last executing test programs: 5.795964016s ago: executing program 2 (id=1207): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.554024641s ago: executing program 4 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 5.380485813s ago: executing program 5 (id=1211): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r0) 5.121687682s ago: executing program 4 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 4.980543847s ago: executing program 5 (id=1215): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x7}, 0x8) shutdown(r0, 0x0) 4.643942925s ago: executing program 4 (id=1217): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x389b0d52417bb229) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0xffffff30, 0x2, 0x3) 4.531941242s ago: executing program 5 (id=1219): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x20) keyctl$clear(0x7, r0) 4.168754486s ago: executing program 5 (id=1221): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000080)) 3.979445483s ago: executing program 4 (id=1223): syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x8008c4, &(0x7f0000002880)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT], 0x1, 0x4436, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4000, 0x2000003}) 3.838183693s ago: executing program 5 (id=1224): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4000000, &(0x7f0000000000)={[{@nolazytime}, {@grpquota}, {@lazytime}]}, 0xff, 0x98d0, &(0x7f0000013040)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.513006204s ago: executing program 0 (id=1227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.358593775s ago: executing program 2 (id=1228): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) getdents(r0, 0x0, 0x0) 3.241700665s ago: executing program 0 (id=1229): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 3.062548992s ago: executing program 2 (id=1230): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r0, r0, 0x0, 0x24002de8) 2.882099811s ago: executing program 1 (id=1233): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000f80)={[{}, {@gid}, {@undelete}, {@uid_forget}, {@volume}, {@dmode={'dmode', 0x3d, 0xff}}, {@adinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@unhide}, {@noadinicb}, {@adinicb}]}, 0x1, 0xc3b, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.850126751s ago: executing program 0 (id=1234): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 2.703075105s ago: executing program 2 (id=1235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.430811231s ago: executing program 3 (id=1236): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 2.272039719s ago: executing program 2 (id=1237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40081}, 0x20004800) 2.267413699s ago: executing program 1 (id=1238): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) 1.977033339s ago: executing program 3 (id=1239): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r0, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x30}}, 0x0) 1.947760612s ago: executing program 0 (id=1240): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$GIO_UNISCRNMAP(r0, 0x4b4b, 0x0) 1.836174007s ago: executing program 2 (id=1241): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$eJzs3c1PHOcdAOB3BlyD6w9wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXtYLrG3ahbVgqXqwFHKzlFOkHKIcrETKjZPFIVfnT8glR+dsKTnkEimSFaLdnYWdYVds0C7EzvMcmJ33e/c3H+8chjdOVB4ureWW1nKFlVx54f7axdz/yqX15WKID0nL/o8dXv90phfHyVEfez9lt65c+8fdiyF8uvj5y+3t7e1Q1R9aGmv6/M3Xjxeatw1xpk613datdcu/Qwjn9oyrqi+E8K9PQohCCJeTtMlkOxhCOBXqeXcfv3Mv16XRPHtRvJR/Nfdka/zC7ObTrfbfPQrhg9Iv//hg+cvf9I1/8fsudQ8AAAAAAAAAAAAAAAAAwGtu+vatO38fHQvPo9C/Ge19X3c62bZ7P3a7a37d+y8LAAAAAAAAAAAAAAAAAAAAP1K77//norMt3v+fSrYTbepv/7VNxvHujpPemPnbramro2PJ+u/Rnvw/JUlfXe4Lwy3Wfc+u/345U7/1+u97+zmoxvga/Q6FKB7ZfmsnfyjE8chICB8lC7+fj07EpfJa5Q/3y+sri10bxmsrHf/66v2p6CQL+nca/8lM+71f//8Xe46m6v697h1ib7R0/Pvalvv47aij+F/J1DuM+HNw6fj319IGmwtM1C8A1fi/279//Kcy7fcq/qdDCLmoOtZc6gpQncNU09vNV0hLx/9YLS116Ux+yHbn/7eZ+F/NtN8u/me69g1aX/83sjciWkrH/2e1tIFUid3zfzje//y/lmn/KO7/1fFvuP93JB3/5KGtP1Wk9kt2ev2fzrTfq/jfiZNxno5SR8BmVE9v9//qSEvHf2BP/u7zX9zR/O96pv5hPf81+q09/zU9h/wuqj//0Vo6/oNty3V6/s9k6vX6+j9Rm/9xUOn4n6ilpefOQ7W/ncZ/NtN+r+Jfm5UMNOK/ez357ng9/UPzv46k4//zemLcXGKj9rc2/4v2n//fyLR/FPO/6vg34t72+qZIx/9k23LV+H/Wwf3/ZqZe7+Mfwqi5/oGl43+qbbna+T+wf/znMvV6Hf/f9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNfAZLIdClE8ktqP45GREK4k++fDiWi+sJifL5UX/rsWwlSSngtnowel8nyhlF9aKS8W84VSqbwQwtUk/1wYiNZK5Up+ufDo2k5bg9HDYmG1Ml8sVEII00n6r8KpRlvzS5XlwqMQwvWdvDNxefXRw8JKfnFp9S+jo6OjYWZnDMNR8f+V4kql3ns9N4TZnbpDUdPgatk3dsZyMvpPeX11pVCqpd9sqlMqLxRKTXXmkrz3wnBUWV1fWShUivlS+UGjv6M0kWynZm7/8/bNsT3596L6dvJwhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/R8/M/vhxD663txCGGi8SFqVf7Zi+Kl/Ku5J1vjF2Y3n269bFcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBLxygRA1EYgN+Mhdp5DKuQdLYJimhhRPAEegwPE4/iJbyDhYWthQhmBjTuQprd6vuaB/l5eT8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsc3k33t+2XUSKo6/DiJfH17ff+XWZ0zDPvNg/2FNPduPqZjy/aLvy3dO//Kw8eu/zT/r58fQQG2b1PPzdX/5Ps3rneGuvaVjXv/ard08i5SYi+pKfppybZt27AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//78SIGU=") r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) 1.788132533s ago: executing program 1 (id=1242): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a528070679baf75e3a4f87987e5460c109d882afd2c2bfb760eaaae9b0710000", @ANYRES16=0x0], 0xfe, 0x1a0, &(0x7f0000000540)="$eJzsVU1LG0EYfmZ3spu00PbaUuihpU0Ozcf20p7aS0t+QM9iWNcY3PiRDWhChHjK//CSPyL4EzwoXuJBBA/xLiMz8866ETwICjHMA8nzfs687wz7zlqynfgAbqaDEH+g4OINThgDB/CJads/X/Olp7lM+gXXXCL7AfEpcdLrrzfiOOrcF9jDrscKT7bQfAtLz7Dy0Wt9TWSRlymF93PS8mIK9MlgXupZXOFO/b3vIE/nPgjlUFsGIIQQgLkPMAdXat4dTwehC+AwjQE+cPVjLkQaIzOl8g1ApdveqiS9/vdWu9GMmtFGQCMQQWW1FUdV/c8yWzgUILkEQM7UQsafA3BW0DGvMAuWKY38LJvrZYZz8fNsrsN4mmvYHI7MpdmOvV9/e//xVfl2hkwQAPGWIlRLdTC44Eqp8Ux9ure8cpTDzXhlBAb5rggfqI7B4Zi0CXJGkampEv34OTRlj4i/ENeJx8QTYvNmmbeIqxXOSSsOAQ+7jW63U5MmLaW2ILUF79KdHdr12ptt7qMPCwsLCwsLC4sXhtsAAAD//5rxW7w=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1.504856206s ago: executing program 0 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400006}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.483206993s ago: executing program 3 (id=1244): r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) 1.30977096s ago: executing program 1 (id=1245): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) ioctl$I2C_PEC(r0, 0x708, 0x11) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0xa, 0x2, &(0x7f0000000280)={0x1d, "adab9c9a9e4547d89bef0e7390cb22260923413d6fc20230db6c829745e60b6c5c"}}) 1.192081955s ago: executing program 4 (id=1246): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455cb, 0x0) 1.153119951s ago: executing program 5 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x8010) 921.942716ms ago: executing program 1 (id=1248): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) 842.199739ms ago: executing program 0 (id=1249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 839.123246ms ago: executing program 3 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 556.113832ms ago: executing program 1 (id=1251): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 455.475503ms ago: executing program 3 (id=1252): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./bus\x00', 0x4680, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0xfd, 0x2a1, &(0x7f0000000100)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 130.223µs ago: executing program 3 (id=1253): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 0s ago: executing program 4 (id=1254): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000480)="1866", 0x2, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 3.530950][ T7129] loop3: detected capacity change from 0 to 1024 [ 173.595814][ T7099] BTRFS info (device loop1): enabling ssd optimizations [ 173.617313][ T7099] BTRFS info (device loop1): using spread ssd allocation scheme [ 173.631368][ T7099] BTRFS info (device loop1): enabling free space tree [ 173.651064][ T7099] BTRFS info (device loop1): force clearing of disk cache [ 173.685424][ T5877] sunplus 0003:04FC:05D8.000C: reserved main item tag 0xd [ 173.738328][ T5877] sunplus 0003:04FC:05D8.000C: unexpected long global item [ 173.792402][ T5877] sunplus 0003:04FC:05D8.000C: probe with driver sunplus failed with error -22 [ 173.869707][ T68] hfsplus: b-tree write err: -5, ino 4 [ 173.937692][ T5877] usb 6-1: USB disconnect, device number 5 [ 174.134174][ T7017] bcachefs: bch2_fs_get_tree() error: EINTR [ 174.141830][ T5962] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.244568][ T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 174.331893][ T5962] usb 3-1: Using ep0 maxpacket: 8 [ 174.374607][ T5962] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.412143][ T5962] usb 3-1: config 179 has no interface number 0 [ 174.428340][ T5962] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 174.470909][ T5962] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 174.490688][ T7141] loop4: detected capacity change from 0 to 2048 [ 174.552433][ T7141] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 174.571374][ T5962] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.611123][ T5872] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.621878][ T5962] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.621927][ T5962] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.621978][ T5962] usb 3-1: config 179 interface 65 has no altsetting 0 [ 174.622030][ T5962] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 174.622070][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.673685][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.793609][ T5962] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 174.820082][ T7144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.260225][ T5962] usb 3-1: USB disconnect, device number 5 [ 175.260324][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 175.319530][ T7149] Bluetooth: MGMT ver 1.23 [ 176.028303][ T7168] loop0: detected capacity change from 0 to 512 [ 176.151055][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.223730][ T7175] loop3: detected capacity change from 0 to 128 [ 176.246086][ T7175] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.259567][ T7168] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.303718][ T7175] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.415363][ T5962] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.457237][ T7168] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm syz.0.484: corrupted xattr block 6: invalid header [ 176.573892][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.602286][ T5962] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 176.653022][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.673934][ T5962] usb 3-1: config 0 descriptor?? [ 176.739000][ T7181] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 176.753949][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.140013][ T5962] hid_mf 0003:0079:1846.000D: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 177.187172][ T5962] hid_mf 0003:0079:1846.000D: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 177.308087][ T7197] loop1: detected capacity change from 0 to 1024 [ 177.326470][ T7195] loop3: detected capacity change from 0 to 1024 [ 177.331360][ T24] usb 3-1: USB disconnect, device number 6 [ 177.647275][ T68] hfsplus: b-tree write err: -5, ino 4 [ 177.659829][ T7200] loop0: detected capacity change from 0 to 4096 [ 177.718154][ T7198] fido_id[7198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 177.904875][ T7211] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.933563][ T7208] loop1: detected capacity change from 0 to 64 [ 177.955355][ T30] audit: type=1326 audit(1758755151.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52358eec9 code=0x0 [ 178.000293][ T7208] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 178.077895][ T7214] loop4: detected capacity change from 0 to 8 [ 178.120463][ T7200] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 178.169583][ T7200] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 178.215044][ T7200] Remounting filesystem read-only [ 178.240540][ T7200] NILFS (loop0): error -5 truncating bmap (ino=12) [ 178.529840][ T5871] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 178.566819][ T7221] netlink: 'syz.1.507': attribute type 50 has an invalid length. [ 180.081753][ T7261] loop0: detected capacity change from 0 to 128 [ 180.244077][ T7263] loop5: detected capacity change from 0 to 2048 [ 180.334804][ T7261] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 180.369920][ T7263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.478370][ T7261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.554178][ T7265] loop2: detected capacity change from 0 to 40427 [ 180.571928][ T7263] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 901 [ 180.586339][ T7265] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 180.592832][ T7265] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 180.624942][ T7265] F2FS-fs (loop2): invalid crc value [ 180.747202][ T7265] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.783439][ T7265] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 180.790523][ T7265] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.642949][ T7293] loop0: detected capacity change from 0 to 512 [ 181.664786][ T7293] EXT4-fs: Ignoring removed nobh option [ 181.716621][ T7293] EXT4-fs (loop0): Test dummy encryption mode enabled [ 181.781125][ T7293] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.541: iget: bad i_size value: 38620345925642 [ 181.802270][ T7293] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.541: couldn't read orphan inode 15 (err -117) [ 181.905274][ T7293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.089335][ T7293] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 182.400485][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.569861][ T7307] loop5: detected capacity change from 0 to 128 [ 182.641961][ T7307] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 182.703616][ T7307] hpfs: filesystem error: improperly stopped [ 182.754092][ T7307] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 182.773235][ T7307] hpfs: You really don't want any checks? You are crazy... [ 182.785177][ T7307] hpfs: hpfs_map_sector(): read error [ 182.802077][ T7307] hpfs: code page support is disabled [ 182.814457][ T7307] hpfs: hpfs_map_4sectors(): unaligned read [ 182.833871][ T7307] hpfs: hpfs_map_4sectors(): unaligned read [ 182.859992][ T7307] hpfs: filesystem error: unable to find root dir [ 182.924217][ T7287] loop3: detected capacity change from 0 to 32768 [ 182.964863][ T7307] hpfs: hpfs_map_4sectors(): unaligned read [ 182.988514][ T7289] loop1: detected capacity change from 0 to 32768 [ 183.006570][ T7287] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.310507][ T7287] XFS (loop3): Ending clean mount [ 183.653813][ T7312] loop0: detected capacity change from 0 to 32768 [ 183.709078][ T5869] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.802012][ T30] audit: type=1800 audit(1758755157.210:10): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.551" name="bus" dev="tmpfs" ino=589 res=0 errno=0 [ 183.935093][ T7333] binder: 7332:7333 ioctl 541b 0 returned -22 [ 184.253185][ T7336] loop1: detected capacity change from 0 to 256 [ 184.406551][ T7336] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 184.545412][ T30] audit: type=1800 audit(1758755157.950:11): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.557" name="file2" dev="loop1" ino=1048626 res=0 errno=0 [ 184.908300][ T7346] loop2: detected capacity change from 0 to 736 [ 185.177804][ T7349] loop0: detected capacity change from 0 to 4096 [ 185.231984][ T7346] rock: directory entry would overflow storage [ 185.239295][ T7346] rock: sig=0x3b10, size=4, remaining=3 [ 185.346547][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.436156][ T7360] loop3: detected capacity change from 0 to 256 [ 185.529980][ T7324] loop4: detected capacity change from 0 to 32768 [ 185.584963][ T7324] XFS: ikeep mount option is deprecated. [ 185.635169][ T7324] XFS: noikeep mount option is deprecated. [ 185.652713][ T7360] FAT-fs (loop3): Directory bread(block 64) failed [ 185.673839][ T7360] FAT-fs (loop3): Directory bread(block 65) failed [ 185.680514][ T7360] FAT-fs (loop3): Directory bread(block 66) failed [ 185.731069][ T7324] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.739976][ T7360] FAT-fs (loop3): Directory bread(block 67) failed [ 185.740064][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.774528][ T7360] FAT-fs (loop3): Directory bread(block 68) failed [ 185.784883][ T7360] FAT-fs (loop3): Directory bread(block 69) failed [ 185.791763][ T7360] FAT-fs (loop3): Directory bread(block 70) failed [ 185.798388][ T7360] FAT-fs (loop3): Directory bread(block 71) failed [ 185.808729][ T7360] FAT-fs (loop3): Directory bread(block 72) failed [ 185.815609][ T7360] FAT-fs (loop3): Directory bread(block 73) failed [ 185.980406][ T7324] XFS (loop4): Ending clean mount [ 186.034115][ T7324] XFS (loop4): Quotacheck needed: Please wait. [ 186.300465][ T7324] XFS (loop4): Quotacheck: Done. [ 186.542529][ T7382] loop3: detected capacity change from 0 to 1024 [ 186.555175][ T7384] loop0: detected capacity change from 0 to 64 [ 186.577643][ T7382] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 186.606502][ T5867] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.631055][ T7382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.740492][ T7386] loop5: detected capacity change from 0 to 1024 [ 186.786832][ T7391] devpts: Bad value for 'max' [ 186.956554][ T7386] hfsplus: bad catalog entry type [ 187.034152][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.282917][ T1338] hfsplus: b-tree write err: -5, ino 4 [ 187.359041][ T7399] loop3: detected capacity change from 0 to 128 [ 187.728453][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 188.724971][ T7435] loop2: detected capacity change from 0 to 256 [ 188.772020][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 188.852955][ T7435] FAT-fs (loop2): Directory bread(block 64) failed [ 188.875619][ T7435] FAT-fs (loop2): Directory bread(block 65) failed [ 188.899677][ T7435] FAT-fs (loop2): Directory bread(block 66) failed [ 188.916229][ T7435] FAT-fs (loop2): Directory bread(block 67) failed [ 188.933237][ T7435] FAT-fs (loop2): Directory bread(block 68) failed [ 188.934574][ T5877] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 188.956310][ T7435] FAT-fs (loop2): Directory bread(block 69) failed [ 188.971164][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.971945][ T7435] FAT-fs (loop2): Directory bread(block 70) failed [ 188.999036][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.003923][ T7435] FAT-fs (loop2): Directory bread(block 71) failed [ 189.019230][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 189.034426][ T7435] FAT-fs (loop2): Directory bread(block 72) failed [ 189.049371][ T7435] FAT-fs (loop2): Directory bread(block 73) failed [ 189.062619][ T5877] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 189.088249][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.122946][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.138537][ T5877] usb 1-1: config 0 descriptor?? [ 189.277021][ T7415] loop1: detected capacity change from 0 to 40427 [ 189.277845][ T7420] loop4: detected capacity change from 0 to 32768 [ 189.305860][ T24] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 189.324739][ T7415] F2FS-fs (loop1): build fault injection rate: 690 [ 189.360592][ T24] usb 6-1: config 0 has no interface number 0 [ 189.406668][ T24] usb 6-1: too many endpoints for config 0 interface 76 altsetting 1: 52, using maximum allowed: 30 [ 189.418459][ T24] usb 6-1: config 0 interface 76 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 189.433901][ T24] usb 6-1: config 0 interface 76 has no altsetting 0 [ 189.434416][ T7415] F2FS-fs (loop1): invalid crc value [ 189.447536][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.456874][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.482407][ T24] usb 6-1: config 0 descriptor?? [ 189.485441][ T7439] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 189.504754][ T24] cp210x 6-1:0.76: cp210x converter detected [ 189.528868][ T7420] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.627813][ T5877] holtek_kbd 0003:04D9:A055.000E: unknown main item tag 0x0 [ 189.669938][ T5877] holtek_kbd 0003:04D9:A055.000E: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 189.700491][ T7415] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.733056][ T7420] XFS (loop4): Ending clean mount [ 189.825441][ T7415] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.920527][ T24] cp210x 6-1:0.76: failed to get vendor val 0x000e size 3: -71 [ 189.943258][ T7455] loop2: detected capacity change from 0 to 256 [ 189.971494][ T5877] usb 1-1: USB disconnect, device number 2 [ 189.981235][ T5867] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.994177][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 190.064901][ T24] usb 6-1: USB disconnect, device number 6 [ 190.108878][ T7455] FAT-fs (loop2): Directory bread(block 64) failed [ 190.172060][ T7455] FAT-fs (loop2): Directory bread(block 65) failed [ 190.178692][ T7455] FAT-fs (loop2): Directory bread(block 66) failed [ 190.200315][ T7453] fido_id[7453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 190.217778][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.261759][ T7455] FAT-fs (loop2): Directory bread(block 67) failed [ 190.267928][ T24] cp210x 6-1:0.76: device disconnected [ 190.289354][ T7455] FAT-fs (loop2): Directory bread(block 68) failed [ 190.331543][ T5872] syz-executor: attempt to access beyond end of device [ 190.331543][ T5872] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.367971][ T7455] FAT-fs (loop2): Directory bread(block 69) failed [ 190.383999][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 190.384043][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.384081][ T5872] Call Trace: [ 190.384092][ T5872] [ 190.384105][ T5872] dump_stack_lvl+0x16c/0x1f0 [ 190.384169][ T5872] f2fs_handle_critical_error+0x624/0x9f0 [ 190.384220][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.384264][ T5872] ? f2fs_build_fault_attr+0x53/0x1f0 [ 190.384314][ T5872] f2fs_write_end_io+0x958/0xcf0 [ 190.384369][ T5872] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 190.384426][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.384487][ T5872] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 190.384536][ T5872] bio_endio+0x713/0x860 [ 190.384600][ T5872] submit_bio_noacct+0x306/0x1ed0 [ 190.384658][ T5872] __submit_merged_bio+0x33c/0x770 [ 190.384716][ T5872] __submit_merged_write_cond+0x319/0x3f0 [ 190.384780][ T5872] f2fs_write_cache_pages+0x2067/0x2570 [ 190.384866][ T5872] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 190.384931][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.384974][ T5872] ? __kasan_check_byte+0x13/0x50 [ 190.385009][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385055][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385097][ T5872] ? rcu_is_watching+0x12/0xc0 [ 190.385143][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385189][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385232][ T5872] ? __kasan_check_byte+0x13/0x50 [ 190.385281][ T5872] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 190.385335][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385445][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385489][ T5872] ? add_lock_to_list+0x9d/0x130 [ 190.385547][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385599][ T5872] f2fs_write_data_pages+0x4ad/0xd90 [ 190.385666][ T5872] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 190.385723][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385777][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.385827][ T5872] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 190.385889][ T5872] do_writepages+0x27a/0x600 [ 190.385943][ T5872] ? __pfx_do_writepages+0x10/0x10 [ 190.385988][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 190.386029][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.386070][ T5872] ? _raw_spin_unlock+0x28/0x50 [ 190.386127][ T5872] filemap_fdatawrite_wbc+0x104/0x160 [ 190.386176][ T5872] ? stack_trace_save+0x8e/0xc0 [ 190.386227][ T5872] __filemap_fdatawrite_range+0xb9/0x100 [ 190.386289][ T5872] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 190.386348][ T5872] ? check_path.constprop.0+0x24/0x50 [ 190.386462][ T5872] ? find_held_lock+0x2b/0x80 [ 190.386509][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.386553][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 190.386594][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.386644][ T5872] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 190.386728][ T5872] block_operations+0x2b0/0xfe0 [ 190.386809][ T5872] ? __pfx_block_operations+0x10/0x10 [ 190.386867][ T5872] ? add_lock_to_list+0x9d/0x130 [ 190.386971][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.387015][ T5872] ? down_write+0x14d/0x200 [ 190.387051][ T5872] ? __pfx_down_write+0x10/0x10 [ 190.387089][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.387131][ T5872] ? rcu_is_watching+0x12/0xc0 [ 190.387183][ T5872] f2fs_write_checkpoint+0x2b8/0x4c60 [ 190.387226][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.387269][ T5872] ? kfree+0x2b4/0x4d0 [ 190.387313][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.387356][ T5872] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.387410][ T5872] ? f2fs_stop_gc_thread+0x79/0xd0 [ 190.387457][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.387512][ T5872] kill_f2fs_super+0x3c2/0x470 [ 190.387549][ T5872] ? __pfx_kill_f2fs_super+0x10/0x10 [ 190.387582][ T5872] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.387658][ T5872] deactivate_locked_super+0xc1/0x1a0 [ 190.387715][ T5872] deactivate_super+0xde/0x100 [ 190.387772][ T5872] cleanup_mnt+0x225/0x450 [ 190.387832][ T5872] task_work_run+0x150/0x240 [ 190.387875][ T5872] ? __pfx_task_work_run+0x10/0x10 [ 190.387913][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.387959][ T5872] ? __pfx___x64_sys_umount+0x10/0x10 [ 190.388005][ T5872] exit_to_user_mode_loop+0xeb/0x110 [ 190.388047][ T5872] do_syscall_64+0x41c/0x4e0 [ 190.388083][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.388119][ T5872] RIP: 0033:0x7f6f135901f7 [ 190.388147][ T5872] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 190.388182][ T5872] RSP: 002b:00007ffdc9bfe9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 190.388216][ T5872] RAX: 0000000000000000 RBX: 00007f6f13611d7d RCX: 00007f6f135901f7 [ 190.388239][ T5872] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc9bfea70 [ 190.388261][ T5872] RBP: 00007ffdc9bfea70 R08: 0000000000000000 R09: 0000000000000000 [ 190.388284][ T5872] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc9bffb00 [ 190.388307][ T5872] R13: 00007f6f13611d7d R14: 000000000002e670 R15: 00007ffdc9bffb40 [ 190.388355][ T5872] [ 190.422076][ T7455] FAT-fs (loop2): Directory bread(block 70) failed [ 190.449366][ T5872] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 190.454101][ T7455] FAT-fs (loop2): Directory bread(block 71) failed [ 190.607101][ T7459] loop3: detected capacity change from 0 to 256 [ 190.730052][ T7455] FAT-fs (loop2): Directory bread(block 72) failed [ 190.730098][ T7455] FAT-fs (loop2): Directory bread(block 73) failed [ 190.952027][ T5962] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.986122][ T7459] exfat: Deprecated parameter 'utf8' [ 191.005148][ T7459] exfat: Deprecated parameter 'utf8' [ 191.010599][ T7459] exfat: Deprecated parameter 'utf8' [ 191.161172][ T7459] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 191.195318][ T5962] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 191.241692][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.306940][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.361708][ T5962] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.412287][ T5962] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 191.453417][ T5962] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 191.479079][ T5962] usb 6-1: Manufacturer: syz [ 191.591924][ T5962] usb 6-1: config 0 descriptor?? [ 191.600993][ T7471] loop0: detected capacity change from 0 to 256 [ 191.663142][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 191.724614][ T7471] FAT-fs (loop0): Directory bread(block 64) failed [ 191.745891][ T7471] FAT-fs (loop0): Directory bread(block 65) failed [ 191.812061][ T7471] FAT-fs (loop0): Directory bread(block 66) failed [ 191.818689][ T7471] FAT-fs (loop0): Directory bread(block 67) failed [ 191.877128][ T7471] FAT-fs (loop0): Directory bread(block 68) failed [ 191.919597][ T7471] FAT-fs (loop0): Directory bread(block 69) failed [ 191.957298][ T7471] FAT-fs (loop0): Directory bread(block 70) failed [ 191.979009][ T7471] FAT-fs (loop0): Directory bread(block 71) failed [ 192.003143][ T7471] FAT-fs (loop0): Directory bread(block 72) failed [ 192.009839][ T7471] FAT-fs (loop0): Directory bread(block 73) failed [ 192.041375][ T5962] appleir 0003:05AC:8243.000F: item fetching failed at offset 0/1 [ 192.079464][ T5962] appleir 0003:05AC:8243.000F: parse failed [ 192.118312][ T5962] appleir 0003:05AC:8243.000F: probe with driver appleir failed with error -22 [ 192.318324][ T5877] usb 6-1: USB disconnect, device number 7 [ 192.729632][ T7483] loop0: detected capacity change from 0 to 1024 [ 192.753024][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.769554][ T7467] loop4: detected capacity change from 0 to 32768 [ 192.816805][ T7467] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.608 (7467) [ 192.818507][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.922570][ T7467] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.977872][ T7467] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 193.087018][ T7483] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 193.113149][ T7483] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 193.163975][ T7475] loop2: detected capacity change from 0 to 40427 [ 193.187282][ T7483] EXT4-fs (loop0): This should not happen!! Data will be lost [ 193.187282][ T7483] [ 193.201351][ T7483] EXT4-fs (loop0): Total free blocks count 0 [ 193.207849][ T7483] EXT4-fs (loop0): Free/Dirty block details [ 193.233154][ T7483] EXT4-fs (loop0): free_blocks=68451041280 [ 193.247642][ T7483] EXT4-fs (loop0): dirty_blocks=16 [ 193.262109][ T7483] EXT4-fs (loop0): Block reservation details [ 193.284485][ T7475] F2FS-fs (loop2): invalid crc value [ 193.321726][ T7483] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 193.371327][ T7467] BTRFS info (device loop4): turning off barriers [ 193.417167][ T7467] BTRFS info (device loop4): enabling free space tree [ 193.472051][ T7467] BTRFS info (device loop4): use zstd compression, level 3 [ 193.493068][ T7508] loop5: detected capacity change from 0 to 1024 [ 193.695768][ T7508] hfsplus: bad catalog entry type [ 193.709030][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.860553][ T5867] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.860815][ T3521] hfsplus: b-tree write err: -5, ino 4 [ 194.031964][ T7475] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 194.078636][ T7475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 194.092637][ T7516] loop0: detected capacity change from 0 to 64 [ 194.216137][ T7516] hfs: unable to locate alternate MDB [ 194.251877][ T7516] hfs: continuing without an alternate MDB [ 194.284879][ T7475] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 194.294155][ T7477] loop3: detected capacity change from 0 to 40427 [ 194.471637][ T7477] F2FS-fs (loop3): invalid crc value [ 195.013496][ T7477] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 195.061928][ T7477] F2FS-fs (loop3): Start checkpoint disabled! [ 195.117421][ T7477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 195.232176][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.287063][ T7537] loop1: detected capacity change from 0 to 2048 [ 195.377827][ T7541] loop0: detected capacity change from 0 to 256 [ 195.412055][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 195.434331][ T7537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.483331][ T7541] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 195.495734][ T7537] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.507324][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.541733][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 195.583105][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.622876][ T9] usb 5-1: config 0 descriptor?? [ 195.697339][ T7546] netlink: 256 bytes leftover after parsing attributes in process `syz.5.633'. [ 195.758299][ T7546] netlink: 64 bytes leftover after parsing attributes in process `syz.5.633'. [ 195.792770][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.116790][ T9] stadia 0003:18D1:9400.0010: reserved main item tag 0xd [ 196.182493][ T9] stadia 0003:18D1:9400.0010: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.4-1/input0 [ 196.214723][ T9] stadia 0003:18D1:9400.0010: no inputs found [ 196.254537][ T9] stadia 0003:18D1:9400.0010: force feedback init failed [ 196.316617][ T7554] sp0: Synchronizing with TNC [ 196.352009][ T9] usb 5-1: USB disconnect, device number 9 [ 196.369679][ T7554] sp0: Found TNC [ 196.511425][ T7555] fido_id[7555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.602982][ T978] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 196.785042][ T978] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.824565][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.831389][ T978] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 196.864793][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.906042][ T978] usb 2-1: config 0 descriptor?? [ 197.177014][ T7573] netlink: 10 bytes leftover after parsing attributes in process `syz.3.643'. [ 197.243245][ T7569] loop0: detected capacity change from 0 to 2048 [ 197.355318][ T7576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.383936][ T7550] loop2: detected capacity change from 0 to 32768 [ 197.390041][ T978] waltop 0003:172F:0032.0011: unknown main item tag 0x7 [ 197.476869][ T978] waltop 0003:172F:0032.0011: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 197.498872][ T7578] sd 0:0:1:0: device reset [ 197.652135][ T10] usb 2-1: USB disconnect, device number 4 [ 197.708947][ T7550] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 197.947239][ T7550] (syz.2.625,7550,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 198.025416][ T7550] (syz.2.625,7550,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 198.073182][ T7550] (syz.2.625,7550,0):ocfs2_rename:1486 ERROR: status = -2 [ 198.113636][ T7550] (syz.2.625,7550,0):ocfs2_rename:1702 ERROR: status = -2 [ 198.256242][ T7595] loop3: detected capacity change from 0 to 512 [ 198.308785][ T7595] EXT4-fs: Ignoring removed orlov option [ 198.364772][ T7591] fido_id[7591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 198.431702][ T7595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.560637][ T7595] EXT4-fs error (device loop3): ext4_iget_extra_inode:5103: inode #17: comm syz.3.652: corrupted in-inode xattr: overlapping e_value [ 198.646915][ T7595] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.652: couldn't read orphan inode 17 (err -117) [ 198.654013][ T5870] ocfs2: Unmounting device (7,2) on (node local) [ 198.708651][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.849583][ T7615] loop5: detected capacity change from 0 to 512 [ 198.948490][ T7615] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.297477][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.415232][ T7626] loop2: detected capacity change from 0 to 256 [ 199.660396][ T7626] FAT-fs (loop2): Directory bread(block 64) failed [ 199.697720][ T7633] loop4: detected capacity change from 0 to 512 [ 199.713266][ T7626] FAT-fs (loop2): Directory bread(block 65) failed [ 199.740083][ T7626] FAT-fs (loop2): Directory bread(block 66) failed [ 199.750466][ T7633] EXT4-fs: Ignoring removed oldalloc option [ 199.765965][ T7626] FAT-fs (loop2): Directory bread(block 67) failed [ 199.783576][ T7626] FAT-fs (loop2): Directory bread(block 68) failed [ 199.801985][ T7633] EXT4-fs error (device loop4): ext4_xattr_inode_iget:432: comm syz.4.669: Parent and EA inode have the same ino 15 [ 199.810277][ T7639] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 199.839804][ T7626] FAT-fs (loop2): Directory bread(block 69) failed [ 199.903595][ T7626] FAT-fs (loop2): Directory bread(block 70) failed [ 199.910582][ T7633] EXT4-fs error (device loop4): ext4_xattr_inode_iget:432: comm syz.4.669: Parent and EA inode have the same ino 15 [ 199.931740][ T7626] FAT-fs (loop2): Directory bread(block 71) failed [ 199.968066][ T7633] EXT4-fs (loop4): 1 orphan inode deleted [ 199.978831][ T7626] FAT-fs (loop2): Directory bread(block 72) failed [ 200.021839][ T7626] FAT-fs (loop2): Directory bread(block 73) failed [ 200.052446][ T7633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.126328][ T7643] loop3: detected capacity change from 0 to 1024 [ 200.175585][ T7643] EXT4-fs: Ignoring removed orlov option [ 200.316614][ T7633] EXT4-fs warning (device loop4): __ext4_unlink:3277: inode #15: comm syz.4.669: Deleting file 'file1' with no links [ 200.377208][ T7643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.714939][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.728286][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.158986][ T7661] loop3: detected capacity change from 0 to 4096 [ 201.185118][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.186945][ T7661] EXT4-fs: Ignoring removed nobh option [ 201.252516][ T7661] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.339043][ T7661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.371954][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 201.388396][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.419646][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.468587][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.530789][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 201.544429][ T7661] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 201.583599][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.662899][ T10] usb 5-1: config 0 descriptor?? [ 201.879878][ T7681] vlan2: entered allmulticast mode [ 201.893426][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.926191][ T7681] bond0: entered allmulticast mode [ 201.948298][ T7681] bond_slave_0: entered allmulticast mode [ 201.981770][ T7681] bond_slave_1: entered allmulticast mode [ 202.025334][ T7675] loop5: detected capacity change from 0 to 8192 [ 202.099693][ T7684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.286094][ T10] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf4 found [ 202.322073][ T7687] loop3: detected capacity change from 0 to 1024 [ 202.329846][ T10] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf3 found [ 202.377060][ T7689] pim6reg: entered allmulticast mode [ 202.449457][ T10] usb 5-1: USB disconnect, device number 10 [ 202.473837][ T7692] pim6reg: left allmulticast mode [ 202.490428][ T7687] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 202.652832][ T7687] hfsplus: bad catalog entry type [ 202.917356][ T7695] loop5: detected capacity change from 0 to 4096 [ 203.029006][ T7695] NILFS (loop5): invalid segment: Checksum error in segment payload [ 203.085662][ T7695] NILFS (loop5): trying rollback from an earlier position [ 203.279815][ T7695] NILFS (loop5): recovery complete [ 203.341319][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 203.389434][ T7710] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.725222][ T7719] loop1: detected capacity change from 0 to 47 [ 203.752345][ T978] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 203.780029][ T7715] ipvlan2: entered promiscuous mode [ 203.841831][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.849605][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.933949][ T7719] MINIX-fs: deleted inode referenced: 9 [ 203.951161][ T7719] MINIX-fs: deleted inode referenced: 9 [ 203.999638][ T978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.028485][ T978] usb 3-1: config 0 has no interface number 0 [ 204.081837][ T978] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 204.131739][ T978] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 204.184955][ T978] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.232780][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.276045][ T978] usb 3-1: config 0 descriptor?? [ 204.282561][ T7712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.363689][ T978] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 204.461770][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 204.627909][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 204.646919][ T978] usb 3-1: USB disconnect, device number 7 [ 204.665278][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.697684][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.721194][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.771817][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.779877][ T10] usb 6-1: SerialNumber: syz [ 205.051543][ T10] usb 6-1: 0:2 : does not exist [ 205.061424][ T7746] loop3: detected capacity change from 0 to 1024 [ 205.082549][ T5877] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 205.129634][ T7746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.146730][ T10] usb 6-1: USB disconnect, device number 8 [ 205.265938][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.293303][ T5877] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 205.316362][ T6184] udevd[6184]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.326742][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 205.381737][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.420500][ T5877] usb 5-1: Product: syz [ 205.432997][ T5877] usb 5-1: Manufacturer: syz [ 205.437633][ T5877] usb 5-1: SerialNumber: syz [ 205.524652][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.650630][ T7759] loop1: detected capacity change from 0 to 64 [ 206.047566][ T7766] loop5: detected capacity change from 0 to 1024 [ 206.092138][ T7766] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.152255][ T7766] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 206.179697][ T7768] dvmrp8: entered allmulticast mode [ 206.181120][ T7766] EXT4-fs (loop5): orphan cleanup on readonly fs [ 206.212771][ T7766] EXT4-fs error (device loop5): ext4_free_blocks:6695: comm syz.5.727: Freeing blocks not in datazone - block = 0, count = 4096 [ 206.237460][ T7767] dvmrp8: left allmulticast mode [ 206.296913][ T7766] EXT4-fs (loop5): 1 orphan inode deleted [ 206.307228][ T7766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.475825][ T5877] usb 5-1: USB disconnect, device number 11 [ 206.591247][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.663743][ T5877] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 206.982451][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.042998][ T5877] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 207.050660][ T5877] usb 5-1: can't read configurations, error -71 [ 207.057476][ T7789] loop3: detected capacity change from 0 to 2048 [ 207.163113][ T7789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.177620][ T7793] loop2: detected capacity change from 0 to 1024 [ 207.243734][ T7793] hfsplus: bad catalog entry type [ 207.275334][ T7788] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 512 extent 56+512 [ 207.465427][ T3521] hfsplus: b-tree write err: -5, ino 4 [ 208.153643][ T7780] loop1: detected capacity change from 0 to 32768 [ 208.319674][ T7780] overlayfs: upper fs needs to support d_type. [ 208.363432][ T7780] overlayfs: upper fs does not support tmpfile. [ 208.431237][ T7780] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.492166][ T7780] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 208.492166][ T7780] [ 208.544247][ T7780] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 208.621959][ T7780] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 208.621959][ T7780] [ 208.688059][ T7780] overlayfs: failed to verify upper root origin [ 208.971734][ T3521] read_mapping_page failed! [ 208.976695][ T3521] ERROR: (device loop1): txAbort: [ 208.976695][ T3521] [ 209.012362][ T3521] jfs_write_inode: jfs_commit_inode failed! [ 209.015320][ T7834] netlink: 'syz.5.761': attribute type 178 has an invalid length. [ 209.325591][ T24] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 209.422994][ T7848] loop3: detected capacity change from 0 to 2048 [ 209.505236][ T7848] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 209.535631][ T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 209.566986][ T7848] System zones: 0-7 [ 209.584837][ T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 209.614960][ T7848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.659919][ T24] usb 3-1: config 0 has no interface number 0 [ 209.697706][ T24] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.748872][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.801434][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.838755][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 209.872705][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.916873][ T24] usb 3-1: config 0 descriptor?? [ 209.952150][ T7839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.046878][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.595145][ T24] usb 3-1: USB disconnect, device number 8 [ 211.064179][ T7889] pim6reg9: entered allmulticast mode [ 211.767490][ T7872] loop1: detected capacity change from 0 to 32768 [ 212.068251][ T7918] loop3: detected capacity change from 0 to 64 [ 212.521153][ T7928] loop2: detected capacity change from 0 to 1024 [ 212.676685][ T30] audit: type=1800 audit(1758755186.090:12): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.806" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 212.954975][ T3521] hfsplus: b-tree write err: -5, ino 4 [ 213.194862][ T7948] loop2: detected capacity change from 0 to 256 [ 213.217639][ T7948] exfat: Deprecated parameter 'utf8' [ 213.278589][ T7948] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 213.419766][ T7953] netlink: 802 bytes leftover after parsing attributes in process `syz.4.817'. [ 213.420250][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.816'. [ 214.509989][ T7979] loop2: detected capacity change from 0 to 8192 [ 214.585548][ T30] audit: type=1800 audit(1758755188.000:13): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.830" name="file2" dev="loop2" ino=1048693 res=0 errno=0 [ 214.640903][ T7979] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 214.658645][ T7979] FAT-fs (loop2): Filesystem has been set read-only [ 214.677357][ T7979] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 214.761833][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.791863][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 214.921816][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 214.935384][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.960758][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.982280][ T9] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 214.998921][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.018941][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.027859][ T10] usb 5-1: Product: syz [ 215.057879][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 215.079562][ T10] usb 5-1: Manufacturer: syz [ 215.084745][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 215.111947][ T10] usb 5-1: SerialNumber: syz [ 215.126796][ T9] usb 6-1: Product: syz [ 215.130989][ T9] usb 6-1: Manufacturer: syz [ 215.161660][ T9] usb 6-1: SerialNumber: syz [ 215.184652][ T9] usb 6-1: config 0 descriptor?? [ 215.234281][ T9] ims_pcu 6-1:0.0: Zero length descriptor [ 215.240127][ T9] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 215.363739][ T10] usb 5-1: 0:2 : does not exist [ 215.387158][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 215.499987][ T9] usb 6-1: USB disconnect, device number 9 [ 215.567926][ T10] usb 5-1: USB disconnect, device number 14 [ 215.729701][ T6184] udevd[6184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.805006][ T7998] loop2: detected capacity change from 0 to 1024 [ 215.875990][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 215.935989][ T8002] veth0_macvtap: left promiscuous mode [ 215.994426][ T13] hfsplus: b-tree write err: -5, ino 4 [ 216.079888][ T8000] loop3: detected capacity change from 0 to 4096 [ 216.171508][ T8000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.270650][ T8008] loop4: detected capacity change from 0 to 65 [ 216.279994][ T8008] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 216.400067][ T8000] EXT4-fs error (device loop3): ext4_get_first_dir_block:3548: inode #12: block 80: comm syz.3.840: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 216.501335][ T8014] loop5: detected capacity change from 0 to 512 [ 216.517185][ T8016] loop1: detected capacity change from 0 to 512 [ 216.557447][ T8000] EXT4-fs error (device loop3): ext4_get_first_dir_block:3552: inode #12: comm syz.3.840: directory missing '..' [ 216.592085][ T8014] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 216.622429][ T8016] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 216.679307][ T8014] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.846: invalid indirect mapped block 2683928664 (level 1) [ 216.694259][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 216.702313][ T8016] EXT4-fs (loop1): invalid journal inode [ 216.708031][ T8016] EXT4-fs (loop1): can't get journal size [ 216.738411][ T8016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 216.769289][ T8014] EXT4-fs (loop5): Remounting filesystem read-only [ 216.786590][ T8016] System zones: 1-12, 13-13 [ 216.820375][ T8016] EXT4-fs error (device loop1): ext4_iget_extra_inode:5103: inode #15: comm syz.1.847: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 216.821202][ T8014] EXT4-fs (loop5): 1 truncate cleaned up [ 216.864928][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.873824][ T8014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.904486][ T8016] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.847: couldn't read orphan inode 15 (err -117) [ 216.941693][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.975995][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 217.036210][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 217.055512][ T8014] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 217.061115][ T8016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.098730][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.131741][ T9] usb 1-1: Product: syz [ 217.135940][ T9] usb 1-1: Manufacturer: syz [ 217.175106][ T9] usb 1-1: SerialNumber: syz [ 217.299152][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.349611][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.357005][ T8030] loop4: detected capacity change from 0 to 64 [ 217.502176][ T8026] loop3: detected capacity change from 0 to 4096 [ 217.540291][ T8026] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 217.707660][ T8026] ntfs3(loop3): ino=19, mi_enum_attr [ 217.727355][ T8026] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 217.802231][ T978] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 217.992529][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 218.017598][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.055414][ T978] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 218.081810][ T9] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 218.125002][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.138301][ T8045] loop4: detected capacity change from 0 to 24 [ 218.173205][ T978] usb 6-1: config 0 descriptor?? [ 218.342190][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.402247][ T9] usb 1-1: device firmware changed [ 218.427742][ T8050] loop1: detected capacity change from 0 to 512 [ 218.458923][ T9] usb 1-1: USB disconnect, device number 3 [ 218.503378][ T8050] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 218.550516][ T8050] EXT4-fs (loop1): invalid journal inode [ 218.581046][ T8050] EXT4-fs (loop1): can't get journal size [ 218.646372][ T978] belkin 0003:1020:0006.0013: unknown main item tag 0x1 [ 218.676426][ T8050] EXT4-fs (loop1): 1 truncate cleaned up [ 218.701834][ T978] belkin 0003:1020:0006.0013: report_id 0 is invalid [ 218.743781][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.773970][ T978] belkin 0003:1020:0006.0013: item 0 0 1 8 parsing failed [ 218.822902][ T978] belkin 0003:1020:0006.0013: parse failed [ 218.828833][ T978] belkin 0003:1020:0006.0013: probe with driver belkin failed with error -22 [ 218.939131][ T978] usb 6-1: USB disconnect, device number 10 [ 219.075902][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.584027][ T8052] loop2: detected capacity change from 0 to 32768 [ 219.791729][ T8074] loop1: detected capacity change from 0 to 4096 [ 219.996501][ T8052] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 219.996556][ T8052] allowing incompatible features above 0.0: (unknown version) [ 219.996577][ T8052] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 220.211740][ T8052] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 220.271781][ T8052] bcachefs (loop2): initializing new filesystem [ 220.366894][ T8052] bcachefs (loop2): going read-write [ 220.451910][ T8096] random: crng reseeded on system resumption [ 220.902583][ T8104] loop5: detected capacity change from 0 to 4096 [ 220.951181][ T8106] loop3: detected capacity change from 0 to 1024 [ 220.987035][ T8052] bcachefs (loop2): marking superblocks [ 221.102800][ T8111] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.118293][ T8106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.195183][ T8052] bcachefs (loop2): initializing freespace [ 221.284774][ T8104] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 221.315195][ T8052] bcachefs (loop2): done initializing freespace [ 221.405374][ T8104] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 221.445072][ T8052] bcachefs (loop2): reading snapshots table [ 221.451062][ T8052] bcachefs (loop2): reading snapshots done [ 221.491149][ T8104] Remounting filesystem read-only [ 221.506579][ T8104] NILFS (loop5): error -5 truncating bmap (ino=12) [ 221.535461][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.601055][ T8121] loop1: detected capacity change from 0 to 1024 [ 221.694182][ T8052] bcachefs (loop2): done starting filesystem [ 221.711169][ T5868] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 221.752476][ T5232] udevd[5232]: worker [5880] terminated by signal 33 (Unknown signal 33) [ 221.797425][ T5232] udevd[5232]: worker [5880] failed while handling '/devices/virtual/block/loop1' [ 221.829645][ T5232] udevd[5232]: worker [6184] terminated by signal 33 (Unknown signal 33) [ 221.850167][ T5232] udevd[5232]: worker [6184] failed while handling '/devices/virtual/block/loop5' [ 221.886467][ T8126] loop3: detected capacity change from 0 to 512 [ 221.934018][ T65] hfsplus: b-tree write err: -5, ino 4 [ 221.966037][ T5870] bcachefs (loop2): shutting down [ 221.977243][ T5870] bcachefs (loop2): going read-only [ 222.015939][ T5870] bcachefs (loop2): finished waiting for writes to stop [ 222.059533][ T8128] vxcan1: entered allmulticast mode [ 222.065836][ T8126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.080514][ T8126] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.092533][ T5870] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5 [ 222.169639][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 222.199868][ T8126] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.891: corrupted xattr block 6: invalid header [ 222.369852][ T5870] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5 [ 222.439748][ T5870] bcachefs (loop2): clean shutdown complete, journal seq 6 [ 222.472016][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.488866][ T5870] bcachefs (loop2): marking filesystem clean [ 222.496579][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.613313][ T8142] loop5: detected capacity change from 0 to 8192 [ 222.663202][ T8142] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.675164][ T5870] bcachefs (loop2): shutdown complete [ 222.725822][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.767146][ T24] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 222.791477][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.869661][ T24] usb 5-1: config 0 descriptor?? [ 223.349191][ T24] hid_mf 0003:0079:1846.0014: unknown main item tag 0x1 [ 223.421536][ T24] hid_mf 0003:0079:1846.0014: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 223.481756][ T24] hid_mf 0003:0079:1846.0014: Invalid report, this should never happen! [ 223.490136][ T24] hid_mf 0003:0079:1846.0014: Force feedback init failed. [ 223.540043][ T8160] loop5: detected capacity change from 0 to 2048 [ 223.573228][ T24] usb 5-1: USB disconnect, device number 15 [ 223.575133][ T8160] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 223.655615][ T8160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.716762][ T8163] fido_id[8163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 224.654863][ T8192] loop5: detected capacity change from 0 to 64 [ 224.728116][ T8190] loop4: detected capacity change from 0 to 4096 [ 224.815976][ T8190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.024314][ T5957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.078472][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.226847][ T8179] loop1: detected capacity change from 0 to 32768 [ 225.229233][ T5957] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 225.286809][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.319003][ T5957] usb 1-1: Product: syz [ 225.328632][ T5957] usb 1-1: Manufacturer: syz [ 225.333563][ T5957] usb 1-1: SerialNumber: syz [ 225.350611][ T8179] JBD2: Ignoring recovery information on journal [ 225.716048][ T8179] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 225.726583][ T8206] loop5: detected capacity change from 0 to 32768 [ 225.737933][ T8206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.927 (8206) [ 225.791851][ T8206] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.802152][ T8206] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 225.940574][ T68] BTRFS warning (device loop5): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x4e85564e level 0 [ 226.011853][ T5957] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 226.024802][ T5957] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 226.037778][ T8206] BTRFS warning (device loop5): failed to read fs tree: -5 [ 226.077209][ T5957] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 226.090677][ T8206] BTRFS error (device loop5): open_ctree failed: -5 [ 226.150269][ T5957] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 226.181263][ T5957] usb 1-1: USB disconnect, device number 4 [ 226.194680][ T5872] ocfs2: Unmounting device (7,1) on (node local) [ 227.131018][ T8238] loop4: detected capacity change from 0 to 1024 [ 227.206116][ T8238] hfsplus: bad catalog entry type [ 227.245111][ T5957] IPVS: starting estimator thread 0... [ 227.372762][ T8246] IPVS: using max 22 ests per chain, 52800 per kthread [ 227.391688][ T6002] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 227.444000][ T68] hfsplus: b-tree write err: -5, ino 4 [ 227.591687][ T6002] usb 6-1: Using ep0 maxpacket: 32 [ 227.623145][ T6002] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.708849][ T6002] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.748071][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.821892][ T6002] usb 6-1: Product: syz [ 227.831123][ T6002] usb 6-1: Manufacturer: syz [ 227.847385][ T6002] usb 6-1: SerialNumber: syz [ 227.871214][ T8258] tmpfs: Cannot change global quota limit on remount [ 227.880065][ T6002] usb 6-1: config 0 descriptor?? [ 227.889349][ T8242] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.904275][ T6002] hub 6-1:0.0: bad descriptor, ignoring hub [ 227.922070][ T6002] hub 6-1:0.0: probe with driver hub failed with error -5 [ 227.941838][ T978] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.120879][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.155525][ T978] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 228.197890][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.239504][ T978] usb 5-1: config 0 descriptor?? [ 228.412514][ T9] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 228.577769][ T8242] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 228.663333][ T8244] loop2: detected capacity change from 0 to 40427 [ 228.700844][ T978] steelseries 0003:1038:12B6.0015: unknown main item tag 0x2 [ 228.709874][ T8244] F2FS-fs (loop2): invalid crc value [ 228.732825][ T978] steelseries 0003:1038:12B6.0015: item fetching failed at offset 6/7 [ 228.772530][ T978] steelseries 0003:1038:12B6.0015: probe with driver steelseries failed with error -22 [ 228.821575][ T8268] loop3: detected capacity change from 0 to 2048 [ 228.926981][ T6002] usb 5-1: USB disconnect, device number 16 [ 228.944400][ T8270] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.976050][ T10] usb 6-1: USB disconnect, device number 11 [ 229.158956][ T8244] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 229.208906][ T8244] F2FS-fs (loop2): Start checkpoint disabled! [ 229.262466][ T8244] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 229.283767][ T8262] loop1: detected capacity change from 0 to 32768 [ 229.335841][ T8262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.944 (8262) [ 229.421706][ T8262] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.476187][ T8262] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 229.725262][ T8262] BTRFS info (device loop1): turning off barriers [ 229.754790][ T8262] BTRFS info (device loop1): enabling free space tree [ 229.781697][ T8262] BTRFS info (device loop1): use zstd compression, level 3 [ 229.793052][ T68] kworker/u8:6: attempt to access beyond end of device [ 229.793052][ T68] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.855090][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 229.855137][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.855162][ T68] Workqueue: writeback wb_workfn (flush-7:2) [ 229.855230][ T68] Call Trace: [ 229.855241][ T68] [ 229.855254][ T68] dump_stack_lvl+0x16c/0x1f0 [ 229.855314][ T68] f2fs_handle_critical_error+0x624/0x9f0 [ 229.855365][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.855409][ T68] ? f2fs_build_fault_attr+0x53/0x1f0 [ 229.855458][ T68] f2fs_write_end_io+0x958/0xcf0 [ 229.855513][ T68] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 229.855569][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.855623][ T68] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 229.855672][ T68] bio_endio+0x713/0x860 [ 229.855742][ T68] submit_bio_noacct+0x306/0x1ed0 [ 229.855801][ T68] __submit_merged_bio+0x33c/0x770 [ 229.855858][ T68] __submit_merged_write_cond+0x319/0x3f0 [ 229.855920][ T68] f2fs_write_cache_pages+0x2067/0x2570 [ 229.856007][ T68] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 229.856079][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856126][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856169][ T68] ? find_held_lock+0x2b/0x80 [ 229.856222][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856270][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856312][ T68] ? do_raw_spin_unlock+0x172/0x230 [ 229.856369][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856412][ T68] ? f2fs_available_free_memory+0x279/0xa30 [ 229.856526][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856578][ T68] f2fs_write_data_pages+0x4ad/0xd90 [ 229.856644][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 229.856713][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.856757][ T68] ? __lock_acquire+0xb97/0x1ce0 [ 229.856816][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 229.856877][ T68] do_writepages+0x27a/0x600 [ 229.856931][ T68] ? __pfx_do_writepages+0x10/0x10 [ 229.856976][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857019][ T68] ? reacquire_held_locks+0xcd/0x1f0 [ 229.857083][ T68] ? writeback_sb_inodes+0x3b0/0xfa0 [ 229.857139][ T68] __writeback_single_inode+0x160/0xfb0 [ 229.857197][ T68] ? __pfx___writeback_single_inode+0x10/0x10 [ 229.857245][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857288][ T68] ? do_raw_spin_unlock+0x172/0x230 [ 229.857329][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857378][ T68] writeback_sb_inodes+0x60d/0xfa0 [ 229.857450][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 229.857500][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857543][ T68] ? do_raw_spin_lock+0x12c/0x2b0 [ 229.857644][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857687][ T68] ? rcu_is_watching+0x12/0xc0 [ 229.857732][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857775][ T68] ? queue_io+0x3f6/0x520 [ 229.857822][ T68] wb_writeback+0x419/0xb70 [ 229.857881][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 229.857926][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.857982][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858025][ T68] ? mark_held_locks+0x49/0x80 [ 229.858096][ T68] wb_workfn+0x14d/0xbe0 [ 229.858150][ T68] ? try_to_wake_up+0x160/0x1870 [ 229.858201][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 229.858256][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858303][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858353][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858397][ T68] ? rcu_is_watching+0x12/0xc0 [ 229.858450][ T68] process_one_work+0x9cf/0x1b70 [ 229.858509][ T68] ? __pfx_batadv_nc_worker+0x10/0x10 [ 229.858564][ T68] ? __pfx_process_one_work+0x10/0x10 [ 229.858605][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858660][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858703][ T68] ? assign_work+0x1a0/0x250 [ 229.858745][ T68] worker_thread+0x6c8/0xf10 [ 229.858808][ T68] ? __pfx_worker_thread+0x10/0x10 [ 229.858849][ T68] kthread+0x3c5/0x780 [ 229.858887][ T68] ? __pfx_kthread+0x10/0x10 [ 229.858926][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.858969][ T68] ? rcu_is_watching+0x12/0xc0 [ 229.859015][ T68] ? __pfx_kthread+0x10/0x10 [ 229.859063][ T68] ret_from_fork+0x56d/0x730 [ 229.859096][ T68] ? __pfx_kthread+0x10/0x10 [ 229.859134][ T68] ret_from_fork_asm+0x1a/0x30 [ 229.859209][ T68] [ 230.322924][ T68] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 230.502035][ T5872] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.012089][ T8302] loop5: detected capacity change from 0 to 4096 [ 231.032348][ T8302] EXT4-fs: Ignoring removed nobh option [ 231.073452][ T8302] EXT4-fs (loop5): Test dummy encryption mode enabled [ 231.139388][ T8302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.422426][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 231.517246][ T5888] Bluetooth: hci4: command 0x0406 tx timeout [ 231.523371][ T5883] Bluetooth: hci1: command 0x0406 tx timeout [ 231.529782][ T5881] Bluetooth: hci2: command 0x0401 tx timeout [ 231.535830][ T5881] Bluetooth: hci0: command 0x0406 tx timeout [ 231.542678][ T5883] Bluetooth: hci3: command 0x0406 tx timeout [ 231.548690][ T5883] Bluetooth: hci5: command 0x0406 tx timeout [ 231.835545][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.055979][ T8322] loop5: detected capacity change from 0 to 64 [ 232.374482][ T8327] loop4: detected capacity change from 0 to 1024 [ 232.394127][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 232.402511][ T8327] hfsplus: bad catalog entry type [ 232.602871][ T37] hfsplus: b-tree write err: -5, ino 4 [ 232.608463][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.673593][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.720891][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.750366][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 232.799390][ T10] usb 6-1: SerialNumber: syz [ 233.044817][ T8346] loop1: detected capacity change from 0 to 128 [ 233.066097][ T10] usb 6-1: 0:2 : does not exist [ 233.098486][ T5885] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 233.128108][ T5885] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 233.251858][ T10] usb 6-1: USB disconnect, device number 12 [ 233.421404][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.876363][ T8364] loop3: detected capacity change from 0 to 47 [ 233.904827][ T8361] dvmrp8: entered allmulticast mode [ 233.956290][ T8360] dvmrp8: left allmulticast mode [ 234.017773][ T8364] MINIX-fs: deleted inode referenced: 9 [ 234.034285][ T8364] MINIX-fs: deleted inode referenced: 9 [ 234.078784][ T8370] loop4: detected capacity change from 0 to 1024 [ 234.176111][ T8370] hfsplus: bad catalog entry type [ 234.403120][ T61] hfsplus: b-tree write err: -5, ino 4 [ 234.592814][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 234.773494][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 234.784668][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 234.821053][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.839866][ T10] usb 3-1: Product: syz [ 234.846743][ T10] usb 3-1: Manufacturer: syz [ 234.851445][ T10] usb 3-1: SerialNumber: syz [ 234.863509][ T10] usb 3-1: config 0 descriptor?? [ 235.144843][ T8395] loop5: detected capacity change from 0 to 512 [ 235.192291][ T5885] Bluetooth: hci0: command 0x0406 tx timeout [ 235.204286][ T8395] EXT4-fs: Ignoring removed nobh option [ 235.234769][ T8385] loop3: detected capacity change from 0 to 16384 [ 235.312856][ T10] airspy 3-1:0.0: Board ID: 00 [ 235.317677][ T10] airspy 3-1:0.0: Firmware version: [ 235.342548][ T8395] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 235.383293][ T8395] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 235.394659][ T8395] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.998: casefold flag without casefold feature [ 235.401156][ T8381] loop1: detected capacity change from 0 to 32768 [ 235.407912][ T8395] EXT4-fs (loop5): Remounting filesystem read-only [ 235.430256][ T8395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.450130][ T24] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 235.551880][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 235.573691][ T10] airspy 3-1:0.0: Registered as swradio24 [ 235.579452][ T10] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 235.613029][ T8385] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc32c,norecovery,recovery_pass_last=reconstruct_snapshots,noexcl,read_only,reconstruct_alloc,version_upgrade=none [ 235.613080][ T8385] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 235.628569][ T8403] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 235.646983][ T10] usb 3-1: USB disconnect, device number 9 [ 235.681166][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 235.693028][ T8385] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 235.693200][ T8385] bcachefs (loop3): recovering from clean shutdown, journal seq 18 [ 235.693640][ T8385] bcachefs (loop3): dropping and reconstructing all alloc info [ 235.740110][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 235.778354][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.817053][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.852579][ T8385] bcachefs (loop3): accounting_read... done [ 235.869443][ T8385] bcachefs (loop3): alloc_read... done [ 235.872571][ T24] usb 5-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 235.935755][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.944263][ T8385] bcachefs (loop3): snapshots_read... done [ 235.993588][ T8385] bcachefs (loop3): done starting filesystem [ 236.032686][ T24] usb 5-1: config 0 descriptor?? [ 236.038495][ T8398] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.351693][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.492837][ T5869] bcachefs (loop3): shutting down [ 236.527102][ T8415] loop2: detected capacity change from 0 to 1024 [ 236.543154][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 236.545063][ T24] hid-generic 0003:0486:0185.0016: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.4-1/input0 [ 236.581863][ T10] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 236.594631][ T8415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.627414][ T10] usb 2-1: config 0 has no interface number 0 [ 236.645684][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 236.668729][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.707303][ T10] usb 2-1: Product: syz [ 236.711503][ T10] usb 2-1: Manufacturer: syz [ 236.726361][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.758014][ T10] usb 2-1: SerialNumber: syz [ 236.792036][ T9] usb 5-1: USB disconnect, device number 17 [ 236.799348][ T10] usb 2-1: config 0 descriptor?? [ 236.933256][ T8418] fido_id[8418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 237.049018][ T10] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 237.073449][ T8424] loop5: detected capacity change from 0 to 512 [ 237.127062][ T8424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 237.146813][ T8424] EXT4-fs (loop5): 1 truncate cleaned up [ 237.163837][ T8424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.213594][ T5885] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 237.222527][ T5885] Bluetooth: hci0: Injecting HCI hardware error event [ 237.239069][ T51] Bluetooth: hci0: hardware error 0x00 [ 237.253343][ T10] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 237.260480][ T10] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 237.267846][ T10] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 237.501256][ T5869] bcachefs (loop3): shutdown complete [ 237.527170][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.566894][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.616423][ T10] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -22 [ 237.660110][ T10] usb 2-1: USB disconnect, device number 5 [ 237.869004][ T8435] loop4: detected capacity change from 0 to 164 [ 238.207851][ T8441] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.240727][ T8437] loop5: detected capacity change from 0 to 256 [ 238.493086][ T8445] loop1: detected capacity change from 0 to 2048 [ 238.528764][ T8445] EXT4-fs: Ignoring removed nobh option [ 238.672230][ T8445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.793217][ T8445] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.089877][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.466441][ T8472] loop1: detected capacity change from 0 to 4096 [ 239.512236][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 239.556632][ T8472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.601800][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 239.658328][ T8472] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 239.687147][ T8480] loop4: detected capacity change from 0 to 1024 [ 239.693078][ T8483] loop5: detected capacity change from 0 to 2048 [ 239.714673][ T8472] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 239.729316][ T8480] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 239.761243][ T8483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.806125][ T8480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.807300][ T24] usb 1-1: config 3 has an invalid interface number: 173 but max is 0 [ 239.842133][ T24] usb 1-1: config 3 has no interface number 0 [ 239.848298][ T24] usb 1-1: config 3 interface 173 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 239.861680][ T24] usb 1-1: config 3 interface 173 has no altsetting 0 [ 239.874286][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 239.883562][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.893114][ T24] usb 1-1: Product: syz [ 239.897293][ T24] usb 1-1: Manufacturer: syz [ 239.902062][ T24] usb 1-1: SerialNumber: syz [ 239.910855][ T8474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.931289][ T24] pl2303 1-1:3.173: required interrupt-in endpoint missing [ 240.082618][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.216973][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.319195][ T6038] usb 1-1: USB disconnect, device number 5 [ 241.148404][ T8481] loop2: detected capacity change from 0 to 32768 [ 241.408849][ T8508] syz.4.1047 (8508) used obsolete PPPIOCDETACH ioctl [ 241.547692][ T8481] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 241.547747][ T8481] allowing incompatible features above 0.0: (unknown version) [ 241.547769][ T8481] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 241.632206][ T6038] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 241.741696][ T8481] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 241.742063][ T8520] loop5: detected capacity change from 0 to 1024 [ 241.770465][ T8481] bcachefs (loop2): initializing new filesystem [ 241.781826][ T6038] usb 2-1: Using ep0 maxpacket: 32 [ 241.795491][ T6038] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.809724][ T8481] bcachefs (loop2): going read-write [ 241.814305][ T8520] EXT4-fs: Ignoring removed bh option [ 241.826304][ T6038] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 241.840724][ T8520] EXT4-fs: inline encryption not supported [ 241.847156][ T6038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.856898][ T8520] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.868043][ T8481] bcachefs (loop2): marking superblocks [ 241.882184][ T6038] usb 2-1: config 0 descriptor?? [ 241.894402][ T8520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 241.929900][ T6038] dvb-usb: found a 'TeVii S662' in warm state. [ 241.997167][ T8520] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1050: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.998118][ T8502] loop3: detected capacity change from 0 to 32768 [ 242.024543][ T8502] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1044 (8502) [ 242.051058][ T6038] dw2102: su3000_power_ctrl: 1, initialized 0 [ 242.061224][ T8520] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 242.069904][ T8481] bcachefs (loop2): initializing freespace [ 242.076497][ T6038] dvb-usb: bulk message failed: -22 (2/0) [ 242.111979][ T8520] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1050: lblock 0 mapped to illegal pblock 48 (length 1) [ 242.127436][ T8481] bcachefs (loop2): done initializing freespace [ 242.159525][ T6038] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.190026][ T8502] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 242.220740][ T8481] bcachefs (loop2): reading snapshots table [ 242.224384][ T8520] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 242.227162][ T8481] bcachefs (loop2): reading snapshots done [ 242.251977][ T8502] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 242.254262][ T6038] dvbdev: DVB: registering new adapter (TeVii S662) [ 242.274834][ T6038] usb 2-1: media controller created [ 242.280787][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 242.281690][ T8520] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1050: Failed to acquire dquot type 0 [ 242.289795][ T6038] dw2102: i2c transfer failed. [ 242.304626][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 242.310362][ T6038] dw2102: i2c transfer failed. [ 242.315346][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 242.321074][ T6038] dw2102: i2c transfer failed. [ 242.328100][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 242.335942][ T6038] dw2102: i2c transfer failed. [ 242.340847][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 242.350991][ T6038] dw2102: i2c transfer failed. [ 242.368234][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 242.380919][ T6038] dw2102: i2c transfer failed. [ 242.391849][ T6038] dvb-usb: MAC address: 02:02:02:02:02:02 [ 242.450038][ T6038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.472333][ T8481] bcachefs (loop2): done starting filesystem [ 242.482387][ T8520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 242.508741][ T8520] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1050: mark_inode_dirty error [ 242.556615][ T6038] dvb-usb: bulk message failed: -22 (3/0) [ 242.576050][ T8502] BTRFS info (device loop3): enabling ssd optimizations [ 242.599736][ T8502] BTRFS info (device loop3): enabling free space tree [ 242.608561][ T6038] dw2102: command 0x0e transfer failed. [ 242.618227][ T8502] BTRFS info (device loop3): enabling auto defrag [ 242.628191][ T8502] BTRFS info (device loop3): force lzo compression, level 1 [ 242.643895][ T8520] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 242.673419][ T6038] dvb-usb: bulk message failed: -22 (3/0) [ 242.679198][ T6038] dw2102: command 0x0e transfer failed. [ 242.751719][ T8520] EXT4-fs (loop5): 1 orphan inode deleted [ 242.763876][ T8520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.881653][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 242.963744][ T13] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 242.987109][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 242.999060][ T5870] bcachefs (loop2): shutting down [ 243.014834][ T8520] EXT4-fs error (device loop5): __ext4_get_inode_loc:4860: comm syz.5.1050: Invalid inode table block 1 in block_group 0 [ 243.016369][ T5870] bcachefs (loop2): going read-only [ 243.043001][ T6038] dvb-usb: bulk message failed: -22 (3/0) [ 243.048142][ T5869] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 243.048747][ T6038] dw2102: command 0x0e transfer failed. [ 243.079513][ T13] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 243.087793][ T8520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 243.088854][ T5870] bcachefs (loop2): finished waiting for writes to stop [ 243.107520][ T13] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 243.122647][ T6038] dvb-usb: bulk message failed: -22 (3/0) [ 243.128393][ T6038] dw2102: command 0x0e transfer failed. [ 243.143957][ T6038] dvb-usb: bulk message failed: -22 (1/0) [ 243.152290][ T5870] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 243.167713][ T6038] dw2102: command 0x51 transfer failed. [ 243.200554][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.224330][ T6038] dvb-usb: bulk message failed: -22 (5/0) [ 243.230107][ T6038] dw2102: i2c probe for address 0x68 failed. [ 243.241935][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.264952][ T6038] dvb-usb: bulk message failed: -22 (5/0) [ 243.276323][ T9] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 243.294375][ T6038] dw2102: i2c probe for address 0x69 failed. [ 243.302842][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.312004][ T6038] dvb-usb: bulk message failed: -22 (5/0) [ 243.328546][ T6038] dw2102: i2c probe for address 0x6a failed. [ 243.337835][ T9] usb 5-1: config 0 descriptor?? [ 243.357898][ T5870] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 243.358384][ T6038] dw2102: probing for demodulator failed. Is the external power switched on? [ 243.389413][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.397215][ T6038] dvb-usb: no frontend was attached by 'TeVii S662' [ 243.440565][ T5870] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 243.477314][ T5870] bcachefs (loop2): marking filesystem clean [ 243.481027][ T5868] EXT4-fs error (device loop5): __ext4_get_inode_loc:4860: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 243.521021][ T5868] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 243.588118][ T5868] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 243.646476][ T6038] rc_core: IR keymap rc-tt-1500 not found [ 243.666958][ T6038] Registered IR keymap rc-empty [ 243.669066][ T5870] bcachefs (loop2): shutdown complete [ 243.719145][ T6038] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 243.727592][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 243.742754][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.792038][ T6038] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 243.802500][ T5957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 243.808843][ T9] usb 5-1: USB disconnect, device number 18 [ 243.868227][ T6038] dvb-usb: schedule remote query interval to 250 msecs. [ 243.940942][ T6038] dw2102: su3000_power_ctrl: 0, initialized 1 [ 243.961674][ T6038] dvb-usb: TeVii S662 successfully initialized and connected. [ 244.020150][ T6038] usb 2-1: USB disconnect, device number 6 [ 244.032213][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 244.079314][ T5957] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 244.114608][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.133125][ T5957] usb 4-1: Product: syz [ 244.145577][ T5957] usb 4-1: Manufacturer: syz [ 244.160379][ T5957] usb 4-1: SerialNumber: syz [ 244.222009][ T8561] loop1: detected capacity change from 0 to 128 [ 244.233122][ T5957] usb 4-1: config 0 descriptor?? [ 244.287221][ T8561] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 244.485520][ T5957] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 244.487921][ T6038] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 244.592450][ T5872] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.694049][ T5957] usb 4-1: USB disconnect, device number 5 [ 244.838336][ T8568] loop4: detected capacity change from 0 to 2048 [ 244.890478][ T8568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.569026][ T8584] binder: 8583:8584 ioctl 400c620e 200000000240 returned -22 [ 245.774311][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 246.005781][ T8597] loop3: detected capacity change from 0 to 64 [ 246.136144][ T8573] loop5: detected capacity change from 0 to 40427 [ 246.184480][ T8573] F2FS-fs: heap/no_heap options were deprecated [ 246.212193][ T8573] F2FS-fs: heap/no_heap options were deprecated [ 246.232977][ T8573] F2FS-fs (loop5): Image doesn't support compression [ 246.295799][ T8573] F2FS-fs (loop5): invalid crc value [ 246.331777][ T5957] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.439783][ T8603] loop4: detected capacity change from 0 to 2048 [ 246.473747][ T8603] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 246.531543][ T5957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.556046][ T8604] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.570488][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.596202][ T8593] loop1: detected capacity change from 0 to 16384 [ 246.631341][ T5957] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.655135][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 246.687472][ T5957] usb 4-1: SerialNumber: syz [ 246.750501][ T8573] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.760009][ T30] audit: type=1800 audit(1758755220.150:14): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1080" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 246.820970][ T8573] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 247.057905][ T5957] usb 4-1: 0:2 : does not exist [ 247.083805][ T8593] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc32c,norecovery,recovery_pass_last=reconstruct_snapshots,noexcl,read_only,reconstruct_alloc,version_upgrade=none [ 247.083854][ T8593] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 247.133213][ T5957] usb 4-1: USB disconnect, device number 6 [ 247.238958][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.289643][ T5868] syz-executor: attempt to access beyond end of device [ 247.289643][ T5868] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.290517][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 247.290562][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.290584][ T5868] Call Trace: [ 247.290596][ T5868] [ 247.290609][ T5868] dump_stack_lvl+0x16c/0x1f0 [ 247.290672][ T5868] f2fs_handle_critical_error+0x624/0x9f0 [ 247.290725][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.290769][ T5868] ? f2fs_build_fault_attr+0x53/0x1f0 [ 247.290820][ T5868] f2fs_write_end_io+0x958/0xcf0 [ 247.290876][ T5868] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 247.290933][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.290988][ T5868] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 247.291037][ T5868] bio_endio+0x713/0x860 [ 247.291101][ T5868] submit_bio_noacct+0x306/0x1ed0 [ 247.291160][ T5868] __submit_merged_bio+0x33c/0x770 [ 247.291217][ T5868] __submit_merged_write_cond+0x319/0x3f0 [ 247.291281][ T5868] f2fs_write_cache_pages+0x2067/0x2570 [ 247.291368][ T5868] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 247.291440][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.291484][ T5868] ? __lock_acquire+0x62e/0x1ce0 [ 247.291553][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.291601][ T5868] ? __lock_acquire+0x62e/0x1ce0 [ 247.291751][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.291803][ T5868] f2fs_write_data_pages+0x4ad/0xd90 [ 247.291871][ T5868] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.291925][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.291981][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.292029][ T5868] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.292090][ T5868] do_writepages+0x27a/0x600 [ 247.292146][ T5868] ? __pfx_do_writepages+0x10/0x10 [ 247.292191][ T5868] ? do_raw_spin_unlock+0x172/0x230 [ 247.292232][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.292276][ T5868] ? _raw_spin_unlock+0x28/0x50 [ 247.292332][ T5868] filemap_fdatawrite_wbc+0x104/0x160 [ 247.292385][ T5868] __filemap_fdatawrite_range+0xb9/0x100 [ 247.292450][ T5868] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 247.292568][ T5868] ? find_held_lock+0x2b/0x80 [ 247.292615][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.292660][ T5868] ? do_raw_spin_unlock+0x172/0x230 [ 247.292701][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.292751][ T5868] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 247.292833][ T5868] block_operations+0x2b0/0xfe0 [ 247.292892][ T5868] ? __pfx_stack_trace_save+0x10/0x10 [ 247.292947][ T5868] ? __lock_acquire+0xb97/0x1ce0 [ 247.293008][ T5868] ? __pfx_block_operations+0x10/0x10 [ 247.293067][ T5868] ? kasan_save_stack+0x42/0x60 [ 247.293176][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.293219][ T5868] ? down_write+0x14d/0x200 [ 247.293255][ T5868] ? __pfx_down_write+0x10/0x10 [ 247.293294][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.293338][ T5868] ? rcu_is_watching+0x12/0xc0 [ 247.293390][ T5868] f2fs_write_checkpoint+0x2b8/0x4c60 [ 247.293439][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.293483][ T5868] ? kfree+0x2b4/0x4d0 [ 247.293527][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.293570][ T5868] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.293624][ T5868] ? f2fs_stop_gc_thread+0x79/0xd0 [ 247.293664][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.293718][ T5868] kill_f2fs_super+0x3c2/0x470 [ 247.293753][ T5868] ? __pfx_kill_f2fs_super+0x10/0x10 [ 247.293787][ T5868] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.293860][ T5868] deactivate_locked_super+0xc1/0x1a0 [ 247.293915][ T5868] deactivate_super+0xde/0x100 [ 247.293971][ T5868] cleanup_mnt+0x225/0x450 [ 247.294031][ T5868] task_work_run+0x150/0x240 [ 247.294073][ T5868] ? __pfx_task_work_run+0x10/0x10 [ 247.294112][ T5868] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.294159][ T5868] ? __pfx___x64_sys_umount+0x10/0x10 [ 247.294204][ T5868] exit_to_user_mode_loop+0xeb/0x110 [ 247.294246][ T5868] do_syscall_64+0x41c/0x4e0 [ 247.294285][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.294320][ T5868] RIP: 0033:0x7ff00e3901f7 [ 247.294348][ T5868] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 247.294384][ T5868] RSP: 002b:00007fff428fda48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 247.294418][ T5868] RAX: 0000000000000000 RBX: 00007ff00e411d7d RCX: 00007ff00e3901f7 [ 247.294448][ T5868] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff428fdb00 [ 247.294471][ T5868] RBP: 00007fff428fdb00 R08: 0000000000000000 R09: 0000000000000000 [ 247.294494][ T5868] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff428feb90 [ 247.294518][ T5868] R13: 00007ff00e411d7d R14: 000000000003c53e R15: 00007fff428febd0 [ 247.294568][ T5868] [ 247.342801][ T5868] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 247.514586][ T8612] loop4: detected capacity change from 0 to 1024 [ 247.528748][ T8612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.577248][ T8612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.750343][ T8612] EXT4-fs warning (device loop4): empty_inline_dir:1747: bad inline directory (dir #12) - no `..' [ 247.752412][ T8593] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 248.160543][ T8593] bcachefs (loop1): recovering from clean shutdown, journal seq 18 [ 248.178744][ T8593] bcachefs (loop1): dropping and reconstructing all alloc info [ 248.190070][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.363732][ T8593] bcachefs (loop1): accounting_read... done [ 248.421750][ T8593] bcachefs (loop1): alloc_read... done [ 248.427768][ T8593] bcachefs (loop1): snapshots_read... done [ 248.460953][ T8593] bcachefs (loop1): done starting filesystem [ 248.844350][ T5872] bcachefs (loop1): shutting down [ 248.938676][ T5872] bcachefs (loop1): shutdown complete [ 249.719893][ T8658] mkiss: ax0: crc mode is auto. [ 249.743467][ T8631] loop3: detected capacity change from 0 to 32768 [ 249.853958][ T8631] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 249.963961][ T8631] (syz.3.1088,8631,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 250.011759][ T8631] (syz.3.1088,8631,0):__ocfs2_delete_entry:1170 ERROR: status = -5 [ 250.036382][ T8631] (syz.3.1088,8631,0):ocfs2_unlink:993 ERROR: status = -5 [ 250.056425][ T8631] (syz.3.1088,8631,0):ocfs2_unlink:1046 ERROR: status = -5 [ 250.380381][ T5869] ocfs2: Unmounting device (7,3) on (node local) [ 250.882072][ T8677] loop4: detected capacity change from 0 to 32768 [ 250.901559][ T8683] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1112'. [ 250.956181][ T8677] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 250.964844][ T8677] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 250.991125][ T8677] syz.4.1109: attempt to access beyond end of device [ 250.991125][ T8677] loop4: rw=12288, sector=154618822868, nr_sectors = 4 limit=32768 [ 251.006137][ T8677] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 251.015160][ T8685] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 251.309414][ T8694] loop5: detected capacity change from 0 to 512 [ 251.487900][ T8694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.605227][ T8694] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.295139][ T8710] loop1: detected capacity change from 0 to 32768 [ 252.314705][ T8710] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 252.322977][ T8710] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 252.373902][ T8710] gfs2: fsid=syz:syz.s: fatal: invalid metadata block - bh = 25 (type: exp=5, found=8), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 252.391847][ T8710] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 252.399600][ T8710] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 252.408769][ T8710] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 252.414971][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.417612][ T8710] gfs2: fsid=syz:syz.s: File system withdrawn [ 252.430275][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.1.1092 Not tainted syzkaller #0 PREEMPT(full) [ 252.430320][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.430341][ T8710] Call Trace: [ 252.430351][ T8710] [ 252.430363][ T8710] dump_stack_lvl+0x16c/0x1f0 [ 252.430422][ T8710] gfs2_withdraw+0xa8b/0x1130 [ 252.430486][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.430527][ T8710] ? gfs2_lm+0x1aa/0x210 [ 252.430574][ T8710] ? __pfx_gfs2_withdraw+0x10/0x10 [ 252.430629][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.430671][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.430710][ T8710] ? gfs2_meta_read+0x5ac/0xb00 [ 252.430762][ T8710] gfs2_metatype_check_ii+0x6e/0xc0 [ 252.430821][ T8710] gfs2_meta_buffer+0x310/0x3f0 [ 252.430866][ T8710] ? __pfx_gfs2_meta_buffer+0x10/0x10 [ 252.430908][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.430947][ T8710] ? gfs2_meta_buffer+0x194/0x3f0 [ 252.430995][ T8710] __fillup_metapath+0xfd/0x270 [ 252.431049][ T8710] __gfs2_iomap_get+0x610/0x1860 [ 252.431116][ T8710] ? __pfx___gfs2_iomap_get+0x10/0x10 [ 252.431166][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.431206][ T8710] ? out_of_line_wait_on_bit+0xd9/0x110 [ 252.431264][ T8710] gfs2_iomap_get+0xb0/0x1e0 [ 252.431312][ T8710] ? __pfx_gfs2_iomap_get+0x10/0x10 [ 252.431356][ T8710] ? __pfx___might_resched+0x10/0x10 [ 252.431417][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.431461][ T8710] ? rcu_is_watching+0x12/0xc0 [ 252.431503][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.431551][ T8710] gfs2_block_map+0x196/0x620 [ 252.431607][ T8710] ? __pfx_gfs2_block_map+0x10/0x10 [ 252.431656][ T8710] ? __pfx___might_resched+0x10/0x10 [ 252.431700][ T8710] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 252.431738][ T8710] ? __pfx_map_id_range_down+0x10/0x10 [ 252.431784][ T8710] ? inode_dio_wait+0xd8/0x200 [ 252.431819][ T8710] ? __pfx_inode_dio_wait+0x10/0x10 [ 252.431861][ T8710] gfs2_write_alloc_required+0x3f4/0x4f0 [ 252.431918][ T8710] ? __pfx_gfs2_write_alloc_required+0x10/0x10 [ 252.431994][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.432040][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.432079][ T8710] ? gfs2_glock_nq+0x86e/0x19f0 [ 252.432132][ T8710] gfs2_jdesc_check+0x225/0x2f0 [ 252.432171][ T8710] check_journal_clean+0x13c/0x350 [ 252.432223][ T8710] ? __pfx_check_journal_clean+0x10/0x10 [ 252.432281][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.432322][ T8710] ? do_raw_spin_lock+0x12c/0x2b0 [ 252.432357][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.432397][ T8710] ? find_held_lock+0x2b/0x80 [ 252.432443][ T8710] ? init_inodes+0x113b/0x2eb0 [ 252.432499][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.432538][ T8710] ? do_raw_spin_unlock+0x172/0x230 [ 252.432576][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.432615][ T8710] ? _raw_spin_unlock+0x28/0x50 [ 252.432661][ T8710] ? gfs2_jdesc_find+0xbf/0x100 [ 252.432698][ T8710] init_inodes+0x113b/0x2eb0 [ 252.432770][ T8710] ? __pfx_init_inodes+0x10/0x10 [ 252.432831][ T8710] ? gfs2_fill_super+0x1be2/0x2d30 [ 252.432883][ T8710] ? init_sb+0xa50/0x10d0 [ 252.432944][ T8710] ? __pfx_snprintf+0x10/0x10 [ 252.433015][ T8710] ? gfs2_fill_super+0x1be2/0x2d30 [ 252.433067][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.433107][ T8710] gfs2_fill_super+0x1be2/0x2d30 [ 252.433158][ T8710] ? __lock_acquire+0xb97/0x1ce0 [ 252.433228][ T8710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 252.433287][ T8710] ? gfs2_fill_super+0x1875/0x2d30 [ 252.433340][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.433380][ T8710] ? set_blocksize+0x406/0x500 [ 252.433424][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.433470][ T8710] ? sb_set_blocksize+0x176/0x1d0 [ 252.433511][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.433561][ T8710] get_tree_bdev_flags+0x38c/0x620 [ 252.433616][ T8710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 252.433673][ T8710] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 252.433728][ T8710] ? rcu_is_watching+0x12/0xc0 [ 252.433771][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.433815][ T8710] ? aa_get_newest_label+0xd2/0x250 [ 252.433853][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.433894][ T8710] ? apparmor_capable+0x114/0x1d0 [ 252.433936][ T8710] gfs2_get_tree+0x4e/0x280 [ 252.433991][ T8710] vfs_get_tree+0x8e/0x340 [ 252.434038][ T8710] path_mount+0x1513/0x2000 [ 252.434085][ T8710] ? __pfx_path_mount+0x10/0x10 [ 252.434126][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.434166][ T8710] ? kmem_cache_free+0x2d1/0x4d0 [ 252.434217][ T8710] ? putname+0x154/0x1a0 [ 252.434261][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.434301][ T8710] ? putname+0x154/0x1a0 [ 252.434346][ T8710] ? __x64_sys_mount+0x28d/0x310 [ 252.434382][ T8710] __x64_sys_mount+0x28d/0x310 [ 252.434422][ T8710] ? __pfx___x64_sys_mount+0x10/0x10 [ 252.434469][ T8710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.434525][ T8710] do_syscall_64+0xcd/0x4e0 [ 252.434560][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.434594][ T8710] RIP: 0033:0x7f6f1359066a [ 252.434621][ T8710] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.434655][ T8710] RSP: 002b:00007f6f14477e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.434687][ T8710] RAX: ffffffffffffffda RBX: 00007f6f14477ef0 RCX: 00007f6f1359066a [ 252.434710][ T8710] RDX: 0000200000000180 RSI: 0000200000012500 RDI: 00007f6f14477eb0 [ 252.434733][ T8710] RBP: 0000200000000180 R08: 00007f6f14477ef0 R09: 0000000000200001 [ 252.434754][ T8710] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 252.434776][ T8710] R13: 00007f6f14477eb0 R14: 00000000000125bc R15: 0000200000000440 [ 252.434821][ T8710] [ 252.985723][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.998137][ T8710] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:3 [ 253.007241][ T8710] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:8710 [syz.1.1092] init_inodes+0x113b/0x2eb0 [ 253.018081][ T8710] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:33554432 p:0 [ 253.026638][ T8710] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 253.304676][ T6038] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 253.429565][ T8726] [U] 1WT`8H$09\ [ 253.435286][ T8726] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 253.497275][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1129'. [ 253.538639][ T6038] usb 4-1: Using ep0 maxpacket: 8 [ 253.616093][ T6038] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 253.646390][ T6038] usb 4-1: config 0 has no interface number 0 [ 253.696158][ T6038] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 253.728147][ T8730] loop1: detected capacity change from 0 to 2048 [ 253.742044][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.750079][ T6038] usb 4-1: Product: syz [ 253.766346][ T6038] usb 4-1: Manufacturer: syz [ 253.771043][ T6038] usb 4-1: SerialNumber: syz [ 253.803485][ T6038] usb 4-1: config 0 descriptor?? [ 253.865503][ T6167] loop1: p2 p3 p7 [ 253.998664][ T8730] loop1: p2 p3 p7 [ 254.045983][ T6038] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 254.259821][ T6038] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 254.285972][ T6038] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 254.333246][ T6038] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 254.523032][ T6038] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22 [ 254.589541][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 254.591764][ T5866] udevd[5866]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 254.666077][ T6038] usb 4-1: USB disconnect, device number 7 [ 254.691839][ T6167] udevd[6167]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 254.966704][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 254.970248][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 255.013635][ T6167] udevd[6167]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 255.017065][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 255.271541][ T8735] loop4: detected capacity change from 0 to 32768 [ 255.315743][ T8735] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 255.387834][ T8735] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 255.418670][ T8770] loop5: detected capacity change from 0 to 512 [ 255.432920][ T8770] EXT4-fs: Ignoring removed nobh option [ 255.445573][ T8735] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 255.515439][ T8774] loop3: detected capacity change from 0 to 64 [ 255.517642][ T8770] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 255.534627][ T8735] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 255.591838][ T8770] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 255.625513][ T8770] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.1146: casefold flag without casefold feature [ 255.684296][ T8770] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1146: couldn't read orphan inode 13 (err -117) [ 255.754388][ T8770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.889374][ T8770] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 255.993404][ T8778] loop1: detected capacity change from 0 to 4096 [ 256.139376][ T8785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.156267][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.238947][ T8778] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 256.257386][ T8787] loop2: detected capacity change from 0 to 65 [ 256.266872][ T8787] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 256.292216][ T8778] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 256.371044][ T8778] Remounting filesystem read-only [ 256.391350][ T8778] NILFS (loop1): error -5 truncating bmap (ino=12) [ 256.552030][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 256.643805][ T5872] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 256.735404][ T24] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 256.758175][ T24] usb 1-1: config 0 has no interface number 0 [ 256.797976][ T24] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.867771][ T24] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.900110][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 256.911927][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 256.916130][ T24] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 256.965036][ T24] usb 1-1: Manufacturer: syz [ 257.000941][ T24] usb 1-1: config 0 descriptor?? [ 257.094494][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 257.144093][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.173678][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.211936][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 257.247527][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.276280][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1154'. [ 257.300233][ T8806] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 257.312554][ T9] usb 4-1: config 0 descriptor?? [ 257.346795][ T8806] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1161'. [ 257.362290][ T8806] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 257.529846][ T24] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0017/input/input10 [ 257.614968][ T8811] loop5: detected capacity change from 0 to 2048 [ 257.659357][ T8811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.659372][ T8815] loop4: detected capacity change from 0 to 8 [ 257.765115][ T9] logitech-hidpp-device 0003:046D:C343.0018: unbalanced delimiter at end of report description [ 257.779480][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1166'. [ 257.809667][ T24] sony 0003:054C:03D5.0017: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 257.813249][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 257.832655][ T9] logitech-hidpp-device 0003:046D:C343.0018: hidpp_probe:parse failed [ 257.847675][ T30] audit: type=1800 audit(1758755231.250:15): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1163" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 257.861490][ T9] logitech-hidpp-device 0003:046D:C343.0018: probe with driver logitech-hidpp-device failed with error -22 [ 257.893859][ T8811] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1163: bg 0: block 234: padding at end of block bitmap is not set [ 257.899556][ T24] usb 1-1: USB disconnect, device number 6 [ 257.925098][ T8811] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 48 with error 117 [ 257.937824][ T8811] EXT4-fs (loop5): This should not happen!! Data will be lost [ 257.937824][ T8811] [ 258.006521][ T9] usb 4-1: USB disconnect, device number 8 [ 258.033745][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 258.042484][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.130138][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.172637][ T5868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.229909][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 258.286204][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.459221][ T10] usb 3-1: config 0 descriptor?? [ 258.500714][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 258.727042][ T8826] loop5: detected capacity change from 0 to 4096 [ 258.871702][ T8831] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.951027][ T10] savu 0003:1E7D:2D5A.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 259.308025][ T24] usb 3-1: USB disconnect, device number 10 [ 259.444330][ T30] audit: type=1326 audit(1758755232.860:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.495178][ T8840] fido_id[8840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 259.549414][ T30] audit: type=1326 audit(1758755232.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.574090][ T30] audit: type=1326 audit(1758755232.920:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.597367][ T30] audit: type=1326 audit(1758755232.920:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.627312][ T30] audit: type=1326 audit(1758755232.920:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.737900][ T30] audit: type=1326 audit(1758755232.930:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.849752][ T30] audit: type=1326 audit(1758755232.930:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 259.919074][ T30] audit: type=1326 audit(1758755232.930:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb68b8eec9 code=0x7ffc0000 [ 260.301170][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 260.460300][ T8873] loop1: detected capacity change from 0 to 256 [ 260.483192][ T8873] exfat: Deprecated parameter 'namecase' [ 260.507791][ T8873] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 260.581773][ T8873] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 261.131518][ T8887] loop4: detected capacity change from 0 to 64 [ 261.237315][ T8887] syz.4.1198: attempt to access beyond end of device [ 261.237315][ T8887] loop4: rw=0, sector=1288, nr_sectors = 1 limit=64 [ 261.282171][ T8887] Buffer I/O error on dev loop4, logical block 1288, async page read [ 261.339064][ T8888] syz.4.1198: attempt to access beyond end of device [ 261.339064][ T8888] loop4: rw=0, sector=1288, nr_sectors = 1 limit=64 [ 261.389203][ T8888] Buffer I/O error on dev loop4, logical block 1288, async page read [ 261.469786][ T8888] syz.4.1198: attempt to access beyond end of device [ 261.469786][ T8888] loop4: rw=0, sector=1288, nr_sectors = 1 limit=64 [ 261.567355][ T8888] Buffer I/O error on dev loop4, logical block 1288, async page read [ 261.684895][ T8863] loop3: detected capacity change from 0 to 32768 [ 261.750056][ T8863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1186 (8863) [ 261.835404][ T8863] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.901895][ T8863] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 262.216533][ T8863] BTRFS info (device loop3): enabling ssd optimizations [ 262.256075][ T8863] BTRFS info (device loop3): enabling free space tree [ 262.371159][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 262.595986][ T13] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 262.771808][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 262.797499][ T5869] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.801490][ T8929] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 262.808330][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 262.821777][ T8929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.057826][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.097243][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.148654][ T24] usb 3-1: config 1 has no interface number 0 [ 263.177417][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.221705][ T24] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 263.270557][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.309466][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.356588][ T24] usb 3-1: Product: syz [ 263.360813][ T24] usb 3-1: Manufacturer: syz [ 263.376889][ T24] usb 3-1: SerialNumber: syz [ 263.692079][ T8946] loop4: detected capacity change from 0 to 1024 [ 263.700179][ T8946] EXT4-fs: Ignoring removed nobh option [ 263.739878][ T8946] EXT4-fs: inline encryption not supported [ 263.888856][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.939628][ T30] audit: type=1800 audit(1758755237.350:24): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1217" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 264.069756][ T24] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 264.096492][ T24] cdc_ncm 3-1:1.1: bind() failure [ 264.123668][ T8960] loop3: detected capacity change from 0 to 256 [ 264.131272][ T8960] exfat: Deprecated parameter 'namecase' [ 264.148782][ T24] usb 3-1: USB disconnect, device number 11 [ 264.197052][ T8960] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 264.210826][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.307664][ T8960] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 264.858176][ T8975] loop3: detected capacity change from 0 to 4096 [ 264.967514][ T8980] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.278999][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.288172][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.435041][ T8990] loop3: detected capacity change from 0 to 256 [ 265.516930][ T8988] loop1: detected capacity change from 0 to 2048 [ 265.597320][ T8988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.937664][ T8973] loop4: detected capacity change from 0 to 32768 [ 266.034094][ T8970] loop5: detected capacity change from 0 to 32768 [ 266.064570][ T8973] JBD2: Ignoring recovery information on journal [ 266.146319][ T8970] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.247391][ T8970] XFS (loop5): Ending clean mount [ 266.291200][ T8970] XFS (loop5): Quotacheck needed: Please wait. [ 266.317787][ T8973] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 266.388222][ T9016] loop1: detected capacity change from 0 to 8 [ 266.459400][ T8970] XFS (loop5): Quotacheck: Done. [ 266.515231][ T9016] SQUASHFS error: Failed to read block 0x63a: -5 [ 266.555028][ T9016] SQUASHFS error: Unable to read metadata cache entry [638] [ 266.604824][ T9016] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 267.019983][ T5867] ocfs2: Unmounting device (7,4) on (node local) [ 267.242267][ T5868] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 267.892265][ T9040] loop3: detected capacity change from 0 to 64 [ 268.102581][ T9019] loop2: detected capacity change from 0 to 32768 [ 268.113515][ T1158] ------------[ cut here ]------------ [ 268.119024][ T1158] kernel BUG at fs/hfs/inode.c:444! [ 268.225317][ T1158] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 268.231883][ T1158] CPU: 1 UID: 0 PID: 1158 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 268.241363][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.251429][ T1158] Workqueue: writeback wb_workfn (flush-7:3) [ 268.257454][ T1158] RIP: 0010:hfs_write_inode+0x365/0x9f0 [ 268.263015][ T1158] Code: ca 8b 4c 89 f7 e8 0b 12 1b ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 af fd ff ff e8 4c 16 1b ff 90 <0f> 0b e8 44 16 1b ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 268.282644][ T1158] RSP: 0018:ffffc9000407f4e8 EFLAGS: 00010293 [ 268.288718][ T1158] RAX: 0000000000000000 RBX: 1ffff9200080fe9f RCX: ffffffff82a08665 [ 268.296690][ T1158] RDX: ffff88802805da00 RSI: ffffffff82a08684 RDI: 0000000000000007 [ 268.304661][ T1158] RBP: ffff8880518cefd8 R08: 0000000000000007 R09: 0000000000000004 [ 268.312632][ T1158] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.320602][ T1158] R13: ffffc9000407f528 R14: 0000000000000000 R15: ffffc9000407f588 [ 268.328578][ T1158] FS: 0000000000000000(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 268.337600][ T1158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.344189][ T1158] CR2: 000020000067b000 CR3: 0000000069f40000 CR4: 0000000000350ef0 [ 268.352163][ T1158] Call Trace: [ 268.355440][ T1158] [ 268.358369][ T1158] ? __pfx_hfs_write_inode+0x10/0x10 [ 268.363666][ T1158] ? __lock_acquire+0xb97/0x1ce0 [ 268.368637][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.374286][ T1158] ? __lock_acquire+0xb97/0x1ce0 [ 268.379263][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.384915][ T1158] __writeback_single_inode+0xb3e/0xfb0 [ 268.390483][ T1158] ? __pfx___writeback_single_inode+0x10/0x10 [ 268.396568][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.402217][ T1158] ? do_raw_spin_unlock+0x172/0x230 [ 268.407425][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.413080][ T1158] writeback_sb_inodes+0x60d/0xfa0 [ 268.418392][ T1158] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 268.424093][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.429739][ T1158] ? rcu_is_watching+0x12/0xc0 [ 268.434515][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.440164][ T1158] ? queue_io+0x3f6/0x520 [ 268.444517][ T1158] wb_writeback+0x419/0xb70 [ 268.449041][ T1158] ? __pfx_wb_writeback+0x10/0x10 [ 268.454076][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.459730][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.465377][ T1158] ? mark_held_locks+0x49/0x80 [ 268.470169][ T1158] wb_workfn+0x14d/0xbe0 [ 268.474438][ T1158] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 268.480270][ T1158] ? __pfx_wb_workfn+0x10/0x10 [ 268.485051][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.490698][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.496344][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.501992][ T1158] ? rcu_is_watching+0x12/0xc0 [ 268.506787][ T1158] process_one_work+0x9cf/0x1b70 [ 268.511743][ T1158] ? __pfx_process_one_work+0x10/0x10 [ 268.517122][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.522776][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.528420][ T1158] ? assign_work+0x1a0/0x250 [ 268.533011][ T1158] worker_thread+0x6c8/0xf10 [ 268.537612][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.543259][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.548906][ T1158] ? __kthread_parkme+0x19e/0x250 [ 268.553955][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.559612][ T1158] ? __pfx_worker_thread+0x10/0x10 [ 268.564754][ T1158] kthread+0x3c5/0x780 [ 268.568830][ T1158] ? __pfx_kthread+0x10/0x10 [ 268.573425][ T1158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.579069][ T1158] ? rcu_is_watching+0x12/0xc0 [ 268.583846][ T1158] ? __pfx_kthread+0x10/0x10 [ 268.588441][ T1158] ret_from_fork+0x56d/0x730 [ 268.593035][ T1158] ? __pfx_kthread+0x10/0x10 [ 268.597629][ T1158] ret_from_fork_asm+0x1a/0x30 [ 268.602419][ T1158] [ 268.605429][ T1158] Modules linked in: [ 268.610393][ T1158] ---[ end trace 0000000000000000 ]--- [ 268.619508][ T1158] RIP: 0010:hfs_write_inode+0x365/0x9f0 [ 268.625648][ T1158] Code: ca 8b 4c 89 f7 e8 0b 12 1b ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 af fd ff ff e8 4c 16 1b ff 90 <0f> 0b e8 44 16 1b ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 268.700537][ T1158] RSP: 0018:ffffc9000407f4e8 EFLAGS: 00010293 [ 268.706883][ T1158] RAX: 0000000000000000 RBX: 1ffff9200080fe9f RCX: ffffffff82a08665 [ 268.715263][ T1158] RDX: ffff88802805da00 RSI: ffffffff82a08684 RDI: 0000000000000007 [ 268.724270][ T1158] RBP: ffff8880518cefd8 R08: 0000000000000007 R09: 0000000000000004 [ 268.732900][ T9019] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 268.733122][ T1158] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.749992][ T1158] R13: ffffc9000407f528 R14: 0000000000000000 R15: ffffc9000407f588 [ 268.758206][ T1158] FS: 0000000000000000(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 268.785817][ T1158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.801400][ T1158] CR2: 000055556d52b5c8 CR3: 000000003330e000 CR4: 0000000000350ef0 [ 268.823432][ T1158] Kernel panic - not syncing: Fatal exception [ 268.829761][ T1158] Kernel Offset: disabled [ 268.834085][ T1158] Rebooting in 86400 seconds..