last executing test programs: 2m35.03904108s ago: executing program 0 (id=1): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, 0x0, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) 2m34.105749908s ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) chdir(&(0x7f0000000000)='./file0\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept4$llc(r1, 0x0, &(0x7f0000006740), 0x80800) bind$llc(r4, &(0x7f0000006780)={0x1a, 0x30d, 0x0, 0x1, 0x0, 0x1, @remote}, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000067c0)='/dev/comedi1\x00', 0x195201, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0x4, 0xf, &(0x7f0000000580)=[0x138d, 0x8004, 0x1, 0x2, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfee, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="f10000000020000000000700000004000180ca7a9e4ac05714cd8ee5a7ad7eae5dc5eba3eafc54bfee5b80d29988aa0c946630482363bebf2702956181c2a0c6e22a67ebbd19aa46b51c0b2c3b5c160fa8403ef667f2eb0e24b2bbd0d00de7326ba6540ed6582b185badc80b04d82d2b1d6f85a5c78a989f5d38a72cd6715567b8816e132e0a457ff8c8cfc091680bc41770d29452d441040018ebb7c4e6d4"], 0x18}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") unlink(&(0x7f0000000100)='./file1\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006600)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000006700)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000066c0)={&(0x7f0000006640)={0x48, r8, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x48}}, 0x20044845) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000006500)={&(0x7f0000006480)=""/97, 0x100000, 0x0, 0x6, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2m33.191610896s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000000), 0x4) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) 2m31.893713641s ago: executing program 0 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x57}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @flow_offload={{0xfffffcf3}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x4048010) 2m30.993232618s ago: executing program 0 (id=13): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000fa461ad7e48489bffa56020013001118680907071200000f0000ff3f21000000170a0017000000", 0x2a}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 2m15.032758268s ago: executing program 32 (id=13): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000fa461ad7e48489bffa56020013001118680907071200000f0000ff3f21000000170a0017000000", 0x2a}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 10.3132656s ago: executing program 4 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 9.24140543s ago: executing program 4 (id=705): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 8.2463111s ago: executing program 2 (id=709): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) 7.904740556s ago: executing program 2 (id=711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0x1, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 7.797381358s ago: executing program 2 (id=712): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xffffffffffffffff, 0x0, 0x2) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) 6.625302401s ago: executing program 2 (id=715): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@allocspi={0x10c, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0xd0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x20000000, 0x33}, @in6=@mcast2, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8200000000000}, {0x4, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}]}, 0x10c}}, 0x4808) 6.596040802s ago: executing program 2 (id=717): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x1c, r7, 0x101, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045017, 0x0) syz_usb_disconnect(r0) 3.949407413s ago: executing program 5 (id=718): keyctl$clear(0x3, 0xfffffffffffffffd) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0), 0x0, 0x48800) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) 3.817750606s ago: executing program 4 (id=720): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c696e6f646536342c6c6f63616c616c6c6f633d30303030303030303030303030303030313731342c61636c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00882bb7a63864a19f186813ab5265f313eeeea0cb144b9317f58558f596fa072f9a29c38a293509350482fc7f"], 0x1, 0x4450, &(0x7f0000008900)="$eJzs3c9vHGcZAOB3Jia1Qxvs0EORkFiJSiBAlt0T4Eo4jhPXbkxQIBXislnb28Sw9kb2GnGohLlV4oTEAXGoQOLmU+UD1yLxD3DhWK5UggMXJKSIRbs7a++Md/ESdus6eh4pHs/3a971uzPzzWHypZnG4+390vZ+qbJbqm++vf9a6cf12sFONdKPyUUfn+GMPk9JyP3FuXfrznffei3iD1t//qjZbDajZSL6mu/5/Z//eGezd9uVFvq0xu0/2qj8ICJePhNXy5WI+P7vI5KIuJmVLWXbqYi4Hp26t975+cPSiKJ5/8Pq6+Wn6+8eL7y6dvTe8eDPnkT8uva5rz3a+dsXryz85SsjOjwAAAAAAAAAAAAAAAAAAJfcyv17D74zNx8fJDFxlJx9X3cl2w56P7Y5Ml8Y/4cFAAAAAAAAAAAAAAAAAACAT6jT9/9LyY1kIiLy7/8vZ9vFAf2b3xp/jIzP6rfvLd+em8/Wf0/O1H89K/r7zSsx02fd9+L67zcL/fuv//7CyOLvxtc97nQk6WxuP01nZyN+my38/kpyLa3V9xtffbt+sLs1sjAurXz+O6v3574F2YL+w+Z/qTD++Nf//2wUv7Wt/Ydnv8r0kc//lYHtfvezZKj83yr0+zjyz7PL53+iXTbV22CxcwFo5f8XE+fnf7kw/rjyfz0iSkkr1lLubnIj6ZQPmq+Ql8//p9pluUtn9occdP7/q5D/24XxL+r6f1i8EdFXPv9X22WTuRan5/9Mev75f6cw/kXkvxX/ofv/UPL5z66kE7km7b/ksNf/lcL448r/g7Qd51/jepL7BhwlnfgH/X915OXzP3mm/vT5Lx1q/vdGoX///I/u5OzG1z1u+/mv2Wz+NNv/ctJ5/qO/fP6nBrYb9vxfLfQb9/V/MUpDPwFcHWcgl1Q+/9faZfm583T757D5X+vdeTq+/LdnJZPd/J9eT/79Qqf8Nz3zvwfjCOA5kc//pzuFaW+Lw/bP9vwvOX/+/2Zh/P+S/+RwJJ/g7PyvFf9hOpLBn3v5/L84sF0r/38a4v5/t9Bv/PP/iDlz/WeWz/9LA9u1z//J8/O/Xug37vx/aZyDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwCS9l2OpJ0NrefprOzEbey/VfiWrJR2Spv1OqbP9qPWM7KS3EjeVSrb1Rq5e3d+la1XKnV6psRt7P6l2My2a/VG+WdypM7J2NNJY+rlb3GRrXSiIiVrPzz8VJ3rI3txk7lSUS8cVL3mbS+9+RxZbe8tb33zbm5ublYPYlhJqn+pFHdbXSO3qmNWDvpO530BNeufvMklheTH9YP9nYrtXb53Z4+tfpmpdbTZz2r+2XMJI29g93NSqNartUfdY83yB+vPmNy/geL2XZ59f737t+dP1P/MOlsl8YfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/hw8WvvGriJjo7KURUUqyX5LsX877H1ZfLz9df/d44dW1o/eOP+rXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/d+2vdRKS42l5G/H7+/R/nz6V+303fvzjDjJzO00t3/1A35d/TKL8tR6s279PN+usjJmrvZ7Anw306GPcZmtu3ufn6vteRchURbclvUs5VtewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//YvMk6w==") creat(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 3.733522597s ago: executing program 3 (id=721): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x80c, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 3.668124059s ago: executing program 3 (id=722): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)) 3.630316419s ago: executing program 3 (id=723): symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x48, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x3f) 3.429445123s ago: executing program 3 (id=724): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.356044125s ago: executing program 3 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/522], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0xabb, 0x604321, 0x8, 0x4, 0x5, 0x400, 0x0, 0x0, 0x8, 0x9}}, 0x50) 3.355379254s ago: executing program 2 (id=726): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000640)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x64cfb37c}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x0, r1}) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x2208800, &(0x7f0000000080)={[{@gqnoenforce}, {@pquota}, {@discard}, {@filestreams}, {@nogrpid}, {@prjquota}]}, 0x4, 0x9686, &(0x7f0000009680)="$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") 3.037333581s ago: executing program 4 (id=728): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x556, &(0x7f00000005c0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x3) 3.020531471s ago: executing program 1 (id=729): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc8a, 0x0, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557e26811cd874f3c107bbfc1c8831026d40798a2be4cc409002216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) 2.891840184s ago: executing program 1 (id=730): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 1.925407032s ago: executing program 5 (id=731): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) 1.901268823s ago: executing program 1 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) 1.836138804s ago: executing program 5 (id=733): socket(0x1, 0x1, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x1000000002, 0x0, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000340)=@nl=@unspec, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 873.485823ms ago: executing program 1 (id=734): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/151) 774.633095ms ago: executing program 5 (id=735): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x1, @broadcast}, 0x0, {0x2, 0x4e23, @multicast2}, 'bridge0\x00'}) 737.586066ms ago: executing program 4 (id=736): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nodioread_nolock}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x797, &(0x7f0000002040)="$eJzs3c9rHGUfAPDvbJKmSfu+yQsvvG89BQQNlG5Mja2Ch4oHESwU9GwbNttQs8mW7KY0IWCLCF4EFQ+CXnr2R7159cdV/wsP0lI1LVY8SGQ2s8022Y2bNrtbzOcDs/s8M7P7PN95Zmaf2XnYDWDfGksfchFHIuK9JGIkm59ExEAt1R9xamO9u2urhXRKYn391V+S2jp31lYL0fCa1KEs8/+I+PbtiKO57eVWllfmpkul4mKWn6jOX5yoLK8cuzA/PVucLS6cmJyaOn7ymZMn9i7W335YOXzz/Zee/OLUH2/97/q73yVxKg5nyxrj2CtjMZZtk4F0E97nxb0urMeSXleAB5Iemn0bR3kciZHoq6VaGOpmzQCATlkHAPahRB8AAPaZ+vcAd9ZWC/Wp2fcETW7h/SPceiEiDm7EX7+/ubGkP7tnd7B2H3T4TnLfnZEkIkb3oPyxiPjkq9c/S6fI2sG9NKAbrlyNiHOjY9vP/8m2MQu79dROC9cH08fBrbM7MQ4DaO7rtP/zbLP+X+5e/yea9H8G62PHHtLW99h+/Odu7EExLaX9v+cbxrbdbYg/M9qX5f5V6/MNJOcvlIrpue3fETEeA4NpfrK2avOe2/jtP2+3Kr+x//frB298mpafPm+ukbvRv+UsOTNdnX7YuOtuXY14rL9Z/Mm99k9a9H/PtFnGy8+983GrZWn8abz1aXv8nbV+LeKJpu2/2ZbJjuMTJ2q7w0R9p2jiyx8/Gm5VfmP7p1Nafv1aoBvS9h/eOf7RpHG8ZmX3ZXx/beSbVsv+Pv7m+/+B5LVa+kA27/J0tbo4GXEgeWX7/OObr63n6+un8Y8/3vz43yi2+f6fXhOeazP+/ps/f/7g8XdWGv/Mrtp/94nrd+f6WpXfXvtP1VLj2Zx2zn/tVvBhth0AAAAAAAAAAAAAAAAAAAAAAAAAtCsXEYcjyeXvpXO5fH7jP7z/G8O5UrlSPXq+vLQwE7X/yh6NgVz9py5HGn4PdTL7Pfx6/viW/NMR8Z+I+HBwqJbPF8qlmV4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACZQ03+/38gW/bTYI8rBwB0zsFeVwAA6Dqf/wCw/+zu83+oY/UAALrH9T8A7D9tf/6f62w9AIDucf0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh505fTqd1n9fWy2k+ZlLy0tz5UvHZoqVufz8UiFfKC9ezM+Wy7OlYr5Qnm/5Rlc2nkrl8sWpWFi6PFEtVqoTleWVs/PlpYXq2Qvz07PFs8WBrkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO2rLK/MTZdKxUWJHRNDj0Y1tiT6o1el98fmnDfj0dgaEnuZaDxLDPXuBAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwiPsrAAD///GKLI4=") openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x100) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan1\x00'}) 676.363337ms ago: executing program 1 (id=737): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x350759, 0x81}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 613.762168ms ago: executing program 5 (id=738): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8800, &(0x7f00000002c0)=ANY=[@ANYBLOB='discard,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x29, 0x1506, &(0x7f0000002840)="$eJzs3AuYjVX7MPD7Xms9Y0zSbpLDsNa6H3ZyWCZJckiSQ5IkSZJTQtIkSUJiyClpSEJyGJLDEJLDxKRxPh9yTpKkSZKcckrWdyk+b2+9X//+/76/93rn/l3Xc+117+e5176ffe/D2s/FfNd5SI1GNas2ICL4H8Ffb5IBIBYABgDANQAQAEDZ+LLxF/bnlJj8P3sQ9vd6KO1KV8CuJO5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZNK3Atb9l34+v/2Rl///8HySo15qs1pa7v8hdSuP/ZG/f/P1bwXzmI+5+9cf+zN+5/9sb9zw5y/Ms93P/sjfvPWHZ2pa8/83Zltyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcpALg0vtJ1McYYY4wxxhhj7O/jc1zpChhjjDHGGGOMMfb/H4IACQoCiIEcEAs5IQ4EAFwNueEaiMC1EA/XQR64HvJCPsgPBSABCkIh0GDAAkEIhaEIROEGKAo3QjEoDiWgJDgoBYlwE5SGm6EM3AJl4VYoB7dBeagAFaES3A6V4Q6oAndCVbgLqkF1qAE14W6oBfdAbbgX6sB9UBfuh3rwANSHB6EBPAQN4WFoBI9AY3gUmkBTaAbNocV/K/9F6A4vQQ/oCcnQC3rDy9AH+kI/6A8D4BUYCK/CIHgNUmAwDIHXYSi8AcPgTRgOI2AkvAWj4G0YDWNgLIyDVBgPE+AdmAjvwiSYDFNgKqTBNJgO78EMmAmz4H2YDR/AHJgL82A+pMOHsAAWQgZ8BIvgY8iExbAElsIyWA4rYCWsgtWwBtbCOlgPG2AjbIJPYDNsga2wDbbDDtgJn8Iu+Ax2w+ewB774i/mn/im/CwICChSoUGEMxmAsxmIcxmEuzIW5MTdGMILxGI95MA/mxbyYH/NjAiZgISyEBg0SEhbGwhjFKBbFolgMi2EJLIEOHSZiIpbGm7EMlsGyWBbLYTksjxWwAlbCSlgZK2MVrIJVsSpWw2pYA2vg3Xg39sLaWBvrYB2si3UvXZ7CBtgAG2JDbISNsDE2xibYBJthM2yBLbAltsRW2ArbYBtsi22xHbbDJEzC9tgeO2AH7IgdsRN2ws7YGbtgV+yKL+YAfAlfwp5YTfTC3tgb+2Af7If9sT++ggPxVXwVX8MUHIxD8HV8Hd/AYXgSh+MIHIkjsbJ4G0fjGCQxDlMxFSfgBJyIE3ESTsbJOBXTcBpOx+k4A2fiTHwfZ+MH+AHOxbk4H9MxHRfgQszADFyEpzATF+MSXIrLcDkuw5W4ClfiGlyLa3A9rseNuBE/wU9wC27BbbgNd6ACwE/xM/wMU3AP7sG9uBf34T7cj/sxC7PwAB7Ag3gQD+EhPIyH8QgexWN4FE/gCTyJp/A0nsazeBbP4fMJ3zTcUXx1CogLlFAiRsSIWBEr4kScyCVyidwit4iIiIgX8SKPyCPyirwiv8gvEkSCKCQKCSOMIBHGAICIiqgoKoqKYqKYKCFKCCecSBSJorQoLcqIMqKsuFWUE7eJ8qKCaO0qiUqismjjqog7RVVRVVQT1UUNUVPUFLVELVFb1BZ1RB1RV9QV9cQDor7ohf3wIXGhM43EYGwshmAT0VTIi59gLcUwbCVaizbiCTECh2M70dIliadFezEaO4hnxRh8TnQS47CzeEF0EV1FN/Gi6C5auR6ip5iEvURvMRX7iL6in+gvZmB1caFjNcRrIkUMFkPE62I+viGGiTfFcDFCjBRviVHibTFajBFjxTiRKsaLCeIdMVG8KyaJyWKKmCrSxDQxXbwnZoiZYpZ4X8wWH4g5Yq6YJ+aLdPGhWCAWigzxkVgkPhaZYrFYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTeITsVlsEVvFNrFd7BA7xadil/hM7Bafiz3iC7FXfCn2ia/EfvG1yBLfiAPiW3FQfCcOie/FYfGDOCKOimPiuDghfhQnxSlxWpwRZ8VP4pz4WZwXXoBEKaSUSgYyRuaQsTKnjJNXyVwyuPjsXivj5XUyj7xe5pX5ZH5ZQCbIgrKQ1NJIK0mGsrAsIqPyBllU3iiLyeKyhCwpnSwlE+VNsrS8WZaRt8iy8lZZTt4my8sKsqKsJG+XleUdsoq8U1aVd8lqsrqsIWvKu2UteY+sLe+VdeR9sq68X9aTD8j68kHZQD4kG8qHZSP5iGwsH5VNZFPZTDaXLeRjsqV8XLaSrWUb+YRsK5+U7eRTMkk+LdvLZ2QH+azsKJ+TneTzsrN8QXaRXWU3+bM8L73sIXvKZNlL9pYvyz6yr+wn+8sB8hU5UL4qB8nXZIocLIfI1+VQ+YYcJt+Uw+UIOVK+JUfJt+VoOUaOleNkqhwvJ8h35ET5rpwkJ8spcqpMk9Nkv4szzZLyT/Pf+YP8Qb88+ka5SX4iN8stcqvcJrfLHXKn3Cl3yV1yt9wt98g9cq/cK/fJfXK/3C+zZJY8IA/Ig/KgPCQPycPysDwij8oz8rg8IX+UJ+UpeUqekWflWXnu4nMACpVQUikVqBiVQ8WqnCpOXaVyqatVbnWNiqhrVby6TuVR16u8Kp/KrwqoBFVQFVJaGWUVqVAVVkVUVN2AF18wqoQqqZwqpRLVTX8lXxVVN6piqvhv8v+svhaqhWqpWqpWqpVqo9qotqqtaqfaqSSVpNqr9qqD6qA6qo6qk+qkOqvOqovqorqpbqq76q56qB4qWSWr3upl1Uf1Vf1UfzVAvaIGqoFqkBqkUlSKGqKGqKFqqBqmhqnhargaqUaqUWqUGq1Gq7FqrEpVqWqCmqAmqolqkpqkpqgpKk2lqelqupqhZqhZapaarWarOWqOmqfmqXSVrhaoBSpDZahFapHKVIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWpNqlNarParLaqrWq72q52qp1ql9qldqvdao/ao/aqvWqf2qf2q/0qS2WpA+qAOqgOqkPqkDqsDqsj6og6po6pE+qEOqlOqtPqtDqrzqpz6pw6r85fWPYFIhCBClQQE8QEsUFsEBfEBbmCXEHuIHcQCSJBfBAf5AmuD/IG+YL8QYEgISgYFAp0YAIbiItNjwY3BEWDG4NiQfGgRFAycEGpIDG4KSgd3ByUCW4Jyga3BuWC24LyQYWgYlApuD2oHNwRVAnuDKoGdwXVgupBjaBmcHdQK7gnqB3cG9QJ7gvqBvcH9YIHgvrBg0GD4KGgYfBw0Ch4JGgcPBo0CZoGzYLmQYu/dX7vT+Z73PXQPXWy7qV765d1H91X99P99QD9ih6oX9WD9Gs6RQ/WQ/Treqh+Qw/Tb+rheoQeqd/So/TberQeo8fqcTpVj9cT9Dt6on5XT9KT9RQ9VafpaXq6fk/P0DP1LP2+nq0/0HP0XD1Pz9fp+kO9QC/UGfojvUh/rDP1Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Cd6s96it+pterveoXfqT/Uu/ZnerT/Xe/QXeq/+Uu/TX+n9+mudpb/RB/S3+qD+Th/S3+vD+gd9RB/Vx/RxfUL/qE/qU/q0PqPP6p/0Of2zPq/9hcX9ha93o4wyMSbGxJpYE2fiTC6Ty+Q2uU3EREy8iTd5TB6T1+Q1+U1+k2ASTCFTyFxAhkxhU9hETdQUNUVNMVPMlDAljDPOJJpEU9qUNmVMGVPWlDXlTDlT3pQ3FU1Fc7u53dxh7jB3mjvNXeYuU91UNzVNTVPL1DK1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0Mc1MM9PCtDAtTUvTyrQybUwb09a0Ne1MO5Nkkkx70950MB1MR9PRdDKdTGfT2XQxXUw30810N91ND9PDJJtk09v0Nn1MH9PP9DMDzAAz0Aw0g8wgk2JSzBAzxAw1Q80wM8wMNyPMSPOWGWXeNqPNGDPWjDOpJtVMMBPMRDPRTDKTzBQzxaSZNDPdTDczzAwzy8wys81sM8fMMfPMPJNu0s0Cs8BkmAyzyCwymSbTLDFLzDKzzKwwK8wqs8qsMWvMOlhnNpgNZpPZZDabzWar2Wq2m+1mp9lpdpldZrfZbfaYPWav2Wv2mX1mv9lvskyWOWAOmIPmoDlkDpnD5rA5Yo6YY+aYOWFOmJPmpDltTpuzJt/FJZU3sTanjbNX2Vz2apvbXmP/Oc5vC9gEW9AWstrmtfl+ExtrbTFb3JawJa2zpWyivel3cXlbwVa0lezttrK9w1b5XVzL3mNr23ttHXufrWnv/k1c195v69lHbH1EANvUNrTNbSP7iG1sH7VNbFPbzDa3be2Ttp19yibZp217+8zv4gV2oV1lV9s1dq3dZT+zp+0Ze9B+Z8/an2wP29MOsK/YgfZVO8i+ZlPs4N/FI+1bdpR92462Y+xYO+538RQ71abZaXa6fc/OsDN/F6fbD+1sm2Hn2Ll2np3/S3yhpgz7kV1kP7aZdrFdYpfaZXa5XWFX/t9al9r1doPdaHfaT+1mu8Vutdvsdrvjl/jCeey2n9s99gt7wH5r99mv7H57yGbZb36JL5zfIfu9PWx/sEfsUXvMHrcn7I/2pD31y/lfOPfj9md73noLhCRIkqKAYigHxVJOiqOrKBddTbnpGorQtRRP11Eeup7yUj7KTwUogQpSIdJkyBJRSIWpCEXpBrq0Ti9BJclRKUqkm6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qKkuhpak/PUAd6ljrSc9SJnqfO9AJ1oa7UjV6k7vQS9aCelEy9qDe9TH2oL/Wj/jSAXqGB9CoNotcohQbTEHqdhtIbNIzepOE0gkbSWzSK3qbRNIbG0jhKpfE0gd6hifQuTaLJNIWmUhpNo+n0Hs2gmTSL3qfZ9AHNobk0j+ZTOn1IC2ghZdBHtIg+pkxaTEtoKS2j5bSCVtIqWk1raC2to/W0gTbSJvqENtMW2krbaDvtoJ30Ke2iz2g3fU576AvaS1/SPvqK9tPXlEXf0AH6lg7Sd3SIvvc96Qc6QkfpGB2nE/QjnaRTdJrO0Fn6ic7Rz3SePEGIoQhlqMIgjAlzhLFhzjAuvCrMFV4d5g6vCSPhtWF8eF2YJ7w+zBvmC/OHBcKEsGBYKNShCW1IYRgWDouE0fCGsGh4Y1gsLB6WCEuGLiwVJoY3haXDm8My4S1h2fDWsFx4W1g+rBA+cl+l8PawcnhHWCW8M6wa3hVWC6uHNcKa4d1hrfCesHZ4b1gnvC8sE94f1gsfCOuHD4YNwofChuHDYaPwkbBx+GjYJGwaNgubhy3Cx8KW4eNhq7B12CZ8ImwbPhm2C58Kk8Knw/bhM3+6PznsFfYOXw5fDr2/V86Lzo+mRz+MLogujGZEP4ouin4czYwuji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Ibox6XzMHOHTCSadc4GJcDhfrcro4d5XL5a52ud01LuKudfHuOpfHXe/yunwuvyvgElxBV8hpZ5x15EJX2BVxUXeDK+pudMVccVfClXTOlXKJrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPu/buGdfBPes6uudcJ/e8e9694Lq4rq6be9F1d+Nz//qeTHa9XW/Xx/Vx/Vw/N8ANcAPdQDfIDXIpLsUNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbpUN8FNcBPdRDfJTXJT3BSX5tLcdDfdzXAzXOWZvz7KHDfHzXPzXLpLdwvchTVjhlvkFrlMl+mWuCVumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vkNrvNbqvb6ra77W6n2+l2+Wt+ndTtcXvdXrfP7XP73dcuy33jDrhv3UH3nTvkvneH3Q/uiDvqjrnj7oT70Z10p9xpd8addT+5c+5nd955lxoZH5kQeScyMfJuZFJkcmRKZGokLTItMj3yXmRGZGZkVuT9yOzIB5E5kbmReZH5kfTIh5EFkYWRjMhHkUWRjyOZkcWRJZGlkWWR5RHvC24OfWFfxEf9Db6ov9EX88V9CV/SO1/KJ/qbfGl/sy/jb/Fl/a2+nL/Nl/cVfEX/qG/im/pmvrlv4R/zLf3jvpVv7dv4J3xb/6Rv55/ySf5p394/4zv4Z31H/5zv5J/3nf0Lvovv6rv5F313/5Lv4Xv6ZN/L9/Yv+z6+r+/n+/sB/hU/0L/qB/nXfIof7If41/1Q/4Yf5t/0w/0IPzLmLT/KX/p0HudT/Xg/wb/jJ/p3/SQ/2U/xU32an+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hyf7j/0C/xCn+E/8ov8xz7TL750Udmv8Cv9Kr/ar/Fr/Tq/3m/wG/0m/4nf7Lf4rX6b3+53+J3+U7/Lf+Z3+8/9Hv+F3+u/9Pv8V36//9pn+W/8Af+tP+i/84f89/6w/8Ef8Uf9MX/cn/A/+pP+lD/tz/iz/id/zv/sz/P/WWOMMcYY+y8Zf3ko/mh/rz+4T/zDwb0B4OotBbL+cf+FFeW6vL+O+4qEthEAeLpn54cubdWqJScnXzw2U0JQZC4ARC7nx8DleDG0gSchCVpD6T+sv6/oepb+ZP7orQBx/5ATC5fjy/N/+S/mf+yJkQvKhafj/x/zzwUoVuRyTk64HC+GNurCbWso8y/mz9fyT+rP+VUqQKt/yMkFl+PL9SfC4/AMJP3mSMYYY4wxxhhj7Fd9RcWOl35/XvoXn3/0+zxBXc7JAZfjP/t9zhhjjDHGGGOMsSvvua7dnnosKal1x78+qPLfyuLBv+vAe4BL9ygAuNL1/LsOUi6+df5517IzPoB/iwr/lsEV/mBijDHGGGOM/e0uL/p/e7+6UgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPZ0P/GnxO70ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/JwAA//9cqxFN") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 190.580216ms ago: executing program 3 (id=739): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x441f, &(0x7f0000008940)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 85.357948ms ago: executing program 1 (id=740): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000340)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ftruncate(r1, 0x2007ffa) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0xff7e82) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x38) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 85.166158ms ago: executing program 5 (id=741): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = getpid() r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) migrate_pages(r4, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) 0s ago: executing program 4 (id=742): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x30, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000200)=0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) socket$inet(0xa, 0x801, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x58400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000000)='./file1\x00') kernel console output (not intermixed with test programs): bhb_loop+0x30/0x80 [ 102.648370][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.654249][ T4941] RIP: 0033:0x7f4b46134be9 [ 102.658648][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.678234][ T4941] RSP: 002b:00007f4b4435a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.686639][ T4941] RAX: ffffffffffffffda RBX: 00007f4b4636c180 RCX: 00007f4b46134be9 [ 102.694602][ T4941] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 102.702555][ T4941] RBP: 00007f4b4435a090 R08: 0000000000000000 R09: 0000000000000000 [ 102.710509][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.718466][ T4941] R13: 00007f4b4636c218 R14: 00007f4b4636c180 R15: 00007ffd531d9ee8 [ 102.726435][ T4941] [ 102.897809][ T4831] usb 6-1: 0:2 : does not exist [ 103.098490][ T4921] loop2: detected capacity change from 0 to 32768 [ 103.159997][ T4921] (syz.2.123,4921,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 103.200453][ T4921] (syz.2.123,4921,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 103.259237][ T4831] usb 6-1: USB disconnect, device number 2 [ 103.323782][ T4921] overlayfs: missing 'lowerdir' [ 103.466269][ T4951] fuse: Bad value for 'rootmode' [ 103.479643][ T4956] netlink: 448 bytes leftover after parsing attributes in process `syz.3.130'. [ 103.485794][ T4951] netlink: 212 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.583828][ T4959] loop5: detected capacity change from 0 to 128 [ 103.631848][ T4960] loop3: detected capacity change from 0 to 512 [ 103.649287][ T4964] loop2: detected capacity change from 0 to 512 [ 103.668321][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.697475][ T4959] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 103.785601][ T4959] hpfs: filesystem error: improperly stopped [ 103.822116][ T4959] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 103.903622][ T4964] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.136: inode #15: comm syz.2.136: iget: illegal inode # [ 103.939381][ T4959] hpfs: You really don't want any checks? You are crazy... [ 103.947190][ T4959] hpfs: hpfs_map_sector(): read error [ 103.952587][ T4959] hpfs: code page support is disabled [ 103.958955][ T4959] hpfs: hpfs_map_4sectors(): unaligned read [ 103.965075][ T4959] hpfs: hpfs_map_4sectors(): unaligned read [ 103.971250][ T4959] hpfs: filesystem error: unable to find root dir [ 103.988976][ T4964] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.136: couldn't read orphan inode 15 (err -117) [ 104.011406][ T4964] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nolazytime,auto_da_alloc=0x000000000000ffff,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 104.326096][ T4929] loop4: detected capacity change from 0 to 40427 [ 104.350934][ T4980] hpfs: hpfs_map_4sectors(): unaligned read [ 104.358778][ T4980] hpfs: hpfs_map_4sectors(): unaligned read [ 104.767426][ T4964] EXT4-fs (loop2): shut down requested (2) [ 104.809611][ T4960] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.928738][ T4929] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 104.944176][ T4960] EXT4-fs error (device loop3): __ext4_iget:4894: inode #11: block 1: comm syz.3.130: invalid block [ 104.957876][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 104.976632][ T4929] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.989767][ T4960] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.130: couldn't read orphan inode 11 (err -117) [ 105.024784][ T4964] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.034238][ T4964] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.042949][ T4964] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.051731][ T4964] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.121167][ T4929] F2FS-fs (loop4): invalid crc value [ 105.132788][ T4960] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none. [ 105.165009][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 105.179594][ T4929] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 105.321186][ T4996] tipc: Started in network mode [ 105.364049][ T4996] tipc: Node identity 425381fbcbe2, cluster identity 4711 [ 105.394096][ T4996] tipc: Enabled bearer , priority 0 [ 105.415542][ T5002] device syzkaller0 entered promiscuous mode [ 105.476546][ T4993] tipc: Resetting bearer [ 105.550517][ T4993] tipc: Disabling bearer [ 105.586613][ T5008] FAULT_INJECTION: forcing a failure. [ 105.586613][ T5008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.605389][ T5008] CPU: 0 PID: 5008 Comm: syz.4.143 Not tainted syzkaller #0 [ 105.612705][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.622766][ T5008] Call Trace: [ 105.626052][ T5008] [ 105.628987][ T5008] dump_stack_lvl+0x168/0x230 [ 105.633678][ T5008] ? show_regs_print_info+0x20/0x20 [ 105.639063][ T5008] ? load_image+0x3b0/0x3b0 [ 105.643586][ T5008] ? __lock_acquire+0x7c60/0x7c60 [ 105.648630][ T5008] ? mark_lock+0x94/0x320 [ 105.652978][ T5008] should_fail+0x38c/0x4c0 [ 105.657415][ T5008] _copy_from_user+0x2e/0x170 [ 105.662113][ T5008] __copy_msghdr_from_user+0xaf/0x5e0 [ 105.667509][ T5008] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 105.672815][ T5008] ? rcu_is_watching+0x11/0xa0 [ 105.677590][ T5008] ? verify_lock_unused+0x140/0x140 [ 105.682801][ T5008] ? kfree+0x4a/0x2a0 [ 105.686795][ T5008] ? import_iovec+0x6f/0xa0 [ 105.691323][ T5008] ___sys_sendmsg+0x156/0x260 [ 105.696023][ T5008] ? __sys_sendmsg+0x250/0x250 [ 105.700827][ T5008] ? __might_fault+0xb3/0x110 [ 105.705520][ T5008] __sys_sendmmsg+0x27c/0x4a0 [ 105.710441][ T5008] ? __ia32_sys_sendmsg+0x80/0x80 [ 105.715489][ T5008] ? __context_tracking_exit+0x4c/0x80 [ 105.720976][ T5008] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.726967][ T5008] ? lock_chain_count+0x20/0x20 [ 105.731835][ T5008] ? vtime_user_exit+0x2dc/0x400 [ 105.736812][ T5008] __x64_sys_sendmmsg+0x9c/0xb0 [ 105.741683][ T5008] do_syscall_64+0x4c/0xa0 [ 105.746116][ T5008] ? clear_bhb_loop+0x30/0x80 [ 105.750804][ T5008] ? clear_bhb_loop+0x30/0x80 [ 105.755493][ T5008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.761400][ T5008] RIP: 0033:0x7f281de6bbe9 [ 105.765824][ T5008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.785436][ T5008] RSP: 002b:00007f281c0d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.793865][ T5008] RAX: ffffffffffffffda RBX: 00007f281e0a2fa0 RCX: 00007f281de6bbe9 [ 105.801849][ T5008] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 105.809826][ T5008] RBP: 00007f281c0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 105.817810][ T5008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.825799][ T5008] R13: 00007f281e0a3038 R14: 00007f281e0a2fa0 R15: 00007fff11c3de18 [ 105.833809][ T5008] [ 105.973976][ T4235] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.705874][ T5036] loop4: detected capacity change from 0 to 128 [ 106.769061][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 106.840607][ T5036] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 106.874090][ T5016] loop5: detected capacity change from 0 to 32768 [ 106.878964][ T5036] hpfs: filesystem error: improperly stopped [ 106.897958][ T4235] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.915320][ T4235] usb 3-1: config 179 has no interface number 0 [ 106.931998][ T5036] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 106.935914][ T5016] (syz.5.144,5016,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 106.940204][ T4235] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.959700][ T4242] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.973252][ T5036] hpfs: You really don't want any checks? You are crazy... [ 106.981040][ T5036] hpfs: hpfs_map_sector(): read error [ 107.005289][ T5016] (syz.5.144,5016,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 107.007528][ T5036] hpfs: code page support is disabled [ 107.029194][ T4235] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.030465][ T5016] overlayfs: missing 'lowerdir' [ 107.051897][ T5036] hpfs: hpfs_map_4sectors(): unaligned read [ 107.051969][ T4235] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.058581][ T5036] hpfs: hpfs_map_4sectors(): unaligned read [ 107.081236][ T5036] hpfs: filesystem error: unable to find root dir [ 107.094590][ T4235] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.139261][ T4235] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.150568][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.244281][ T5003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.343944][ T4242] usb 2-1: Using ep0 maxpacket: 32 [ 107.356627][ T5050] hpfs: hpfs_map_4sectors(): unaligned read [ 107.360264][ T5044] team0 (unregistering): Port device team_slave_0 removed [ 107.370405][ T5050] hpfs: hpfs_map_4sectors(): unaligned read [ 107.472470][ T5044] team0 (unregistering): Port device team_slave_1 removed [ 107.486183][ T4242] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 107.501876][ T4242] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 107.527360][ T4235] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 107.542364][ T4242] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.582015][ T5045] loop3: detected capacity change from 0 to 32768 [ 107.622912][ T4242] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 107.633266][ T4242] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 107.646596][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.793822][ T5045] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 107.823861][ T5003] loop2: detected capacity change from 0 to 8192 [ 107.824093][ T4242] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.830496][ T4242] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.848324][ T4242] usb 2-1: Product: syz [ 107.852708][ T4242] usb 2-1: Manufacturer: syz [ 107.857936][ T4242] usb 2-1: SerialNumber: syz [ 107.876618][ T4242] usb 2-1: config 0 descriptor?? [ 107.922983][ T4242] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.944631][ T4242] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 107.992992][ T5003] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 108.006624][ T5003] REISERFS (device loop2): using ordered data mode [ 108.013168][ T5003] reiserfs: using flush barriers [ 108.028181][ T5003] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.050712][ T5003] REISERFS (device loop2): checking transaction log (loop2) [ 108.080141][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 108.094159][ T5003] REISERFS warning: reiserfs-5086 is_leaf: item location seems wrong (second one): *3.5*[1 2 0x1 IND], item_len 2, item_location 4004, free_space(entry_count) 2 [ 108.122643][ T5003] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 108.164350][ T5003] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 108.403121][ T5052] loop5: detected capacity change from 0 to 40427 [ 108.411476][ T4235] usb 3-1: USB disconnect, device number 4 [ 108.423941][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 108.436002][ T4235] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 108.482419][ T5052] F2FS-fs (loop5): invalid crc value [ 108.522827][ T5052] F2FS-fs (loop5): Found nat_bits in checkpoint [ 108.524972][ T5075] loop1: detected capacity change from 0 to 128 [ 108.591949][ T5075] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.659740][ T5075] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.738180][ T5052] F2FS-fs (loop5): Start checkpoint disabled! [ 108.945860][ T5052] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 109.484502][ T4831] usb 2-1: USB disconnect, device number 5 [ 109.520615][ T4831] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 109.810643][ T5106] netlink: 'syz.4.159': attribute type 13 has an invalid length. [ 109.995048][ T5104] process 'syz.1.158' launched './file2' with NULL argv: empty string added [ 110.347845][ T1108] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 110.381352][ T5111] loop3: detected capacity change from 0 to 128 [ 110.459919][ T5111] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.486408][ T5111] hpfs: filesystem error: improperly stopped [ 110.493318][ T5111] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.507883][ T5111] hpfs: You really don't want any checks? You are crazy... [ 110.544992][ T5111] hpfs: hpfs_map_sector(): read error [ 110.554176][ T5111] hpfs: code page support is disabled [ 110.622594][ T5111] hpfs: hpfs_map_4sectors(): unaligned read [ 110.669698][ T5111] hpfs: hpfs_map_4sectors(): unaligned read [ 110.675737][ T5111] hpfs: filesystem error: unable to find root dir [ 111.499158][ T5125] loop1: detected capacity change from 0 to 1024 [ 111.574142][ T1108] usb 6-1: unable to read config index 0 descriptor/all [ 111.584906][ T1108] usb 6-1: can't read configurations, error -71 [ 111.595374][ T5127] hpfs: hpfs_map_4sectors(): unaligned read [ 111.601737][ T5127] hpfs: hpfs_map_4sectors(): unaligned read [ 111.654165][ T5125] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.663200][ T5125] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.675180][ T5125] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 111.784082][ T5125] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 111.791602][ T5125] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.158: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.809406][ T5125] EXT4-fs (loop1): Remounting filesystem read-only [ 111.817082][ T5125] EXT4-fs (loop1): 1 orphan inode deleted [ 111.822828][ T5125] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000003139,stripe=0x0000000000000006,errors=remount-ro,auto_da_alloc=0x000000000000000a,. Quota mode: writeback. [ 111.858214][ T5104] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.158: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 111.937528][ T5132] FAULT_INJECTION: forcing a failure. [ 111.937528][ T5132] name failslab, interval 1, probability 0, space 0, times 0 [ 111.950910][ T5132] CPU: 1 PID: 5132 Comm: syz.3.168 Not tainted syzkaller #0 [ 111.958187][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.968224][ T5132] Call Trace: [ 111.971487][ T5132] [ 111.974399][ T5132] dump_stack_lvl+0x168/0x230 [ 111.979059][ T5132] ? show_regs_print_info+0x20/0x20 [ 111.984234][ T5132] ? load_image+0x3b0/0x3b0 [ 111.988716][ T5132] ? __might_sleep+0xf0/0xf0 [ 111.993279][ T5132] ? __lock_acquire+0x7c60/0x7c60 [ 111.998284][ T5132] ? memset+0x1e/0x40 [ 112.002250][ T5132] should_fail+0x38c/0x4c0 [ 112.006656][ T5132] should_failslab+0x5/0x20 [ 112.011167][ T5132] slab_pre_alloc_hook+0x51/0xc0 [ 112.016080][ T5132] ? security_inode_alloc+0x30/0x110 [ 112.021516][ T5132] kmem_cache_alloc+0x3d/0x290 [ 112.026270][ T5132] security_inode_alloc+0x30/0x110 [ 112.031384][ T5132] inode_init_always+0x8f4/0xcb0 [ 112.036311][ T5132] ? shmem_match+0x160/0x160 [ 112.040888][ T5132] new_inode_pseudo+0x8e/0x210 [ 112.045685][ T5132] new_inode+0x25/0x1c0 [ 112.049823][ T5132] shmem_get_inode+0x334/0xa90 [ 112.054577][ T5132] ? _raw_spin_unlock+0x24/0x40 [ 112.059408][ T5132] __shmem_file_setup+0x10b/0x290 [ 112.064407][ T5132] ? shmem_file_setup+0x13/0x30 [ 112.069237][ T5132] __se_sys_memfd_create+0x290/0x430 [ 112.074506][ T5132] ? __x64_sys_memfd_create+0x60/0x60 [ 112.079855][ T5132] ? lockdep_hardirqs_on+0x94/0x140 [ 112.085032][ T5132] do_syscall_64+0x4c/0xa0 [ 112.089425][ T5132] ? clear_bhb_loop+0x30/0x80 [ 112.094074][ T5132] ? clear_bhb_loop+0x30/0x80 [ 112.098727][ T5132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.104596][ T5132] RIP: 0033:0x7ff9060b4be9 [ 112.108989][ T5132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.128590][ T5132] RSP: 002b:00007ff90431be18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 112.137003][ T5132] RAX: ffffffffffffffda RBX: 0000000000037f14 RCX: 00007ff9060b4be9 [ 112.144964][ T5132] RDX: 00007ff90431bef0 RSI: 0000000000000000 RDI: 00007ff9061387e8 [ 112.152922][ T5132] RBP: 0000200000038000 R08: 00007ff90431bbb7 R09: 00007ff90431be40 [ 112.160886][ T5132] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000037f80 [ 112.168862][ T5132] R13: 00007ff90431bef0 R14: 00007ff90431beb0 R15: 0000200000037fc0 [ 112.176824][ T5132] [ 112.347707][ T5139] loop3: detected capacity change from 0 to 16 [ 112.461701][ T5139] erofs: (device loop3): mounted with root inode @ nid 36. [ 112.518978][ T4304] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.652123][ T5147] loop5: detected capacity change from 0 to 512 [ 112.703856][ T5150] 9pnet: Insufficient options for proto=fd [ 112.794493][ T5147] EXT4-fs (loop5): Ignoring removed orlov option [ 112.805266][ T4304] usb 5-1: Using ep0 maxpacket: 16 [ 112.824762][ T5147] EXT4-fs (loop5): orphan cleanup on readonly fs [ 112.850746][ T5147] EXT4-fs error (device loop5): ext4_find_extent:929: inode #4: comm syz.5.166: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 112.885141][ T5147] EXT4-fs (loop5): Remounting filesystem read-only [ 112.891725][ T5147] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 112.924305][ T5147] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.939178][ T5147] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 112.945876][ T5147] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: writeback. [ 112.964198][ T4304] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 112.994456][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.002895][ T4304] usb 5-1: config 0 has no interface number 0 [ 113.041721][ T4304] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 113.074766][ T4304] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.093279][ T4304] usb 5-1: config 0 interface 41 has no altsetting 0 [ 113.188908][ T7] usb 4-1: device descriptor read/64, error -71 [ 113.264175][ T4304] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 113.285811][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.299303][ T4304] usb 5-1: Product: syz [ 113.303707][ T4304] usb 5-1: Manufacturer: syz [ 113.309059][ T4304] usb 5-1: SerialNumber: syz [ 113.310972][ T5167] loop2: detected capacity change from 0 to 2048 [ 113.321156][ T4304] usb 5-1: config 0 descriptor?? [ 113.354188][ T5136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.361953][ T5136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.513680][ T5167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.544109][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.645372][ T5136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.677024][ T5136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.754131][ T7] usb 4-1: device descriptor read/64, error -71 [ 113.921463][ T7] usb usb4-port1: attempt power cycle [ 114.601432][ T5184] loop1: detected capacity change from 0 to 128 [ 114.606685][ T5180] loop4: detected capacity change from 0 to 2048 [ 114.637658][ T5188] loop5: detected capacity change from 0 to 256 [ 114.670179][ T5184] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 114.685743][ T5188] exfat: Deprecated parameter 'utf8' [ 114.687742][ T5184] hpfs: filesystem error: improperly stopped [ 114.710875][ T5180] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 114.744186][ T5184] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 114.754129][ T5180] UDF-fs: Scanning with blocksize 512 failed [ 114.773671][ T5184] hpfs: You really don't want any checks? You are crazy... [ 114.783557][ T5184] hpfs: hpfs_map_sector(): read error [ 114.826373][ T5180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.843953][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.864448][ T5184] hpfs: code page support is disabled [ 114.869917][ T5184] hpfs: hpfs_map_4sectors(): unaligned read [ 114.905948][ T5184] hpfs: hpfs_map_4sectors(): unaligned read [ 114.932555][ T5184] hpfs: filesystem error: unable to find root dir [ 114.944189][ T7] usb 4-1: device descriptor read/8, error -71 [ 115.100219][ T5201] FAULT_INJECTION: forcing a failure. [ 115.100219][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.141625][ T5201] CPU: 1 PID: 5201 Comm: syz.2.182 Not tainted syzkaller #0 [ 115.148944][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.159004][ T5201] Call Trace: [ 115.162284][ T5201] [ 115.165220][ T5201] dump_stack_lvl+0x168/0x230 [ 115.169915][ T5201] ? show_regs_print_info+0x20/0x20 [ 115.175124][ T5201] ? load_image+0x3b0/0x3b0 [ 115.179655][ T5201] ? file_tty_write+0x332/0x910 [ 115.184603][ T5201] ? __lock_acquire+0x7c60/0x7c60 [ 115.189650][ T5201] should_fail+0x38c/0x4c0 [ 115.194081][ T5201] _copy_from_iter+0x22a/0x1150 [ 115.198957][ T5201] ? __lock_acquire+0x7c60/0x7c60 [ 115.204003][ T5201] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 115.209392][ T5201] ? __virt_addr_valid+0x3c6/0x470 [ 115.213989][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.214518][ T5201] ? __phys_addr+0xb6/0x170 [ 115.226452][ T5201] ? __check_object_size+0x30c/0x410 [ 115.231759][ T5201] file_tty_write+0x515/0x910 [ 115.236451][ T5201] ? n_tty_read+0x1a30/0x1a30 [ 115.240982][ T5205] hpfs: hpfs_map_4sectors(): unaligned read [ 115.241132][ T5201] vfs_write+0x712/0xd00 [ 115.247713][ T5205] hpfs: hpfs_map_4sectors(): unaligned read [ 115.251237][ T5201] ? file_end_write+0x250/0x250 [ 115.261955][ T5201] ? __fget_files+0x40f/0x480 [ 115.266651][ T5201] ? __fdget_pos+0x1e2/0x370 [ 115.271256][ T5201] ? ksys_write+0x71/0x250 [ 115.275689][ T5201] ksys_write+0x14d/0x250 [ 115.280032][ T5201] ? __ia32_sys_read+0x80/0x80 [ 115.284813][ T5201] ? lockdep_hardirqs_on+0x94/0x140 [ 115.290028][ T5201] do_syscall_64+0x4c/0xa0 [ 115.294458][ T5201] ? clear_bhb_loop+0x30/0x80 [ 115.299141][ T5201] ? clear_bhb_loop+0x30/0x80 [ 115.303836][ T5201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.309738][ T5201] RIP: 0033:0x7fe37e40fbe9 [ 115.314173][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.324573][ T7] usb 4-1: device descriptor read/8, error -71 [ 115.333795][ T5201] RSP: 002b:00007fe37c677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.333825][ T5201] RAX: ffffffffffffffda RBX: 00007fe37e646fa0 RCX: 00007fe37e40fbe9 [ 115.333836][ T5201] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 115.333846][ T5201] RBP: 00007fe37c677090 R08: 0000000000000000 R09: 0000000000000000 [ 115.333855][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.333865][ T5201] R13: 00007fe37e647038 R14: 00007fe37e646fa0 R15: 00007ffe9040e828 [ 115.333893][ T5201] [ 115.350801][ T5207] loop5: detected capacity change from 0 to 2048 [ 115.467267][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 115.479842][ T7] usb usb4-port1: unable to enumerate USB device [ 115.486212][ T4304] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 115.527255][ T5207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.908988][ T5217] loop3: detected capacity change from 0 to 2048 [ 115.943665][ T5217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.991232][ T5219] o2cb: This node has not been configured. [ 115.997337][ T5219] o2cb: Cluster check failed. Fix errors before retrying. [ 116.004656][ T5219] (syz.5.187,5219,0):user_dlm_register:675 ERROR: status = -22 [ 116.012312][ T5219] (syz.5.187,5219,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 116.685880][ T5243] loop5: detected capacity change from 0 to 128 [ 116.692072][ T5241] udc-core: couldn't find an available UDC or it's busy [ 116.700875][ T5241] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.746146][ T5243] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 116.760520][ T5243] hpfs: filesystem error: improperly stopped [ 116.767827][ T5243] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 116.783190][ T5243] hpfs: You really don't want any checks? You are crazy... [ 116.792588][ T5243] hpfs: hpfs_map_sector(): read error [ 116.802446][ T5243] hpfs: code page support is disabled [ 116.812395][ T5243] hpfs: hpfs_map_4sectors(): unaligned read [ 116.822795][ T5243] hpfs: hpfs_map_4sectors(): unaligned read [ 116.830254][ T5243] hpfs: filesystem error: unable to find root dir [ 116.874087][ T4257] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.917733][ T5227] loop2: detected capacity change from 0 to 32768 [ 116.980450][ T5227] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.007506][ T4304] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 117.012207][ T5227] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.018822][ T4304] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 117.036593][ T4304] CoreChips: probe of 5-1:0.41 failed with error -71 [ 117.046790][ T4304] usb 5-1: USB disconnect, device number 5 [ 117.084713][ T4242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.093559][ T5244] hpfs: hpfs_map_4sectors(): unaligned read [ 117.100204][ T5244] hpfs: hpfs_map_4sectors(): unaligned read [ 117.119939][ T5227] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 117.137035][ T4831] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.146007][ T4831] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.191929][ T4831] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 117.200186][ T4831] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.214589][ T5227] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 117.240863][ T5246] loop4: detected capacity change from 0 to 256 [ 117.244610][ T4257] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.279449][ T4257] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.434061][ T4242] usb 4-1: Using ep0 maxpacket: 32 [ 117.444652][ T4257] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.463216][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.686154][ T4257] usb 2-1: Product: syz [ 117.692191][ T4257] usb 2-1: Manufacturer: syz [ 117.702189][ T4257] usb 2-1: SerialNumber: syz [ 117.956947][ T5237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.025213][ T4242] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 118.043691][ T4242] usb 4-1: config 0 has no interface number 0 [ 118.052773][ T4242] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 118.096156][ T4242] usb 4-1: config 0 interface 196 has no altsetting 0 [ 118.294123][ T4242] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 118.303198][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.332839][ T4242] usb 4-1: Product: syz [ 118.342554][ T4242] usb 4-1: Manufacturer: syz [ 118.352668][ T4242] usb 4-1: SerialNumber: syz [ 118.385150][ T4242] usb 4-1: config 0 descriptor?? [ 118.414313][ T5242] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.627003][ T5277] loop5: detected capacity change from 0 to 40427 [ 118.644197][ T1111] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.688201][ T5277] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 118.715811][ T5277] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 118.730049][ T5277] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 118.759194][ T5277] F2FS-fs (loop5): invalid crc value [ 118.797054][ T5277] F2FS-fs (loop5): Found nat_bits in checkpoint [ 118.868439][ T5277] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 118.881901][ T5277] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 118.942278][ T5238] loop1: detected capacity change from 0 to 8192 [ 119.004346][ T5238] FAT-fs (loop1): bogus number of directory entries (9) [ 119.011698][ T5238] FAT-fs (loop1): Can't find a valid FAT filesystem [ 119.061785][ T5277] smc: net device bond0 applied user defined pnetid SYZ0 [ 119.077043][ T5277] smc: net device bond0 erased user defined pnetid SYZ0 [ 119.234038][ T4242] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 119.242969][ T4242] ipheth: probe of 4-1:0.196 failed with error -110 [ 119.265091][ T1111] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 119.275432][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.448856][ T1111] usb 5-1: config 0 descriptor?? [ 119.487784][ T1108] usb 4-1: USB disconnect, device number 6 [ 119.556954][ T4580] attempt to access beyond end of device [ 119.556954][ T4580] loop5: rw=2049, want=45104, limit=40427 [ 119.759253][ T1111] usb 5-1: USB disconnect, device number 6 [ 119.837242][ T5237] loop1: detected capacity change from 0 to 40427 [ 119.863512][ T5237] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.887233][ T5237] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.921138][ T5237] F2FS-fs (loop1): invalid crc value [ 119.947114][ T5237] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.981292][ T5307] loop5: detected capacity change from 0 to 128 [ 120.011787][ T5307] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 120.024530][ T5307] hpfs: filesystem error: improperly stopped [ 120.034619][ T5307] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 120.047335][ T5307] hpfs: You really don't want any checks? You are crazy... [ 120.050028][ T5237] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.058904][ T5307] hpfs: hpfs_map_sector(): read error [ 120.067642][ T5237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.068193][ T5307] hpfs: code page support is disabled [ 120.086388][ T5307] hpfs: hpfs_map_4sectors(): unaligned read [ 120.092545][ T5307] hpfs: hpfs_map_4sectors(): unaligned read [ 120.101053][ T5307] hpfs: filesystem error: unable to find root dir [ 120.273326][ T4257] cdc_mbim 2-1:1.0: bind() failure [ 120.286809][ T4257] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 120.293676][ T4257] cdc_ncm 2-1:1.1: bind() failure [ 120.302122][ T4257] usb 2-1: USB disconnect, device number 6 [ 120.334449][ T5312] hpfs: hpfs_map_4sectors(): unaligned read [ 120.342591][ T5312] hpfs: hpfs_map_4sectors(): unaligned read [ 120.497614][ T5321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 120.507191][ T5321] netlink: 212 bytes leftover after parsing attributes in process `syz.2.215'. [ 120.572745][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 120.708218][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.531601][ T5344] loop3: detected capacity change from 0 to 256 [ 121.542269][ T5345] loop5: detected capacity change from 0 to 512 [ 121.634041][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 121.651755][ T5351] loop1: detected capacity change from 0 to 256 [ 121.804699][ T5351] exfat: Deprecated parameter 'utf8' [ 121.848891][ T5344] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 121.944037][ T1108] usb 5-1: config 1 interface 0 altsetting 98 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 121.965108][ T1108] usb 5-1: config 1 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.978740][ T1108] usb 5-1: config 1 interface 0 has no altsetting 0 [ 122.128710][ T5359] tipc: Trying to set illegal importance in message [ 122.150136][ T5360] loop5: detected capacity change from 0 to 1024 [ 122.157021][ T1108] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 122.182254][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.198849][ T1108] usb 5-1: Product: syz [ 122.207343][ T1108] usb 5-1: Manufacturer: syz [ 122.212063][ T1108] usb 5-1: SerialNumber: syz [ 122.213922][ T5363] loop1: detected capacity change from 0 to 2048 [ 122.242036][ T5360] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.272552][ T4177] GPT:first_usable_lbas don't match. [ 122.283469][ T4177] GPT:34 != 290 [ 122.295031][ T5360] EXT4-fs error (device loop5): mb_free_blocks:1860: group 0, inode 18: block 400:freeing already freed block (bit 25); block bitmap corrupt. [ 122.300722][ T4177] GPT: Use GNU Parted to correct GPT errors. [ 122.329333][ T4177] loop1: p1 p2 p3 [ 122.422757][ T5363] GPT:first_usable_lbas don't match. [ 122.430311][ T5363] GPT:34 != 290 [ 122.435498][ T5363] GPT: Use GNU Parted to correct GPT errors. [ 122.441615][ T5363] loop1: p1 p2 p3 [ 122.505687][ T5371] loop3: detected capacity change from 0 to 128 [ 122.594753][ T5371] hpfs: bad mount options. [ 122.623748][ T5378] loop2: detected capacity change from 0 to 128 [ 122.633301][ T3561] GPT:first_usable_lbas don't match. [ 122.641320][ T3561] GPT:34 != 290 [ 122.645126][ T3561] GPT: Use GNU Parted to correct GPT errors. [ 122.651258][ T3561] loop1: p1 p2 p3 [ 122.668300][ T5378] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 122.680300][ T5378] hpfs: filesystem error: improperly stopped [ 122.687463][ T5378] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 122.695601][ T5378] hpfs: You really don't want any checks? You are crazy... [ 122.703302][ T5378] hpfs: hpfs_map_sector(): read error [ 122.707332][ T5371] loop3: detected capacity change from 0 to 512 [ 122.719341][ T5378] hpfs: code page support is disabled [ 122.740021][ T5378] hpfs: hpfs_map_4sectors(): unaligned read [ 122.755622][ T5378] hpfs: hpfs_map_4sectors(): unaligned read [ 122.761879][ T5378] hpfs: filesystem error: unable to find root dir [ 122.856887][ T1108] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10 [ 122.884151][ T3546] bcm5974 5-1:1.0: could not read from device [ 122.915504][ T1108] usb 5-1: USB disconnect, device number 7 [ 122.981447][ T5386] hpfs: hpfs_map_4sectors(): unaligned read [ 122.988587][ T5386] hpfs: hpfs_map_4sectors(): unaligned read [ 123.251148][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 123.265955][ T4961] udevd[4961]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 123.299158][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 123.475313][ T5399] tipc: Started in network mode [ 123.480543][ T5399] tipc: Node identity 4, cluster identity 4711 [ 123.486955][ T5399] tipc: Node number set to 4 [ 123.898336][ T4963] udevd[4963]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 123.929347][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 123.953654][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 123.977868][ T5404] loop4: detected capacity change from 0 to 128 [ 124.059551][ T4961] udevd[4961]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 124.073164][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 124.086248][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 124.280244][ T5414] netlink: 'syz.2.234': attribute type 13 has an invalid length. [ 124.456794][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 125.363947][ T4242] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.438452][ T5406] loop5: detected capacity change from 0 to 32768 [ 125.496428][ T5406] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 125.533969][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.571212][ T5406] MPTCP: kernel_bind error, err=-22 [ 125.610353][ T5441] loop2: detected capacity change from 0 to 1024 [ 125.687288][ T4580] (syz-executor,4580,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 125.755552][ T4580] ocfs2: Unmounting device (7,5) on (node local) [ 125.783559][ T5441] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #3: block 1: comm syz.2.240: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.784069][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 125.804598][ T5441] Quota error (device loop2): write_blk: dquota write failed [ 125.812023][ T5441] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 125.832866][ T5441] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.240: Failed to acquire dquot type 0 [ 125.850672][ T5441] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.240: Freeing blocks not in datazone - block = 0, count = 4096 [ 125.889844][ T5441] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.240: Invalid inode bitmap blk 0 in block_group 0 [ 125.909565][ T4278] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.944725][ T7] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 125.996851][ T4242] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.017757][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.032938][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.053427][ T7] usb 2-1: config 0 has no interface number 0 [ 126.060087][ T4278] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 126.087632][ T4242] usb 4-1: Product: syz [ 126.090865][ T5456] loop4: detected capacity change from 0 to 128 [ 126.091961][ T4278] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 0 [ 126.130871][ T4242] usb 4-1: Manufacturer: syz [ 126.136720][ T4242] usb 4-1: SerialNumber: syz [ 126.149207][ T5441] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 126.153271][ T4242] usb 4-1: config 0 descriptor?? [ 126.188361][ T5441] EXT4-fs (loop2): 1 orphan inode deleted [ 126.214228][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 126.231375][ T5456] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.252645][ T5441] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 126.264373][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.272372][ T7] usb 2-1: Product: syz [ 126.284361][ T5456] hpfs: filesystem error: improperly stopped [ 126.306722][ T7] usb 2-1: Manufacturer: syz [ 126.319168][ T5456] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.341656][ T7] usb 2-1: SerialNumber: syz [ 126.348831][ T5456] hpfs: You really don't want any checks? You are crazy... [ 126.361767][ T7] usb 2-1: config 0 descriptor?? [ 126.369760][ T5456] hpfs: hpfs_map_sector(): read error [ 126.380828][ T5456] hpfs: code page support is disabled [ 126.405889][ T7] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 126.429960][ T7] usb 2-1: No valid video chain found. [ 126.448333][ T5456] hpfs: hpfs_map_4sectors(): unaligned read [ 126.455193][ T4242] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.474020][ T5456] hpfs: hpfs_map_4sectors(): unaligned read [ 126.479969][ T5456] hpfs: filesystem error: unable to find root dir [ 126.706376][ T5468] hpfs: hpfs_map_4sectors(): unaligned read [ 126.712885][ T5468] hpfs: hpfs_map_4sectors(): unaligned read [ 126.835940][ T4831] usb 2-1: USB disconnect, device number 7 [ 126.999538][ T5417] loop3: detected capacity change from 0 to 256 [ 127.095205][ T5417] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 127.252875][ T5417] exFAT-fs (loop3): hint_cluster is invalid (521) [ 127.285259][ T5417] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 127.309715][ T5417] exFAT-fs (loop3): Filesystem has been set read-only [ 127.324012][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 127.544396][ T5417] exFAT-fs (loop3): error, failed to bmap (inode : ffff888064184f60 iblock : 9, err : -5) [ 127.640405][ T5501] netlink: 'syz.1.250': attribute type 13 has an invalid length. [ 127.662908][ T5417] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 127.761295][ T5417] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 127.856876][ T4242] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 128.097420][ T4242] usb 4-1: USB disconnect, device number 7 [ 128.161152][ T5496] loop5: detected capacity change from 0 to 8192 [ 128.359156][ T5512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.252'. [ 128.370469][ T5512] netlink: 212 bytes leftover after parsing attributes in process `syz.5.252'. [ 128.389951][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 128.489684][ T7] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 128.501786][ T7] usb 3-1: config 0 has no interface number 0 [ 128.517423][ T7] usb 3-1: config 0 interface 202 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 128.572043][ T7] usb 3-1: config 0 interface 202 has no altsetting 0 [ 128.844110][ T7] usb 3-1: string descriptor 0 read error: -22 [ 128.853702][ T7] usb 3-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=b1.8f [ 128.932627][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.987340][ T7] usb 3-1: config 0 descriptor?? [ 129.045002][ T7] kvaser_usb 3-1:0.202: Cannot get usb endpoint(s) [ 129.130018][ T5521] loop1: detected capacity change from 0 to 32768 [ 129.199309][ T5521] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 129.229973][ T5521] (syz.1.253,5521,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255 [ 129.255116][ T5521] (syz.1.253,5521,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 129.264416][ T5486] loop2: detected capacity change from 0 to 512 [ 129.274266][ T5521] (syz.1.253,5521,0):ocfs2_mknod:298 ERROR: status = -2 [ 129.282044][ T5521] (syz.1.253,5521,1):ocfs2_mknod:502 ERROR: status = -2 [ 129.293602][ T5521] (syz.1.253,5521,1):ocfs2_create:676 ERROR: status = -2 [ 129.334036][ T4242] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 129.360004][ T5486] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 129.376707][ T5486] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.411000][ T1111] usb 3-1: USB disconnect, device number 5 [ 129.581650][ T5521] (syz.1.253,5521,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255 [ 129.606218][ T5521] (syz.1.253,5521,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 129.628648][ T5521] (syz.1.253,5521,0):ocfs2_mknod:298 ERROR: status = -2 [ 129.631757][ T5563] loop3: detected capacity change from 0 to 128 [ 129.642428][ T5521] (syz.1.253,5521,0):ocfs2_mknod:502 ERROR: status = -2 [ 129.649793][ T5521] (syz.1.253,5521,1):ocfs2_create:676 ERROR: status = -2 [ 129.670230][ T5563] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 129.691470][ T5563] hpfs: filesystem error: improperly stopped [ 129.697678][ T5563] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 129.705861][ T5563] hpfs: You really don't want any checks? You are crazy... [ 129.718637][ T5563] hpfs: hpfs_map_sector(): read error [ 129.730616][ T5563] hpfs: code page support is disabled [ 129.738554][ T5563] hpfs: hpfs_map_4sectors(): unaligned read [ 129.744835][ T4242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.756020][ T5563] hpfs: hpfs_map_4sectors(): unaligned read [ 129.762718][ T4242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.772824][ T5563] hpfs: filesystem error: unable to find root dir [ 129.782914][ T4242] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.797252][ T4242] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.806603][ T4242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.817781][ T4242] usb 6-1: config 0 descriptor?? [ 129.933313][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 129.967389][ T5565] hpfs: hpfs_map_4sectors(): unaligned read [ 129.973946][ T5565] hpfs: hpfs_map_4sectors(): unaligned read [ 130.449959][ T4242] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 130.511084][ T5590] netlink: 'syz.4.261': attribute type 13 has an invalid length. [ 131.160853][ T4257] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.190118][ T4242] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 131.229309][ T5592] mmap: syz.5.257 (5592) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 131.246181][ T5599] loop1: detected capacity change from 0 to 128 [ 131.303078][ T5598] netlink: 44 bytes leftover after parsing attributes in process `syz.4.264'. [ 131.404017][ T4257] usb 3-1: Using ep0 maxpacket: 8 [ 131.481181][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 131.564818][ T4257] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.654319][ T4257] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 131.662681][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.676194][ T4257] usb 3-1: config 4 has no interface number 0 [ 131.683691][ T4257] usb 3-1: config 4 interface 30 has no altsetting 0 [ 131.785324][ T4235] usb 6-1: USB disconnect, device number 5 [ 131.810096][ T5603] loop3: detected capacity change from 0 to 4096 [ 131.913998][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 131.929952][ T4257] usb 3-1: string descriptor 0 read error: -22 [ 131.942230][ T5603] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 131.948042][ T4257] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 131.990139][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.023310][ T5603] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 132.034140][ T7] usb 2-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config [ 132.041947][ T5603] ntfs3: loop3: Failed to load $Extend. [ 132.046701][ T4257] dw2102: su3000_identify_state [ 132.067730][ T4257] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 132.075158][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.095689][ T4257] dw2102: su3000_power_ctrl: 1, initialized 0 [ 132.103502][ T4394] tipc: Subscription rejected, illegal request [ 132.115495][ T4257] dvb-usb: bulk message failed: -22 (2/0) [ 132.144730][ T4257] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.185410][ T4257] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 132.195845][ T4257] usb 3-1: media controller created [ 132.201600][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 132.208876][ T4257] dw2102: i2c transfer failed. [ 132.222606][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 132.235888][ T4257] dw2102: i2c transfer failed. [ 132.245351][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 132.256048][ T4257] dw2102: i2c transfer failed. [ 132.262074][ T5581] dvb-usb: bulk message failed: -22 (3/0) [ 132.269468][ T5581] dw2102: i2c transfer failed. [ 132.274410][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.282968][ T5581] dvb-usb: bulk message failed: -22 (3/0) [ 132.288264][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.290137][ T5581] dw2102: i2c transfer failed. [ 132.305589][ T7] usb 2-1: Product: syz [ 132.319330][ T7] usb 2-1: Manufacturer: syz [ 132.328516][ T7] usb 2-1: SerialNumber: syz [ 132.375759][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 132.403610][ T4257] dw2102: i2c transfer failed. [ 132.471963][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 132.533362][ T4257] dw2102: i2c transfer failed. [ 132.603702][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 132.684874][ T7] usb 2-1: 0:2 : does not exist [ 132.710296][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716912][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.765698][ T4257] dw2102: i2c transfer failed. [ 132.832706][ T4257] dvb-usb: MAC address: 02:02:02:02:02:02 [ 133.034519][ T7] usb 2-1: USB disconnect, device number 8 [ 133.312352][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.407923][ T5629] loop4: detected capacity change from 0 to 128 [ 133.462251][ T4257] dvb-usb: bulk message failed: -22 (3/0) [ 133.495451][ T4257] dw2102: command 0x0e transfer failed. [ 133.496978][ T5632] loop1: detected capacity change from 0 to 1024 [ 133.512038][ T4257] dvb-usb: bulk message failed: -22 (3/0) [ 133.518255][ T4257] dw2102: command 0x0e transfer failed. [ 133.692066][ T5629] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.719610][ T5632] EXT4-fs (loop1): Ignoring removed bh option [ 133.764872][ T5629] hpfs: filesystem error: improperly stopped [ 133.797908][ T5632] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,block_validity,max_dir_size_kb=0x0000000000000009,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 133.839740][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.844697][ T5629] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.893479][ T5629] hpfs: You really don't want any checks? You are crazy... [ 133.902530][ T5629] hpfs: hpfs_map_sector(): read error [ 133.913268][ T5629] hpfs: code page support is disabled [ 133.921167][ T5629] hpfs: hpfs_map_4sectors(): unaligned read [ 133.938412][ T5629] hpfs: hpfs_map_4sectors(): unaligned read [ 133.952350][ T5629] hpfs: filesystem error: unable to find root dir [ 134.174175][ T4257] dvb-usb: bulk message failed: -22 (3/0) [ 134.174228][ T4257] dw2102: command 0x0e transfer failed. [ 134.174256][ T4257] dvb-usb: bulk message failed: -22 (3/0) [ 134.174270][ T4257] dw2102: command 0x0e transfer failed. [ 134.174280][ T4257] dvb-usb: bulk message failed: -22 (1/0) [ 134.174293][ T4257] dw2102: command 0x51 transfer failed. [ 134.174302][ T4257] dvb-usb: bulk message failed: -22 (5/0) [ 134.174315][ T4257] dw2102: i2c probe for address 0x68 failed. [ 134.174327][ T4257] dvb-usb: bulk message failed: -22 (5/0) [ 134.174340][ T4257] dw2102: i2c probe for address 0x69 failed. [ 134.174349][ T4257] dvb-usb: bulk message failed: -22 (5/0) [ 134.174361][ T4257] dw2102: i2c probe for address 0x6a failed. [ 134.174371][ T4257] dw2102: probing for demodulator failed. Is the external power switched on? [ 134.174382][ T4257] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 134.180450][ T5646] hpfs: hpfs_map_4sectors(): unaligned read [ 134.180819][ T5646] hpfs: hpfs_map_4sectors(): unaligned read [ 134.254541][ T4235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.981322][ T4257] rc_core: IR keymap rc-tt-1500 not found [ 134.981342][ T4257] Registered IR keymap rc-empty [ 134.983489][ T4257] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 134.986120][ T4257] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 135.066000][ T4257] dvb-usb: schedule remote query interval to 250 msecs. [ 135.123797][ T4257] dw2102: su3000_power_ctrl: 0, initialized 1 [ 135.130255][ T4257] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 135.143996][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 135.151915][ T4257] usb 3-1: USB disconnect, device number 6 [ 135.264195][ T4235] usb 2-1: config 162 has an invalid interface number: 236 but max is 0 [ 135.272570][ T4235] usb 2-1: config 162 has no interface number 0 [ 135.323823][ T4257] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 136.102953][ T4235] usb 2-1: config 162 interface 236 has no altsetting 0 [ 136.274210][ T4235] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e9.c0 [ 136.321603][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.471643][ T4235] usb 2-1: Product: syz [ 136.558276][ T4235] usb 2-1: Manufacturer: syz [ 136.622975][ T4235] usb 2-1: SerialNumber: syz [ 136.935057][ T4235] usb 2-1: can't set config #162, error -71 [ 137.023823][ T4235] usb 2-1: USB disconnect, device number 9 [ 137.367153][ T5657] loop4: detected capacity change from 0 to 40427 [ 137.485066][ T5657] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 137.494403][ T5657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 137.598912][ T5657] F2FS-fs (loop4): invalid crc value [ 137.634890][ T5657] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 137.728977][ T5657] F2FS-fs (loop4): recover fsync data on readonly fs [ 137.736405][ T5657] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 137.748685][ T5657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.808654][ T5692] loop3: detected capacity change from 0 to 128 [ 137.858909][ T5692] ufs: You didn't specify the type of your ufs filesystem [ 137.858909][ T5692] [ 137.858909][ T5692] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 137.858909][ T5692] [ 137.858909][ T5692] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 137.893030][ T4257] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.935855][ T5692] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 138.154207][ T4257] usb 3-1: Using ep0 maxpacket: 16 [ 138.394948][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.444528][ T4257] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.488335][ T5705] loop1: detected capacity change from 0 to 1024 [ 138.497471][ T5706] loop4: detected capacity change from 0 to 512 [ 138.505444][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.573069][ T5706] EXT4-fs (loop4): Test dummy encryption mode enabled [ 138.602113][ T4257] usb 3-1: config 0 descriptor?? [ 138.649865][ T5706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.684035][ T5706] EXT4-fs (loop4): bad block size 65536 [ 138.840166][ T9] hfsplus: b-tree write err: -5, ino 4 [ 139.166026][ T4257] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 139.722740][ T5687] loop2: detected capacity change from 0 to 128 [ 140.100141][ T5728] loop4: detected capacity change from 0 to 2048 [ 140.220436][ T5728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.242856][ T5737] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.306'. [ 140.275280][ T5730] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 140.284291][ T5730] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 140.325707][ T5738] netlink: 'syz.2.290': attribute type 7 has an invalid length. [ 140.334684][ T5738] netlink: 'syz.2.290': attribute type 8 has an invalid length. [ 140.478715][ T5740] loop3: detected capacity change from 0 to 128 [ 140.574284][ T5740] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.598440][ T5740] hpfs: filesystem error: improperly stopped [ 140.608848][ T5740] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.620051][ T5740] hpfs: You really don't want any checks? You are crazy... [ 140.654058][ T5740] hpfs: hpfs_map_sector(): read error [ 140.669709][ T5740] hpfs: code page support is disabled [ 140.679939][ T5740] hpfs: hpfs_map_4sectors(): unaligned read [ 140.693500][ T4234] usb 3-1: USB disconnect, device number 7 [ 140.700268][ T5740] hpfs: hpfs_map_4sectors(): unaligned read [ 140.711963][ T5740] hpfs: filesystem error: unable to find root dir [ 140.912110][ T5745] loop4: detected capacity change from 0 to 128 [ 140.944403][ T5734] loop1: detected capacity change from 0 to 32768 [ 140.962332][ T5746] hpfs: hpfs_map_4sectors(): unaligned read [ 140.968913][ T5746] hpfs: hpfs_map_4sectors(): unaligned read [ 141.005183][ T5734] (syz.1.305,5734,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 141.024599][ T5734] (syz.1.305,5734,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 141.092277][ T5734] overlayfs: missing 'workdir' [ 141.389917][ T5752] netlink: 'syz.1.311': attribute type 13 has an invalid length. [ 141.590118][ T5759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.608487][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.621835][ T5760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.313'. [ 141.628849][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.653978][ T5760] netlink: 212 bytes leftover after parsing attributes in process `syz.2.313'. [ 141.992006][ T5774] netlink: 'syz.3.317': attribute type 13 has an invalid length. [ 142.444022][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 142.629064][ T21] usb 5-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config [ 142.655075][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.692364][ T5788] loop5: detected capacity change from 0 to 256 [ 142.730615][ T5790] loop3: detected capacity change from 0 to 128 [ 142.806969][ T5790] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.813955][ T4242] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.827027][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.840740][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.847631][ T5790] hpfs: filesystem error: improperly stopped [ 142.852863][ T21] usb 5-1: Product: syz [ 142.859152][ T21] usb 5-1: Manufacturer: syz [ 142.864349][ T21] usb 5-1: SerialNumber: syz [ 142.865282][ T5790] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.888019][ T5790] hpfs: You really don't want any checks? You are crazy... [ 142.896114][ T5790] hpfs: hpfs_map_sector(): read error [ 142.901511][ T5790] hpfs: code page support is disabled [ 142.909446][ T5790] hpfs: hpfs_map_4sectors(): unaligned read [ 142.916093][ T5790] hpfs: hpfs_map_4sectors(): unaligned read [ 142.921983][ T5790] hpfs: filesystem error: unable to find root dir [ 143.084010][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 143.107436][ T5791] hpfs: hpfs_map_4sectors(): unaligned read [ 143.113980][ T5791] hpfs: hpfs_map_4sectors(): unaligned read [ 143.204131][ T21] usb 5-1: 0:2 : does not exist [ 143.289103][ T21] usb 5-1: USB disconnect, device number 8 [ 143.374200][ T4242] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.391258][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.400213][ T4242] usb 3-1: Product: syz [ 143.404729][ T4242] usb 3-1: Manufacturer: syz [ 143.409386][ T4242] usb 3-1: SerialNumber: syz [ 143.425714][ T4242] usb 3-1: config 0 descriptor?? [ 143.555184][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.684970][ T4242] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.685844][ T5800] loop5: detected capacity change from 0 to 256 [ 143.712616][ T5800] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.740018][ T5800] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 143.767142][ T5800] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 143.894521][ T5800] exFAT-fs (loop5): hint_cluster is invalid (17) [ 143.897203][ T26] audit: type=1800 audit(1757206117.545:2): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.327" name="file1" dev="loop5" ino=1048643 res=0 errno=0 [ 143.902768][ T5800] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 143.930032][ T5800] exFAT-fs (loop5): Filesystem has been set read-only [ 144.968048][ T5780] binder: 5778:5780 ioctl 4018620d 0 returned -22 [ 145.019936][ T5814] netlink: 'syz.3.330': attribute type 13 has an invalid length. [ 145.358864][ T5807] loop4: detected capacity change from 0 to 32768 [ 145.801591][ T5807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.329 (5807) [ 146.025552][ T5807] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 146.054095][ T4242] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 146.121150][ T5830] netlink: 'syz.3.333': attribute type 13 has an invalid length. [ 146.181050][ T5807] BTRFS info (device loop4): setting nodatacow, compression disabled [ 146.496003][ T5829] loop1: detected capacity change from 0 to 128 [ 146.694004][ T5807] BTRFS info (device loop4): max_inline at 0 [ 146.694071][ T5807] BTRFS info (device loop4): enabling disk space caching [ 146.694101][ T5807] BTRFS info (device loop4): turning off barriers [ 146.694118][ T5807] BTRFS info (device loop4): turning on flush-on-commit [ 146.694140][ T5807] BTRFS info (device loop4): doing ref verification [ 146.694159][ T5807] BTRFS info (device loop4): force clearing of disk cache [ 146.694198][ T5807] BTRFS info (device loop4): enabling ssd optimizations [ 146.694231][ T5807] BTRFS info (device loop4): max_inline at 4096 [ 146.694248][ T5807] BTRFS info (device loop4): disk space caching is enabled [ 146.694262][ T5807] BTRFS info (device loop4): has skinny extents [ 146.785365][ T5840] loop3: detected capacity change from 0 to 128 [ 146.817691][ T21] usb 3-1: USB disconnect, device number 8 [ 146.868547][ T5840] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.868594][ T5840] hpfs: filesystem error: improperly stopped [ 146.868608][ T5840] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 146.868624][ T5840] hpfs: You really don't want any checks? You are crazy... [ 146.868846][ T5840] hpfs: hpfs_map_sector(): read error [ 146.868857][ T5840] hpfs: code page support is disabled [ 146.869003][ T5840] hpfs: hpfs_map_4sectors(): unaligned read [ 146.869036][ T5840] hpfs: hpfs_map_4sectors(): unaligned read [ 146.869047][ T5840] hpfs: filesystem error: unable to find root dir [ 146.919086][ T5850] loop2: detected capacity change from 0 to 2048 [ 147.059870][ T5850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.082940][ T5852] hpfs: hpfs_map_4sectors(): unaligned read [ 147.084182][ T5852] hpfs: hpfs_map_4sectors(): unaligned read [ 147.351171][ T5807] BTRFS error (device loop4): open_ctree failed: -12 [ 147.543950][ T4257] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.804685][ T4257] usb 2-1: Using ep0 maxpacket: 8 [ 147.828128][ T5875] loop4: detected capacity change from 0 to 2048 [ 147.926059][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.976349][ T5875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.991933][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.036900][ T4257] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 148.075075][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.095314][ T4257] usb 2-1: config 0 descriptor?? [ 148.329234][ T5892] netlink: 'syz.4.343': attribute type 13 has an invalid length. [ 148.710390][ T4257] logitech 0003:046D:C20E.0005: rdesc size test failed for formula gp [ 148.719540][ T4257] logitech 0003:046D:C20E.0005: unbalanced collection at end of report description [ 148.730912][ T4257] logitech 0003:046D:C20E.0005: parse failed [ 148.739567][ T4257] logitech: probe of 0003:046D:C20E.0005 failed with error -22 [ 148.933288][ T5909] loop2: detected capacity change from 0 to 2048 [ 149.361439][ T5862] loop1: detected capacity change from 0 to 1024 [ 149.873226][ T5924] netlink: 'syz.4.347': attribute type 13 has an invalid length. [ 150.034968][ T5860] usb 2-1: USB disconnect, device number 10 [ 150.885330][ T5937] loop5: detected capacity change from 0 to 512 [ 150.894041][ T5935] loop4: detected capacity change from 0 to 512 [ 150.900862][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.022241][ T5939] loop3: detected capacity change from 0 to 128 [ 151.067830][ T5939] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.086082][ T5939] hpfs: filesystem error: improperly stopped [ 151.094826][ T5937] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.351: invalid indirect mapped block 4294967295 (level 1) [ 151.094826][ T5935] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.350: invalid indirect mapped block 4294967295 (level 1) [ 151.110863][ T5939] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.129109][ T5937] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.351: invalid indirect mapped block 4294967295 (level 1) [ 151.130781][ T5935] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.350: invalid indirect mapped block 4294967295 (level 1) [ 151.152446][ T5937] EXT4-fs (loop5): 2 truncates cleaned up [ 151.164270][ T5937] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.192561][ T5939] hpfs: You really don't want any checks? You are crazy... [ 151.200125][ T5935] EXT4-fs (loop4): 2 truncates cleaned up [ 151.205963][ T5935] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.215197][ T5939] hpfs: hpfs_map_sector(): read error [ 151.224714][ T5932] FAULT_INJECTION: forcing a failure. [ 151.224714][ T5932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.238587][ T5932] CPU: 0 PID: 5932 Comm: syz.4.350 Not tainted syzkaller #0 [ 151.245883][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.248496][ T5939] hpfs: code page support is disabled [ 151.255938][ T5932] Call Trace: [ 151.256001][ T5932] [ 151.256009][ T5932] dump_stack_lvl+0x168/0x230 [ 151.272248][ T5932] ? show_regs_print_info+0x20/0x20 [ 151.277462][ T5932] ? load_image+0x3b0/0x3b0 [ 151.281978][ T5932] ? __lock_acquire+0x7c60/0x7c60 [ 151.287016][ T5932] ? aa_sk_perm+0x8f0/0x8f0 [ 151.291621][ T5932] should_fail+0x38c/0x4c0 [ 151.291929][ T5939] hpfs: hpfs_map_4sectors(): unaligned read [ 151.296050][ T5932] _copy_from_user+0x2e/0x170 [ 151.296074][ T5932] sctp_getsockopt_paddr_thresholds+0xd3/0x720 [ 151.296094][ T5932] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.296116][ T5932] ? sctp_getsockopt_auto_asconf+0x1e0/0x1e0 [ 151.296145][ T5932] ? __local_bh_enable_ip+0x12a/0x1b0 [ 151.296162][ T5932] ? _local_bh_enable+0xa0/0xa0 [ 151.296179][ T5932] ? lock_sock_nested+0x68/0x100 [ 151.296203][ T5932] sctp_getsockopt+0x5bc/0x8a0 [ 151.296220][ T5932] ? sock_recv_errqueue+0x4b0/0x4b0 [ 151.296237][ T5932] __sys_getsockopt+0x1b0/0x230 [ 151.296257][ T5932] __x64_sys_getsockopt+0xb1/0xc0 [ 151.296276][ T5932] do_syscall_64+0x4c/0xa0 [ 151.296291][ T5932] ? clear_bhb_loop+0x30/0x80 [ 151.296306][ T5932] ? clear_bhb_loop+0x30/0x80 [ 151.296324][ T5932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.296343][ T5932] RIP: 0033:0x7f281de6bbe9 [ 151.296359][ T5932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.296373][ T5932] RSP: 002b:00007f281c0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 151.296392][ T5932] RAX: ffffffffffffffda RBX: 00007f281e0a3090 RCX: 00007f281de6bbe9 [ 151.296404][ T5932] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000008 [ 151.296413][ T5932] RBP: 00007f281c0b2090 R08: 0000200000001180 R09: 0000000000000000 [ 151.296422][ T5932] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 151.296432][ T5932] R13: 00007f281e0a3128 R14: 00007f281e0a3090 R15: 00007fff11c3de18 [ 151.296454][ T5932] [ 151.457631][ T5939] hpfs: hpfs_map_4sectors(): unaligned read [ 151.463068][ T4394] hfsplus: b-tree write err: -5, ino 4 [ 151.465484][ T5939] hpfs: filesystem error: unable to find root dir [ 151.685430][ T23] usb 3-1: too many configurations: 230, using maximum allowed: 8 [ 151.754960][ T5943] hpfs: hpfs_map_4sectors(): unaligned read [ 151.761363][ T5943] hpfs: hpfs_map_4sectors(): unaligned read [ 151.920677][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 151.931944][ T23] usb 3-1: can't read configurations, error -71 [ 151.957095][ T5947] loop5: detected capacity change from 0 to 256 [ 152.085016][ T5947] exfat: Deprecated parameter 'utf8' [ 152.090787][ T5947] exfat: Deprecated parameter 'namecase' [ 152.121958][ T5947] exfat: Deprecated parameter 'utf8' [ 152.185731][ T5947] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 152.718073][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.730917][ T5959] team0: Port device batadv1 added [ 153.092439][ T5949] loop2: detected capacity change from 0 to 32768 [ 153.222116][ T5959] syz.5.354 (5959) used greatest stack depth: 20576 bytes left [ 153.706989][ T5949] jfs_strtoUCS: char2uni returned -22. [ 153.809813][ T5949] charset = iso8859-7, char = 0xa4 [ 154.042049][ T5979] netlink: 'syz.3.360': attribute type 13 has an invalid length. [ 154.716804][ T5983] loop5: detected capacity change from 0 to 512 [ 154.837221][ T5983] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.908861][ T5983] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.172126][ T5999] loop3: detected capacity change from 0 to 128 [ 155.264355][ T5999] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.329555][ T5999] hpfs: filesystem error: improperly stopped [ 155.350068][ T5999] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 155.421505][ T5999] hpfs: You really don't want any checks? You are crazy... [ 155.439545][ T5999] hpfs: hpfs_map_sector(): read error [ 155.445343][ T5999] hpfs: code page support is disabled [ 155.451010][ T5999] hpfs: hpfs_map_4sectors(): unaligned read [ 155.458636][ T5999] hpfs: hpfs_map_4sectors(): unaligned read [ 155.466315][ T5999] hpfs: filesystem error: unable to find root dir [ 155.474824][ T6011] FAULT_INJECTION: forcing a failure. [ 155.474824][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 155.536920][ T6011] CPU: 1 PID: 6011 Comm: syz.4.369 Not tainted syzkaller #0 [ 155.544231][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.554293][ T6011] Call Trace: [ 155.557577][ T6011] [ 155.560506][ T6011] dump_stack_lvl+0x168/0x230 [ 155.565199][ T6011] ? show_regs_print_info+0x20/0x20 [ 155.570405][ T6011] ? load_image+0x3b0/0x3b0 [ 155.574916][ T6011] ? __might_sleep+0xf0/0xf0 [ 155.579507][ T6011] ? __lock_acquire+0x7c60/0x7c60 [ 155.584540][ T6011] should_fail+0x38c/0x4c0 [ 155.588963][ T6011] should_failslab+0x5/0x20 [ 155.593464][ T6011] slab_pre_alloc_hook+0x51/0xc0 [ 155.598414][ T6011] ? vm_area_dup+0x1e/0xb0 [ 155.602829][ T6011] kmem_cache_alloc+0x3d/0x290 [ 155.607598][ T6011] vm_area_dup+0x1e/0xb0 [ 155.611839][ T6011] __split_vma+0xb1/0x410 [ 155.616169][ T6011] ? find_vma+0x1df/0x230 [ 155.620503][ T6011] __do_munmap+0x3eb/0xdc0 [ 155.625006][ T6011] ? mremap_userfaultfd_prep+0xd1/0x1b0 [ 155.630554][ T6011] move_vma+0x779/0xbc0 [ 155.634720][ T6011] ? vma_expandable+0x110/0x110 [ 155.639571][ T6011] ? shmem_get_unmapped_area+0x2dc/0x710 [ 155.645204][ T6011] ? bpf_lsm_file_ioctl_compat+0x10/0x10 [ 155.650830][ T6011] ? security_mmap_addr+0x6e/0x90 [ 155.655861][ T6011] ? get_unmapped_area+0x30c/0x370 [ 155.660971][ T6011] mremap_to+0x556/0x6b0 [ 155.665221][ T6011] __se_sys_mremap+0x418/0x990 [ 155.669995][ T6011] ? __x64_sys_mremap+0xc0/0xc0 [ 155.674851][ T6011] ? lock_chain_count+0x20/0x20 [ 155.679805][ T6011] ? lockdep_hardirqs_on+0x94/0x140 [ 155.685013][ T6011] ? __x64_sys_mremap+0x1c/0xc0 [ 155.689880][ T6011] do_syscall_64+0x4c/0xa0 [ 155.694297][ T6011] ? clear_bhb_loop+0x30/0x80 [ 155.698980][ T6011] ? clear_bhb_loop+0x30/0x80 [ 155.703664][ T6011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.709560][ T6011] RIP: 0033:0x7f281de6bbe9 [ 155.713976][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.733589][ T6011] RSP: 002b:00007f281c0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 155.742009][ T6011] RAX: ffffffffffffffda RBX: 00007f281e0a3090 RCX: 00007f281de6bbe9 [ 155.749983][ T6011] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000003000 [ 155.757959][ T6011] RBP: 00007f281c0b2090 R08: 0000200000009000 R09: 0000000000000000 [ 155.766104][ T6011] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 155.774074][ T6011] R13: 00007f281e0a3128 R14: 00007f281e0a3090 R15: 00007fff11c3de18 [ 155.782066][ T6011] [ 155.785096][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.996517][ T6019] hpfs: hpfs_map_4sectors(): unaligned read [ 156.003144][ T6019] hpfs: hpfs_map_4sectors(): unaligned read [ 156.066906][ T6022] loop5: detected capacity change from 0 to 512 [ 156.126658][ T6024] netlink: 'syz.4.373': attribute type 13 has an invalid length. [ 156.706988][ T6027] fuse: blksize only supported for fuseblk [ 156.732467][ T6029] loop1: detected capacity change from 0 to 1024 [ 156.788947][ T6022] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.371: iget: bad extended attribute block 1 [ 156.818547][ T6022] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.371: couldn't read orphan inode 15 (err -117) [ 156.818797][ T6029] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.840479][ T6022] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 156.895074][ T6029] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.905862][ T6029] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.375: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.920508][ T6029] EXT4-fs (loop1): 1 orphan inode deleted [ 156.926621][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.962124][ T6022] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.371: iget: bad extended attribute block 1 [ 157.358770][ T6055] FAULT_INJECTION: forcing a failure. [ 157.358770][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 157.371539][ T6055] CPU: 0 PID: 6055 Comm: syz.5.383 Not tainted syzkaller #0 [ 157.378836][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.388898][ T6055] Call Trace: [ 157.392197][ T6055] [ 157.395142][ T6055] dump_stack_lvl+0x168/0x230 [ 157.399831][ T6055] ? show_regs_print_info+0x20/0x20 [ 157.405040][ T6055] ? load_image+0x3b0/0x3b0 [ 157.409554][ T6055] ? __might_sleep+0xf0/0xf0 [ 157.414240][ T6055] ? __lock_acquire+0x7c60/0x7c60 [ 157.419289][ T6055] should_fail+0x38c/0x4c0 [ 157.423732][ T6055] should_failslab+0x5/0x20 [ 157.428253][ T6055] slab_pre_alloc_hook+0x51/0xc0 [ 157.433209][ T6055] ? security_file_alloc+0x30/0x110 [ 157.438419][ T6055] kmem_cache_alloc+0x3d/0x290 [ 157.443187][ T6055] ? rcu_is_watching+0x11/0xa0 [ 157.447939][ T6055] security_file_alloc+0x30/0x110 [ 157.452951][ T6055] __alloc_file+0xc2/0x240 [ 157.457354][ T6055] alloc_empty_file+0x90/0x180 [ 157.462102][ T6055] alloc_file+0x5b/0x4f0 [ 157.466325][ T6055] ? do_raw_spin_unlock+0x11d/0x230 [ 157.471508][ T6055] alloc_file_pseudo+0x17a/0x1f0 [ 157.476431][ T6055] ? alloc_empty_file_noaccount+0x80/0x80 [ 157.482132][ T6055] ? _raw_spin_unlock+0x24/0x40 [ 157.486972][ T6055] __anon_inode_getfd+0x248/0x3b0 [ 157.491979][ T6055] ? anon_inode_getfd+0x40/0x40 [ 157.496813][ T6055] ? inc_ucount+0x12f/0x1e0 [ 157.501302][ T6055] do_inotify_init+0x351/0x470 [ 157.506054][ T6055] __x64_sys_inotify_init1+0x33/0x40 [ 157.511325][ T6055] do_syscall_64+0x4c/0xa0 [ 157.515719][ T6055] ? clear_bhb_loop+0x30/0x80 [ 157.520387][ T6055] ? clear_bhb_loop+0x30/0x80 [ 157.525087][ T6055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.530969][ T6055] RIP: 0033:0x7f7e26e0fbe9 [ 157.535376][ T6055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.555057][ T6055] RSP: 002b:00007f7e25056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 157.563461][ T6055] RAX: ffffffffffffffda RBX: 00007f7e27047090 RCX: 00007f7e26e0fbe9 [ 157.571414][ T6055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.579366][ T6055] RBP: 00007f7e25056090 R08: 0000000000000000 R09: 0000000000000000 [ 157.587327][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.595282][ T6055] R13: 00007f7e27047128 R14: 00007f7e27047090 R15: 00007ffd6fe511c8 [ 157.603251][ T6055] [ 157.752176][ T6060] loop3: detected capacity change from 0 to 128 [ 158.881885][ T6069] netlink: 'syz.4.387': attribute type 2 has an invalid length. [ 158.899384][ T6068] loop4: detected capacity change from 0 to 4096 [ 158.951970][ T6075] loop2: detected capacity change from 0 to 2048 [ 159.048849][ T6068] ntfs3: loop4: ino=3, Correct links count -> 2. [ 159.130479][ T6069] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 159.706180][ T6068] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 159.742098][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.772752][ T6075] UDF-fs: iocharset iso8859-9 not found [ 160.009250][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 160.033014][ T6085] netlink: 'syz.1.388': attribute type 13 has an invalid length. [ 160.134236][ T1108] usb 4-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config [ 160.170179][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.189044][ T6089] xt_socket: unknown flags 0x50 [ 160.369308][ T1108] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.382850][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.399630][ T6093] sp0: Synchronizing with TNC [ 160.411290][ T1108] usb 4-1: Product: syz [ 160.419912][ T1108] usb 4-1: Manufacturer: syz [ 160.432175][ T1108] usb 4-1: SerialNumber: syz [ 160.491185][ T6097] loop4: detected capacity change from 0 to 512 [ 160.493578][ T6095] loop2: detected capacity change from 0 to 128 [ 160.537322][ T6095] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 160.588223][ T4243] Process accounting resumed [ 160.593324][ T6097] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 160.596408][ T4243] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 160.613094][ T6097] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.636936][ T4243] FAT-fs (loop2): Filesystem has been set read-only [ 160.654014][ T6101] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.784341][ T1108] usb 4-1: 0:2 : does not exist [ 160.832076][ T1108] usb 4-1: USB disconnect, device number 8 [ 161.165566][ T6092] [U] è [ 161.489004][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.701599][ T4190] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 161.908896][ T6114] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 161.971581][ T6125] loop5: detected capacity change from 0 to 512 [ 162.181248][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.231268][ T6120] loop3: detected capacity change from 0 to 32768 [ 162.250254][ T6125] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.277356][ T6125] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.285030][ T6120] (syz.3.401,6120,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 162.313159][ T6125] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.403: corrupted inode contents [ 162.317942][ T6132] loop4: detected capacity change from 0 to 128 [ 162.337013][ T6120] (syz.3.401,6120,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 162.338517][ T6125] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.403: mark_inode_dirty error [ 162.373405][ T6125] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.403: corrupted inode contents [ 162.373862][ T6132] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 162.397467][ T6120] overlayfs: failed to resolve './bus': -2 [ 162.416589][ T6132] ; already mounted read-only [ 162.424242][ T6132] hpfs: filesystem error: improperly stopped [ 162.430594][ T6125] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.403: mark_inode_dirty error [ 162.430874][ T6132] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.488876][ T6132] hpfs: You really don't want any checks? You are crazy... [ 162.521770][ T6132] hpfs: hpfs_map_sector(): read error [ 162.529793][ T6132] hpfs: code page support is disabled [ 162.536118][ T6132] hpfs: hpfs_map_4sectors(): unaligned read [ 162.542215][ T6132] hpfs: hpfs_map_4sectors(): unaligned read [ 162.549173][ T6132] hpfs: filesystem error: unable to find root dir [ 162.586531][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 162.615708][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.775978][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.786087][ T23] usb 3-1: config 1 has no interface number 0 [ 162.805487][ T23] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 162.816595][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 162.858750][ T6138] hpfs: hpfs_map_4sectors(): unaligned read [ 162.865454][ T6138] hpfs: hpfs_map_4sectors(): unaligned read [ 163.064152][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.080286][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.088883][ T23] usb 3-1: Product: syz [ 163.093228][ T23] usb 3-1: Manufacturer: syz [ 163.105506][ T23] usb 3-1: SerialNumber: syz [ 163.115416][ T6148] netlink: 'syz.3.406': attribute type 13 has an invalid length. [ 163.141259][ T6146] loop1: detected capacity change from 0 to 512 [ 163.359831][ T4243] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 163.400374][ T6146] EXT4-fs (loop1): 1 orphan inode deleted [ 163.449199][ T6121] udc-core: couldn't find an available UDC or it's busy [ 163.481959][ T6146] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.493448][ T6121] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.547107][ T6121] udc-core: couldn't find an available UDC or it's busy [ 163.571933][ T6146] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.628771][ T6121] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.674595][ T23] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 163.692112][ T23] usb 3-1: USB disconnect, device number 11 [ 163.804125][ T4243] usb 6-1: config 0 has an invalid interface number: 190 but max is 0 [ 163.812369][ T4243] usb 6-1: config 0 has no interface number 0 [ 163.828972][ T4243] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=52.a3 [ 163.852128][ T4243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.885432][ T4243] usb 6-1: config 0 descriptor?? [ 163.944804][ T4243] kvaser_usb 6-1:0.190: Cannot get usb endpoint(s) [ 163.961064][ T6169] loop1: detected capacity change from 0 to 2048 [ 164.697833][ T6169] UDF-fs: iocharset iso8859-9 not found [ 164.878767][ T6175] overlayfs: failed to resolve './bus': -2 [ 165.018659][ T6178] FAULT_INJECTION: forcing a failure. [ 165.018659][ T6178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.032057][ T6178] CPU: 0 PID: 6178 Comm: syz.1.415 Not tainted syzkaller #0 [ 165.039357][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.049421][ T6178] Call Trace: [ 165.052706][ T6178] [ 165.055731][ T6178] dump_stack_lvl+0x168/0x230 [ 165.060426][ T6178] ? show_regs_print_info+0x20/0x20 [ 165.065642][ T6178] ? load_image+0x3b0/0x3b0 [ 165.070173][ T6178] ? __lock_acquire+0x7c60/0x7c60 [ 165.075305][ T6178] should_fail+0x38c/0x4c0 [ 165.079837][ T6178] _copy_from_iter+0x22a/0x1150 [ 165.084695][ T6178] ? __lock_acquire+0x7c60/0x7c60 [ 165.089729][ T6178] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 165.095113][ T6178] ? __virt_addr_valid+0x3c6/0x470 [ 165.100228][ T6178] ? __phys_addr+0xb6/0x170 [ 165.104726][ T6178] ? __phys_addr_symbol+0x2b/0x70 [ 165.109754][ T6178] ? __check_object_size+0x30c/0x410 [ 165.115050][ T6178] netlink_sendmsg+0x749/0xbc0 [ 165.119834][ T6178] ? netlink_getsockopt+0x560/0x560 [ 165.125040][ T6178] ? aa_sock_msg_perm+0x94/0x150 [ 165.129984][ T6178] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 165.135275][ T6178] ? security_socket_sendmsg+0x7c/0xa0 [ 165.140749][ T6178] ? netlink_getsockopt+0x560/0x560 [ 165.146042][ T6178] ____sys_sendmsg+0x5a2/0x8c0 [ 165.150819][ T6178] ? memset+0x1e/0x40 [ 165.154804][ T6178] ? __sys_sendmsg_sock+0x30/0x30 [ 165.159841][ T6178] ? import_iovec+0x6f/0xa0 [ 165.164367][ T6178] ___sys_sendmsg+0x1f0/0x260 [ 165.169058][ T6178] ? __sys_sendmsg+0x250/0x250 [ 165.173850][ T6178] ? vfs_write+0x84d/0xd00 [ 165.178280][ T6178] ? __fdget+0x18b/0x210 [ 165.182535][ T6178] __se_sys_sendmsg+0x190/0x250 [ 165.187395][ T6178] ? __x64_sys_sendmsg+0x80/0x80 [ 165.192427][ T6178] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 165.198427][ T6178] ? lockdep_hardirqs_on+0x94/0x140 [ 165.203632][ T6178] do_syscall_64+0x4c/0xa0 [ 165.208048][ T6178] ? clear_bhb_loop+0x30/0x80 [ 165.212734][ T6178] ? clear_bhb_loop+0x30/0x80 [ 165.217426][ T6178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.223334][ T6178] RIP: 0033:0x7f4b46134be9 [ 165.227764][ T6178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.247798][ T6178] RSP: 002b:00007f4b4435a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.256224][ T6178] RAX: ffffffffffffffda RBX: 00007f4b4636c180 RCX: 00007f4b46134be9 [ 165.264201][ T6178] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 165.272173][ T6178] RBP: 00007f4b4435a090 R08: 0000000000000000 R09: 0000000000000000 [ 165.280150][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.288131][ T6178] R13: 00007f4b4636c218 R14: 00007f4b4636c180 R15: 00007ffd531d9ee8 [ 165.296123][ T6178] [ 165.557542][ T6173] loop2: detected capacity change from 0 to 40427 [ 165.570123][ T6183] loop3: detected capacity change from 0 to 1024 [ 165.581596][ T6144] loop5: detected capacity change from 0 to 32768 [ 165.642072][ T6144] udc-core: couldn't find an available UDC or it's busy [ 165.650696][ T6173] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x1ffff [ 165.663533][ T6183] EXT4-fs (loop3): Ignoring removed nobh option [ 165.694927][ T6173] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1dff [ 165.704070][ T6144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 165.720845][ T6183] EXT4-fs (loop3): Ignoring removed bh option [ 165.764058][ T6183] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.771187][ T6173] F2FS-fs (loop2): invalid crc value [ 165.826701][ T6183] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 165.944374][ T6173] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x455c/0x6f00 [ 165.999798][ T6173] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 166.006564][ T6183] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.419: Allocating blocks 497-513 which overlap fs metadata [ 166.040025][ T6192] loop4: detected capacity change from 0 to 128 [ 166.055226][ T6182] EXT4-fs (loop3): pa ffff8880752a2c40: logic 48, phys. 177, len 21 [ 166.063997][ T6182] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 166.093050][ T6192] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 166.147361][ T6192] hpfs: filesystem error: improperly stopped [ 166.153383][ T6192] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 166.181506][ T6192] hpfs: You really don't want any checks? You are crazy... [ 166.196954][ T6192] hpfs: hpfs_map_sector(): read error [ 166.202461][ T6192] hpfs: code page support is disabled [ 166.208747][ T6192] hpfs: hpfs_map_4sectors(): unaligned read [ 166.217436][ T6192] hpfs: hpfs_map_4sectors(): unaligned read [ 166.223362][ T6192] hpfs: filesystem error: unable to find root dir [ 166.259632][ T23] usb 6-1: USB disconnect, device number 6 [ 166.465373][ T6193] hpfs: hpfs_map_4sectors(): unaligned read [ 166.472390][ T6193] hpfs: hpfs_map_4sectors(): unaligned read [ 166.492311][ T6197] netlink: 'syz.1.423': attribute type 11 has an invalid length. [ 166.828369][ T6210] FAULT_INJECTION: forcing a failure. [ 166.828369][ T6210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.904109][ T6210] CPU: 0 PID: 6210 Comm: syz.5.426 Not tainted syzkaller #0 [ 166.911435][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.921512][ T6210] Call Trace: [ 166.924791][ T6210] [ 166.927723][ T6210] dump_stack_lvl+0x168/0x230 [ 166.932413][ T6210] ? show_regs_print_info+0x20/0x20 [ 166.937620][ T6210] ? load_image+0x3b0/0x3b0 [ 166.942181][ T6210] ? __lock_acquire+0x7c60/0x7c60 [ 166.946802][ T6173] loop2: detected capacity change from 0 to 40427 [ 166.947214][ T6210] should_fail+0x38c/0x4c0 [ 166.958043][ T6210] _copy_to_user+0x2e/0x130 [ 166.962568][ T6210] simple_read_from_buffer+0xe3/0x150 [ 166.967958][ T6210] proc_fail_nth_read+0x19a/0x210 [ 166.972996][ T6210] ? proc_fault_inject_write+0x2f0/0x2f0 [ 166.978649][ T6210] ? fsnotify_perm+0x254/0x560 [ 166.983539][ T6210] ? proc_fault_inject_write+0x2f0/0x2f0 [ 166.989190][ T6210] vfs_read+0x2f6/0xcf0 [ 166.993362][ T6210] ? kernel_read+0x1e0/0x1e0 [ 166.997964][ T6210] ? __fget_files+0x40f/0x480 [ 167.002644][ T6210] ? mutex_lock_nested+0x17/0x20 [ 167.007583][ T6210] ? __fdget_pos+0x2bf/0x370 [ 167.012170][ T6210] ? ksys_read+0x71/0x250 [ 167.016503][ T6210] ksys_read+0x14d/0x250 [ 167.020753][ T6210] ? vfs_write+0xd00/0xd00 [ 167.025232][ T6210] ? lockdep_hardirqs_on+0x94/0x140 [ 167.030418][ T6210] do_syscall_64+0x4c/0xa0 [ 167.034993][ T6210] ? clear_bhb_loop+0x30/0x80 [ 167.039655][ T6210] ? clear_bhb_loop+0x30/0x80 [ 167.044321][ T6210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.050213][ T6210] RIP: 0033:0x7f7e26e0e5fc [ 167.054617][ T6210] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.074222][ T6210] RSP: 002b:00007f7e25077030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.082740][ T6210] RAX: ffffffffffffffda RBX: 00007f7e27046fa0 RCX: 00007f7e26e0e5fc [ 167.090698][ T6210] RDX: 000000000000000f RSI: 00007f7e250770a0 RDI: 0000000000000005 [ 167.098662][ T6210] RBP: 00007f7e25077090 R08: 0000000000000000 R09: 0000000000000000 [ 167.106633][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.114679][ T6210] R13: 00007f7e27047038 R14: 00007f7e27046fa0 R15: 00007ffd6fe511c8 [ 167.122758][ T6210] [ 167.302573][ T6173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.878415][ T6173] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 167.981151][ T6173] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 168.099357][ T6227] loop1: detected capacity change from 0 to 2048 [ 168.258121][ T6227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.480300][ T6221] loop4: detected capacity change from 0 to 32768 [ 168.530711][ T6221] (syz.4.428,6221,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 168.568099][ T6221] (syz.4.428,6221,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 168.591331][ T6221] overlayfs: failed to resolve './bus': -2 [ 168.784585][ T1108] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 169.254122][ T1108] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.283587][ T1108] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=7f.aa [ 169.364098][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.445191][ T1108] usb 2-1: config 0 descriptor?? [ 169.748915][ T6235] udc-core: couldn't find an available UDC or it's busy [ 169.769797][ T6235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.787301][ T6251] loop2: detected capacity change from 0 to 128 [ 169.830698][ T6251] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 169.896396][ T23] usb 2-1: USB disconnect, device number 11 [ 170.096634][ T6251] hpfs: filesystem error: improperly stopped [ 170.189952][ T6251] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 170.318533][ T6251] hpfs: You really don't want any checks? You are crazy... [ 170.437907][ T6251] hpfs: hpfs_map_sector(): read error [ 170.443429][ T6251] hpfs: code page support is disabled [ 170.449034][ T6251] hpfs: hpfs_map_4sectors(): unaligned read [ 170.462584][ T6251] hpfs: hpfs_map_4sectors(): unaligned read [ 170.483614][ T6251] hpfs: filesystem error: unable to find root dir [ 170.781950][ T6258] hpfs: hpfs_map_4sectors(): unaligned read [ 170.788565][ T6258] hpfs: hpfs_map_4sectors(): unaligned read [ 171.481026][ T6269] loop2: detected capacity change from 0 to 2048 [ 171.569630][ T6271] loop4: detected capacity change from 0 to 2048 [ 171.591519][ T6269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.635540][ T6271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.163467][ T6299] loop4: detected capacity change from 0 to 128 [ 172.298954][ T6299] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 172.343996][ T6299] hpfs: filesystem error: improperly stopped [ 172.350018][ T6299] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 172.398611][ T6299] hpfs: You really don't want any checks? You are crazy... [ 172.422059][ T6299] hpfs: hpfs_map_sector(): read error [ 172.438480][ T6299] hpfs: code page support is disabled [ 172.457866][ T6299] hpfs: hpfs_map_4sectors(): unaligned read [ 172.463859][ T6299] hpfs: hpfs_map_4sectors(): unaligned read [ 172.482085][ T6307] netlink: 'syz.5.450': attribute type 13 has an invalid length. [ 172.497903][ T6299] hpfs: filesystem error: unable to find root dir [ 172.744482][ T6310] hpfs: hpfs_map_4sectors(): unaligned read [ 172.751036][ T6310] hpfs: hpfs_map_4sectors(): unaligned read [ 172.790402][ T6273] loop1: detected capacity change from 0 to 32768 [ 172.855539][ T6273] (syz.1.445,6273,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 172.895279][ T6273] (syz.1.445,6273,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 172.934980][ T6273] overlayfs: failed to resolve './bus': -2 [ 173.862285][ T6319] loop4: detected capacity change from 0 to 2048 [ 173.903998][ T6319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.922421][ T6322] loop1: detected capacity change from 0 to 2048 [ 174.001784][ T6322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.315824][ T6334] loop5: detected capacity change from 0 to 2048 [ 174.384092][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.386670][ T6334] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.522557][ T6342] loop1: detected capacity change from 0 to 128 [ 174.566242][ T6342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.590645][ T6342] hpfs: filesystem error: improperly stopped [ 174.613964][ T6342] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.624052][ T6342] hpfs: You really don't want any checks? You are crazy... [ 174.639534][ T6342] hpfs: hpfs_map_sector(): read error [ 174.651803][ T6342] hpfs: code page support is disabled [ 174.663024][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 174.676861][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 174.689565][ T6342] hpfs: filesystem error: unable to find root dir [ 174.764187][ T7] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 174.784392][ T7] usb 5-1: config 0 has no interface number 0 [ 174.805382][ T7] usb 5-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 174.840372][ T7] usb 5-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 174.876758][ T7] usb 5-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 174.912312][ T6344] hpfs: hpfs_map_4sectors(): unaligned read [ 174.918987][ T6344] hpfs: hpfs_map_4sectors(): unaligned read [ 174.929201][ T6338] loop2: detected capacity change from 0 to 40427 [ 175.004312][ T6338] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 175.011850][ T6338] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 175.031286][ T6338] F2FS-fs (loop2): invalid crc value [ 175.044339][ T7] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 175.054458][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.063185][ T7] usb 5-1: Product: syz [ 175.068459][ T7] usb 5-1: Manufacturer: syz [ 175.073620][ T7] usb 5-1: SerialNumber: syz [ 175.078471][ T6338] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 175.092732][ T7] usb 5-1: config 0 descriptor?? [ 175.124460][ T6331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.136021][ T6338] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 175.138228][ T6331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.143258][ T6338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 175.219138][ T4190] attempt to access beyond end of device [ 175.219138][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 175.765256][ T6354] loop2: detected capacity change from 0 to 256 [ 176.239291][ T4242] Bluetooth: hci1: command 0x0406 tx timeout [ 176.248950][ T4242] Bluetooth: hci0: command 0x0406 tx timeout [ 176.272096][ T6354] exFAT-fs (loop2): bogus data start sector [ 176.278769][ T6354] exFAT-fs (loop2): failed to read boot sector [ 176.285036][ T6354] exFAT-fs (loop2): failed to recognize exfat type [ 176.395072][ T4242] Bluetooth: hci3: command 0x0406 tx timeout [ 176.667165][ T6359] kAFS: No cell specified [ 176.689791][ T6353] loop1: detected capacity change from 0 to 32768 [ 176.748465][ T6353] (syz.1.471,6353,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ntum=00000p00007" or missing value [ 176.827388][ T6353] (syz.1.471,6353,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 177.414538][ T7] usb 5-1: Error in usbnet_get_endpoints (-71) [ 177.454607][ T6353] overlayfs: failed to resolve './bus': -2 [ 177.482732][ T7] usb 5-1: USB disconnect, device number 9 [ 177.542812][ T6364] loop3: detected capacity change from 0 to 2048 [ 177.610683][ T6369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.477'. [ 177.683549][ T6369] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.729852][ T6364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.980471][ T6380] loop2: detected capacity change from 0 to 128 [ 178.037556][ T6383] loop3: detected capacity change from 0 to 64 [ 178.117639][ T6366] loop4: detected capacity change from 0 to 32768 [ 178.163531][ T6380] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.194509][ T6366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.475 (6366) [ 178.204151][ T6380] hpfs: filesystem error: improperly stopped [ 178.212717][ T6380] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.215339][ T6383] Trying to free block not in datazone [ 178.233568][ T6380] hpfs: You really don't want any checks? You are crazy... [ 178.270632][ T6380] hpfs: hpfs_map_sector(): read error [ 178.320435][ T6380] hpfs: code page support is disabled [ 178.623213][ T6380] hpfs: hpfs_map_4sectors(): unaligned read [ 178.828749][ T6366] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 178.834206][ T6380] hpfs: hpfs_map_4sectors(): unaligned read [ 178.843381][ T6380] hpfs: filesystem error: unable to find root dir [ 178.859994][ T6366] BTRFS info (device loop4): setting nodatacow, compression disabled [ 178.894928][ T6366] BTRFS info (device loop4): max_inline at 0 [ 178.901267][ T6366] BTRFS info (device loop4): enabling disk space caching [ 178.920166][ T6366] BTRFS info (device loop4): turning off barriers [ 179.054065][ T6366] BTRFS info (device loop4): turning on flush-on-commit [ 179.072018][ T6366] BTRFS info (device loop4): doing ref verification [ 179.097014][ T6366] BTRFS info (device loop4): force clearing of disk cache [ 179.104451][ T6366] BTRFS info (device loop4): enabling ssd optimizations [ 179.111449][ T6366] BTRFS info (device loop4): max_inline at 4096 [ 179.117796][ T6366] BTRFS info (device loop4): disk space caching is enabled [ 179.119261][ T6393] loop3: detected capacity change from 0 to 2048 [ 179.125073][ T6366] BTRFS info (device loop4): has skinny extents [ 179.147310][ T6397] hpfs: hpfs_map_4sectors(): unaligned read [ 179.153797][ T6397] hpfs: hpfs_map_4sectors(): unaligned read [ 179.205706][ T6393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.505602][ T6415] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 180.271955][ T6366] BTRFS info (device loop4): clearing free space tree [ 180.325756][ T6366] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.365449][ T6366] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.685693][ T6445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.094469][ T6441] loop3: detected capacity change from 0 to 32768 [ 181.141978][ T6441] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.493 (6441) [ 181.233944][ T6441] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 181.243276][ T6441] BTRFS info (device loop3): enabling auto defrag [ 181.249901][ T6441] BTRFS info (device loop3): max_inline at 0 [ 181.256527][ T6441] BTRFS info (device loop3): force clearing of disk cache [ 181.263714][ T6441] BTRFS info (device loop3): turning on sync discard [ 181.271066][ T6441] BTRFS info (device loop3): using free space tree [ 181.277965][ T6441] BTRFS info (device loop3): has skinny extents [ 181.372980][ T6465] loop2: detected capacity change from 0 to 512 [ 181.407651][ T6465] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.434910][ T6465] EXT4-fs (loop2): group descriptors corrupted! [ 181.503203][ T6441] BTRFS info (device loop3): enabling ssd optimizations [ 181.515452][ T6441] BTRFS info (device loop3): clearing free space tree [ 181.526230][ T6441] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.576605][ T6441] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.592151][ T6465] loop2: detected capacity change from 0 to 256 [ 181.609855][ T6441] BTRFS info (device loop3): creating free space tree [ 181.620636][ T6441] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.664606][ T6441] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.692137][ T6465] FAT-fs (loop2): Directory bread(block 64) failed [ 181.699271][ T6465] FAT-fs (loop2): Directory bread(block 65) failed [ 181.708477][ T6465] FAT-fs (loop2): Directory bread(block 66) failed [ 181.715582][ T6465] FAT-fs (loop2): Directory bread(block 67) failed [ 181.722339][ T6465] FAT-fs (loop2): Directory bread(block 68) failed [ 181.729559][ T6465] FAT-fs (loop2): Directory bread(block 69) failed [ 181.738721][ T6465] FAT-fs (loop2): Directory bread(block 70) failed [ 181.747711][ T6465] FAT-fs (loop2): Directory bread(block 71) failed [ 181.754425][ T6465] FAT-fs (loop2): Directory bread(block 72) failed [ 181.761676][ T6465] FAT-fs (loop2): Directory bread(block 73) failed [ 182.422110][ T6487] loop1: detected capacity change from 0 to 128 [ 182.594070][ T6493] loop4: detected capacity change from 0 to 64 [ 182.650722][ T6487] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 182.675480][ T6487] hpfs: filesystem error: improperly stopped [ 182.682596][ T6487] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 182.897241][ T6487] hpfs: You really don't want any checks? You are crazy... [ 182.905394][ T6487] hpfs: hpfs_map_sector(): read error [ 182.911201][ T6487] hpfs: code page support is disabled [ 182.916810][ T6487] hpfs: hpfs_map_4sectors(): unaligned read [ 182.923106][ T6487] hpfs: hpfs_map_4sectors(): unaligned read [ 182.929275][ T6487] hpfs: filesystem error: unable to find root dir [ 183.690840][ T6507] hpfs: hpfs_map_4sectors(): unaligned read [ 183.697534][ T6507] hpfs: hpfs_map_4sectors(): unaligned read [ 183.720383][ T6509] loop4: detected capacity change from 0 to 2048 [ 183.812331][ T6509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.088833][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 185.163587][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.704597][ T6826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 190.999473][ T6850] loop3: detected capacity change from 0 to 256 [ 191.079365][ T6850] FAT-fs (loop3): Unrecognized mount option "ukoi8-r" or missing value [ 191.224413][ T6855] loop3: detected capacity change from 0 to 16 [ 191.232603][ T6857] loop4: detected capacity change from 0 to 64 [ 191.298824][ T6857] Trying to free block not in datazone [ 191.364932][ T6855] erofs: (device loop3): mounted with root inode @ nid 36. [ 191.990315][ T6864] loop5: detected capacity change from 0 to 1024 [ 192.157457][ T6864] EXT4-fs (loop5): Ignoring removed nobh option [ 192.168726][ T6864] EXT4-fs (loop5): inline encryption not supported [ 192.175289][ T6864] EXT4-fs (loop5): Ignoring removed nobh option [ 192.254315][ T6864] EXT4-fs (loop5): inline encryption not supported [ 192.848242][ T6864] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,jqfmt=vfsold,nobh,dioread_lock,data_err=ignore,resgid=0x0000000000000000,inlinecrypt,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,init_itable,,errors=continue. Quota mode: writeback. [ 192.872099][ T6841] loop2: detected capacity change from 0 to 40427 [ 193.027934][ T6841] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.197713][ T6841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.254906][ T6881] loop4: detected capacity change from 0 to 4096 [ 193.375680][ T6889] loop5: detected capacity change from 0 to 65 [ 193.874166][ T6881] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 193.885653][ T4190] attempt to access beyond end of device [ 193.885653][ T4190] loop2: rw=2049, want=45112, limit=40427 [ 194.003022][ T6889] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 194.100620][ T6881] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 194.151962][ T6881] ntfs3: loop4: mft corrupted [ 194.156718][ T6881] ntfs3: loop4: Failed to load $Extend. [ 194.734383][ T6455] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.152769][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.159327][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.236914][ T6455] usb 2-1: config 0 has no interfaces? [ 195.525623][ T6455] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 195.542938][ T6455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.576953][ T6455] usb 2-1: Product: syz [ 195.597799][ T6455] usb 2-1: Manufacturer: syz [ 195.612617][ T6455] usb 2-1: SerialNumber: syz [ 195.640441][ T6455] usb 2-1: config 0 descriptor?? [ 196.090057][ T6914] loop2: detected capacity change from 0 to 32768 [ 196.765968][ T6930] bridge_slave_0: default FDB implementation only supports local addresses [ 197.990462][ T6451] Bluetooth: hci4: command 0x0406 tx timeout [ 198.289953][ T4234] usb 2-1: USB disconnect, device number 12 [ 198.451205][ T6952] loop1: detected capacity change from 0 to 128 [ 198.531069][ T6922] loop4: detected capacity change from 0 to 32768 [ 198.698501][ T6922] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.669 (6922) [ 199.175464][ T6922] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 199.203558][ T6922] BTRFS info (device loop4): enabling auto defrag [ 199.220212][ T6922] BTRFS info (device loop4): max_inline at 0 [ 199.253632][ T6922] BTRFS info (device loop4): force clearing of disk cache [ 199.343777][ T6922] BTRFS info (device loop4): turning on sync discard [ 199.343845][ T6968] loop5: detected capacity change from 0 to 256 [ 199.385616][ T6922] BTRFS info (device loop4): using free space tree [ 199.430310][ T6968] exfat: Deprecated parameter 'namecase' [ 199.477305][ T6968] exfat: Deprecated parameter 'utf8' [ 199.483271][ T6922] BTRFS info (device loop4): has skinny extents [ 199.513144][ T6968] exfat: Unknown parameter 'sys_tz' [ 199.616307][ T6922] BTRFS error (device loop4): open_ctree failed: -12 [ 199.867842][ T6993] loop3: detected capacity change from 0 to 512 [ 200.121439][ T6967] loop1: detected capacity change from 0 to 32768 [ 200.198243][ T6993] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 200.268584][ T4961] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4961) [ 200.272498][ T6967] XFS (loop1): Mounting V5 Filesystem [ 200.331644][ T6993] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.357696][ T26] audit: type=1800 audit(1757206172.682:3): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.687" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 200.469352][ T6967] XFS (loop1): Ending clean mount [ 200.495642][ T7018] tipc: Failed to remove unknown binding: 66,1,1/0:2427469697/2427469699 [ 200.511886][ T6970] loop2: detected capacity change from 0 to 40427 [ 200.526759][ T26] audit: type=1800 audit(1757206172.682:4): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.687" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 200.588221][ T6967] XFS (loop1): Quotacheck needed: Please wait. [ 200.611467][ T6970] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 200.667975][ T6970] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 200.793618][ T6970] F2FS-fs (loop2): invalid crc value [ 200.834565][ T6967] XFS (loop1): Quotacheck: Done. [ 200.848207][ T6970] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.927056][ T7026] loop3: detected capacity change from 0 to 8 [ 201.097193][ T7026] SQUASHFS error: Failed to read block 0x62: -5 [ 201.115239][ T6970] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 201.146076][ T6967] XFS (loop1): User initiated shutdown received. [ 201.155563][ T6970] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 201.166230][ T7026] squashfs image failed sanity check [ 201.190948][ T6967] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 202.259306][ T7032] loop4: detected capacity change from 0 to 32768 [ 203.255147][ T6967] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 203.574918][ T7032] XFS (loop4): Mounting V5 Filesystem [ 204.285710][ T4183] XFS (loop1): Unmounting Filesystem [ 204.704598][ T7052] loop3: detected capacity change from 0 to 1024 [ 204.873247][ T7032] XFS (loop4): Ending clean mount [ 204.951216][ T4185] XFS (loop4): Unmounting Filesystem [ 205.264948][ T4394] hfsplus: b-tree write err: -5, ino 4 [ 205.311643][ T7061] loop1: detected capacity change from 0 to 128 [ 205.472818][ T26] audit: type=1800 audit(1757206177.471:5): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.695" name="file2" dev="loop1" ino=1048665 res=0 errno=0 [ 205.484336][ T7061] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 205.569098][ T7061] FAT-fs (loop1): Filesystem has been set read-only [ 205.580469][ T7061] attempt to access beyond end of device [ 205.580469][ T7061] loop1: rw=524288, want=2073, limit=128 [ 205.599562][ T7061] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 205.613659][ T7061] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 205.638032][ T7061] attempt to access beyond end of device [ 205.638032][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.671607][ T7061] attempt to access beyond end of device [ 205.671607][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.689845][ T7061] attempt to access beyond end of device [ 205.689845][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.702797][ T7061] attempt to access beyond end of device [ 205.702797][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.742384][ T7061] attempt to access beyond end of device [ 205.742384][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.754416][ T7061] attempt to access beyond end of device [ 205.754416][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.809499][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 205.810131][ T7061] attempt to access beyond end of device [ 205.810131][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.830927][ T7065] loop3: detected capacity change from 0 to 4096 [ 205.874096][ T7061] attempt to access beyond end of device [ 205.874096][ T7061] loop1: rw=0, want=2073, limit=128 [ 205.939986][ T7061] attempt to access beyond end of device [ 205.939986][ T7061] loop1: rw=0, want=2073, limit=128 [ 206.022839][ T7071] loop2: detected capacity change from 0 to 1024 [ 206.118555][ T7078] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.979797][ T6991] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 207.047684][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 207.254237][ T7087] loop1: detected capacity change from 0 to 256 [ 207.283198][ T7065] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 207.323913][ T7091] loop5: detected capacity change from 0 to 512 [ 207.336260][ T7065] Remounting filesystem read-only [ 207.468838][ T7091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11d, mo2=0002] [ 207.499719][ T7091] System zones: 1-12 [ 207.582683][ T7091] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.710: corrupted in-inode xattr [ 207.602575][ T4192] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 208.012426][ T6991] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.049191][ T7091] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.710: couldn't read orphan inode 15 (err -117) [ 208.115836][ T6991] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.168342][ T7091] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nombcache,noload,debug,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,mb_optimize_scan=0x00000000000000,errors=continue. Quota mode: none. [ 208.589421][ T6991] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.632094][ C1] sched: RT throttling activated [ 208.640129][ T6991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.465660][ T6451] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.508123][ T6991] usb 5-1: can't set config #16, error -71 [ 211.536203][ T6991] usb 5-1: USB disconnect, device number 10 [ 211.542159][ T7120] loop1: detected capacity change from 0 to 4096 [ 211.732430][ T6451] usb 3-1: Using ep0 maxpacket: 8 [ 211.859816][ T7124] loop4: detected capacity change from 0 to 32768 [ 211.914244][ T6451] usb 3-1: unable to read config index 0 descriptor/all [ 211.921373][ T6451] usb 3-1: can't read configurations, error -71 [ 211.966837][ T7124] JBD2: Ignoring recovery information on journal [ 212.049352][ T7124] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.175457][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 213.245279][ T7153] loop4: detected capacity change from 0 to 1024 [ 213.253208][ T7137] loop3: detected capacity change from 0 to 40427 [ 213.379706][ T7153] EXT4-fs (loop4): Ignoring removed oldalloc option [ 213.386580][ T7137] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 213.411194][ T7153] EXT4-fs (loop4): Ignoring removed orlov option [ 213.475626][ T7137] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 213.556488][ T7137] F2FS-fs (loop3): invalid crc value [ 213.573060][ T7153] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 214.335934][ T7144] loop2: detected capacity change from 0 to 32768 [ 214.486463][ T7137] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.663883][ T7180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.737'. [ 214.696976][ T7182] loop5: detected capacity change from 0 to 256 [ 214.705330][ T7179] loop4: detected capacity change from 0 to 2048 [ 214.711888][ T7137] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 214.719870][ T7137] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.727849][ T7144] XFS (loop2): Mounting V5 Filesystem [ 214.776125][ T7182] exfat: Deprecated parameter 'namecase' [ 214.819627][ T26] audit: type=1800 audit(1757206186.207:6): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.725" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 214.844390][ T7182] exfat: Deprecated parameter 'utf8' [ 214.915322][ T7179] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 214.943336][ T7182] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 214.990733][ T7179] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 215.088578][ T7182] overlayfs: missing 'lowerdir' [ 215.113105][ T7144] XFS (loop2): Ending clean mount [ 215.134608][ T7144] XFS (loop2): Quotacheck needed: Please wait. [ 215.175533][ T4322] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 215.204411][ T4437] handle_bad_sector: 654 callbacks suppressed [ 215.204428][ T4437] attempt to access beyond end of device [ 215.204428][ T4437] loop3: rw=1, want=45104, limit=40427 [ 215.234963][ T4278] ------------[ cut here ]------------ [ 215.250699][ T4278] kernel BUG at fs/ext4/inode.c:2734! [ 215.256156][ T4278] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 215.262225][ T4278] CPU: 1 PID: 4278 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 215.269768][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.279819][ T4278] Workqueue: writeback wb_workfn (flush-7:4) [ 215.285815][ T4278] RIP: 0010:ext4_writepages+0x2d12/0x2d20 [ 215.291359][ T4322] XFS (loop2): Unmount and run xfs_repair [ 215.291534][ T4278] Code: c1 03 38 c1 0f 8c b0 fd ff ff 4c 89 e7 e8 b6 cf b2 ff e9 a3 fd ff ff e8 8c 69 6e ff 0f 0b e8 85 69 6e ff 0f 0b e8 7e 69 6e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 89 fb [ 215.297878][ T4322] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 215.316828][ T4278] RSP: 0018:ffffc9000343f080 EFLAGS: 00010293 [ 215.316846][ T4278] RAX: ffffffff82096132 RBX: 0000008410000000 RCX: ffff88802af5d940 [ 215.316857][ T4278] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 215.316866][ T4278] RBP: ffffc9000343f3d0 R08: dffffc0000000000 R09: ffffed1002dbfa03 [ 215.316877][ T4278] R10: ffffed1002dbfa03 R11: 1ffff11002dbfa02 R12: 1ffff92000687ee6 [ 215.316888][ T4278] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff888058570000 [ 215.316898][ T4278] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 215.316911][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.325074][ T4322] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 215.330289][ T4278] CR2: 00007f7e26cf0390 CR3: 000000007db48000 CR4: 00000000003506e0 [ 215.330305][ T4278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.330314][ T4278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.338751][ T4322] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 215.346318][ T4278] Call Trace: [ 215.346326][ T4278] [ 215.346334][ T4278] ? mark_lock+0x94/0x320 [ 215.346359][ T4278] ? __lock_acquire+0x13ad/0x7c60 [ 215.346376][ T4278] ? thp_contains+0x2c0/0x370 [ 215.354826][ T4322] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 215.362279][ T4278] ? mark_lock+0x94/0x320 [ 215.362301][ T4278] ? ext4_readpage+0x2e0/0x2e0 [ 215.362317][ T4278] ? __lock_acquire+0x13ad/0x7c60 [ 215.362332][ T4278] ? verify_lock_unused+0x140/0x140 [ 215.362353][ T4278] ? writeback_sb_inodes+0x3f6/0x1610 [ 215.480865][ T4278] ? ext4_readpage+0x2e0/0x2e0 [ 215.485617][ T4278] do_writepages+0x48d/0x6d0 [ 215.490197][ T4278] ? __writepage+0x130/0x130 [ 215.494764][ T4278] ? writeback_sb_inodes+0x65b/0x1610 [ 215.500114][ T4278] ? __lock_acquire+0x7c60/0x7c60 [ 215.505118][ T4278] ? do_raw_spin_lock+0x11d/0x280 [ 215.510122][ T4278] __writeback_single_inode+0x153/0xda0 [ 215.515646][ T4278] writeback_sb_inodes+0x9fe/0x1610 [ 215.520828][ T4278] ? queue_io+0x550/0x550 [ 215.525139][ T4278] ? rcu_is_watching+0x11/0xa0 [ 215.529882][ T4278] wb_writeback+0x443/0xb90 [ 215.534364][ T4278] ? rcu_lock_release+0x20/0x20 [ 215.539204][ T4278] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 215.545179][ T4278] ? mark_lock+0x94/0x320 [ 215.549592][ T4278] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.554784][ T4278] wb_workfn+0x423/0xe60 [ 215.559028][ T4278] ? inode_wait_for_writeback+0x200/0x200 [ 215.564745][ T4278] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 215.570716][ T4278] ? read_lock_is_recursive+0x10/0x10 [ 215.576079][ T4278] ? __schedule+0x11c3/0x4390 [ 215.580743][ T4278] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.586011][ T4278] process_one_work+0x863/0x1000 [ 215.590932][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 215.596542][ T4278] ? lockdep_hardirqs_off+0x70/0x100 [ 215.601810][ T4278] ? _raw_spin_lock_irq+0xab/0xe0 [ 215.606819][ T4278] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 215.612173][ T4278] ? wq_worker_running+0x97/0x170 [ 215.617174][ T4278] worker_thread+0xaa8/0x12a0 [ 215.621837][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 215.627017][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 215.632193][ T4278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 215.638068][ T4278] kthread+0x436/0x520 [ 215.642125][ T4278] ? rcu_lock_release+0x20/0x20 [ 215.647145][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 215.651730][ T4278] ret_from_fork+0x1f/0x30 [ 215.656133][ T4278] [ 215.659148][ T4278] Modules linked in: [ 215.673512][ T7192] loop1: detected capacity change from 0 to 2048 [ 215.689288][ T4322] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 215.700159][ T4322] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 215.701714][ T7192] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 215.729472][ T4322] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 215.736066][ T7192] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 215.751064][ T7192] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 215.753369][ T4322] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 215.759124][ T7192] UDF-fs: Scanning with blocksize 512 failed [ 215.768037][ T4322] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 215.783551][ T4322] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1b9/0x350" at daddr 0x3 len 1 error 74 [ 215.786447][ T7192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.820940][ T7144] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 215.966010][ T4278] ---[ end trace c21db267e02ed334 ]--- [ 215.980377][ T4278] RIP: 0010:ext4_writepages+0x2d12/0x2d20 [ 215.986479][ T4278] Code: c1 03 38 c1 0f 8c b0 fd ff ff 4c 89 e7 e8 b6 cf b2 ff e9 a3 fd ff ff e8 8c 69 6e ff 0f 0b e8 85 69 6e ff 0f 0b e8 7e 69 6e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 89 fb [ 216.007020][ T26] audit: type=1800 audit(1757206187.321:7): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.740" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 216.115400][ T26] audit: type=1800 audit(1757206187.321:8): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.740" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 216.137028][ T4278] RSP: 0018:ffffc9000343f080 EFLAGS: 00010293 [ 216.148383][ T4278] RAX: ffffffff82096132 RBX: 0000008410000000 RCX: ffff88802af5d940 [ 216.222586][ T4190] XFS (loop2): Unmounting Filesystem [ 216.236171][ T4278] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 216.244883][ T4278] RBP: ffffc9000343f3d0 R08: dffffc0000000000 R09: ffffed1002dbfa03 [ 216.253244][ T4278] R10: ffffed1002dbfa03 R11: 1ffff11002dbfa02 R12: 1ffff92000687ee6 [ 216.261346][ T4278] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff888058570000 [ 216.269709][ T4278] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 216.280016][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.287003][ T4278] CR2: 0000200000032680 CR3: 000000002c2f7000 CR4: 00000000003506e0 [ 216.295053][ T4278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.304021][ T4278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.378336][ T4278] Kernel panic - not syncing: Fatal exception [ 216.384853][ T4278] Kernel Offset: disabled [ 216.389171][ T4278] Rebooting in 86400 seconds..