last executing test programs: 4m46.772860309s ago: executing program 3 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) close(r1) 4m46.332261588s ago: executing program 3 (id=340): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x24008084, 0x0, 0x0) 4m45.984668913s ago: executing program 3 (id=344): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mq_timedreceive(r1, 0x0, 0x0, 0x7f, 0x0) 4m45.174921334s ago: executing program 3 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 4m44.904061837s ago: executing program 3 (id=355): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 4m44.499208166s ago: executing program 3 (id=357): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x408, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6000, 0x1) 4m44.326373741s ago: executing program 32 (id=357): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x408, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6000, 0x1) 3m55.258132146s ago: executing program 0 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fgetxattr(r2, &(0x7f0000001040)=@known='system.sockprotoname\x00', 0x0, 0x0) 3m55.150540649s ago: executing program 0 (id=691): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 3m54.880636503s ago: executing program 0 (id=693): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m53.213116333s ago: executing program 0 (id=703): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="7370617273652c666d61736b3d30303030303030303030303030303030303030303031312c61636c2c696f636861727365743d69736f383835392d362c73686f776d6574612c707265616c6c6f632c7370617273652c646d61736b3d30303030303030303030303030303030303030373737372c00daf73638f72658d3c556c112a9839c19", @ANYRESHEX], 0x1, 0x1f75c, &(0x7f00000011c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000005500)='./bus\x00', 0x0, 0x1045802, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 3m52.736155685s ago: executing program 0 (id=707): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) 3m52.214801998s ago: executing program 0 (id=712): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) socket$nl_route(0x10, 0x3, 0x0) 3m51.780313973s ago: executing program 33 (id=712): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) socket$nl_route(0x10, 0x3, 0x0) 3m14.866303092s ago: executing program 5 (id=947): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$eJzs3ctvXFcdB/DvnYwnmVBSt03aFFVK1EiAiEjsWCmYTQNCKIsKVWXB2kqcxMokLY6L3ApR8952kT+gLLJjgZDYR5QNG9h162UlBJuuzGrQvXNnPPFznNfY6ecTXd9z59xzzu/85j5mPLEmwJfW5bNp3k+Ry2ffWi63V+/NdFbvzdzql5McTtJImkOtup8ml9Jb8mqSoq4othvn7sLsO599sfp5b6tZL9X+jZ3ajWalXnI6yaF6/bj6u7Jbf0d2664YzLBM2Jl+4mDcJsqzufKfu71HfvaP5wY1Q9pbtd71yAcOgKJ339xkMjlan+jl64DeXbF3zz7QVsYdAAAAADwFz69lLcs5Nu44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CCpv/+/qJdGv3w6Rf39/0WrfqzUGnO4m53a2+73n1QcAAAAAAAAAPAUnVrLWpZzrL/dLarP/F+vNo5XP7+S93Mn81nMuSxnLktZymKmk0wOddRanltaWpwetOz/z4DNLS9s2fLCLoEertftxzFrAAAAAAAAAHjm/DqX1z//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aBIDvVW1XK8X55Mo5nkSJJWud9K8q9++SC7P+4AAAAA4BF0R9zv+bWsZTnHBu2K6j3/y9X7/iN5P7ezlIUspZP5XK1+F9B7199YvTfTWb03c6tcNvf7/f/uKdyqx/R+97D1yCerPdq5loXqkXO5kndTFFfTqFqWTvbj2TquX5UxFW/2TIwY2dV6Xc7843q9yUd7mux29vjLlMkqIxODjEzVsZXZeGHnTOzx2dk40nQag2CPbxhpwyQeyPmbI453tF6X8/n9djkfi42ZuDB09L28c86Tb/z1Tz+90bl988a1O2f3z5RGc6he964r7c2ZmBnKxCvPciY2maoycWKwfTk/yk9yNqfzdhazkJ9nLkuZz+n8sCrN1cdzMXTKb5OpSw9svb1bJK36CO09WQ/GlF1ier1qeywL+XHezdXM543q34VM5zu5mIuZHXqGT4xwpW1sc9Z3v7pl8Ge+WRfaSf5QryvXmxt2LVZ2y8TjVeb1haG8Dl9zJ6u64UfWs/TiHu5H/Sz9eedQml+rC+UYv6nX+8PGTEwPZeKlnTPxx+qycqdz++bijbn3RhvuxY/rQnke/W5f3SXK4+XF8smqth48Osq6l+q6iWpZz1er/sSl166xqe7EoK53pq5se6a26tdwm3u6UNW9smXdTFV3cqhu4+utzuD10LPw4Q/AM+vot4622v9u/7P9Sfu37Rvtt4784PB3D7/WysTfJ77XnDr09cZrxV/ySX65/v4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4eHc++PDmXKczv7ih0O12P9qm6iAX+l9n9hQHffW5ZFxTbiXZH5n/X7fbrR8p9kM8Oxe6pcPpPmTzvyUZbedmkq2qTj1E8EUeaxLGfGECnrjzS7feO3/ngw+/vXBr7vr89fnbsxcvzk7NXnxj5vy1hc78VO/nuKMEnoT1m/6IDbr75+s2AQAAAAAAAAAA4MvqUf9UIJO7/4XJ9qMfeZpTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6oy2fTvJ8i01Pnpsrt1XsznXLpl9f3bCZpJCl+kRSfJpfSWzI51F2x3Th3F2bf+eyL1c/X+2r292/s1G40K/WS00kO1evH1d+VR+6vGMywTNiZfuJg3P4fAAD//1RuAhY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3m14.067033496s ago: executing program 5 (id=952): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x1, @desc1}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./bus\x00') 3m13.479588964s ago: executing program 5 (id=955): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x509) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) 3m13.052466819s ago: executing program 5 (id=957): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@nfs_export_on}]}) 3m12.385901184s ago: executing program 5 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m11.452106551s ago: executing program 5 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) 3m11.146551476s ago: executing program 34 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) 3m3.346562674s ago: executing program 6 (id=1016): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/185, 0xb9}], 0x1}, 0x35040a6c}], 0x1, 0x1, 0x0) 3m2.412317869s ago: executing program 6 (id=1022): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x56, &(0x7f0000001a00)={@multicast, @link_local, @val={@val={0x88a8, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "bd98cd", 0x18, 0x6, 0xffcae9c5ff24c5ab, @mcast2, @empty, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x2, 0xf884, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, 0x2, 0x4e24, 0x4e24}}}}}}}}, 0x0) 3m2.09156116s ago: executing program 6 (id=1024): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) 3m1.868414929s ago: executing program 6 (id=1026): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 3m1.276338544s ago: executing program 6 (id=1031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3m0.894345287s ago: executing program 6 (id=1034): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/187, 0xbb}, 0x1e0d}], 0x1, 0x40002063, 0x0) 3m0.378486885s ago: executing program 35 (id=1034): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/187, 0xbb}, 0x1e0d}], 0x1, 0x40002063, 0x0) 6.221250662s ago: executing program 7 (id=2354): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.711556903s ago: executing program 2 (id=2356): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x17) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5) 5.38338041s ago: executing program 7 (id=2358): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 5.267450502s ago: executing program 2 (id=2359): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff]) semop(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x1800}, {0x4, 0x9, 0x1000}], 0x2) 4.50938134s ago: executing program 8 (id=2362): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.368612126s ago: executing program 2 (id=2364): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 4.087706761s ago: executing program 2 (id=2366): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x66032, 0xffffffffffffffff, 0x40000000) read(r0, &(0x7f00000002c0)=""/153, 0x99) 3.715393002s ago: executing program 7 (id=2367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1d5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 3.487278854s ago: executing program 4 (id=2368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 3.071796599s ago: executing program 2 (id=2370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4018780000007be4ae"], 0x0, 0x0, 0x0, 0x0}) 2.624723923s ago: executing program 1 (id=2372): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x400000, &(0x7f0000000a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f00000022c0)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0xe9d2, {0x7, 0x29, 0x1, 0x8020000, 0xdcd, 0x4005, 0x3, 0x3, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x6, 0x0, {0x5, 0x7, 0x0, 0x80000001, 0x3, 0x8001, 0x3, 0x35741061, 0x10000, 0x8001, 0x9e7, 0xffffffffffffffff, 0x0, 0x40, 0xdad}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)) 2.223230368s ago: executing program 1 (id=2373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) 2.161782153s ago: executing program 1 (id=2374): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x74, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406", @ANYRES16], 0x7) socket$inet6_udp(0xa, 0x2, 0x0) 2.010563807s ago: executing program 8 (id=2375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 1.925660285s ago: executing program 4 (id=2376): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 1.815352608s ago: executing program 7 (id=2377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/158, 0x9e}], 0x2}, 0x0) 1.803894669s ago: executing program 8 (id=2378): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1.38544321s ago: executing program 4 (id=2379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) 1.383347746s ago: executing program 1 (id=2380): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x2000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 1.244580389s ago: executing program 1 (id=2381): timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket(0x40000000015, 0x5, 0x0) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) 1.016084462s ago: executing program 4 (id=2382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) 990.307689ms ago: executing program 8 (id=2383): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffeffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) shutdown(r0, 0x1) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 798.436645ms ago: executing program 4 (id=2384): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 519.266748ms ago: executing program 4 (id=2385): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x101, 0x6, 0x2, 0x100000001, 0x6, 0x7, 0x9, 0x4000000000000000, 0xffffffffffffff01, 0xf8, 0x1}) 315.790589ms ago: executing program 2 (id=2386): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 315.506979ms ago: executing program 7 (id=2387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 307.411939ms ago: executing program 8 (id=2388): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x83881, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x1, 0x4}) 73.770062ms ago: executing program 1 (id=2389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 73.297379ms ago: executing program 7 (id=2390): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x2}, {0x1ff, 0xffffffffe, 0x4053e5, 0x8000000000000001}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9df}, 0x1c) 0s ago: executing program 8 (id=2391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x11) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x2, 0xd, 0x1, 0xfffffffa}) kernel console output (not intermixed with test programs): ) [ 331.816408][ T1321] Call Trace: [ 331.816417][ T1321] [ 331.816432][ T1321] dump_stack_lvl+0x189/0x250 [ 331.816463][ T1321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.816488][ T1321] ? __pfx_queue_work_on+0x10/0x10 [ 331.816510][ T1321] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.816534][ T1321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.816570][ T1321] f2fs_handle_critical_error+0x37c/0x540 [ 331.816618][ T1321] f2fs_write_end_io+0x94b/0xc10 [ 331.816660][ T1321] __submit_merged_bio+0x256/0x660 [ 331.816703][ T1321] __submit_merged_write_cond+0x269/0x530 [ 331.816743][ T1321] f2fs_write_data_pages+0x2756/0x3290 [ 331.816799][ T1321] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 331.816892][ T1321] ? __lock_acquire+0x6b6/0x2cf0 [ 331.816922][ T1321] ? __lock_acquire+0x6b6/0x2cf0 [ 331.816951][ T1321] ? f2fs_write_meta_pages+0x357/0x450 [ 331.816975][ T1321] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 331.816998][ T1321] do_writepages+0x32e/0x550 [ 331.817034][ T1321] ? reacquire_held_locks+0x121/0x1c0 [ 331.817059][ T1321] ? writeback_sb_inodes+0x3bd/0x1870 [ 331.817089][ T1321] __writeback_single_inode+0x133/0x1240 [ 331.817115][ T1321] ? do_raw_spin_unlock+0x122/0x240 [ 331.817149][ T1321] writeback_sb_inodes+0x93a/0x1870 [ 331.817202][ T1321] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 331.817273][ T1321] ? rcu_is_watching+0x15/0xb0 [ 331.817309][ T1321] wb_writeback+0x42b/0xaa0 [ 331.817342][ T1321] ? queue_io+0x241/0x450 [ 331.817370][ T1321] ? __pfx_wb_writeback+0x10/0x10 [ 331.817404][ T1321] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.817431][ T1321] wb_workfn+0x3f9/0xed0 [ 331.817481][ T1321] ? __pfx_wb_workfn+0x10/0x10 [ 331.817533][ T1321] ? process_one_work+0x868/0x15a0 [ 331.817560][ T1321] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.817586][ T1321] ? process_one_work+0x868/0x15a0 [ 331.817612][ T1321] process_one_work+0x93a/0x15a0 [ 331.817657][ T1321] ? __pfx_process_one_work+0x10/0x10 [ 331.817687][ T1321] ? assign_work+0x3a1/0x410 [ 331.817714][ T1321] worker_thread+0x9b0/0xee0 [ 331.817766][ T1321] kthread+0x711/0x8a0 [ 331.817797][ T1321] ? __pfx_worker_thread+0x10/0x10 [ 331.817820][ T1321] ? __pfx_kthread+0x10/0x10 [ 331.817850][ T1321] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.817872][ T1321] ? lockdep_hardirqs_on+0x98/0x140 [ 331.817894][ T1321] ? __pfx_kthread+0x10/0x10 [ 331.817923][ T1321] ret_from_fork+0x599/0xb30 [ 331.817946][ T1321] ? __pfx_ret_from_fork+0x10/0x10 [ 331.817979][ T1321] ? __switch_to_asm+0x39/0x70 [ 331.818006][ T1321] ? __switch_to_asm+0x33/0x70 [ 331.818032][ T1321] ? __pfx_kthread+0x10/0x10 [ 331.818061][ T1321] ret_from_fork_asm+0x1a/0x30 [ 331.818108][ T1321] [ 332.189536][T11091] loop7: detected capacity change from 0 to 2048 [ 332.218615][T11091] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 332.385470][T11091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.428917][ T1321] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 333.682085][T11118] loop8: detected capacity change from 0 to 512 [ 333.763138][T11118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.780221][T11118] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.884246][T11118] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.1554: corrupted inode contents [ 333.955121][T11118] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.1554: mark_inode_dirty error [ 333.997674][T11118] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.1554: corrupted inode contents [ 334.056618][T11130] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.1554: corrupted inode contents [ 334.139553][T11130] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.1554: mark_inode_dirty error [ 334.188111][T11130] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.1554: corrupted inode contents [ 334.201911][T11130] EXT4-fs error (device loop8): __ext4_ext_dirty:211: inode #2: comm syz.8.1554: mark_inode_dirty error [ 334.227790][T11130] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.1554: corrupted inode contents [ 334.265399][T11130] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.1554: mark_inode_dirty error [ 334.282967][T11118] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.1554: corrupted inode contents [ 334.362520][ T9360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.429060][T11114] overlayfs: statfs failed on './file0' [ 334.609190][T11143] loop2: detected capacity change from 0 to 1024 [ 334.716556][T11143] hfsplus: bad catalog entry type [ 334.839249][T11153] sctp: [Deprecated]: syz.1.1568 (pid 11153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.839249][T11153] Use struct sctp_sack_info instead [ 334.870294][ T7249] hfsplus: b-tree write err: -5, ino 4 [ 335.093045][T11159] loop4: detected capacity change from 0 to 4096 [ 335.201640][T11159] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 335.528495][ T5824] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 335.578607][T11173] loop8: detected capacity change from 0 to 1764 [ 335.605723][T11173] iso9660: Bad value for 'gid' [ 335.659084][T11173] iso9660: Bad value for 'gid' [ 335.677508][T11175] loop2: detected capacity change from 0 to 512 [ 335.773338][T11175] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1578: inode has both inline data and extents flags [ 335.816404][T11175] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1578: couldn't read orphan inode 15 (err -117) [ 335.832559][T11175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.882208][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.958032][ T5909] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 336.048817][T11191] loop4: detected capacity change from 0 to 2048 [ 336.076772][T11191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.118372][ T5909] usb 9-1: Using ep0 maxpacket: 8 [ 336.132029][ T5909] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 336.147004][ T5909] usb 9-1: config 0 has no interface number 0 [ 336.165496][ T5909] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 336.181421][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.202312][ T5909] usb 9-1: Product: syz [ 336.213288][ T5909] usb 9-1: Manufacturer: syz [ 336.226187][ T5909] usb 9-1: SerialNumber: syz [ 336.258400][ T5909] usb 9-1: config 0 descriptor?? [ 336.413292][T11195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1586'. [ 336.473047][ T5909] uvcvideo 9-1:0.31: probe with driver uvcvideo failed with error -22 [ 336.496356][ T5909] usb 9-1: USB disconnect, device number 3 [ 336.552549][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.561160][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.569436][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.578053][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.585929][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.594122][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.602638][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.610585][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.621308][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.629181][ T43] hid-generic 0003:80000004:0000.0013: unknown main item tag 0x0 [ 336.652264][ T43] hid-generic 0003:80000004:0000.0013: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 336.729609][T11201] fido_id[11201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.813521][T11205] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 338.014796][T11227] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1600'. [ 338.590792][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 338.637016][ T7862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 338.779553][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.829450][ T7862] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 338.840728][ T43] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.874479][ T7862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.887573][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.906274][ T7862] usb 3-1: Product: syz [ 338.911456][ T43] usb 8-1: Product: syz [ 338.915659][ T43] usb 8-1: Manufacturer: syz [ 338.936817][ T7862] usb 3-1: Manufacturer: syz [ 338.941477][ T7862] usb 3-1: SerialNumber: syz [ 338.993196][ T43] usb 8-1: SerialNumber: syz [ 339.010479][ T7862] usb 3-1: config 0 descriptor?? [ 339.126909][ T9610] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 339.142176][T11240] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1606'. [ 339.172635][T11213] loop4: detected capacity change from 0 to 262144 [ 339.194801][T11213] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1593 (11213) [ 339.216163][T11213] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 339.230180][T11213] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 339.240923][ T5843] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 339.241018][ T5843] Bluetooth: hci2: unknown advertising packet type: 0xff [ 339.262973][ T7862] usb-storage 3-1:0.0: USB Mass Storage device detected [ 339.298594][ T9610] usb 9-1: Using ep0 maxpacket: 16 [ 339.326962][ T9610] usb 9-1: config 0 interface 0 has no altsetting 0 [ 339.344832][ T9610] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 339.355692][ T9610] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.377507][ T9610] usb 9-1: config 0 descriptor?? [ 339.434432][ T7862] usb 3-1: USB disconnect, device number 13 [ 339.457568][T11213] BTRFS info (device loop4): checking UUID tree [ 339.468065][T11213] BTRFS info (device loop4): setting nodatasum [ 339.474373][T11213] BTRFS info (device loop4): enabling ssd optimizations [ 339.483228][T11213] BTRFS info (device loop4): enabling free space tree [ 339.522744][ T43] cdc_ncm 8-1:1.0: bind() failure [ 339.545476][ T43] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 339.553991][ T43] cdc_ncm 8-1:1.1: bind() failure [ 339.581604][ T43] usb 8-1: USB disconnect, device number 8 [ 339.649139][ T5824] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 339.908715][ T9610] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5013.0014/input/input22 [ 340.006400][ T5917] IPVS: starting estimator thread 0... [ 340.052005][ T9610] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5013.0014/input/input23 [ 340.137209][T11267] IPVS: using max 26 ests per chain, 62400 per kthread [ 340.158673][ T9610] kye 0003:0458:5013.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 340.236016][ T9610] usb 9-1: USB disconnect, device number 4 [ 340.391282][T11270] fido_id[11270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 341.500368][T11275] loop7: detected capacity change from 0 to 32768 [ 341.550846][T11275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1614 (11275) [ 341.618905][T11275] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.671485][T11275] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 342.113931][T11275] BTRFS info (device loop7): enabling ssd optimizations [ 342.141549][T11275] BTRFS info (device loop7): turning on sync discard [ 342.170393][T11275] BTRFS info (device loop7): enabling free space tree [ 342.208090][T11275] BTRFS info (device loop7): force zlib compression, level 3 [ 342.426857][ T9610] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 342.616918][ T9610] usb 5-1: Using ep0 maxpacket: 8 [ 342.639576][ T9610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.695425][ T9610] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.715027][ T9610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.757679][ T9610] usb 5-1: config 0 descriptor?? [ 342.867702][ T9136] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.044329][ T9610] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 343.869025][ T933] usb 5-1: USB disconnect, device number 19 [ 344.632282][T11347] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1637'. [ 344.666048][T11334] loop2: detected capacity change from 0 to 32768 [ 344.714085][ T30] audit: type=1800 audit(1764316899.205:88): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1631" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 345.172503][T11358] netlink: 'syz.1.1642': attribute type 2 has an invalid length. [ 345.211022][T11358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 345.784532][T11354] loop7: detected capacity change from 0 to 40427 [ 345.808038][T11354] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 345.824762][T11354] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 345.926867][ T5910] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 345.995918][T11354] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 346.006628][T11354] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 346.021169][T11354] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 346.087090][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 346.094885][ T5910] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 346.106846][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.122253][ T9136] syz-executor: attempt to access beyond end of device [ 346.122253][ T9136] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 346.128252][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400 [ 346.148419][ T5910] pvrusb2: ********** [ 346.152586][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 346.152614][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.152627][ T9136] Call Trace: [ 346.152637][ T9136] [ 346.152645][ T9136] dump_stack_lvl+0x189/0x250 [ 346.152680][ T9136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.152706][ T9136] ? __pfx_queue_work_on+0x10/0x10 [ 346.152728][ T9136] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.152752][ T9136] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.152788][ T9136] f2fs_handle_critical_error+0x37c/0x540 [ 346.152829][ T9136] f2fs_write_end_io+0x94b/0xc10 [ 346.152872][ T9136] __submit_merged_bio+0x256/0x660 [ 346.152913][ T9136] __submit_merged_write_cond+0x471/0x530 [ 346.152954][ T9136] f2fs_sync_node_pages+0x1479/0x15e0 [ 346.153007][ T9136] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 346.153078][ T9136] ? do_raw_spin_unlock+0x122/0x240 [ 346.153114][ T9136] f2fs_write_checkpoint+0xdde/0x2440 [ 346.153173][ T9136] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 346.153195][ T9136] ? kasan_record_aux_stack+0xbd/0xd0 [ 346.153283][ T9136] kill_f2fs_super+0x2d2/0x6c0 [ 346.153315][ T9136] ? __pfx_kill_f2fs_super+0x10/0x10 [ 346.153367][ T9136] ? shrinker_free+0x2ce/0x3e0 [ 346.153396][ T9136] deactivate_locked_super+0xbc/0x130 [ 346.153430][ T9136] cleanup_mnt+0x425/0x4c0 [ 346.153463][ T9136] ? lockdep_hardirqs_on+0x98/0x140 [ 346.153491][ T9136] task_work_run+0x1d4/0x260 [ 346.153525][ T9136] ? __pfx_task_work_run+0x10/0x10 [ 346.153561][ T9136] ? exit_to_user_mode_loop+0x55/0x4f0 [ 346.153588][ T9136] exit_to_user_mode_loop+0xff/0x4f0 [ 346.153608][ T9136] ? rcu_is_watching+0x15/0xb0 [ 346.153639][ T9136] do_syscall_64+0x2e3/0xf80 [ 346.153666][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.153688][ T9136] ? clear_bhb_loop+0x60/0xb0 [ 346.153714][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.153748][ T9136] RIP: 0033:0x7f1a3d790a77 [ 346.153767][ T9136] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 346.153786][ T9136] RSP: 002b:00007ffc96612468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 346.153809][ T9136] RAX: 0000000000000000 RBX: 00007f1a3d813d7d RCX: 00007f1a3d790a77 [ 346.153824][ T9136] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc96612520 [ 346.153837][ T9136] RBP: 00007ffc96612520 R08: 0000000000000000 R09: 0000000000000000 [ 346.153850][ T9136] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc966135b0 [ 346.153865][ T9136] R13: 00007f1a3d813d7d R14: 00000000000547b4 R15: 00007ffc966135f0 [ 346.153902][ T9136] [ 346.153912][ T9136] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 346.157650][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 346.175662][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 346.175695][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.175711][ T9136] Call Trace: [ 346.175721][ T9136] [ 346.175731][ T9136] dump_stack_lvl+0x189/0x250 [ 346.175771][ T9136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.175802][ T9136] ? __pfx_queue_work_on+0x10/0x10 [ 346.175828][ T9136] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.175856][ T9136] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.175901][ T9136] f2fs_handle_critical_error+0x37c/0x540 [ 346.175950][ T9136] f2fs_write_end_io+0x94b/0xc10 [ 346.176005][ T9136] __submit_merged_bio+0x256/0x660 [ 346.176053][ T9136] __submit_merged_write_cond+0x471/0x530 [ 346.176102][ T9136] f2fs_sync_node_pages+0x1479/0x15e0 [ 346.176167][ T9136] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 346.176259][ T9136] ? do_raw_spin_unlock+0x122/0x240 [ 346.176302][ T9136] f2fs_write_checkpoint+0xdde/0x2440 [ 346.176386][ T9136] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 346.176412][ T9136] ? kasan_record_aux_stack+0xbd/0xd0 [ 346.176531][ T9136] kill_f2fs_super+0x2d2/0x6c0 [ 346.176569][ T9136] ? __pfx_kill_f2fs_super+0x10/0x10 [ 346.176626][ T9136] ? shrinker_free+0x2ce/0x3e0 [ 346.176665][ T9136] deactivate_locked_super+0xbc/0x130 [ 346.176705][ T9136] cleanup_mnt+0x425/0x4c0 [ 346.176745][ T9136] ? lockdep_hardirqs_on+0x98/0x140 [ 346.176779][ T9136] task_work_run+0x1d4/0x260 [ 346.176819][ T9136] ? __pfx_task_work_run+0x10/0x10 [ 346.176863][ T9136] ? exit_to_user_mode_loop+0x55/0x4f0 [ 346.176894][ T9136] exit_to_user_mode_loop+0xff/0x4f0 [ 346.176919][ T9136] ? rcu_is_watching+0x15/0xb0 [ 346.176958][ T9136] do_syscall_64+0x2e3/0xf80 [ 346.176990][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.177015][ T9136] ? clear_bhb_loop+0x60/0xb0 [ 346.177046][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.177067][ T9136] RIP: 0033:0x7f1a3d790a77 [ 346.177087][ T9136] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 346.177105][ T9136] RSP: 002b:00007ffc96612468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 346.177127][ T9136] RAX: 0000000000000000 RBX: 00007f1a3d813d7d RCX: 00007f1a3d790a77 [ 346.177141][ T9136] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc96612520 [ 346.177154][ T9136] RBP: 00007ffc96612520 R08: 0000000000000000 R09: 0000000000000000 [ 346.177167][ T9136] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc966135b0 [ 346.177180][ T9136] R13: 00007f1a3d813d7d R14: 00000000000547b4 R15: 00007ffc966135f0 [ 346.177220][ T9136] [ 346.185817][ T9136] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 346.191093][ T5910] pvrusb2: Important functionality might not be entirely working. [ 346.195943][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 346.195975][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.195991][ T9136] Call Trace: [ 346.196001][ T9136] [ 346.196012][ T9136] dump_stack_lvl+0x189/0x250 [ 346.196054][ T9136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.196082][ T9136] ? __pfx_queue_work_on+0x10/0x10 [ 346.196109][ T9136] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.196136][ T9136] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.196181][ T9136] f2fs_handle_critical_error+0x37c/0x540 [ 346.196232][ T9136] f2fs_write_end_io+0x94b/0xc10 [ 346.196287][ T9136] __submit_merged_bio+0x256/0x660 [ 346.196343][ T9136] __submit_merged_write_cond+0x471/0x530 [ 346.196391][ T9136] f2fs_sync_node_pages+0x1479/0x15e0 [ 346.196457][ T9136] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 346.196552][ T9136] ? do_raw_spin_unlock+0x122/0x240 [ 346.196593][ T9136] f2fs_write_checkpoint+0xdde/0x2440 [ 346.196675][ T9136] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 346.196701][ T9136] ? kasan_record_aux_stack+0xbd/0xd0 [ 346.196819][ T9136] kill_f2fs_super+0x2d2/0x6c0 [ 346.196857][ T9136] ? __pfx_kill_f2fs_super+0x10/0x10 [ 346.196912][ T9136] ? shrinker_free+0x2ce/0x3e0 [ 346.196947][ T9136] deactivate_locked_super+0xbc/0x130 [ 346.196987][ T9136] cleanup_mnt+0x425/0x4c0 [ 346.197024][ T9136] ? lockdep_hardirqs_on+0x98/0x140 [ 346.197059][ T9136] task_work_run+0x1d4/0x260 [ 346.197098][ T9136] ? __pfx_task_work_run+0x10/0x10 [ 346.197141][ T9136] ? exit_to_user_mode_loop+0x55/0x4f0 [ 346.197174][ T9136] exit_to_user_mode_loop+0xff/0x4f0 [ 346.197199][ T9136] ? rcu_is_watching+0x15/0xb0 [ 346.197237][ T9136] do_syscall_64+0x2e3/0xf80 [ 346.197270][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.197295][ T9136] ? clear_bhb_loop+0x60/0xb0 [ 346.197336][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.197361][ T9136] RIP: 0033:0x7f1a3d790a77 [ 346.197385][ T9136] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 346.197408][ T9136] RSP: 002b:00007ffc96612468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 346.197434][ T9136] RAX: 0000000000000000 RBX: 00007f1a3d813d7d RCX: 00007f1a3d790a77 [ 346.197451][ T9136] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc96612520 [ 346.197466][ T9136] RBP: 00007ffc96612520 R08: 0000000000000000 R09: 0000000000000000 [ 346.197481][ T9136] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc966135b0 [ 346.197498][ T9136] R13: 00007f1a3d813d7d R14: 00000000000547b4 R15: 00007ffc966135f0 [ 346.197544][ T9136] [ 346.205893][ T9136] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 346.210108][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 346.225675][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 346.225709][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.225726][ T9136] Call Trace: [ 346.225736][ T9136] [ 346.225746][ T9136] dump_stack_lvl+0x189/0x250 [ 346.225788][ T9136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.225818][ T9136] ? __pfx_queue_work_on+0x10/0x10 [ 346.225844][ T9136] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.225873][ T9136] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.225918][ T9136] f2fs_handle_critical_error+0x37c/0x540 [ 346.225967][ T9136] f2fs_write_end_io+0x94b/0xc10 [ 346.226023][ T9136] __submit_merged_bio+0x256/0x660 [ 346.226080][ T9136] __submit_merged_write_cond+0x471/0x530 [ 346.226130][ T9136] f2fs_sync_node_pages+0x1479/0x15e0 [ 346.226200][ T9136] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 346.226293][ T9136] ? do_raw_spin_unlock+0x122/0x240 [ 346.226333][ T9136] f2fs_write_checkpoint+0xdde/0x2440 [ 346.226403][ T9136] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 346.226437][ T9136] ? kasan_record_aux_stack+0xbd/0xd0 [ 346.226555][ T9136] kill_f2fs_super+0x2d2/0x6c0 [ 346.226594][ T9136] ? __pfx_kill_f2fs_super+0x10/0x10 [ 346.226651][ T9136] ? shrinker_free+0x2ce/0x3e0 [ 346.226691][ T9136] deactivate_locked_super+0xbc/0x130 [ 346.226731][ T9136] cleanup_mnt+0x425/0x4c0 [ 346.226769][ T9136] ? lockdep_hardirqs_on+0x98/0x140 [ 346.226803][ T9136] task_work_run+0x1d4/0x260 [ 346.226843][ T9136] ? __pfx_task_work_run+0x10/0x10 [ 346.226887][ T9136] ? exit_to_user_mode_loop+0x55/0x4f0 [ 346.226920][ T9136] exit_to_user_mode_loop+0xff/0x4f0 [ 346.226944][ T9136] ? rcu_is_watching+0x15/0xb0 [ 346.226984][ T9136] do_syscall_64+0x2e3/0xf80 [ 346.227014][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.227039][ T9136] ? clear_bhb_loop+0x60/0xb0 [ 346.227078][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.227101][ T9136] RIP: 0033:0x7f1a3d790a77 [ 346.227125][ T9136] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 346.227146][ T9136] RSP: 002b:00007ffc96612468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 346.227172][ T9136] RAX: 0000000000000000 RBX: 00007f1a3d813d7d RCX: 00007f1a3d790a77 [ 346.227189][ T9136] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc96612520 [ 346.227204][ T9136] RBP: 00007ffc96612520 R08: 0000000000000000 R09: 0000000000000000 [ 346.227219][ T9136] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc966135b0 [ 346.227236][ T9136] R13: 00007f1a3d813d7d R14: 00000000000547b4 R15: 00007ffc966135f0 [ 346.227282][ T9136] [ 346.233231][ T9136] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 346.237759][ T5910] pvrusb2: ********** [ 346.287279][ T130] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 346.397363][ T2344] pvrusb2: Invalid write control endpoint [ 346.610574][ T130] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 346.744287][T11372] pvrusb2: Invalid write control endpoint [ 346.847628][ T130] usb 9-1: config 0 has no interface number 0 [ 347.131921][ T2344] pvrusb2: Invalid write control endpoint [ 347.131966][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 347.131989][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 347.132000][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 347.132012][ T2344] pvrusb2: Device being rendered inoperable [ 347.132083][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 347.132147][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 347.135530][ T2344] pvrusb2: Attached sub-driver cx25840 [ 347.215123][ T9610] usb 3-1: USB disconnect, device number 14 [ 347.322317][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 347.333781][ T130] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 347.435209][ T130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.460661][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 347.476575][T11390] loop4: detected capacity change from 0 to 4096 [ 347.524557][ T130] usb 9-1: Product: syz [ 347.531734][ T130] usb 9-1: Manufacturer: syz [ 347.536849][ T130] usb 9-1: SerialNumber: syz [ 347.545296][ T130] usb 9-1: config 0 descriptor?? [ 347.580223][T11401] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.985772][ T130] usb 9-1: Firmware: major: 93, minor: 58, hardware type: UNKNOWN (182) [ 348.029400][T11408] kernel read not supported for file /file1 (pid: 11408 comm: syz.2.1661) [ 348.064746][ T30] audit: type=1800 audit(1764316902.555:89): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1661" name="file1" dev="mqueue" ino=30149 res=0 errno=0 [ 348.158754][T11412] netlink: zone id is out of range [ 348.164003][T11412] netlink: zone id is out of range [ 348.171186][T11412] netlink: zone id is out of range [ 348.176425][T11412] netlink: zone id is out of range [ 348.183020][T11412] netlink: zone id is out of range [ 348.188584][ T130] usb 9-1: no permanent extended address found, random address set [ 348.188613][T11412] netlink: zone id is out of range [ 348.196527][ T130] usb 9-1: atusb_probe: initialization failed, error = -524 [ 348.206418][ T130] atusb 9-1:0.128: probe with driver atusb failed with error -524 [ 348.211612][T11412] netlink: zone id is out of range [ 348.223541][T11412] netlink: zone id is out of range [ 348.229454][T11412] netlink: zone id is out of range [ 348.235039][T11412] netlink: zone id is out of range [ 348.528178][ T130] usb 9-1: USB disconnect, device number 5 [ 349.518939][ T130] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 349.616197][T11448] loop4: detected capacity change from 0 to 2048 [ 349.653302][T11448] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 349.686501][T11448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.699391][ T130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.735074][ T130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.771357][ T130] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.806164][ T130] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.824429][ T130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.875372][ T130] usb 9-1: config 0 descriptor?? [ 350.273820][T11461] loop4: detected capacity change from 0 to 4096 [ 350.311109][T11461] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 350.390260][ T130] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 350.435558][T11461] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 350.479582][T11461] ntfs3(loop4): mft corrupted [ 350.494702][T11461] ntfs3(loop4): Failed to load $Extend (-22). [ 350.534450][T11461] ntfs3(loop4): Failed to initialize $Extend. [ 351.642377][ T5917] usb 9-1: USB disconnect, device number 6 [ 351.722713][T11486] loop7: detected capacity change from 0 to 32768 [ 351.782813][T11486] ERROR: (device loop7): diAllocAG: nfreeinos = 0, but iag on freelist [ 351.782813][T11486] [ 351.827551][T11486] ERROR: (device loop7): remounting filesystem as read-only [ 351.855498][T11486] ialloc: diAlloc returned -5! [ 352.018832][ T30] audit: type=1800 audit(1764316906.505:90): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1701" name="bus" dev="tmpfs" ino=2099 res=0 errno=0 [ 352.305550][ T30] audit: type=1326 audit(1764316906.795:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee918f749 code=0x7ffc0000 [ 352.378065][ T30] audit: type=1326 audit(1764316906.825:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee918f749 code=0x7ffc0000 [ 352.439499][ T30] audit: type=1326 audit(1764316906.825:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f0ee918f749 code=0x7ffc0000 [ 352.509628][ T30] audit: type=1326 audit(1764316906.825:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee918f749 code=0x7ffc0000 [ 352.524463][T11514] loop8: detected capacity change from 0 to 128 [ 352.611416][ T30] audit: type=1326 audit(1764316906.825:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee918f749 code=0x7ffc0000 [ 352.836935][T11520] loop7: detected capacity change from 0 to 512 [ 352.936548][T11520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.041634][T11520] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.145783][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 353.172768][ T9136] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 353.285593][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.500544][T11546] binder: 11544:11546 ioctl c018620b 200000000000 returned -14 [ 354.215700][T11564] netlink: 'syz.4.1724': attribute type 2 has an invalid length. [ 354.723149][T11568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1726'. [ 354.844230][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'. [ 354.916752][T11561] loop8: detected capacity change from 0 to 131072 [ 354.925731][T11561] F2FS-fs (loop8): invalid crc value [ 355.062590][T11561] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.077778][T11561] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 355.116932][T11577] loop7: detected capacity change from 0 to 1024 [ 355.690183][T11592] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 355.748815][ T60] Bluetooth: hci5: Frame reassembly failed (-84) [ 356.094834][T11597] loop7: detected capacity change from 0 to 512 [ 356.139533][T11597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 356.197612][T11597] EXT4-fs (loop7): orphan cleanup on readonly fs [ 356.259517][T11597] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 356.351056][T11597] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 356.377798][T11597] EXT4-fs error (device loop7): ext4_ext_check_inode:528: inode #13: comm syz.7.1736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 356.467484][T11597] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1736: couldn't read orphan inode 13 (err -117) [ 356.533716][T11597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.636103][T11597] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1736: bg 0: block 248: padding at end of block bitmap is not set [ 356.799745][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.913781][T11615] loop4: detected capacity change from 0 to 128 [ 356.962893][T11615] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.991591][T11615] ext4 filesystem being mounted at /367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 357.240519][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.319309][ T9610] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 357.487228][ T9610] usb 8-1: Using ep0 maxpacket: 16 [ 357.504950][ T9610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.545409][ T9610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.574845][ T9610] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 357.594335][ T9610] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 357.604708][ T9610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.626529][ T9610] usb 8-1: config 0 descriptor?? [ 357.796853][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 357.796939][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 358.071623][T11621] random: crng reseeded on system resumption [ 358.151162][ T9610] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 358.191723][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1761'. [ 358.234287][ T9610] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 358.256369][ T9610] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 358.354494][ T5917] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 358.376776][ T9610] usb 8-1: USB disconnect, device number 9 [ 358.435839][ T5917] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 358.466799][ T5917] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 358.497022][ T5917] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 358.658596][T11657] loop8: detected capacity change from 0 to 128 [ 358.694578][T11655] loop4: detected capacity change from 0 to 1024 [ 358.710808][T11657] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.745954][T11655] EXT4-fs: inline encryption not supported [ 358.754442][T11657] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.804107][T11655] EXT4-fs: Ignoring removed nobh option [ 358.810548][T11655] EXT4-fs: Ignoring removed bh option [ 358.824699][ T9360] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.857439][T11655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.910200][T11655] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #12: comm syz.4.1764: Deleting old file: nlink 2, error=-2 [ 359.138879][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.334046][T11653] loop2: detected capacity change from 0 to 40427 [ 359.364268][T11653] F2FS-fs (loop2): invalid crc value [ 359.628882][T11683] loop4: detected capacity change from 0 to 1024 [ 359.702022][T11683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.766462][T11653] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 359.863237][T11653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 360.205392][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.427443][ T5822] syz-executor: attempt to access beyond end of device [ 360.427443][ T5822] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 360.446072][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 360.446104][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.446117][ T5822] Call Trace: [ 360.446125][ T5822] [ 360.446134][ T5822] dump_stack_lvl+0x189/0x250 [ 360.446170][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.446195][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 360.446216][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 360.446237][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.446272][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 360.446311][ T5822] f2fs_write_end_io+0x94b/0xc10 [ 360.446354][ T5822] __submit_merged_bio+0x256/0x660 [ 360.446392][ T5822] __submit_merged_write_cond+0x269/0x530 [ 360.446431][ T5822] f2fs_write_data_pages+0x2756/0x3290 [ 360.446451][ T5822] ? __lock_acquire+0x6b6/0x2cf0 [ 360.446510][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.446581][ T5822] ? __mod_zone_page_state+0xd7/0x140 [ 360.446617][ T5822] ? __lock_acquire+0x6b6/0x2cf0 [ 360.446660][ T5822] ? __lock_acquire+0x6b6/0x2cf0 [ 360.446691][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 360.446735][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 360.446764][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.446788][ T5822] do_writepages+0x32e/0x550 [ 360.446870][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 360.446909][ T5822] filemap_fdatawrite+0x199/0x240 [ 360.446940][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 360.447032][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 360.447071][ T5822] f2fs_sync_dirty_inodes+0x30f/0x810 [ 360.447117][ T5822] f2fs_write_checkpoint+0x93e/0x2440 [ 360.447183][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 360.447282][ T5822] kill_f2fs_super+0x2d2/0x6c0 [ 360.447318][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 360.447367][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 360.447397][ T5822] deactivate_locked_super+0xbc/0x130 [ 360.447433][ T5822] cleanup_mnt+0x425/0x4c0 [ 360.447466][ T5822] ? lockdep_hardirqs_on+0x98/0x140 [ 360.447496][ T5822] task_work_run+0x1d4/0x260 [ 360.447531][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 360.447569][ T5822] ? exit_to_user_mode_loop+0x55/0x4f0 [ 360.447597][ T5822] exit_to_user_mode_loop+0xff/0x4f0 [ 360.447619][ T5822] ? rcu_is_watching+0x15/0xb0 [ 360.447652][ T5822] do_syscall_64+0x2e3/0xf80 [ 360.447680][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.447702][ T5822] ? clear_bhb_loop+0x60/0xb0 [ 360.447729][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.447751][ T5822] RIP: 0033:0x7f8d5d790a77 [ 360.447772][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 360.447791][ T5822] RSP: 002b:00007ffee9438288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 360.447815][ T5822] RAX: 0000000000000000 RBX: 00007f8d5d813d7d RCX: 00007f8d5d790a77 [ 360.447837][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee9438340 [ 360.447851][ T5822] RBP: 00007ffee9438340 R08: 0000000000000000 R09: 0000000000000000 [ 360.447864][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee94393d0 [ 360.447878][ T5822] R13: 00007f8d5d813d7d R14: 0000000000057e79 R15: 00007ffee9439410 [ 360.447919][ T5822] [ 360.939579][ T5822] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 361.003071][T11699] loop4: detected capacity change from 0 to 2048 [ 361.084477][T11699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.183890][ T5824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 361.251361][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.267020][ T5917] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 361.410602][T11709] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 361.456752][ T5917] usb 9-1: Using ep0 maxpacket: 32 [ 361.471338][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.514868][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.555605][ T5917] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 361.575473][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.640088][ T5917] usb 9-1: config 0 descriptor?? [ 361.771562][T11720] loop2: detected capacity change from 0 to 16 [ 361.825141][T11720] erofs (device loop2): mounted with root inode @ nid 36. [ 362.119175][ T5917] koneplus 0003:1E7D:2D51.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 362.321160][ T5917] koneplus 0003:1E7D:2D51.0017: couldn't init struct koneplus_device [ 362.331666][ T5917] koneplus 0003:1E7D:2D51.0017: couldn't install mouse [ 362.359206][ T5917] koneplus 0003:1E7D:2D51.0017: probe with driver koneplus failed with error -71 [ 362.394472][ T5917] usb 9-1: USB disconnect, device number 7 [ 362.552165][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1792'. [ 362.571508][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1792'. [ 362.957244][ T5917] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 363.072930][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1797'. [ 363.137287][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 363.148441][ T5917] usb 5-1: config 162 has an invalid interface number: 197 but max is 0 [ 363.165830][ T5917] usb 5-1: config 162 has no interface number 0 [ 363.188901][ T5917] usb 5-1: config 162 interface 197 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 363.216171][ T5917] usb 5-1: config 162 interface 197 has no altsetting 0 [ 363.235607][ T5917] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 363.250969][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.275924][ T5917] usb 5-1: Product: syz [ 363.286627][ T5917] usb 5-1: Manufacturer: syz [ 363.295594][ T5917] usb 5-1: SerialNumber: syz [ 363.494488][ C0] net_ratelimit: 8 callbacks suppressed [ 363.494510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.772209][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.786151][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.828135][ T5917] usb 5-1: USB disconnect, device number 20 [ 363.881251][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 363.892321][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 363.902765][ T5831] Bluetooth: hci1: hardware error 0x00 [ 364.319148][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057fed800: rx timeout, send abort [ 364.328163][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057fed800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.345630][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057fee800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.725358][T11782] loop2: detected capacity change from 0 to 8192 [ 364.735242][T11788] loop4: detected capacity change from 0 to 256 [ 364.794862][ T30] audit: type=1800 audit(1764316919.285:96): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1813" name="file1" dev="loop2" ino=1048669 res=0 errno=0 [ 365.334737][T11797] loop7: detected capacity change from 0 to 32768 [ 365.358888][T11797] JBD2: Ignoring recovery information on journal [ 365.413655][T11797] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 365.459744][T11797] (syz.7.1823,11797,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 365.468905][T11797] (syz.7.1823,11797,0):update_backups:196 ERROR: status = -12 [ 365.476421][T11797] ocfs2: Failed to update super blocks on 7,7 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 365.518184][T11797] (syz.7.1823,11797,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 365.526504][T11797] (syz.7.1823,11797,0):ocfs2_search_chain:1817 ERROR: status = -12 [ 365.535046][T11797] (syz.7.1823,11797,0):ocfs2_search_chain:1940 ERROR: status = -12 [ 365.544793][T11797] (syz.7.1823,11797,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12 [ 365.553643][T11797] (syz.7.1823,11797,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12 [ 365.562269][T11797] (syz.7.1823,11797,0):__ocfs2_claim_clusters:2438 ERROR: status = -12 [ 365.570661][T11797] (syz.7.1823,11797,0):__ocfs2_claim_clusters:2446 ERROR: status = -12 [ 365.579171][T11797] (syz.7.1823,11797,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -12 [ 365.588149][T11797] (syz.7.1823,11797,0):ocfs2_block_group_alloc:711 ERROR: status = -12 [ 365.597096][T11797] (syz.7.1823,11797,0):ocfs2_block_group_alloc:764 ERROR: status = -12 [ 365.605940][T11797] (syz.7.1823,11797,0):ocfs2_reserve_suballoc_bits:839 ERROR: status = -12 [ 365.615928][T11797] (syz.7.1823,11797,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -12 [ 365.624757][T11797] (syz.7.1823,11797,0):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -12 [ 365.634050][T11797] (syz.7.1823,11797,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -12 [ 365.643959][T11797] (syz.7.1823,11797,0):ocfs2_expand_inline_dir:2868 ERROR: status = -12 [ 365.652481][T11797] (syz.7.1823,11797,0):ocfs2_extend_dir:3232 ERROR: status = -12 [ 365.660935][T11797] (syz.7.1823,11797,0):ocfs2_prepare_dir_for_insert:4350 ERROR: status = -12 [ 365.669807][T11797] (syz.7.1823,11797,0):ocfs2_symlink:1879 ERROR: status = -12 [ 365.677385][T11797] (syz.7.1823,11797,0):ocfs2_symlink:2080 ERROR: status = -12 [ 365.760787][T11809] ip6gre1: entered promiscuous mode [ 365.766162][T11809] ip6gre1: entered allmulticast mode [ 365.834086][T11811] netlink: 'syz.2.1827': attribute type 4 has an invalid length. [ 365.901559][ T9136] ocfs2: Unmounting device (7,7) on (node local) [ 365.912303][T11811] netlink: 'syz.2.1827': attribute type 4 has an invalid length. [ 366.046826][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 366.134250][ T30] audit: type=1326 audit(1764316920.625:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.8.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ee918f749 code=0x0 [ 366.776376][T11837] loop2: detected capacity change from 0 to 2048 [ 366.831904][T11837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.877190][T11837] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.059301][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.132923][T11849] loop6: detected capacity change from 0 to 7 [ 367.165987][ T5888] Dev loop6: unable to read RDB block 7 [ 367.189502][ T5888] loop6: AHDI p3 p4 [ 367.193581][ T5888] loop6: partition table partially beyond EOD, truncated [ 367.209621][ T5888] loop6: p3 start 1886353253 is beyond EOD, truncated [ 367.242533][T11849] Dev loop6: unable to read RDB block 7 [ 367.259068][T11849] loop6: AHDI p3 p4 [ 367.267169][T11849] loop6: partition table partially beyond EOD, truncated [ 367.287042][T11849] loop6: p3 start 1886353253 is beyond EOD, truncated [ 367.575839][T11844] loop4: detected capacity change from 0 to 40427 [ 367.613199][T11844] F2FS-fs (loop4): Image doesn't support compression [ 367.632927][T11844] F2FS-fs (loop4): build fault injection rate: 690 [ 367.664323][T11844] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 367.703469][T11844] F2FS-fs (loop4): invalid crc value [ 367.953506][T11850] loop8: detected capacity change from 0 to 32768 [ 367.961438][T11844] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 367.984405][T11844] F2FS-fs (loop4): Start checkpoint disabled! [ 367.991391][T11850] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1844 (11850) [ 368.025596][T11844] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 368.052928][T11844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 368.055784][T11850] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 368.091686][T11850] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm [ 368.333699][T11850] BTRFS info (device loop8): enabling ssd optimizations [ 368.377436][T11850] BTRFS info (device loop8): turning on async discard [ 368.380751][T11881] VFS:Filesystem freeze failed [ 368.384267][T11850] BTRFS info (device loop8): enabling free space tree [ 368.384295][T11850] BTRFS info (device loop8): use zstd compression, level 3 [ 368.804745][T11891] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 368.841455][ T9360] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 368.842297][T11891] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 368.893778][T11895] overlayfs: failed to resolve './cgroup': -2 [ 369.925897][T11915] loop4: detected capacity change from 0 to 1024 [ 370.180614][T11915] EXT4-fs: Ignoring removed nobh option [ 370.209217][T11915] EXT4-fs: Ignoring removed bh option [ 370.271482][T11915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.469218][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.657092][ T43] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 370.677091][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 370.837567][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 370.844715][ T43] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.866761][ T43] usb 9-1: config 0 has no interface number 0 [ 370.886254][ T43] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.904153][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.927027][ T43] usb 9-1: Product: syz [ 370.931252][ T43] usb 9-1: Manufacturer: syz [ 370.948090][ T43] usb 9-1: SerialNumber: syz [ 370.968017][ T43] usb 9-1: config 0 descriptor?? [ 370.989922][ T43] smsc95xx v2.0.0 [ 371.501043][T11952] loop7: detected capacity change from 0 to 256 [ 371.572699][T11952] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 371.899922][T11959] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 371.952008][T11959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.025684][T11946] loop4: detected capacity change from 0 to 40427 [ 372.038162][T11946] F2FS-fs (loop4): invalid crc value [ 372.196026][T11946] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 372.205353][ T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 372.205390][ T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 372.241279][ T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 372.253544][ T43] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 372.272416][T11946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.273263][ T43] usb 9-1: USB disconnect, device number 8 [ 372.378518][ T30] audit: type=1800 audit(1764316926.875:98): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1878" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 372.420633][T11946] syz.4.1878: attempt to access beyond end of device [ 372.420633][T11946] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.484954][T11967] syz.4.1878: attempt to access beyond end of device [ 372.484954][T11967] loop4: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 372.609232][ T5824] syz-executor: attempt to access beyond end of device [ 372.609232][ T5824] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 372.641828][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 372.641858][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.641880][ T5824] Call Trace: [ 372.641889][ T5824] [ 372.641898][ T5824] dump_stack_lvl+0x189/0x250 [ 372.641932][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.641958][ T5824] ? __pfx_queue_work_on+0x10/0x10 [ 372.641980][ T5824] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 372.642004][ T5824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.642042][ T5824] f2fs_handle_critical_error+0x37c/0x540 [ 372.642083][ T5824] f2fs_write_end_io+0x94b/0xc10 [ 372.642131][ T5824] __submit_merged_bio+0x256/0x660 [ 372.642172][ T5824] __submit_merged_write_cond+0x269/0x530 [ 372.642213][ T5824] f2fs_write_data_pages+0x2756/0x3290 [ 372.642234][ T5824] ? __lock_acquire+0x6b6/0x2cf0 [ 372.642296][ T5824] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 372.642334][ T5824] ? unwind_next_frame+0xa5/0x2390 [ 372.642402][ T5824] ? kernel_text_address+0xa5/0xe0 [ 372.642457][ T5824] ? __lock_acquire+0x6b6/0x2cf0 [ 372.642490][ T5824] ? __lock_acquire+0x6b6/0x2cf0 [ 372.642530][ T5824] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 372.642555][ T5824] do_writepages+0x32e/0x550 [ 372.642596][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 372.642632][ T5824] filemap_fdatawrite+0x199/0x240 [ 372.642662][ T5824] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 372.642750][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 372.642785][ T5824] f2fs_sync_dirty_inodes+0x30f/0x810 [ 372.642829][ T5824] f2fs_write_checkpoint+0x93e/0x2440 [ 372.642898][ T5824] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 372.642993][ T5824] kill_f2fs_super+0x2d2/0x6c0 [ 372.643026][ T5824] ? __pfx_kill_f2fs_super+0x10/0x10 [ 372.643074][ T5824] ? shrinker_free+0x2ce/0x3e0 [ 372.643102][ T5824] deactivate_locked_super+0xbc/0x130 [ 372.643137][ T5824] cleanup_mnt+0x425/0x4c0 [ 372.643169][ T5824] ? lockdep_hardirqs_on+0x98/0x140 [ 372.643197][ T5824] task_work_run+0x1d4/0x260 [ 372.643231][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 372.643267][ T5824] ? exit_to_user_mode_loop+0x55/0x4f0 [ 372.643294][ T5824] exit_to_user_mode_loop+0xff/0x4f0 [ 372.643316][ T5824] ? rcu_is_watching+0x15/0xb0 [ 372.643348][ T5824] do_syscall_64+0x2e3/0xf80 [ 372.643374][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.643396][ T5824] ? clear_bhb_loop+0x60/0xb0 [ 372.643422][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.643442][ T5824] RIP: 0033:0x7f703c390a77 [ 372.643462][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 372.643480][ T5824] RSP: 002b:00007fff15f9c8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 372.643502][ T5824] RAX: 0000000000000000 RBX: 00007f703c413d7d RCX: 00007f703c390a77 [ 372.643517][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff15f9c980 [ 372.643530][ T5824] RBP: 00007fff15f9c980 R08: 0000000000000000 R09: 0000000000000000 [ 372.643543][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff15f9da10 [ 372.643557][ T5824] R13: 00007f703c413d7d R14: 000000000005aee4 R15: 00007fff15f9da50 [ 372.643596][ T5824] [ 372.643605][ T5824] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 372.816007][T11977] loop7: detected capacity change from 0 to 1024 [ 372.988334][T11977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.046145][T11977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.151555][ T30] audit: type=1800 audit(1764316927.645:99): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1891" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 373.355079][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.640421][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 373.649528][T11998] netlink: 'syz.4.1896': attribute type 31 has an invalid length. [ 373.660947][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 373.715552][T11998] netlink: 'syz.4.1896': attribute type 31 has an invalid length. [ 373.798839][T12002] loop7: detected capacity change from 0 to 128 [ 373.832085][T12002] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 373.878743][ T5909] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 373.995137][ T933] kernel read not supported for file /eth0 (pid: 933 comm: kworker/0:2) [ 374.057257][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 374.066949][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.087974][ T5909] usb 3-1: config 0 has no interfaces? [ 374.111833][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 374.154738][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 374.173759][ T5909] usb 3-1: Product: syz [ 374.181755][ T5909] usb 3-1: Manufacturer: syz [ 374.207028][ T5909] usb 3-1: SerialNumber: syz [ 374.224181][ T5909] usb 3-1: config 0 descriptor?? [ 374.470272][ T933] usb 3-1: USB disconnect, device number 15 [ 374.548093][T12026] overlayfs: invalid redirect ((null)) [ 374.608180][T12028] overlayfs: failed to clone upperpath [ 374.648922][T12028] overlayfs: failed to clone upperpath [ 375.080286][T12041] loop7: detected capacity change from 0 to 128 [ 375.189414][ T30] audit: type=1800 audit(1764316929.685:100): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1914" name="bus" dev="loop7" ino=1048671 res=0 errno=0 [ 375.303916][T12049] syz.7.1914: attempt to access beyond end of device [ 375.303916][T12049] loop7: rw=2049, sector=681, nr_sectors = 360 limit=128 [ 375.586860][ T933] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 375.745243][ T933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.787718][ T933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.826134][ T933] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.845108][T12070] loop2: detected capacity change from 0 to 164 [ 375.907223][ T933] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.925343][ T933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.939013][ T933] usb 9-1: config 0 descriptor?? [ 375.994665][T12070] isofs_fill_super: root inode is not a directory. Corrupted media? [ 376.425312][ T933] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 376.621377][T12085] overlayfs: failed to clone upperpath [ 377.083069][ C0] plantronics 0003:047F:FFFF.0018: hid_field_extract() called with n (132) > 32! (sed) [ 377.277853][T12103] loop4: detected capacity change from 0 to 128 [ 377.296164][ T933] usb 9-1: USB disconnect, device number 9 [ 377.358088][T12079] loop2: detected capacity change from 0 to 32768 [ 377.393407][ T30] audit: type=1800 audit(1764316931.885:101): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1935" name="bus" dev="loop4" ino=1048672 res=0 errno=0 [ 377.499400][T12079] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.659435][T12079] XFS (loop2): Ending clean mount [ 377.677627][T12079] XFS (loop2): Quotacheck needed: Please wait. [ 377.723123][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 377.769143][T12125] netlink: 'syz.1.1938': attribute type 14 has an invalid length. [ 377.826440][T12079] XFS (loop2): Quotacheck: Done. [ 377.919621][T12125] vxlan0: entered promiscuous mode [ 377.990564][ T6892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.039291][ T6892] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.069225][ T6892] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.114279][ T6892] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.119627][ T5822] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.304394][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 378.376797][ T5974] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 378.487024][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 378.518906][ T5909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 378.544080][ T5909] usb 5-1: config 0 has no interface number 0 [ 378.556757][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 378.562349][ T5909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 378.580215][ T5974] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 378.599125][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 378.617074][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.625435][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.649811][ T5974] pvrusb2: Hardware description: Terratec Grabster AV400 [ 378.664673][ T5909] usb 5-1: Product: syz [ 378.679844][ T5909] usb 5-1: Manufacturer: syz [ 378.684596][ T5909] usb 5-1: SerialNumber: syz [ 378.689897][ T5974] pvrusb2: ********** [ 378.693918][ T5974] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 378.720052][ T5974] pvrusb2: Important functionality might not be entirely working. [ 378.729350][ T5909] usb 5-1: config 0 descriptor?? [ 378.755233][ T5909] smsc75xx v1.0.0 [ 378.759871][ T5974] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 378.786796][ T5974] pvrusb2: ********** [ 378.848810][ T2344] pvrusb2: Invalid write control endpoint [ 379.024201][ T2344] pvrusb2: Invalid write control endpoint [ 379.045371][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 379.065551][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 379.088636][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 379.115600][ T2344] pvrusb2: Device being rendered inoperable [ 379.156779][T12134] pvrusb2: Attempted to execute control transfer when device not ok [ 379.175132][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 379.189231][ T7862] usb 9-1: USB disconnect, device number 10 [ 379.198226][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 379.226631][ T2344] pvrusb2: Attached sub-driver cx25840 [ 379.252336][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 379.277093][T12138] loop7: detected capacity change from 0 to 32768 [ 379.283718][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 379.483348][T12138] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 379.561825][T12138] XFS (loop7): Ending clean mount [ 379.616206][T12138] XFS (loop7): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 379.834928][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 380.028887][ T9136] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.040659][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 380.096935][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 380.136264][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 380.217788][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 380.240569][ T5909] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 380.309522][ T5909] usb 5-1: USB disconnect, device number 21 [ 380.901067][T12198] loop7: detected capacity change from 0 to 512 [ 380.951023][T12198] EXT4-fs: inline encryption not supported [ 380.968256][T12198] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.007301][T12204] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 381.059216][T12198] EXT4-fs error (device loop7): ext4_orphan_get:1391: comm syz.7.1962: inode #13: comm syz.7.1962: iget: illegal inode # [ 381.167377][T12198] EXT4-fs (loop7): Remounting filesystem read-only [ 381.193741][T12198] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.635688][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.499636][T12242] loop7: detected capacity change from 0 to 512 [ 382.633082][T12242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.844616][T12242] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.055226][ T30] audit: type=1800 audit(1764316937.545:102): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1975" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 383.125296][ T30] audit: type=1800 audit(1764316937.545:103): pid=12242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1975" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 383.319297][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.528400][T12273] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1988'. [ 383.987530][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.994047][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.239901][T12297] loop2: detected capacity change from 0 to 2048 [ 384.283440][T12297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.132207][T12293] loop4: detected capacity change from 0 to 32768 [ 385.199327][T12293] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 385.343306][T12293] XFS (loop4): Ending clean mount [ 385.345406][ T5909] kernel write not supported for file bpf-prog (pid: 5909 comm: kworker/0:5) [ 385.370095][T12305] loop8: detected capacity change from 0 to 32768 [ 385.379642][T12293] XFS (loop4): Quotacheck needed: Please wait. [ 385.482315][T12293] XFS (loop4): Quotacheck: Done. [ 385.496105][T12305] JBD2: Ignoring recovery information on journal [ 385.735350][T12305] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 385.831088][ T5824] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 385.942860][T12305] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 385.984488][T12305] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 386.040229][T12305] OCFS2: File system is now read-only. [ 386.066313][T12305] (syz.8.2003,12305,1):ocfs2_search_chain:1817 ERROR: status = -30 [ 386.098053][T12305] (syz.8.2003,12305,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 386.122861][T12305] (syz.8.2003,12305,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 386.155287][T12305] (syz.8.2003,12305,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 386.178640][T12305] (syz.8.2003,12305,1):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 386.198531][T12305] (syz.8.2003,12305,1):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 386.223810][T12305] (syz.8.2003,12305,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 386.264469][T12305] (syz.8.2003,12305,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 386.279561][T12305] (syz.8.2003,12305,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 386.289635][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 386.311075][T12305] (syz.8.2003,12305,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 386.333927][T12305] (syz.8.2003,12305,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 386.357946][T12305] (syz.8.2003,12305,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 386.377650][T12305] (syz.8.2003,12305,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 386.429108][T12305] (syz.8.2003,12305,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 386.455501][T12305] (syz.8.2003,12305,1):ocfs2_lock_allocators:2775 ERROR: status = -30 [ 386.478737][T12305] (syz.8.2003,12305,1):ocfs2_write_begin_nolock:1723 ERROR: status = -30 [ 386.514854][T12305] (syz.8.2003,12305,1):ocfs2_write_begin:1887 ERROR: status = -30 [ 386.624711][ T9360] ocfs2: Unmounting device (7,8) on (node local) [ 387.186129][ T933] Process accounting resumed [ 387.784993][T12378] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 387.899822][T12376] loop8: detected capacity change from 0 to 4096 [ 387.948107][T12376] EXT4-fs (loop8): Test dummy encryption mode enabled [ 387.982158][T12363] loop4: detected capacity change from 0 to 131072 [ 388.020790][T12376] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0002] [ 388.044569][T12363] F2FS-fs (loop4): invalid crc value [ 388.117265][T12376] System zones: 0-5 [ 388.130439][T12363] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 388.153370][T12376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.167164][T12363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 388.919849][ T9360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.972621][T12388] loop2: detected capacity change from 0 to 32768 [ 389.073022][T12388] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 389.294124][T12388] XFS (loop2): Ending clean mount [ 389.305571][T12388] XFS (loop2): Quotacheck needed: Please wait. [ 389.447707][T12388] XFS (loop2): Quotacheck: Done. [ 389.694697][T12391] loop4: detected capacity change from 0 to 32768 [ 389.749321][T12391] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2032 (12391) [ 389.785703][ T5822] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 389.804178][T12391] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 389.875512][T12391] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 390.173818][T12391] BTRFS info (device loop4): enabling ssd optimizations [ 390.181709][T12391] BTRFS info (device loop4): turning on async discard [ 390.190399][T12391] BTRFS info (device loop4): enabling free space tree [ 390.287784][ T30] audit: type=1804 audit(1764316944.775:104): pid=12391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2032" name="/newroot/415/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 390.335838][T12391] Invalid ELF header magic: != ELF [ 390.435700][T12451] loop7: detected capacity change from 0 to 512 [ 390.497720][T12451] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 390.573387][ T5824] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 390.665589][T12451] EXT4-fs (loop7): 1 truncate cleaned up [ 390.694032][T12451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.763101][T12451] EXT4-fs (loop7): shut down requested (2) [ 390.958637][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.031331][T12467] loop8: detected capacity change from 0 to 128 [ 391.138034][T12467] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 391.187792][T12467] hpfs: filesystem error: improperly stopped [ 391.204070][T12467] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 391.232199][T12467] hpfs: You really don't want any checks? You are crazy... [ 391.264443][T12467] hpfs: hpfs_map_sector(): read error [ 391.294418][T12467] hpfs: code page support is disabled [ 391.355169][T12467] hpfs: hpfs_map_4sectors(): unaligned read [ 391.404209][T12467] hpfs: hpfs_map_4sectors(): unaligned read [ 391.437074][T12467] hpfs: filesystem error: unable to find root dir [ 391.535671][T12481] netlink: 'syz.1.2061': attribute type 14 has an invalid length. [ 391.555491][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 391.606551][T12481] netlink: 'syz.1.2061': attribute type 14 has an invalid length. [ 391.646847][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 391.798930][ T7862] IPVS: starting estimator thread 0... [ 391.906793][T12493] IPVS: using max 27 ests per chain, 64800 per kthread [ 391.946595][T12495] netlink: 'syz.8.2064': attribute type 3 has an invalid length. [ 391.954962][T12495] netlink: 'syz.8.2064': attribute type 3 has an invalid length. [ 392.045275][T12502] loop4: detected capacity change from 0 to 128 [ 392.105949][T12502] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.159464][T12502] ext4 filesystem being mounted at /419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.258184][T12509] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 392.265341][T12509] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.313416][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.328001][T12512] loop2: detected capacity change from 0 to 512 [ 392.356036][T12512] EXT4-fs: Ignoring removed oldalloc option [ 392.463582][T12512] EXT4-fs (loop2): 1 truncate cleaned up [ 392.483568][T12512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.675382][T12516] loop7: detected capacity change from 0 to 4096 [ 392.815758][T12516] ntfs3(loop7): ino=b, mi_enum_attr [ 392.827563][T12516] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 392.861478][T12516] ntfs3(loop7): Failed to load $Extend (-22). [ 392.876808][T12516] ntfs3(loop7): Failed to initialize $Extend. [ 392.911842][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.934505][T12516] ntfs3(loop7): ino=1e, "file1" attr_set_size [ 392.982456][T12513] ntfs3(loop7): ino=1e, "file1" attr_set_size [ 393.868221][T12549] loop8: detected capacity change from 0 to 8 [ 394.050232][T12552] loop2: detected capacity change from 0 to 512 [ 394.072372][T12552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 394.113138][T12552] EXT4-fs (loop2): 1 truncate cleaned up [ 394.128884][T12552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.207355][ T30] audit: type=1800 audit(1764316948.705:105): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2086" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 394.307809][ T30] audit: type=1800 audit(1764316948.745:106): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2086" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 394.613718][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.626161][ T30] audit: type=1326 audit(1764316950.115:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12594 comm="syz.8.2104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ee918f749 code=0x0 [ 396.176802][ T933] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 396.629899][T12613] loop4: detected capacity change from 0 to 128 [ 396.684037][T12606] loop7: detected capacity change from 0 to 32768 [ 396.703751][T12606] xfs: Deprecated parameter 'ikeep' [ 396.713383][ T933] usb 3-1: Using ep0 maxpacket: 16 [ 396.737896][T12606] XFS: ikeep mount option is deprecated. [ 396.738959][ T933] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 396.762643][ T933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.815884][T12620] loop4: detected capacity change from 0 to 16 [ 396.842282][T12606] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.844873][ T933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.854794][T12620] erofs (device loop4): mounted with root inode @ nid 36. [ 396.900948][ T5843] erofs (device loop4): failed to decompress -41 in[4096, 0] out[9000] [ 396.929749][ T933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.942263][T12606] XFS (loop7): Ending clean mount [ 396.986919][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.996125][ T933] usb 3-1: Product: syz [ 397.010536][T12620] erofs (device loop4): failed to decompress -41 in[4096, 0] out[8192] [ 397.042704][ T933] usb 3-1: Manufacturer: syz [ 397.054986][ T933] usb 3-1: SerialNumber: syz [ 397.077058][T12620] erofs (device loop4): read error -117 @ 1 of nid 89 [ 397.093003][T12620] syz.4.2115 (12620) used greatest stack depth: 18344 bytes left [ 397.100621][ T30] audit: type=1800 audit(1764316951.585:108): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2115" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 397.282178][ T9136] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 397.527237][ T933] usb 3-1: 0:2 : does not exist [ 397.795251][T12639] loop8: detected capacity change from 0 to 1024 [ 397.863395][T12639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.032788][T12635] loop4: detected capacity change from 0 to 32768 [ 398.057911][T12639] EXT4-fs (loop8): shut down requested (1) [ 398.061112][T12635] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2119 (12635) [ 398.093681][T12635] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 398.104202][T12635] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm [ 398.199486][ T9360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.218793][ T6008] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 398.256275][ T6008] Quota error (device loop8): write_blk: dquota write failed [ 398.270518][ T6008] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 398.290567][T12635] BTRFS info (device loop4): enabling ssd optimizations [ 398.296867][ T6008] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 398.308491][ T6008] Quota error (device loop8): write_blk: dquota write failed [ 398.315988][ T6008] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 398.326273][ T6008] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 398.336867][T12635] BTRFS info (device loop4): turning on async discard [ 398.343679][T12635] BTRFS info (device loop4): enabling free space tree [ 398.350895][ T6008] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 398.365321][T12635] BTRFS info (device loop4): use lzo compression, level 1 [ 398.442088][T12660] loop7: detected capacity change from 0 to 512 [ 398.473084][ T5908] usb 3-1: USB disconnect, device number 16 [ 398.521716][T12660] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 398.569475][T12660] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 398.580023][T12660] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2123: Corrupt directory, running e2fsck is recommended [ 398.602485][T12660] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 398.666458][T12660] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2123: corrupted in-inode xattr: e_name out of bounds [ 398.731309][T12660] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2123: couldn't read orphan inode 15 (err -117) [ 398.808421][T12660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.873053][ T5824] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 398.874905][T12660] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 398.938299][T12660] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 398.981109][T12660] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2123: Corrupt directory, running e2fsck is recommended [ 399.046516][T12669] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.173793][T12669] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 399.175802][T12674] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.224832][T12669] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2123: Corrupt directory, running e2fsck is recommended [ 399.267536][T12674] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 399.343786][T12674] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2123: Corrupt directory, running e2fsck is recommended [ 399.356580][T12660] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 399.635684][ T9136] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.865538][T12689] loop2: detected capacity change from 0 to 1024 [ 400.404127][T12700] loop4: detected capacity change from 0 to 4096 [ 400.432856][ T5889] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 400.463808][T12703] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.551860][T12700] loop4: detected capacity change from 4096 to 0 [ 400.559063][ C1] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.580896][T12706] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 400.608846][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 400.664783][ T5889] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 400.683739][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.715293][ T5824] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 400.717661][ T5889] usb 9-1: config 0 descriptor?? [ 400.759749][ T5824] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 400.787103][ T5824] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 400.819790][ T5824] NILFS (loop4): unable to write superblock: err=-5 [ 400.826500][ T5824] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 400.866837][ T5824] NILFS (loop4): unable to write superblock: err=-5 [ 400.873555][ T5824] Remounting filesystem read-only [ 400.887696][ T5824] NILFS (loop4): error -5 truncating bmap (ino=12) [ 400.910287][ T5824] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 401.016185][T12698] loop2: detected capacity change from 0 to 32768 [ 401.057280][T12698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2136 (12698) [ 401.120548][T12698] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 401.157394][T12698] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 401.398681][ T5889] usb 9-1: language id specifier not provided by device, defaulting to English [ 401.465303][T12698] BTRFS info (device loop2): enabling ssd optimizations [ 401.506802][T12698] BTRFS info (device loop2): turning on async discard [ 401.537726][T12698] BTRFS info (device loop2): enabling free space tree [ 401.580627][ T30] audit: type=1326 audit(1764316956.075:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 401.623896][ T5889] letsketch 0003:6161:4D15.0019: Device info: 㡵 [ 401.651590][ T30] audit: type=1326 audit(1764316956.115:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 401.767683][ T30] audit: type=1326 audit(1764316956.115:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 401.828817][ T5889] letsketch 0003:6161:4D15.0019: Device info: 繋 [ 401.839700][ T30] audit: type=1326 audit(1764316956.115:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 401.947972][ T30] audit: type=1326 audit(1764316956.115:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 402.006814][ T30] audit: type=1326 audit(1764316956.115:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 402.067849][ T5889] usb 9-1: Max retries (5) exceeded reading string descriptor 202 [ 402.076048][ T5889] letsketch 0003:6161:4D15.0019: probe with driver letsketch failed with error -71 [ 402.116832][ T30] audit: type=1326 audit(1764316956.115:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 402.158723][ T5889] usb 9-1: USB disconnect, device number 11 [ 402.180183][ T30] audit: type=1326 audit(1764316956.115:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 402.249352][ T30] audit: type=1326 audit(1764316956.115:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 402.309887][ T30] audit: type=1326 audit(1764316956.115:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f703c38f749 code=0x7ffc0000 [ 402.337883][ T5822] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.029025][T12746] loop7: detected capacity change from 0 to 32768 [ 403.185605][T12746] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 403.297719][T12746] XFS (loop7): Ending clean mount [ 403.343910][T12746] XFS (loop7): Quotacheck needed: Please wait. [ 403.466071][T12746] XFS (loop7): Quotacheck: Done. [ 403.690991][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 403.739613][ T9136] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 404.155873][T12784] loop2: detected capacity change from 0 to 128 [ 404.218760][T12784] FAT-fs (loop2): Directory bread(block 414) failed [ 404.270831][T12784] FAT-fs (loop2): Directory bread(block 415) failed [ 404.322034][T12784] FAT-fs (loop2): Directory bread(block 416) failed [ 404.356799][T12784] FAT-fs (loop2): Directory bread(block 417) failed [ 404.410362][T12784] FAT-fs (loop2): Directory bread(block 418) failed [ 404.440264][T12784] FAT-fs (loop2): Directory bread(block 419) failed [ 404.483448][T12784] FAT-fs (loop2): Directory bread(block 420) failed [ 404.497729][T12784] FAT-fs (loop2): Directory bread(block 421) failed [ 404.644945][T12784] FAT-fs (loop2): FAT read failed (blocknr 128) [ 404.827124][T12757] loop4: detected capacity change from 0 to 262144 [ 404.845931][T12757] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2157 (12757) [ 404.862643][T12757] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 404.872929][T12757] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 404.964832][T12788] netlink: 'syz.8.2167': attribute type 10 has an invalid length. [ 405.051660][T12757] BTRFS info (device loop4): enabling ssd optimizations [ 405.058794][T12757] BTRFS info (device loop4): enabling free space tree [ 405.214808][T12757] BTRFS info (device loop4): balance: start -d -m -s [ 405.237154][T12757] BTRFS info (device loop4): relocating block group 22020096 flags system|dup [ 405.320356][T12757] BTRFS info (device loop4): relocating block group 13631488 flags data [ 405.350660][T12757] BTRFS info (device loop4): balance: canceled [ 405.417772][ T5824] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 405.970389][T12816] netlink: 'syz.4.2171': attribute type 6 has an invalid length. [ 406.217963][T12824] loop4: detected capacity change from 0 to 64 [ 406.658125][T12833] loop4: detected capacity change from 0 to 4096 [ 407.069940][T12845] loop8: detected capacity change from 0 to 128 [ 407.182421][T12845] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.262667][T12845] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 407.545774][T12852] loop7: detected capacity change from 0 to 1024 [ 407.593746][ T9360] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.680685][T12855] netlink: 'syz.1.2187': attribute type 1 has an invalid length. [ 407.737920][T12852] hfsplus: xattr searching failed [ 407.960933][T12862] kvm: apic: phys broadcast and lowest prio [ 407.984318][T12841] loop2: detected capacity change from 0 to 40427 [ 408.008118][T12855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.063622][T12841] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 408.104884][T12841] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 408.153829][T12841] F2FS-fs (loop2): invalid crc value [ 408.168532][T12858] bond3: (slave geneve2): making interface the new active one [ 408.200900][T12858] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 408.445188][T12841] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 408.474477][T12841] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 408.481891][T12841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 408.966542][T12888] loop4: detected capacity change from 0 to 128 [ 409.434029][T12890] loop4: detected capacity change from 0 to 4096 [ 409.484484][T12890] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 410.562122][T12906] input: syz1 as /devices/virtual/input/input25 [ 410.723663][T12910] loop2: detected capacity change from 0 to 1024 [ 410.887847][T12912] netlink: 'syz.8.2210': attribute type 4 has an invalid length. [ 411.648280][T12909] loop4: detected capacity change from 0 to 32768 [ 411.712268][T12909] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 411.712268][T12909] [ 413.420307][T12953] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2227'. [ 414.402480][T12938] loop4: detected capacity change from 0 to 262144 [ 414.422527][T12938] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2220 (12938) [ 414.446043][T12938] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 414.462510][T12938] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 414.493121][T12948] loop8: detected capacity change from 0 to 32768 [ 414.618849][T12938] BTRFS info (device loop4): setting nodatasum [ 414.625181][T12938] BTRFS info (device loop4): enabling free space tree [ 414.628348][T12948] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 414.648759][T12948] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.727115][T12938] BTRFS info (device loop4): balance: start -dusage=0 -musage=0 -susage=0 [ 414.743004][T12938] BTRFS info (device loop4): relocating block group 30408704 flags metadata|dup [ 414.803978][T12948] XFS (loop8): Ending clean mount [ 414.823329][T12938] BTRFS info (device loop4): found 3 extents, stage: move data extents [ 414.835911][T12948] XFS (loop8): Quotacheck needed: Please wait. [ 414.900344][T12938] BTRFS info (device loop4): relocating block group 22020096 flags system|dup [ 414.961996][T12938] BTRFS info (device loop4): balance: canceled [ 415.041476][T12948] XFS (loop8): Quotacheck: Done. [ 415.054144][ T5824] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 415.344434][ T9360] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 415.988372][T13015] loop8: detected capacity change from 0 to 512 [ 416.127895][T13015] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2242: bg 0: block 5: invalid block bitmap [ 416.260378][T13019] 9pnet_fd: p9_fd_create_unix (13019): problem connecting socket: éq‰Y’3aK: -111 [ 416.330063][T13015] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 416.427433][T13015] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2242: invalid indirect mapped block 3 (level 2) [ 416.492963][T13015] EXT4-fs (loop8): 2 truncates cleaned up [ 416.519980][T13015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.816438][ T9360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.881028][T13062] loop2: detected capacity change from 0 to 256 [ 418.223788][T13069] loop2: detected capacity change from 0 to 512 [ 418.303014][T13069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.350526][T13069] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.447031][T13069] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2267: corrupted inode contents [ 418.535404][T13069] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.2267: mark_inode_dirty error [ 418.553839][T13076] fuse: Bad value for 'fd' [ 418.571809][T13069] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2267: corrupted inode contents [ 418.627348][T13069] EXT4-fs error (device loop2): __ext4_ext_dirty:211: inode #2: comm syz.2.2267: mark_inode_dirty error [ 418.716449][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.661812][T13096] netlink: 'syz.7.2278': attribute type 12 has an invalid length. [ 419.670351][T13096] netlink: 'syz.7.2278': attribute type 29 has an invalid length. [ 419.681094][T13096] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2278'. [ 419.701786][T13096] netlink: 'syz.7.2278': attribute type 2 has an invalid length. [ 419.710095][T13096] netlink: 'syz.7.2278': attribute type 3 has an invalid length. [ 419.911494][T13100] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2279'. [ 420.222173][T13111] loop8: detected capacity change from 0 to 512 [ 420.247122][T13111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 420.266596][T13111] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.2284: Unimplemented hash flags: 0x0001 [ 420.279883][T13111] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2284: Corrupt directory, running e2fsck is recommended [ 420.296073][T13111] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.2284: path /201/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 420.391874][ T9360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.771719][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2291'. [ 420.817136][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2291'. [ 421.388181][T13147] loop2: detected capacity change from 0 to 1024 [ 421.411115][T13147] EXT4-fs: Ignoring removed orlov option [ 421.465698][T13147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.569020][T13147] EXT4-fs (loop2): shut down requested (2) [ 421.638054][T13131] loop8: detected capacity change from 0 to 40427 [ 421.704494][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.990036][T13131] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 422.044450][T13131] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 422.143905][T13131] F2FS-fs (loop8): Stopped filesystem due to reason: 0 [ 423.448340][T13199] batadv_slave_1: entered promiscuous mode [ 423.479410][T13198] batadv_slave_1: left promiscuous mode [ 423.718767][T13186] loop4: detected capacity change from 0 to 40427 [ 423.748774][T13186] F2FS-fs (loop4): build fault injection rate: 771 [ 423.787183][T13186] F2FS-fs (loop4): invalid crc value [ 424.134358][T13186] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 424.161895][T13186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 424.216796][ T130] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 424.335538][T13211] f2fs_ckpt-7:4: attempt to access beyond end of device [ 424.335538][T13211] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 424.373049][T13220] F2FS-fs (loop4): access invalid blkaddr:2816 [ 424.400757][T13211] CPU: 0 UID: 0 PID: 13211 Comm: f2fs_ckpt-7:4 Not tainted syzkaller #0 PREEMPT(full) [ 424.400789][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.400803][T13211] Call Trace: [ 424.400815][T13211] [ 424.400825][T13211] dump_stack_lvl+0x189/0x250 [ 424.400863][T13211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.400891][T13211] ? __pfx_queue_work_on+0x10/0x10 [ 424.400914][T13211] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 424.400940][T13211] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.400979][T13211] f2fs_handle_critical_error+0x37c/0x540 [ 424.401024][T13211] f2fs_write_end_io+0x94b/0xc10 [ 424.401075][T13211] __submit_merged_bio+0x256/0x660 [ 424.401118][T13211] __submit_merged_write_cond+0x269/0x530 [ 424.401163][T13211] f2fs_write_data_pages+0x2756/0x3290 [ 424.401240][T13211] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 424.401334][T13211] ? __lock_acquire+0x6b6/0x2cf0 [ 424.401380][T13211] ? __lock_acquire+0x6b6/0x2cf0 [ 424.401417][T13211] ? do_raw_spin_lock+0x121/0x290 [ 424.401464][T13211] ? do_raw_spin_unlock+0x122/0x240 [ 424.401497][T13211] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 424.401523][T13211] do_writepages+0x32e/0x550 [ 424.401569][T13211] ? do_raw_spin_unlock+0x122/0x240 [ 424.401608][T13211] filemap_fdatawrite+0x199/0x240 [ 424.401641][T13211] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 424.401734][T13211] ? do_raw_spin_unlock+0x122/0x240 [ 424.401774][T13211] f2fs_sync_dirty_inodes+0x30f/0x810 [ 424.401821][T13211] f2fs_write_checkpoint+0x93e/0x2440 [ 424.401848][T13211] ? __lock_acquire+0x6b6/0x2cf0 [ 424.401909][T13211] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 424.401987][T13211] ? down_write+0x162/0x1f0 [ 424.402017][T13211] ? __pfx_down_write+0x10/0x10 [ 424.402049][T13211] ? do_raw_spin_lock+0x121/0x290 [ 424.402089][T13211] __checkpoint_and_complete_reqs+0xdf/0x3d0 [ 424.402121][T13211] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 424.402145][T13211] ? __pfx___schedule+0x10/0x10 [ 424.402169][T13211] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 424.402241][T13211] ? schedule+0x91/0x360 [ 424.402280][T13211] issue_checkpoint_thread+0xd9/0x260 [ 424.402313][T13211] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 424.402341][T13211] ? __pfx_autoremove_wake_function+0x10/0x10 [ 424.402376][T13211] ? __kthread_parkme+0x7b/0x200 [ 424.402402][T13211] ? __kthread_parkme+0x1a1/0x200 [ 424.402438][T13211] kthread+0x711/0x8a0 [ 424.402473][T13211] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 424.402500][T13211] ? __pfx_kthread+0x10/0x10 [ 424.402533][T13211] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.402557][T13211] ? lockdep_hardirqs_on+0x98/0x140 [ 424.402580][T13211] ? __pfx_kthread+0x10/0x10 [ 424.402612][T13211] ret_from_fork+0x599/0xb30 [ 424.402637][T13211] ? __pfx_ret_from_fork+0x10/0x10 [ 424.402676][T13211] ? __switch_to_asm+0x39/0x70 [ 424.402704][T13211] ? __switch_to_asm+0x33/0x70 [ 424.402730][T13211] ? __pfx_kthread+0x10/0x10 [ 424.402762][T13211] ret_from_fork_asm+0x1a/0x30 [ 424.402816][T13211] [ 424.402827][T13211] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 424.533542][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.4.2312 Not tainted syzkaller #0 PREEMPT(full) [ 424.533576][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.533593][T13220] Call Trace: [ 424.533603][T13220] [ 424.533615][T13220] dump_stack_lvl+0x189/0x250 [ 424.533655][T13220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.533686][T13220] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 424.533729][T13220] ? __update_page_owner_handle+0x5a/0x570 [ 424.533764][T13220] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 424.533801][T13220] f2fs_map_blocks+0xdac/0x40b0 [ 424.533891][T13220] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 424.533926][T13220] ? xa_load+0x60/0x210 [ 424.533982][T13220] ? xa_load+0x1ea/0x210 [ 424.534021][T13220] f2fs_mpage_readpages+0xd25/0x1b80 [ 424.534056][T13220] ? __lock_acquire+0x6b6/0x2cf0 [ 424.534103][T13220] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 424.534139][T13220] ? __folio_batch_add_and_move+0x192/0xc40 [ 424.534191][T13220] ? f2fs_readahead+0x167/0x310 [ 424.534221][T13220] read_pages+0x17a/0x580 [ 424.534252][T13220] ? __pfx_read_pages+0x10/0x10 [ 424.534285][T13220] ? filemap_add_folio+0x35f/0x540 [ 424.534330][T13220] page_cache_ra_unbounded+0x750/0x990 [ 424.534373][T13220] f2fs_readdir+0x49b/0xa40 [ 424.534426][T13220] ? __pfx_f2fs_readdir+0x10/0x10 [ 424.534469][T13220] ? iterate_dir+0x292/0x570 [ 424.534494][T13220] ? down_read_killable+0x1bc/0x350 [ 424.534535][T13220] iterate_dir+0x399/0x570 [ 424.534568][T13220] __se_sys_getdents64+0xe4/0x260 [ 424.534597][T13220] ? __pfx___se_sys_getdents64+0x10/0x10 [ 424.534622][T13220] ? __pfx_filldir64+0x10/0x10 [ 424.534667][T13220] do_syscall_64+0xfa/0xf80 [ 424.534697][T13220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.534724][T13220] ? clear_bhb_loop+0x60/0xb0 [ 424.534756][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.534783][T13220] RIP: 0033:0x7f703c38f749 [ 424.534806][T13220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.534828][T13220] RSP: 002b:00007f703d1bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 424.534855][T13220] RAX: ffffffffffffffda RBX: 00007f703c5e6090 RCX: 00007f703c38f749 [ 424.534874][T13220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 424.534890][T13220] RBP: 00007f703c413f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.534905][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.534920][T13220] R13: 00007f703c5e6128 R14: 00007f703c5e6090 R15: 00007fff15f9d638 [ 424.534969][T13220] [ 424.536538][T13220] syz.4.2312: attempt to access beyond end of device [ 424.536538][T13220] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 424.990640][ T130] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 425.016716][ T130] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 425.024952][ T130] usb 8-1: Product: syz [ 425.037277][ T130] usb 8-1: Manufacturer: syz [ 425.041941][ T130] usb 8-1: SerialNumber: syz [ 425.055640][ T130] usb 8-1: config 0 descriptor?? [ 425.063675][ T130] ch341 8-1:0.0: ch341-uart converter detected [ 425.458640][T13214] loop2: detected capacity change from 0 to 32768 [ 425.591003][T13214] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 425.673927][T13214] XFS (loop2): Ending clean mount [ 425.835098][T13214] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 426.085653][ T130] ch341-uart ttyUSB0: break control not supported, using simulated break [ 426.101517][ T130] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 426.120533][ T130] usb 8-1: USB disconnect, device number 10 [ 426.141531][ T130] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 426.177648][ T130] ch341 8-1:0.0: device disconnected [ 426.353730][ T5822] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 427.475051][T13266] loop2: detected capacity change from 0 to 512 [ 427.536985][T13266] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 427.576918][ T130] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 427.606826][T13266] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 427.675091][T13266] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2341: Corrupt directory, running e2fsck is recommended [ 427.742093][ T130] usb 9-1: Using ep0 maxpacket: 32 [ 427.753021][T13266] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 427.762040][ T130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.779077][T13266] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.2341: corrupted in-inode xattr: e_name out of bounds [ 427.794751][ T130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.819235][T13266] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2341: couldn't read orphan inode 15 (err -117) [ 427.836842][ T130] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.866410][ T130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.873931][T13266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.913160][T13266] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 427.914459][ T130] usb 9-1: config 0 descriptor?? [ 427.944271][T13266] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 427.959952][ T130] hub 9-1:0.0: USB hub found [ 427.975000][T13266] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2341: Corrupt directory, running e2fsck is recommended [ 428.017702][T13273] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 428.054803][T13273] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 428.069389][T13273] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2341: Corrupt directory, running e2fsck is recommended [ 428.123079][T13274] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 428.137309][T13266] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 428.150135][T13266] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 428.162578][T13266] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2341: Corrupt directory, running e2fsck is recommended [ 428.181939][ T130] hub 9-1:0.0: 1 port detected [ 428.260837][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.662311][T13281] netlink: 'syz.7.2346': attribute type 21 has an invalid length. [ 428.703725][T13283] raw_sendmsg: syz.2.2347 forgot to set AF_INET. Fix it! [ 428.705780][T13281] netlink: 'syz.7.2346': attribute type 22 has an invalid length. [ 428.739177][T13281] netlink: 'syz.7.2346': attribute type 23 has an invalid length. [ 428.776807][T13281] netlink: 'syz.7.2346': attribute type 25 has an invalid length. [ 428.784695][T13281] netlink: 'syz.7.2346': attribute type 26 has an invalid length. [ 428.822809][ T130] hub 9-1:0.0: activate --> -90 [ 428.846110][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2346'. [ 429.231497][T13295] loop2: detected capacity change from 0 to 512 [ 429.239753][ T130] usb 9-1: USB disconnect, device number 12 [ 429.268132][T13296] netlink: zone id is out of range [ 429.323779][T13296] netlink: zone id is out of range [ 429.326068][T13295] EXT4-fs (loop2): Test dummy encryption mode enabled [ 429.337267][T13296] netlink: zone id is out of range [ 429.342836][T13296] netlink: zone id is out of range [ 429.354406][T13296] netlink: zone id is out of range [ 429.359994][T13296] netlink: zone id is out of range [ 429.365383][T13296] netlink: zone id is out of range [ 429.372425][T13296] netlink: zone id is out of range [ 429.377803][T13295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 429.388995][T13296] netlink: zone id is out of range [ 429.394496][T13296] netlink: zone id is out of range [ 429.473665][T13298] netlink: 'syz.7.2354': attribute type 1 has an invalid length. [ 429.496559][T13295] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2353: bad orphan inode 131083 [ 429.614573][T13295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.646598][T13298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.740256][T13304] bond1: (slave geneve2): making interface the new active one [ 429.780281][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.829996][T13304] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 430.853841][T13313] loop7: detected capacity change from 0 to 32768 [ 430.881664][T13313] JBD2: Ignoring recovery information on journal [ 430.986275][T13313] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 431.248797][T13313] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 431.286866][T13313] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 431.437643][T13313] OCFS2: File system is now read-only. [ 431.443277][T13313] (syz.7.2358,13313,1):ocfs2_search_chain:1817 ERROR: status = -30 [ 431.461655][ T5830] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 431.511196][T13313] (syz.7.2358,13313,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 431.524006][T13313] (syz.7.2358,13313,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 431.546861][T13313] (syz.7.2358,13313,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 431.555562][T13313] (syz.7.2358,13313,1):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 431.570178][T13313] (syz.7.2358,13313,1):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 431.581063][T13313] (syz.7.2358,13313,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 431.590068][T13313] (syz.7.2358,13313,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 431.599244][T13313] (syz.7.2358,13313,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 431.612796][T13313] (syz.7.2358,13313,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 431.622925][T13313] (syz.7.2358,13313,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 431.631985][T13313] (syz.7.2358,13313,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 431.632118][T13313] (syz.7.2358,13313,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 431.632224][T13313] (syz.7.2358,13313,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 431.662820][ T5830] usb 9-1: Using ep0 maxpacket: 16 [ 431.671119][T13313] (syz.7.2358,13313,1):ocfs2_lock_allocators:2775 ERROR: status = -30 [ 431.693001][T13313] (syz.7.2358,13313,1):ocfs2_write_begin_nolock:1723 ERROR: status = -30 [ 431.706121][T13313] (syz.7.2358,13313,1):ocfs2_write_begin:1887 ERROR: status = -30 [ 431.714986][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.726173][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.736684][ T5830] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 431.750120][ T5830] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 431.759430][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.815933][ T5830] usb 9-1: config 0 descriptor?? [ 431.828001][ T9136] ocfs2: Unmounting device (7,7) on (node local) [ 432.093372][ T3505] Bluetooth: (null): Invalid header checksum [ 432.197747][ T36] Bluetooth: (null): Invalid header checksum [ 432.279593][T13324] random: crng reseeded on system resumption [ 432.310621][ T3505] Bluetooth: (null): Invalid header checksum [ 432.417456][ T5830] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 432.435765][ T3494] Bluetooth: (null): Invalid header checksum [ 432.507938][T13337] loop7: detected capacity change from 0 to 40427 [ 432.545087][T13337] F2FS-fs (loop7): build fault injection rate: 771 [ 432.548048][ T60] Bluetooth: (null): Invalid header checksum [ 432.569584][T13337] F2FS-fs (loop7): invalid crc value [ 432.612475][ T5830] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 432.641876][T13337] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 432.656175][T13337] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 432.658717][T13279] Bluetooth: (null): Invalid header checksum [ 432.725693][ T5830] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 432.757081][T13279] Bluetooth: (null): Invalid header checksum [ 432.802762][ T130] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 432.837130][ T5830] usb 9-1: USB disconnect, device number 13 [ 432.852571][ T130] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 432.895417][ T5908] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 432.962869][ T6892] Bluetooth: (null): Invalid header checksum [ 432.979578][T13351] fuse: Bad value for 'fd' [ 432.986040][ T130] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 433.031295][ T6892] Bluetooth: (null): Invalid header checksum [ 433.071441][ T130] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 433.137244][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 433.169438][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.193034][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.225692][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.244305][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.259466][ T5908] usb 3-1: config 0 descriptor?? [ 433.273628][ T5908] hub 3-1:0.0: USB hub found [ 433.399452][T13349] syz.7.2367: attempt to access beyond end of device [ 433.399452][T13349] loop7: rw=2049, sector=45096, nr_sectors = 8152 limit=40427 [ 433.431935][T13349] syz.7.2367: attempt to access beyond end of device [ 433.431935][T13349] loop7: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 433.455859][ T5831] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 433.480252][ T5908] hub 3-1:0.0: 1 port detected [ 433.566393][T13349] syz.7.2367: attempt to access beyond end of device [ 433.566393][T13349] loop7: rw=2049, sector=57344, nr_sectors = 7008 limit=40427 [ 433.658153][ T9136] syz-executor: attempt to access beyond end of device [ 433.658153][ T9136] loop7: rw=2049, sector=64352, nr_sectors = 8 limit=40427 [ 433.676431][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 433.676465][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.676479][ T9136] Call Trace: [ 433.676487][ T9136] [ 433.676496][ T9136] dump_stack_lvl+0x189/0x250 [ 433.676532][ T9136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.676560][ T9136] ? __pfx_queue_work_on+0x10/0x10 [ 433.676583][ T9136] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 433.676608][ T9136] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 433.676644][ T9136] f2fs_handle_critical_error+0x37c/0x540 [ 433.676687][ T9136] f2fs_write_end_io+0x94b/0xc10 [ 433.676732][ T9136] __submit_merged_bio+0x256/0x660 [ 433.676773][ T9136] __submit_merged_write_cond+0x269/0x530 [ 433.676815][ T9136] f2fs_write_data_pages+0x2756/0x3290 [ 433.676838][ T9136] ? __lock_acquire+0x6b6/0x2cf0 [ 433.676899][ T9136] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 433.676979][ T9136] ? __mod_zone_page_state+0xd7/0x140 [ 433.677024][ T9136] ? folios_put_refs+0x58b/0x670 [ 433.677066][ T9136] ? __lock_acquire+0x6b6/0x2cf0 [ 433.677101][ T9136] ? __lock_acquire+0x6b6/0x2cf0 [ 433.677153][ T9136] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 433.677179][ T9136] do_writepages+0x32e/0x550 [ 433.677223][ T9136] ? do_raw_spin_unlock+0x122/0x240 [ 433.677260][ T9136] filemap_fdatawrite+0x199/0x240 [ 433.677291][ T9136] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 433.677381][ T9136] ? do_raw_spin_unlock+0x122/0x240 [ 433.677419][ T9136] f2fs_sync_dirty_inodes+0x30f/0x810 [ 433.677464][ T9136] f2fs_write_checkpoint+0x93e/0x2440 [ 433.677489][ T9136] ? stack_depot_save_flags+0x40/0x850 [ 433.677554][ T9136] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 433.677633][ T9136] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 433.677658][ T9136] ? kfree+0x1c0/0x660 [ 433.677703][ T9136] kill_f2fs_super+0x2d2/0x6c0 [ 433.677736][ T9136] ? __pfx_kill_f2fs_super+0x10/0x10 [ 433.677785][ T9136] ? shrinker_free+0x2ce/0x3e0 [ 433.677815][ T9136] deactivate_locked_super+0xbc/0x130 [ 433.677851][ T9136] cleanup_mnt+0x425/0x4c0 [ 433.677884][ T9136] ? lockdep_hardirqs_on+0x98/0x140 [ 433.677914][ T9136] task_work_run+0x1d4/0x260 [ 433.677950][ T9136] ? __pfx_task_work_run+0x10/0x10 [ 433.677988][ T9136] ? exit_to_user_mode_loop+0x55/0x4f0 [ 433.678018][ T9136] exit_to_user_mode_loop+0xff/0x4f0 [ 433.678039][ T9136] ? rcu_is_watching+0x15/0xb0 [ 433.678073][ T9136] do_syscall_64+0x2e3/0xf80 [ 433.678101][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.678129][ T9136] ? clear_bhb_loop+0x60/0xb0 [ 433.678157][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.678178][ T9136] RIP: 0033:0x7f1a3d790a77 [ 433.678198][ T9136] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 433.678218][ T9136] RSP: 002b:00007ffc96612468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 433.678241][ T9136] RAX: 0000000000000000 RBX: 00007f1a3d813d7d RCX: 00007f1a3d790a77 [ 433.678256][ T9136] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc96612520 [ 433.678269][ T9136] RBP: 00007ffc96612520 R08: 0000000000000000 R09: 0000000000000000 [ 433.678283][ T9136] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc966135b0 [ 433.678296][ T9136] R13: 00007f1a3d813d7d R14: 0000000000069cac R15: 00007ffc966135f0 [ 433.678336][ T9136] [ 433.734350][T13363] loop8: detected capacity change from 0 to 512 [ 433.763510][ T9136] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 433.854198][T13363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.182816][ T5908] hub 3-1:0.0: activate --> -90 [ 434.223338][T13371] team_slave_0: entered promiscuous mode [ 434.229953][T13371] team_slave_1: entered promiscuous mode [ 434.266330][T13369] team_slave_0: left promiscuous mode [ 434.272626][T13369] team_slave_1: left promiscuous mode [ 434.594561][ T5830] usb 3-1: USB disconnect, device number 17 [ 434.634562][ T9360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.806878][ T5908] usb 3-1-port1: config error [ 435.478911][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.486124][ T5843] ------------[ cut here ]------------ [ 435.492283][ T5843] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2d0, CPU#1: kworker/u9:10/5843 [ 435.503147][ T5843] Modules linked in: [ 435.507668][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) [ 435.517518][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.527672][ T5843] Workqueue: hci3 hci_conn_timeout [ 435.532839][ T5843] RIP: 0010:hci_conn_timeout+0xff/0x2d0 [ 435.540314][ T5843] Code: 48 89 df e8 13 77 09 00 eb 07 e8 4c 8f 6c f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 47 bb fe ff e8 32 8f 6c f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 435.560345][ T5974] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 435.569880][ T5843] RSP: 0018:ffffc900042efa50 EFLAGS: 00010293 [ 435.576016][ T5843] RAX: ffffffff8a5523fe RBX: ffff88807b124000 RCX: ffff88802e868000 [ 435.584211][ T5843] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 435.592368][ T5843] RBP: 00000000ffffffff R08: ffff88807b124013 R09: 1ffff1100f624802 [ 435.600531][ T5843] R10: dffffc0000000000 R11: ffffed100f624803 R12: dffffc0000000000 [ 435.608661][ T5843] R13: 1ffff11005d0d090 R14: ffff88807b124a40 R15: ffff88807b124010 [ 435.617384][ T5843] FS: 0000000000000000(0000) GS:ffff888125f4f000(0000) knlGS:0000000000000000 [ 435.626553][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.633243][ T5843] CR2: 00007ffa56e4ef98 CR3: 0000000077162000 CR4: 00000000003526f0 [ 435.641567][ T5843] Call Trace: [ 435.644890][ T5843] [ 435.647965][ T5843] ? process_one_work+0x868/0x15a0 [ 435.654058][ T5843] process_one_work+0x93a/0x15a0 [ 435.659916][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 435.665248][ T5843] ? __pfx_process_one_work+0x10/0x10 [ 435.670741][ T5843] ? assign_work+0x3a1/0x410 [ 435.675387][ T5843] worker_thread+0x9b0/0xee0 [ 435.680153][ T5843] kthread+0x711/0x8a0 [ 435.684392][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 435.689684][ T5843] ? __pfx_kthread+0x10/0x10 [ 435.694405][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.699756][ T5843] ? lockdep_hardirqs_on+0x98/0x140 [ 435.705017][ T5843] ? __pfx_kthread+0x10/0x10 [ 435.709889][ T5843] ret_from_fork+0x599/0xb30 [ 435.711331][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 435.714526][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 435.725135][ T5843] ? __switch_to_asm+0x39/0x70 [ 435.730203][ T5843] ? __switch_to_asm+0x33/0x70 [ 435.735181][ T5843] ? __pfx_kthread+0x10/0x10 [ 435.740021][ T5843] ret_from_fork_asm+0x1a/0x30 [ 435.744857][ T5843] [ 435.748062][ T5843] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 435.755379][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) [ 435.765042][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.775118][ T5843] Workqueue: hci3 hci_conn_timeout [ 435.780264][ T5843] Call Trace: [ 435.783562][ T5843] [ 435.786514][ T5843] dump_stack_lvl+0x99/0x250 [ 435.791132][ T5843] ? __asan_memcpy+0x40/0x70 [ 435.795754][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.800972][ T5843] ? __pfx__printk+0x10/0x10 [ 435.805598][ T5843] vpanic+0x237/0x6d0 [ 435.809606][ T5843] ? __pfx_vpanic+0x10/0x10 [ 435.814217][ T5843] ? is_bpf_text_address+0x292/0x2b0 [ 435.819584][ T5843] ? is_bpf_text_address+0x26/0x2b0 [ 435.824820][ T5843] panic+0xb9/0xc0 [ 435.828651][ T5843] ? __pfx_panic+0x10/0x10 [ 435.833180][ T5843] ? ret_from_fork_asm+0x1a/0x30 [ 435.838332][ T5843] __warn+0x317/0x4b0 [ 435.842343][ T5843] ? hci_conn_timeout+0xff/0x2d0 [ 435.847308][ T5843] ? hci_conn_timeout+0xff/0x2d0 [ 435.852275][ T5843] __report_bug+0x288/0x500 [ 435.856809][ T5843] ? hci_conn_timeout+0xff/0x2d0 [ 435.862124][ T5843] ? __pfx___report_bug+0x10/0x10 [ 435.867175][ T5843] ? lockdep_unlock+0x89/0x120 [ 435.871970][ T5843] ? __lock_acquire+0x146f/0x2cf0 [ 435.877049][ T5843] ? hci_conn_timeout+0xff/0x2d0 [ 435.882005][ T5843] report_bug+0x16a/0x220 [ 435.886355][ T5843] ? hci_conn_timeout+0xff/0x2d0 [ 435.891326][ T5843] ? hci_conn_timeout+0x101/0x2d0 [ 435.896373][ T5843] handle_bug+0x98/0x200 [ 435.900682][ T5843] exc_invalid_op+0x1a/0x50 [ 435.905208][ T5843] asm_exc_invalid_op+0x1a/0x20 [ 435.910077][ T5843] RIP: 0010:hci_conn_timeout+0xff/0x2d0 [ 435.915666][ T5843] Code: 48 89 df e8 13 77 09 00 eb 07 e8 4c 8f 6c f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 47 bb fe ff e8 32 8f 6c f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 435.935905][ T5843] RSP: 0018:ffffc900042efa50 EFLAGS: 00010293 [ 435.942006][ T5843] RAX: ffffffff8a5523fe RBX: ffff88807b124000 RCX: ffff88802e868000 [ 435.949998][ T5843] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 435.958126][ T5843] RBP: 00000000ffffffff R08: ffff88807b124013 R09: 1ffff1100f624802 [ 435.966114][ T5843] R10: dffffc0000000000 R11: ffffed100f624803 R12: dffffc0000000000 [ 435.974194][ T5843] R13: 1ffff11005d0d090 R14: ffff88807b124a40 R15: ffff88807b124010 [ 435.982282][ T5843] ? hci_conn_timeout+0xfe/0x2d0 [ 435.987252][ T5843] ? process_one_work+0x868/0x15a0 [ 435.992377][ T5843] process_one_work+0x93a/0x15a0 [ 435.997326][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 436.002649][ T5843] ? __pfx_process_one_work+0x10/0x10 [ 436.008135][ T5843] ? assign_work+0x3a1/0x410 [ 436.012743][ T5843] worker_thread+0x9b0/0xee0 [ 436.017375][ T5843] kthread+0x711/0x8a0 [ 436.021470][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 436.026700][ T5843] ? __pfx_kthread+0x10/0x10 [ 436.031421][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.036634][ T5843] ? lockdep_hardirqs_on+0x98/0x140 [ 436.041883][ T5843] ? __pfx_kthread+0x10/0x10 [ 436.046600][ T5843] ret_from_fork+0x599/0xb30 [ 436.051211][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 436.056348][ T5843] ? __switch_to_asm+0x39/0x70 [ 436.061224][ T5843] ? __switch_to_asm+0x33/0x70 [ 436.066037][ T5843] ? __pfx_kthread+0x10/0x10 [ 436.070665][ T5843] ret_from_fork_asm+0x1a/0x30 [ 436.075491][ T5843] [ 436.078776][ T5843] Kernel Offset: disabled [ 436.083111][ T5843] Rebooting in 86400 seconds..