.428815][ T6555] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 244.552468][ T6215] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.680156][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.702153][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.732037][ T52] Bluetooth: hci2: command tx timeout [ 245.303983][ T8485] geneve2: entered promiscuous mode [ 245.406600][ T8494] syzkaller1: entered allmulticast mode [ 245.499279][ T6557] bridge_slave_1: left allmulticast mode [ 245.505177][ T6557] bridge_slave_1: left promiscuous mode [ 245.511183][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.540642][ T6557] bridge_slave_0: left allmulticast mode [ 245.547699][ T6557] bridge_slave_0: left promiscuous mode [ 245.559108][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.936958][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.981124][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.992587][ T6557] bond0 (unregistering): Released all slaves [ 246.531366][ T8525] loop7: detected capacity change from 0 to 40427 [ 246.570539][ T8525] F2FS-fs (loop7): build fault injection rate: 174 [ 246.570589][ T8525] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 246.573394][ T8525] F2FS-fs (loop7): invalid crc value [ 246.662586][ T8525] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.682161][ T8525] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 246.717508][ T8525] f2fs_printk: 1 callbacks suppressed [ 246.717569][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.731579][ T8525] F2FS-fs (loop7): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 246.731714][ T8525] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 246.761667][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.777500][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.794354][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.811047][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.823984][ T5630] Bluetooth: hci2: command tx timeout [ 246.834094][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.850773][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.866688][ T8525] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 246.882808][ T8525] CPU: 0 UID: 0 PID: 8525 Comm: syz.7.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.882848][ T8525] Tainted: [L]=SOFTLOCKUP [ 246.882857][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.882872][ T8525] Call Trace: [ 246.882881][ T8525] [ 246.882891][ T8525] dump_stack_lvl+0xe8/0x150 [ 246.882931][ T8525] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 246.882963][ T8525] ? f2fs_map_blocks+0x3d81/0x4c20 [ 246.882993][ T8525] f2fs_balance_fs+0x349/0x810 [ 246.883027][ T8525] ? f2fs_map_blocks+0x3d81/0x4c20 [ 246.883056][ T8525] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 246.883083][ T8525] ? rcu_is_watching+0x16/0xb0 [ 246.883112][ T8525] ? __up_read+0x29c/0x930 [ 246.883149][ T8525] ? __pfx___up_read+0x10/0x10 [ 246.883180][ T8525] ? trace_lock_elapsed_time_end+0xf1/0xbc0 [ 246.883209][ T8525] ? restore_priority+0x1af/0x450 [ 246.883245][ T8525] f2fs_map_blocks+0x3d81/0x4c20 [ 246.883288][ T8525] ? is_bpf_text_address+0x292/0x2b0 [ 246.883346][ T8525] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 246.883379][ T8525] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 246.883415][ T8525] ? lockdep_hardirqs_on+0x7b/0x110 [ 246.883441][ T8525] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 246.883468][ T8525] ? seqcount_lockdep_reader_access+0xea/0x100 [ 246.883494][ T8525] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 246.883526][ T8525] ? current_time+0x22f/0x380 [ 246.883562][ T8525] ? down_write+0x16b/0x200 [ 246.883601][ T8525] ? fault_in_iov_iter_readable+0x1d5/0x310 [ 246.883638][ T8525] f2fs_file_write_iter+0x171c/0x2850 [ 246.883694][ T8525] ? rcu_is_watching+0x16/0xb0 [ 246.883722][ T8525] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 246.883762][ T8525] ? __asan_memset+0x22/0x50 [ 246.883797][ T8525] iter_file_splice_write+0xa31/0x1240 [ 246.883852][ T8525] ? __pfx_iter_file_splice_write+0x10/0x10 [ 246.883900][ T8525] ? __pfx_iter_file_splice_write+0x10/0x10 [ 246.883928][ T8525] direct_splice_actor+0x101/0x160 [ 246.883959][ T8525] splice_direct_to_actor+0x57b/0xcb0 [ 246.884015][ T8525] ? __pfx_direct_splice_actor+0x10/0x10 [ 246.884040][ T8525] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 246.884084][ T8525] do_splice_direct+0x195/0x290 [ 246.884113][ T8525] ? __pfx_do_splice_direct+0x10/0x10 [ 246.884140][ T8525] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 246.884176][ T8525] ? rw_verify_area+0x203/0x4c0 [ 246.884206][ T8525] do_sendfile+0x52e/0x7c0 [ 246.884250][ T8525] ? __pfx_do_sendfile+0x10/0x10 [ 246.884290][ T8525] ? __se_sys_futex+0x3a8/0x450 [ 246.884325][ T8525] __se_sys_sendfile64+0x144/0x1a0 [ 246.884361][ T8525] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 246.884414][ T8525] do_syscall_64+0x166/0x520 [ 246.884441][ T8525] ? trace_irq_disable+0x3b/0x140 [ 246.884464][ T8525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.884488][ T8525] ? clear_bhb_loop+0x70/0xc0 [ 246.884518][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.884541][ T8525] RIP: 0033:0x7fe3dab9e0d9 [ 246.884563][ T8525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.884583][ T8525] RSP: 002b:00007fe3dbaf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 246.884609][ T8525] RAX: ffffffffffffffda RBX: 00007fe3dae25fa0 RCX: 00007fe3dab9e0d9 [ 246.884626][ T8525] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 246.884640][ T8525] RBP: 00007fe3dac35024 R08: 0000000000000000 R09: 0000000000000000 [ 246.884656][ T8525] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 246.884671][ T8525] R13: 00007fe3dae26038 R14: 00007fe3dae25fa0 R15: 00007ffc07c66a58 [ 246.884708][ T8525] [ 246.884759][ T8525] F2FS-fs (loop7): Stopped filesystem due to reason: 1 [ 247.277818][ T5630] Bluetooth: hci5: command 0x1003 tx timeout [ 247.283997][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 247.691530][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.724'. [ 248.293306][ T6557] hsr_slave_0: left promiscuous mode [ 248.302111][ T8559] loop6: detected capacity change from 0 to 4096 [ 248.315364][ T8559] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 248.324938][ T6557] hsr_slave_1: left promiscuous mode [ 248.334240][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.334288][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.353419][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.353467][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.497087][ T6557] veth1_macvtap: left promiscuous mode [ 248.497190][ T6557] veth0_macvtap: left promiscuous mode [ 248.497319][ T6557] veth1_vlan: left promiscuous mode [ 248.497575][ T6557] veth0_vlan: left promiscuous mode [ 248.620501][ T8559] ntfs3(loop6): ino=19, mi_enum_attr [ 248.620595][ T8559] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 248.651945][ T8559] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 248.877928][ T52] Bluetooth: hci2: command tx timeout [ 248.993415][ T8569] loop5: detected capacity change from 0 to 32768 [ 249.053323][ T8569] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 249.053381][ T8569] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 249.098827][ T8569] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 249.104450][ T5348] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 249.104513][ T5348] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 249.300616][ T5348] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 196ms [ 249.333096][ T5348] gfs2: fsid=syz:syz.0: jid=0: Done [ 249.333199][ T8569] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 250.023219][ T8571] loop7: detected capacity change from 0 to 32768 [ 250.102590][ T8571] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 250.370501][ T6557] team0 (unregistering): Port device team_slave_1 removed [ 250.409500][ T6557] team0 (unregistering): Port device team_slave_0 removed [ 250.512113][ T8224] ocfs2: Unmounting device (7,7) on (node local) [ 250.530569][ T987] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 250.621584][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 250.678918][ T987] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.689732][ T987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.689785][ T987] usb 6-1: Product: syz [ 250.689827][ T987] usb 6-1: Manufacturer: syz [ 250.689851][ T987] usb 6-1: SerialNumber: syz [ 250.971477][ T52] Bluetooth: hci2: command tx timeout [ 250.977842][ T5348] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 251.150143][ T5348] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 251.163133][ T5348] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 251.163207][ T5348] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 251.163296][ T5348] usb 8-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.163395][ T5348] usb 8-1: config 1 interface 0 has no altsetting 0 [ 251.226307][ T987] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 251.226410][ T987] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 251.256099][ T5348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.256151][ T5348] usb 8-1: Product: syz [ 251.256169][ T5348] usb 8-1: Manufacturer: syz [ 251.256184][ T5348] usb 8-1: SerialNumber: syz [ 251.297038][ T8589] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 251.297226][ T8589] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 251.541443][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.542155][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.542842][ T8445] bridge_slave_0: entered allmulticast mode [ 251.557435][ T8445] bridge_slave_0: entered promiscuous mode [ 251.569411][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.569604][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.570254][ T8445] bridge_slave_1: entered allmulticast mode [ 251.578787][ T8445] bridge_slave_1: entered promiscuous mode [ 251.655163][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.668968][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.769924][ T8445] team0: Port device team_slave_0 added [ 251.794953][ T8445] team0: Port device team_slave_1 added [ 251.889818][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.889920][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.890120][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.921315][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.921362][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.921486][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.052940][ T987] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 252.053070][ T987] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.125810][ T987] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.147047][ T8445] hsr_slave_0: entered promiscuous mode [ 252.155902][ T8445] hsr_slave_1: entered promiscuous mode [ 252.165277][ T8445] debugfs: 'hsr0' already exists in 'hsr' [ 252.165318][ T8445] Cannot create hsr debugfs directory [ 252.235926][ T987] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 252.275535][ T987] usb 6-1: USB disconnect, device number 12 [ 252.586425][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 252.685598][ T8445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 252.715639][ T8445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.745924][ T8627] loop5: detected capacity change from 0 to 128 [ 252.790330][ T8627] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.803887][ T8445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 252.822280][ T8627] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.849524][ T8445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.860501][ T8445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 252.875645][ T8445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.886490][ T8445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 252.905410][ T8445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.027360][ T6215] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.331920][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.346130][ T8647] loop6: detected capacity change from 0 to 512 [ 253.431147][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.481794][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.481973][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.482604][ T8647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.571211][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.571485][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.713400][ T7329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.873913][ T5348] rtl8150 8-1:1.0: couldn't find required endpoints [ 253.884206][ T5348] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 253.935118][ T5348] usb 8-1: USB disconnect, device number 2 [ 254.049223][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.743'. [ 254.069664][ T8657] netlink: 75 bytes leftover after parsing attributes in process `syz.6.743'. [ 254.301767][ T8645] loop5: detected capacity change from 0 to 32768 [ 254.371314][ T8645] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.474283][ T8645] XFS (loop5): Ending clean mount [ 254.502551][ T8675] loop6: detected capacity change from 0 to 512 [ 254.549513][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 254.672655][ T8675] FAT-fs (loop6): error, corrupted file size (i_pos 51, 8960) [ 254.672866][ T8675] FAT-fs (loop6): error, corrupted file size (i_pos 51, 8960) [ 254.695087][ T8675] FAT-fs (loop6): error, corrupted file size (i_pos 51, 8960) [ 254.703273][ T8675] FAT-fs (loop6): error, corrupted file size (i_pos 51, 8960) [ 254.774013][ T6215] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.949376][ T8659] loop7: detected capacity change from 0 to 32768 [ 255.046003][ T8659] JBD2: Ignoring recovery information on journal [ 255.231159][ T8659] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 255.314048][ T8686] netlink: 'syz.6.748': attribute type 11 has an invalid length. [ 255.314109][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.748'. [ 255.379749][ T8686] netlink: 'syz.6.748': attribute type 11 has an invalid length. [ 255.379799][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.748'. [ 255.380452][ T8686] netlink: 'syz.6.748': attribute type 11 has an invalid length. [ 255.380497][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.748'. [ 255.757249][ T8224] ocfs2: Unmounting device (7,7) on (node local) [ 255.791686][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.843938][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.072908][ T8699] loop6: detected capacity change from 0 to 4096 [ 256.179901][ T8699] ntfs3(loop6): Failed to load $Extend (-22). [ 256.179956][ T8699] ntfs3(loop6): Failed to initialize $Extend. [ 256.217790][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 256.381204][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.389401][ T9] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 256.401162][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.411689][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.421082][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 256.432938][ T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 256.446808][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 256.457999][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 256.470871][ T9] usb 5-1: string descriptor 0 read error: -22 [ 256.477306][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.210099][ T5348] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 257.216170][ T8445] veth0_vlan: entered promiscuous mode [ 257.253608][ T8445] veth1_vlan: entered promiscuous mode [ 257.317530][ T8736] loop5: detected capacity change from 0 to 256 [ 257.356186][ T8736] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 257.358748][ T5348] usb 7-1: Using ep0 maxpacket: 32 [ 257.362473][ T5348] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 257.368547][ T5348] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 257.368574][ T5348] usb 7-1: config 0 has no interface number 0 [ 257.368615][ T5348] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 257.368643][ T5348] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.368666][ T5348] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 257.430519][ T8445] veth0_macvtap: entered promiscuous mode [ 257.439721][ T5348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.439774][ T5348] usb 7-1: Product: syz [ 257.439796][ T5348] usb 7-1: Manufacturer: syz [ 257.439817][ T5348] usb 7-1: SerialNumber: syz [ 257.464547][ T5348] usb 7-1: config 0 descriptor?? [ 257.474322][ T8726] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 257.498945][ T8445] veth1_macvtap: entered promiscuous mode [ 257.580883][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.675699][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.761455][ T9] usb 5-1: Warning! Unlikely small volume range (=95), linear volume or custom curve? [ 257.761499][ T9] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/95/1 [ 257.766575][ T5348] usb-storage 7-1:0.20: USB Mass Storage device detected [ 257.791041][ T6556] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.791110][ T6556] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.809255][ T145] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.809388][ T145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.934863][ T9] usb 5-1: USB disconnect, device number 13 [ 258.005607][ T5348] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 258.083666][ T8726] loop6: detected capacity change from 0 to 2048 [ 258.091457][ T8726] udf: Unknown parameter 'ÿÿÿÿ' [ 258.203405][ T5348] scsi host1: usb-storage 7-1:0.20 [ 258.279039][ T8753] loop7: detected capacity change from 0 to 128 [ 258.321583][ T8753] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.342624][ T8753] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.411178][ T9] usb 7-1: USB disconnect, device number 6 [ 258.489622][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.489674][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.573701][ T8745] loop5: detected capacity change from 0 to 32768 [ 258.635578][ T8745] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 258.653737][ T8224] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.669828][ T3337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.678086][ T3337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.701197][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 258.813883][ T8745] XFS (loop5): Ending clean mount [ 258.897538][ T31] audit: type=1800 audit(1786986651.927:90): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.759" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 259.451205][ T6215] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 259.533414][ T8781] loop6: detected capacity change from 0 to 32768 [ 259.574504][ T8781] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 259.631072][ T31] audit: type=1800 audit(1786986652.667:91): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.765" name="file1" dev="loop6" ino=17059 res=0 errno=0 [ 259.925833][ T7329] ocfs2: Unmounting device (7,6) on (node local) [ 260.596863][ T8810] loop6: detected capacity change from 0 to 32768 [ 260.638453][ T8810] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 260.640080][ T8810] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 260.743900][ T8815] gadgetfs: bound to dummy_udc driver [ 260.801335][ T8810] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 260.817186][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 260.817231][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 261.223669][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 406ms [ 261.225642][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 261.225826][ T8810] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 262.052754][ T8851] loop8: detected capacity change from 0 to 256 [ 262.510773][ T8858] FAT-fs (loop8): error, clusters badly computed (0 != 128) [ 262.542938][ T8858] FAT-fs (loop8): Filesystem has been set read-only [ 262.555111][ T8858] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 263.481341][ T8880] loop4: detected capacity change from 0 to 40427 [ 263.515085][ T8880] F2FS-fs (loop4): invalid crc value [ 263.596745][ T8880] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 263.603502][ T8880] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 263.603538][ T8880] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 263.603582][ T8880] F2FS-fs (loop4): Start checkpoint disabled! [ 263.613810][ T8880] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 263.614184][ T8880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 263.682728][ T8880] syz.4.790: attempt to access beyond end of device [ 263.682728][ T8880] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.685565][ T8880] syz.4.790: attempt to access beyond end of device [ 263.685565][ T8880] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 263.686185][ T8880] syz.4.790: attempt to access beyond end of device [ 263.686185][ T8880] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 263.686861][ T8880] syz.4.790: attempt to access beyond end of device [ 263.686861][ T8880] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 263.687215][ T8880] syz.4.790: attempt to access beyond end of device [ 263.687215][ T8880] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 263.687551][ T8880] syz.4.790: attempt to access beyond end of device [ 263.687551][ T8880] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 263.689297][ T8880] syz.4.790: attempt to access beyond end of device [ 263.689297][ T8880] loop4: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 263.689632][ T8880] syz.4.790: attempt to access beyond end of device [ 263.689632][ T8880] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 263.690211][ T8880] syz.4.790: attempt to access beyond end of device [ 263.690211][ T8880] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 263.690554][ T8880] syz.4.790: attempt to access beyond end of device [ 263.690554][ T8880] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 263.881853][ T3337] CPU: 1 UID: 0 PID: 3337 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.881895][ T3337] Tainted: [L]=SOFTLOCKUP [ 263.881904][ T3337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.881919][ T3337] Workqueue: writeback wb_workfn (flush-7:4) [ 263.881962][ T3337] Call Trace: [ 263.881972][ T3337] [ 263.881982][ T3337] dump_stack_lvl+0xe8/0x150 [ 263.882031][ T3337] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 263.882066][ T3337] f2fs_write_end_bio+0x1211/0x16e0 [ 263.882104][ T3337] ? blkg_put+0x22/0x240 [ 263.882150][ T3337] __submit_merged_bio+0x258/0x6a0 [ 263.882178][ T3337] ? rcu_is_watching+0x16/0xb0 [ 263.882213][ T3337] __submit_merged_write_cond+0x3c9/0x4e0 [ 263.882264][ T3337] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 263.882330][ T3337] f2fs_write_data_pages+0x2a27/0x36f0 [ 263.882409][ T3337] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 263.882500][ T3337] ? __lock_acquire+0x6df/0x2e50 [ 263.882530][ T3337] ? __lock_acquire+0x6df/0x2e50 [ 263.882567][ T3337] ? __lock_acquire+0x6df/0x2e50 [ 263.882622][ T3337] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 263.882657][ T3337] do_writepages+0x338/0x560 [ 263.882698][ T3337] ? reacquire_held_locks+0x117/0x1a0 [ 263.882725][ T3337] ? writeback_sb_inodes+0x450/0x1b00 [ 263.882755][ T3337] __writeback_single_inode+0x136/0x1220 [ 263.882783][ T3337] ? do_raw_spin_unlock+0xf5/0x200 [ 263.882821][ T3337] writeback_sb_inodes+0x9de/0x1b00 [ 263.882843][ T3337] ? __lock_acquire+0x6df/0x2e50 [ 263.882898][ T3337] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 263.882975][ T3337] ? rcu_is_watching+0x16/0xb0 [ 263.883011][ T3337] ? queue_io+0x2d3/0x470 [ 263.883039][ T3337] wb_writeback+0x41c/0xad0 [ 263.883079][ T3337] ? queue_io+0x1f1/0x470 [ 263.883110][ T3337] ? __pfx_wb_writeback+0x10/0x10 [ 263.883143][ T3337] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.883196][ T3337] wb_workfn+0x431/0x10f0 [ 263.883251][ T3337] ? __pfx_wb_workfn+0x10/0x10 [ 263.883286][ T3337] ? rcu_is_watching+0x16/0xb0 [ 263.883314][ T3337] ? trace_hrtimer_start+0x82/0x200 [ 263.883356][ T3337] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.883400][ T3337] ? lock_acquire+0x115/0x350 [ 263.883435][ T3337] ? rcu_is_watching+0x16/0xb0 [ 263.883466][ T3337] ? process_scheduled_works+0x97a/0x1630 [ 263.883499][ T3337] process_scheduled_works+0xc3d/0x1630 [ 263.883571][ T3337] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.883611][ T3337] ? assign_work+0x3cf/0x5d0 [ 263.883648][ T3337] worker_thread+0xa47/0xfb0 [ 263.883699][ T3337] ? __kthread_parkme+0x71/0x1f0 [ 263.883747][ T3337] kthread+0x38b/0x480 [ 263.883771][ T3337] ? __pfx_worker_thread+0x10/0x10 [ 263.883800][ T3337] ? __pfx_kthread+0x10/0x10 [ 263.883825][ T3337] ret_from_fork+0x514/0xb70 [ 263.883852][ T3337] ? __pfx_ret_from_fork+0x10/0x10 [ 263.883888][ T3337] ? __switch_to+0xc89/0x1420 [ 263.883925][ T3337] ? __pfx_kthread+0x10/0x10 [ 263.883951][ T3337] ret_from_fork_asm+0x1a/0x30 [ 263.884015][ T3337] [ 263.897323][ T3337] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 264.127817][ T987] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 264.314392][ T8884] loop6: detected capacity change from 0 to 131072 [ 264.319192][ T987] usb 6-1: Using ep0 maxpacket: 16 [ 264.371333][ T8884] F2FS-fs (loop6): invalid crc value [ 264.408481][ T987] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 264.458617][ T987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.458718][ T987] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.485305][ T987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.485388][ T987] usb 6-1: SerialNumber: syz [ 264.564645][ T987] usb 6-1: 0:2 : does not exist [ 264.785084][ T8884] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 264.864998][ T8884] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 264.984829][ T987] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 265.049850][ T31] audit: type=1804 audit(1786986658.077:92): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.793" name="/newroot/74/file1/file1" dev="loop6" ino=7 res=1 errno=0 [ 265.393117][ T987] usb 6-1: USB disconnect, device number 13 [ 265.628869][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 265.684827][ T8916] loop4: detected capacity change from 0 to 512 [ 265.766318][ T8916] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.795: inode has both inline data and extents flags [ 265.766387][ T8916] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.767239][ T8916] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.795: couldn't read orphan inode 15 (err -117) [ 265.767331][ T8916] loop4: lost filesystem error report for type 5 error -117 [ 265.767785][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 265.767837][ C1] EXT4-fs (loop4): initial error at time 1786986658: ext4_orphan_get:1403: inode 15 [ 265.767910][ C1] EXT4-fs (loop4): last error at time 1786986658: ext4_orphan_get:1408 [ 265.789329][ T8916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.863688][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.887713][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.887761][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.890315][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.890377][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.937873][ T9] usb 9-1: config 0 descriptor?? [ 266.193592][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.331047][ T8921] loop5: detected capacity change from 0 to 32768 [ 266.380074][ T8921] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.484216][ T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 266.507306][ T8921] XFS (loop5): Ending clean mount [ 266.709863][ T987] usb 9-1: USB disconnect, device number 2 [ 266.852663][ T8917] loop7: detected capacity change from 0 to 32768 [ 266.880258][ T8917] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.800 (8917) [ 266.896807][ T6215] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.993688][ T8917] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.993765][ T8917] BTRFS info (device loop7): using crc32c checksum algorithm [ 267.231544][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 267.345441][ T8917] BTRFS info (device loop7): enabling ssd optimizations [ 267.345514][ T8917] BTRFS info (device loop7): turning on async discard [ 267.345552][ T8917] BTRFS info (device loop7): enabling free space tree [ 267.517918][ T8917] BTRFS info (device loop7 state M): use zstd compression, level 15 [ 267.767960][ T8224] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.535243][ T8967] loop4: detected capacity change from 0 to 131072 [ 268.570066][ T8967] F2FS-fs (loop4): invalid crc value [ 268.673137][ T8967] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 268.772424][ T8967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 269.138021][ T5348] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 269.257965][ T987] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 269.289866][ T5348] usb 9-1: Using ep0 maxpacket: 32 [ 269.298107][ T5348] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 269.313495][ T5348] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 269.313542][ T5348] usb 9-1: config 0 has no interface number 0 [ 269.314584][ T5348] usb 9-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 269.314642][ T5348] usb 9-1: config 0 interface 184 has no altsetting 0 [ 269.350720][ T5348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.350765][ T5348] usb 9-1: Product: syz [ 269.350802][ T5348] usb 9-1: Manufacturer: syz [ 269.350822][ T5348] usb 9-1: SerialNumber: syz [ 269.384510][ T5348] usb 9-1: config 0 descriptor?? [ 269.390372][ T8991] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 269.447814][ T987] usb 7-1: Using ep0 maxpacket: 16 [ 269.456139][ T987] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.468109][ T987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.468150][ T987] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.498739][ T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.498784][ T987] usb 7-1: Product: syz [ 269.498817][ T987] usb 7-1: Manufacturer: syz [ 269.498862][ T987] usb 7-1: SerialNumber: syz [ 269.540888][ T987] usb 7-1: 0:2 : does not exist [ 269.628280][ T9001] xhci-hcd pcspkr: error -ENXIO: IRQ index 0 not found [ 269.644775][ T8991] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 269.737795][ T987] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 269.811107][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.5.815'. [ 269.890741][ T987] usb 7-1: USB disconnect, device number 7 [ 270.044227][ T5900] udevd[5900]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.471254][ T5348] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 270.471333][ T5348] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 270.556429][ T9017] loop4: detected capacity change from 0 to 128 [ 270.598307][ T9017] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 270.599516][ T9017] FAT-fs (loop4): Filesystem has been set read-only [ 270.676847][ T5348] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 270.676905][ T5348] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 270.676929][ T5348] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 270.679169][ T5348] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 270.748201][ T5348] usb 9-1: USB disconnect, device number 3 [ 270.776401][ T9019] loop4: detected capacity change from 0 to 1024 [ 270.818419][ T9019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.861861][ T9019] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 270.876529][ T9019] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 1 with error 28 [ 270.876566][ T9019] EXT4-fs (loop4): This should not happen!! Data will be lost [ 270.876566][ T9019] [ 270.876583][ T9019] EXT4-fs (loop4): Total free blocks count 0 [ 270.876598][ T9019] EXT4-fs (loop4): Free/Dirty block details [ 270.876614][ T9019] EXT4-fs (loop4): free_blocks=20480 [ 270.876683][ T9019] EXT4-fs (loop4): dirty_blocks=16 [ 270.876730][ T9019] EXT4-fs (loop4): Block reservation details [ 270.876781][ T9019] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 270.899299][ T5761] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 270.922837][ T9019] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 6 with error 28 [ 271.071969][ T5761] usb 7-1: Using ep0 maxpacket: 8 [ 271.079473][ T5761] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 271.092980][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.093025][ T5761] usb 7-1: Product: syz [ 271.093265][ T5761] usb 7-1: Manufacturer: syz [ 271.093287][ T5761] usb 7-1: SerialNumber: syz [ 271.123987][ T5761] usb 7-1: config 0 descriptor?? [ 271.342987][ T5761] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 271.526505][ T9035] loop8: detected capacity change from 0 to 16 [ 271.548261][ T9035] erofs (device loop8): mounted with root inode @ nid 36. [ 271.577835][ T5761] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 271.590108][ T5761] usb 7-1: USB disconnect, device number 8 [ 271.640065][ T5348] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.798631][ T5348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 271.808906][ T5348] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 271.808940][ T5348] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 271.813477][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 271.813550][ T5348] usb 5-1: Product: syz [ 271.813594][ T5348] usb 5-1: Manufacturer: syz [ 272.085388][ T9042] loop5: detected capacity change from 0 to 128 [ 272.117287][ T9042] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.134086][ T9042] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.147695][ T5761] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 272.269502][ T9047] loop7: detected capacity change from 0 to 1024 [ 272.276367][ T9047] EXT4-fs: Ignoring removed bh option [ 272.310446][ T5761] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.312466][ T5761] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.312570][ T5761] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 272.312644][ T5761] usb 9-1: config 0 interface 0 has no altsetting 0 [ 272.322442][ T5761] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.322533][ T5761] usb 9-1: Product: syz [ 272.322580][ T5761] usb 9-1: Manufacturer: syz [ 272.322672][ T5761] usb 9-1: SerialNumber: syz [ 272.350424][ T5761] usb 9-1: config 0 descriptor?? [ 272.391532][ T5761] usb 9-1: selecting invalid altsetting 0 [ 272.437505][ T9047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.545089][ T6215] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.715016][ T5761] usb 9-1: USB disconnect, device number 4 [ 272.874636][ T8224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.416580][ T5348] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 273.439430][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.834'. [ 273.467183][ T5348] usb 5-1: USB disconnect, device number 14 [ 273.575890][ T9067] loop8: detected capacity change from 0 to 128 [ 273.588803][ T9067] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 273.588883][ T9067] hpfs: filesystem error: improperly stopped [ 273.588911][ T9067] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 273.588938][ T9067] hpfs: You really don't want any checks? You are crazy... [ 273.589386][ T9067] hpfs: hpfs_map_sector(): read error [ 273.639824][ T9067] hpfs: code page support is disabled [ 273.646385][ T9067] hpfs: hpfs_map_4sectors(): unaligned read [ 273.653505][ T9067] hpfs: hpfs_map_4sectors(): unaligned read [ 273.660045][ T9067] hpfs: filesystem error: unable to find root dir [ 273.713444][ T9067] hpfs: hpfs_map_4sectors(): unaligned read [ 273.720872][ T9067] hpfs: hpfs_map_sector(): read error [ 273.750490][ T9067] hpfs: hpfs_map_4sectors(): unaligned read [ 273.750556][ T9067] hpfs: hpfs_map_sector(): read error [ 273.759905][ T9067] hpfs: hpfs_map_4sectors(): unaligned read [ 273.759938][ T9067] hpfs: hpfs_map_sector(): read error [ 274.028863][ T9059] loop7: detected capacity change from 0 to 40427 [ 274.040787][ T9059] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 274.040828][ T9059] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 274.053824][ T9059] F2FS-fs (loop7): invalid crc value [ 274.464493][ T9059] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 274.531294][ T9059] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 274.531358][ T9059] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 274.561970][ T9083] loop6: detected capacity change from 0 to 32768 [ 274.576698][ T9083] (syz.6.839,9083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.577275][ T9083] (syz.6.839,9083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.625938][ T9083] JBD2: Ignoring recovery information on journal [ 274.670809][ T9083] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 274.807354][ T8224] bio_check_eod: 72 callbacks suppressed [ 274.807443][ T8224] syz-executor: attempt to access beyond end of device [ 274.807443][ T8224] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 274.836842][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 274.836878][ T8224] Tainted: [L]=SOFTLOCKUP [ 274.836887][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.836900][ T8224] Call Trace: [ 274.836909][ T8224] [ 274.836918][ T8224] dump_stack_lvl+0xe8/0x150 [ 274.836956][ T8224] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 274.836988][ T8224] f2fs_write_end_bio+0x1211/0x16e0 [ 274.837022][ T8224] ? blkg_put+0x22/0x240 [ 274.837063][ T8224] __submit_merged_bio+0x258/0x6a0 [ 274.837088][ T8224] ? rcu_is_watching+0x16/0xb0 [ 274.837120][ T8224] __submit_merged_write_cond+0x3c9/0x4e0 [ 274.837156][ T8224] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 274.837207][ T8224] f2fs_write_data_pages+0x2a27/0x36f0 [ 274.837236][ T8224] ? __lock_acquire+0x6df/0x2e50 [ 274.837294][ T8224] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 274.837371][ T8224] ? __bfs+0x153/0x290 [ 274.837390][ T8224] ? __pfx_hlock_conflict+0x10/0x10 [ 274.837444][ T8224] ? lockdep_unlock+0x5c/0xd0 [ 274.837474][ T8224] ? __lock_acquire+0x14b9/0x2e50 [ 274.837524][ T8224] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 274.837556][ T8224] do_writepages+0x338/0x560 [ 274.837596][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 274.837632][ T8224] filemap_fdatawrite+0x1e9/0x2f0 [ 274.837665][ T8224] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 274.837740][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 274.837793][ T8224] f2fs_sync_dirty_inodes+0x30e/0x830 [ 274.837840][ T8224] f2fs_write_checkpoint+0xa3d/0x2710 [ 274.837873][ T8224] ? __lock_acquire+0x6df/0x2e50 [ 274.837928][ T8224] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 274.838002][ T8224] ? try_to_wake_up+0x8b6/0x14d0 [ 274.838044][ T8224] kill_f2fs_super+0x2dd/0x700 [ 274.838087][ T8224] ? __pfx_kill_f2fs_super+0x10/0x10 [ 274.838133][ T8224] ? call_rcu+0x64d/0x8b0 [ 274.838161][ T8224] ? lockdep_hardirqs_on+0x7b/0x110 [ 274.838202][ T8224] deactivate_locked_super+0xbc/0x110 [ 274.838229][ T8224] cleanup_mnt+0x3d3/0x460 [ 274.838264][ T8224] task_work_run+0x1d9/0x270 [ 274.838292][ T8224] ? __pfx_task_work_run+0x10/0x10 [ 274.838328][ T8224] exit_to_user_mode_loop+0x204/0x770 [ 274.838352][ T8224] ? rcu_is_watching+0x16/0xb0 [ 274.838384][ T8224] do_syscall_64+0x328/0x520 [ 274.838410][ T8224] ? trace_irq_disable+0x3b/0x140 [ 274.838439][ T8224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.838463][ T8224] ? clear_bhb_loop+0x70/0xc0 [ 274.838492][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.838514][ T8224] RIP: 0033:0x7fe3dab9f317 [ 274.838536][ T8224] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 274.838557][ T8224] RSP: 002b:00007ffc07c65cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 274.838583][ T8224] RAX: 0000000000000000 RBX: 00007fe3dac34474 RCX: 00007fe3dab9f317 [ 274.838610][ T8224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc07c65d80 [ 274.838625][ T8224] RBP: 00007ffc07c65d80 R08: 00007ffc07c66d80 R09: 00000000ffffffff [ 274.838640][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc07c66e10 [ 274.838655][ T8224] R13: 00007fe3dac34474 R14: 000000000004311e R15: 00007ffc07c66e50 [ 274.838689][ T8224] [ 275.041427][ T8224] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 275.041773][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 275.041805][ T8224] Tainted: [L]=SOFTLOCKUP [ 275.041813][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.041827][ T8224] Call Trace: [ 275.041836][ T8224] [ 275.041845][ T8224] dump_stack_lvl+0xe8/0x150 [ 275.041882][ T8224] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 275.041924][ T8224] f2fs_write_end_bio+0x1211/0x16e0 [ 275.041981][ T8224] __submit_merged_bio+0x258/0x6a0 [ 275.042008][ T8224] ? rcu_is_watching+0x16/0xb0 [ 275.042040][ T8224] __submit_merged_write_cond+0x3c9/0x4e0 [ 275.042077][ T8224] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 275.042129][ T8224] f2fs_write_data_pages+0x2a27/0x36f0 [ 275.042162][ T8224] ? __lock_acquire+0x6df/0x2e50 [ 275.042366][ T8224] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 275.042562][ T8224] ? __bfs+0x153/0x290 [ 275.042622][ T8224] ? __pfx_hlock_conflict+0x10/0x10 [ 275.042738][ T8224] ? lockdep_unlock+0x5c/0xd0 [ 275.042821][ T8224] ? __lock_acquire+0x14b9/0x2e50 [ 275.042957][ T8224] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 275.043040][ T8224] do_writepages+0x338/0x560 [ 275.043144][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 275.043238][ T8224] filemap_fdatawrite+0x1e9/0x2f0 [ 275.043330][ T8224] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 275.043521][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 275.043626][ T8224] f2fs_sync_dirty_inodes+0x30e/0x830 [ 275.043772][ T8224] f2fs_write_checkpoint+0xa3d/0x2710 [ 275.043853][ T8224] ? __lock_acquire+0x6df/0x2e50 [ 275.043995][ T8224] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 275.044174][ T8224] ? try_to_wake_up+0x8b6/0x14d0 [ 275.044268][ T8224] kill_f2fs_super+0x2dd/0x700 [ 275.044388][ T8224] ? __pfx_kill_f2fs_super+0x10/0x10 [ 275.044451][ T8224] ? call_rcu+0x64d/0x8b0 [ 275.044509][ T8224] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.044618][ T8224] deactivate_locked_super+0xbc/0x110 [ 275.044683][ T8224] cleanup_mnt+0x3d3/0x460 [ 275.044766][ T8224] task_work_run+0x1d9/0x270 [ 275.044837][ T8224] ? __pfx_task_work_run+0x10/0x10 [ 275.044930][ T8224] exit_to_user_mode_loop+0x204/0x770 [ 275.044992][ T8224] ? rcu_is_watching+0x16/0xb0 [ 275.045088][ T8224] do_syscall_64+0x328/0x520 [ 275.045164][ T8224] ? trace_irq_disable+0x3b/0x140 [ 275.045225][ T8224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.045286][ T8224] ? clear_bhb_loop+0x70/0xc0 [ 275.045353][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.045407][ T8224] RIP: 0033:0x7fe3dab9f317 [ 275.045469][ T8224] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 275.045513][ ** replaying previous printk message ** [ 275.045513][ T8224] RSP: 002b:00007ffc07c65cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 275.045574][ T8224] RAX: 0000000000000000 RBX: 00007fe3dac34474 RCX: 00007fe3dab9f317 [ 275.045615][ T8224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc07c65d80 [ 275.045655][ T8224] RBP: 00007ffc07c65d80 R08: 00007ffc07c66d80 R09: 00000000ffffffff [ 275.045690][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc07c66e10 [ 275.045730][ T8224] R13: 00007fe3dac34474 R14: 000000000004311e R15: 00007ffc07c66e50 [ 275.045823][ T8224] [ 275.098867][ T8224] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 275.443493][ T8224] [ 275.511907][ T8224] ============================= [ 275.517256][ T8224] WARNING: suspicious RCU usage [ 275.522642][ T8224] syzkaller #0 Tainted: G L [ 275.528850][ T8224] ----------------------------- [ 275.533759][ T8224] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 275.542815][ T8224] [ 275.542815][ T8224] other info that might help us debug this: [ 275.542815][ T8224] [ 275.553185][ T8224] [ 275.553185][ T8224] rcu_scheduler_active = 2, debug_locks = 1 [ 275.561471][ T8224] locks held by syz-executor/8224: 2, last CPU#1: [ 275.567979][ T8224] #0: ffff8880555660e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 275.578341][ T8224] #1: ffff88807a40c8c8 (&im->ino_lock){+.+.}-{3:3}, at: f2fs_remove_ino_entry+0x18d/0x3f0 [ 275.588494][ T8224] [ 275.588494][ T8224] stack backtrace: [ 275.594460][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 275.605519][ T8224] Tainted: [L]=SOFTLOCKUP [ 275.609871][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.619962][ T8224] Call Trace: [ 275.623270][ T8224] [ 275.626243][ T8224] dump_stack_lvl+0xe8/0x150 [ 275.630905][ T8224] lockdep_rcu_suspicious+0x140/0x1d0 [ 275.636321][ T8224] f2fs_remove_ino_entry+0x3ae/0x3f0 [ 275.641653][ T8224] f2fs_evict_inode+0x83d/0x21f0 [ 275.646650][ T8224] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 275.652060][ T8224] ? do_raw_spin_lock+0x12b/0x2f0 [ 275.657144][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 275.662309][ T8224] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 275.667716][ T8224] evict+0x624/0xb50 [ 275.671658][ T8224] ? __pfx_evict+0x10/0x10 [ 275.676105][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 275.681255][ T8224] ? _raw_spin_unlock+0x28/0x50 [ 275.686155][ T8224] ? iput+0xb84/0xf00 [ 275.690174][ T8224] f2fs_evict_inode+0x20f/0x21f0 [ 275.695164][ T8224] ? inode_wait_for_writeback+0x16d/0x3b0 [ 275.700941][ T8224] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 275.706348][ T8224] ? do_raw_spin_lock+0x12b/0x2f0 [ 275.711424][ T8224] ? do_raw_spin_unlock+0xf5/0x200 [ 275.716600][ T8224] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 275.722004][ T8224] evict+0x624/0xb50 [ 275.725950][ T8224] ? __pfx_evict+0x10/0x10 [ 275.730406][ T8224] ? do_raw_spin_lock+0x12b/0x2f0 [ 275.735484][ T8224] evict_inodes+0x7e3/0x870 [ 275.740020][ T8224] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 275.746043][ T8224] ? __pfx_evict_inodes+0x10/0x10 [ 275.751098][ T8224] ? sync_filesystem+0x1f9/0x240 [ 275.756078][ T8224] generic_shutdown_super+0xaa/0x2d0 [ 275.761406][ T8224] kill_block_super+0x44/0xa0 [ 275.766122][ T8224] kill_f2fs_super+0x3b3/0x700 [ 275.770945][ T8224] ? __pfx_kill_f2fs_super+0x10/0x10 [ 275.776313][ T8224] ? call_rcu+0x64d/0x8b0 [ 275.780682][ T8224] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.786016][ T8224] deactivate_locked_super+0xbc/0x110 [ 275.791423][ T8224] cleanup_mnt+0x3d3/0x460 [ 275.795874][ T8224] task_work_run+0x1d9/0x270 [ 275.800503][ T8224] ? __pfx_task_work_run+0x10/0x10 [ 275.805680][ T8224] exit_to_user_mode_loop+0x204/0x770 [ 275.811092][ T8224] ? rcu_is_watching+0x16/0xb0 [ 275.815906][ T8224] do_syscall_64+0x328/0x520 [ 275.820541][ T8224] ? trace_irq_disable+0x3b/0x140 [ 275.825598][ T8224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.831695][ T8224] ? clear_bhb_loop+0x70/0xc0 [ 275.836407][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.842331][ T8224] RIP: 0033:0x7fe3dab9f317 [ 275.846778][ T8224] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 275.866447][ T8224] RSP: 002b:00007ffc07c65cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 275.874902][ T8224] RAX: 0000000000000000 RBX: 00007fe3dac34474 RCX: 00007fe3dab9f317 [ 275.882908][ T8224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc07c65d80 [ 275.890920][ T8224] RBP: 00007ffc07c65d80 R08: 00007ffc07c66d80 R09: 00000000ffffffff [ 275.898933][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc07c66e10 [ 275.906938][ T8224] R13: 00007fe3dac34474 R14: 000000000004311e R15: 00007ffc07c66e50 [ 275.914962][ T8224] [ 276.097284][ T7329] ocfs2: Unmounting device (7,6) on (node local) [ 276.147081][ T9084] loop8: detected capacity change from 0 to 32768 [ 276.204903][ T9084] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.393384][ T9084] XFS (loop8): Ending clean mount [ 276.546595][ T8445] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791