last executing test programs: 9.069468342s ago: executing program 0 (id=1100): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018", 0x55}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.027767403s ago: executing program 0 (id=1103): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000640)={{0x6, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 7.966125936s ago: executing program 0 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}, {@discard_async}, {@enospc_debug}]}, 0x1, 0x559d, &(0x7f0000005680)="$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") pipe(0x0) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x7f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) 6.017133873s ago: executing program 0 (id=1113): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x980000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0}) (fail_nth: 1) 4.941203536s ago: executing program 4 (id=1117): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 4.927055106s ago: executing program 4 (id=1118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x11a, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.749203505s ago: executing program 4 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='16', 0x2}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) 4.748808935s ago: executing program 0 (id=1122): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000015000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f234c66ba2100b000ee440f20c03504000085440f22c00fae460d440f20c0350b000000440f22c00f06c4c15567e8c4c37904fc09b805000000b9150000000f01d9660f388057ef", 0x48}], 0x1, 0x8, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.711086927s ago: executing program 2 (id=1124): r0 = memfd_secret(0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x2b, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000280001000000000000000000ff000000908af09bff49888e64bd0300deb2c08be77c5ba0376491d8386bd2e9b852129855588db4512e90e24f26f354f60420a7d181dc12bde269ac04ed0529ab973a4351e90984ae05c8f988"], 0x14}}, 0x0) 4.509094607s ago: executing program 3 (id=1125): syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) 3.934762566s ago: executing program 3 (id=1127): memfd_secret(0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 3.84048004s ago: executing program 2 (id=1129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000200)=0x18000000) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000000c0)="f3", 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.02501542s ago: executing program 3 (id=1130): syz_mount_image$ntfs3(&(0x7f000001f700), &(0x7f000001f740)='./file0\x00', 0xfeff, &(0x7f000001f780), 0x1, 0x1f6c7, &(0x7f000001f7c0)="$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") 2.974513513s ago: executing program 2 (id=1131): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018", 0x55}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.843655199s ago: executing program 1 (id=1132): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4004) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x88ff, 0x2c}, 0x44004) 2.744542435s ago: executing program 3 (id=1133): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x805, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x626, &(0x7f0000000240)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 2.743396775s ago: executing program 1 (id=1134): r0 = socket$caif_stream(0x25, 0x1, 0x5) recvmsg(r0, &(0x7f00000022c0)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000080)=""/136, 0x88}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/66, 0x42}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/107, 0x6b}], 0x5}, 0x40) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000002300)=0x9, 0x4) r1 = syz_open_dev$ndb(&(0x7f0000002340), 0x0, 0x101) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f0000002380)={0x2, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xd378fbcb883970d3}, 0x41) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002500), 0x145002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000025c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002540), &(0x7f0000002580)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000027c0)={@empty, @private, 0x0}, &(0x7f0000002800)=0xc) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002840), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x18, 0x13, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000026c0)='GPL\x00', 0xf, 0x9d, &(0x7f0000002700)=""/157, 0x41000, 0x2, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002880)=[{0x4, 0x5, 0x1, 0x3}, {0x1, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x10}, {0x4, 0x2, 0xb, 0xb}, {0x1, 0x4, 0xe, 0x7}, {0x2, 0x1, 0xf, 0x1}, {0x1, 0x5, 0x0, 0x2}]}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)=@getnetconf={0x14, 0x52, 0x20, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8a772ca651785490) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000002ac0)) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002b00), 0xa40, 0x0) write$usbip_server(r9, &(0x7f0000002b40)=@ret_unlink={{0x4, 0x1, 0x0, 0x1, 0x8000}, {0xbe0}}, 0x30) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002bc0), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x50, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x46}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x92c}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x491d822da1dc1c3c}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000002d00)={0xe, 0xdd, 0x1, 0xfff}, 0x10) write$cgroup_int(r7, &(0x7f0000002d40)=0x5, 0x12) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000002dc0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @can={0x1d, 0x0}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002d80)='dummy0\x00', 0x1, 0x8001, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)=@base={0x6, 0xee4, 0x3, 0x1000, 0x29009, r7, 0x1, '\x00', r12, r9, 0x2, 0x1, 0x1, 0x0, @value=r4}, 0x50) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000002ec0)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @private2, 0x7}}}, &(0x7f0000002f80)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000002fc0)={r13, 0x7fffffff}, 0x8) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003040)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000003c40)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003c00)={&(0x7f0000003080)={0xb6c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x998, 0x8, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0xcf34285cd8ebd6eb}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ec4f50e21272b824a5183b8c6138936b7c6708b193943c07f1c8af5301e837d"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "994c20567818a0314e5e2b185685d07b9b6d350304963b5e28ab06adcac11741"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @local}}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8b8a, @remote, 0xffffffff}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf89}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a06371a1037e307c7f70c38aec4b071a17c9604f9d52840abc6fbb924e81c40d"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a20a32281ed26ba7f49c2b77aeb6cfe6a1c8645545e0372d50f41bc1eddcd9b6"}]}, {0x404, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4527, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c21469251c13728ae8b6aeda21d9591691cb69ff354c1e8cfa1e6758a1a4de3b"}, @WGPEER_A_ALLOWEDIPS={0x398, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7beda185e736c1a673e5704f434a68b77b8e1fe836cd4abc00345fe2768343c0"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "456d90fa5fc8a8e2952b8a13eeadeb03f716a4a43e963aeba8bc55555ea97269"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x70}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x281}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3b6f3ba190642e5026d796ddf6df28db7774a5265579135143a265f07bdc92a0"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r14}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x154, 0x8, 0x0, 0x1, [{0x4}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffe}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e63d6270f87a7b599538a2081eaf50b54a675bd3f9f1eba7cbf7f3610513f287"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8596c2bc1f8653e403dd8e0fd3ff407803feb0408c6d2e6657d40e6331d28b47"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c9c7858d5bc5459a12c80b9a98b4186501fe446d4ff118ecb93d6deb98bfa2d7"}]}]}]}, 0xb6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.62819391s ago: executing program 1 (id=1135): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trwr'], 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC=r3], 0x31) 2.510181276s ago: executing program 4 (id=1136): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004080}}], 0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r4, 0x1) 2.461055188s ago: executing program 1 (id=1137): syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) 2.21968539s ago: executing program 1 (id=1138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016800c00028008000100", @ANYRES32, @ANYBLOB="060015"], 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r2, 0x7040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000040)={0x4, 0x0, r1}) 1.907251946s ago: executing program 1 (id=1139): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x800) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8ca, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x4439, &(0x7f0000004480)="$eJzs3c9PXGsdB+DvOXAF6r0VrndxTUycxJto1BC4K5WbSCktF1qsqdoYN9MBpi06MA0MxkUX7a6JKxMXxkWjiTtWDQuX1j/Bjcu6bqILNyYmjZiZOQNzDjMBCQO2Ps+CM+f9dV7mM+fwnsVw0kzjwfp2aX27VNks1VfvbX9c+lm9trNRjfScXPTxyRnp98YPIifZX5xbV69//87HEX9a+8ur/f39/Wgajp6mu17/8x+PVru3HWmhT3Pc3qOdlR9HxAdH5tU0FBE/+kNEEhFXsrK5bDsWEZejXXfn0S/uls5oNs9fVj8pv15+ujfz0dLus73+v3sS8ZvaF75xf+NvXx6a+evXzujwAAAAAAAAAAAAAAAAAAC84RZu3/rh96am40USw7vJ0e/rLmTbft+P3T8zXxr8LwsAAAAAAAAAAAAAAAAAAAD/ow6//19K3u/x/f/5bDvbp//+dwY/RwZn8bu35q9NTWfPf0+O1H8zK/r7laGYKDz3/UmP579fKfTv/fz3o8c5rc78Oscdj9GYzO2n6eRkxO+yB79/mFxKa/Xtxtfv1Xc2185sGm+sfP7tp/fn0ske6N8r/+iR/1xh/ME////zRz5Nzf27x33E3um6uP0fy+c/1Lfd758kJ8r/aqHfeeTP6eXzH26VjXU3mG1fAJr5/3L4+PyLp9Sg8r8cEaWkOddS7grQXMM0y/utV8jL5/9Oqyx36czeyH7n/78K+V8rjH9R1//HxT9E9JTP/zOtstFci8PzfyI9/vy/Xhj/IvJvzv/x2S0x32r5/EfahcO5Jq138qTX/4XC+APIv/MP49rzvJzkPgG7SXv+/f5fHXn5/EeP1B/e/6UnWv99Wuh/Xvd/neOOR5JOdt2HfDVp3//RWz7/sb7tTnr+Lxb6Dfr6P9ta/3Fa+fwvtcrya+fx1s+T5r9UGH9Q+bdWJaOd/FsXgeYtQfx7pF3+W+u/E8nn/9l2Ydrd4nHrZ2v9lxy//r9RGP/C1v/pYI/6tsjn/27fds38/3yCv/83C/0Gn3/ElLX+qeXzf69vu9b5P3p8/suHL/8Y55D/VwY5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAbYC7bjkeSTub203RyMuJqtv9hXEpWKmvllVp99afbEfNZeSneT+7X6iuVWnl9s75WLVdqtfpqxLWs/oMYTbZr9UZ5o/Lw+sFYY8mDamWrsVKtNCJiISv/YrzXGWtlvbFReRgRnx7UfS6tbz18UNksr61vfXtqamoqFg/mMJFUf96objbaR2/XRiwd9B1PuibXqr5xMJd3k5/Ud7Y2K7VW+c2uPrX6aqXW1Wc5q/tVTCSNrZ3N1UqjWq7V73eOd5Fms+384u0f3L45faT+btLezp3vtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L72Y+davI2K4vZdGRCnJXjS3I8X2z19WPym/Xn66N/PR0u6zvVdZOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ww4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV26R+lgSCKA/CbsdDSY1gtu53tiiJauCJ4Aj2Gh9GjeAnvYJEibYoQSGYh7B8IgaT6vubB/Jh5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6fGte3+tm4gUV+vLiN/Pv//9/LnU77vp+xdnmJHTeXrp7h/qpvx7GuW35WjR5m26Wn59xETt/Qz2ZLhPO+M+Q3P7Njdf3/c6Uq4ioi35Tcq5qg57CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgww4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//23sKJc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "c843c50d6f12ae4c309953a9f02a1eb157ce7b5961840c496eb2e2b28e99ae898ad69175508970f5023575c6772033ba8ca0ec79810d28c2216b87c5284c6e6d", 0x22}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "9af2701a42b1c5611e5d3b5816f92e143a5497b5befb90334376ee30306e42745351a091b55578669fa746bf92a191362833a00cc01fa46b348e8a359f1aea40", 0x12}, 0x48, r1) 1.904164306s ago: executing program 2 (id=1140): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r0 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r0, 0x402, 0xe51c4606df1d50c7) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.874428137s ago: executing program 2 (id=1141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000200)=0x18000000) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000000c0)="f3", 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.863282948s ago: executing program 3 (id=1142): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x6, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e0000002000000000000000000000000000000000000000000000000000008"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x8000000000000000, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) close(r0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1}) (async) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x65, 0x4004, @fd_index=0xa, 0x6, 0x0, 0x0, 0x10}) (async) io_uring_enter(r4, 0x1808, 0x0, 0x0, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1004001, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 1.861732018s ago: executing program 0 (id=1143): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x4005, &(0x7f0000000000)=0x4, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) pwrite64(r4, &(0x7f0000000240)="59eb68770d1e5fd959f1aa4bbad2b1a38b40117d2925883dbf69bbeda796c7c66a5b4525fec0a63dd56672c378c186e0f7025fab77e429acde6b3e23b5e11f2ce58aa48817157261462f180ed35dcb34041e91e28f4af73eb95b227e2e22b70a09227469df2055c836be", 0x6a, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b6596440a5043530df0d0000000109021200010000f5000904"], 0x0) ioctl$KDSETMODE(r0, 0x4b45, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004080000040000000a"], 0x48) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) 1.551436724s ago: executing program 4 (id=1144): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0) 69.091387ms ago: executing program 4 (id=1145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x2000002, 0x8010, r2, 0x8000000) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x7ffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f00000001c0)) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000380)={0x6, 0x40, 0x282, 0x7, 0xb1f2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044874) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/crypto\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x900, 0x48, 0x0, "7a58beca3900000000000000000000000200"}) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES64=r4, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040885) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'}) read$FUSE(r9, &(0x7f0000002380)={0x2020}, 0x2020) 68.917656ms ago: executing program 3 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB='nostrict,longad,dmode=00000000000000000077777,volume=00000000000000000002,gid=ignore,lastblock=00000000000000000003,gid=forget,fileset=00000000000000000001,noadinicb,gid=ignore,gid=forget,uid=forget,gid=ignore,iocharset=utf8,euid>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000002,smackfsfloor=ns\x00,euid=', @ANYRES64, @ANYRESOCT=r3], 0x2, 0xc3e, &(0x7f0000001000)="$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") 0s ago: executing program 2 (id=1147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='16', 0x2}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): op1: detected capacity change from 0 to 2048 [ 291.395108][ T4341] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 291.491720][ T4341] usb 3-1: device descriptor read/8, error -71 [ 291.498848][ T6928] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.730396][ T5414] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 291.760976][ T4341] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 291.774441][ T5414] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 291.801270][ T6932] loop4: detected capacity change from 0 to 512 [ 291.817765][ T6932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 291.840771][ T6917] udc-core: couldn't find an available UDC or it's busy [ 291.847862][ T6917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 291.902098][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 291.920243][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 291.944079][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 291.967141][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 291.984428][ T6932] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.731: orphan file block 0: bad magic [ 291.984457][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.004011][ T4341] usb 3-1: device descriptor read/8, error -71 [ 292.006592][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.019936][ T6932] EXT4-fs (loop4): mount failed [ 292.028988][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.048904][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.072245][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.134712][ T6937] loop0: detected capacity change from 0 to 1024 [ 292.143090][ T4341] usb usb3-port1: unable to enumerate USB device [ 292.155783][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.180429][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.200357][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.220552][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.240323][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.309843][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.341140][ T6937] hfsplus: found bad thread record in catalog [ 292.355199][ T6937] hfsplus: b-tree write err: -5, ino 19 [ 292.379348][ T6930] loop1: detected capacity change from 0 to 32768 [ 292.390494][ T5414] usb 5-1: unable to issue vendor read request (ret = -71) [ 292.616986][ T5414] usb 5-1: USB disconnect, device number 28 [ 292.621077][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.635887][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.685277][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.703803][ T5479] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 292.718565][ T5479] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 293.007554][ T5479] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 293.027152][ T5479] usb 4-1: USB disconnect, device number 20 [ 293.837951][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.959792][ T6947] loop3: detected capacity change from 0 to 4096 [ 294.008838][ T6961] 9pnet: Insufficient options for proto=fd [ 294.077750][ T6947] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 294.133534][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 294.200425][ T5479] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 294.340209][ T5414] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 294.466444][ T1803] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 294.510073][ T5479] usb 5-1: Using ep0 maxpacket: 32 [ 294.618528][ T6973] loop1: detected capacity change from 0 to 512 [ 294.631212][ T5479] usb 5-1: unable to get BOS descriptor or descriptor too short [ 294.691257][ T6973] overlayfs: filesystem on './file2' not supported [ 294.701783][ T5479] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 294.711132][ T5479] usb 5-1: can't read configurations, error -71 [ 294.820357][ T5414] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 294.830380][ T5414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.848026][ T5414] usb 1-1: config 0 descriptor?? [ 294.892155][ T5414] cp210x 1-1:0.0: cp210x converter detected [ 294.960310][ T1803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.096144][ T6977] loop1: detected capacity change from 0 to 1024 [ 295.629270][ T6979] tipc: Started in network mode [ 295.634486][ T6979] tipc: Node identity f29d57589c9c, cluster identity 4711 [ 295.641792][ T6979] tipc: Enabled bearer , priority 0 [ 295.649344][ T6979] device syzkaller0 entered promiscuous mode [ 295.655543][ T6977] hfsplus: found bad thread record in catalog [ 295.655593][ T6977] hfsplus: b-tree write err: -5, ino 19 [ 295.703547][ T6979] tipc: Resetting bearer [ 295.719526][ T6979] loop4: detected capacity change from 0 to 7 [ 295.751180][ T4178] Dev loop4: unable to read RDB block 7 [ 295.757440][ T4178] loop4: unable to read partition table [ 295.764310][ T4178] loop4: partition table beyond EOD, truncated [ 295.802685][ T6979] Dev loop4: unable to read RDB block 7 [ 295.904451][ T6979] loop4: unable to read partition table [ 295.920711][ T6979] loop4: partition table beyond EOD, truncated [ 295.957514][ T6979] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 296.121191][ T6986] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.740'. [ 296.708067][ T4234] tipc: Node number set to 1845581656 [ 296.769978][ T5463] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 296.814341][ T3561] Dev loop4: unable to read RDB block 7 [ 296.820164][ T3561] loop4: unable to read partition table [ 296.826017][ T3561] loop4: partition table beyond EOD, truncated [ 296.890128][ T1803] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 296.903222][ T1803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.923571][ T1803] usb 3-1: Manufacturer: 檻雞뤅뀑 [ 297.036792][ T6992] 9pnet: Insufficient options for proto=fd [ 297.114502][ T3561] Dev loop4: unable to read RDB block 7 [ 297.122412][ T3561] loop4: unable to read partition table [ 297.135234][ T3561] loop4: partition table beyond EOD, truncated [ 297.160191][ T5463] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.171548][ T5463] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.890009][ T5414] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 297.897761][ T5414] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 297.909306][ T5414] usb 1-1: cp210x converter now attached to ttyUSB0 [ 297.924545][ T5414] usb 1-1: USB disconnect, device number 30 [ 297.940485][ T1803] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 297.960390][ T5414] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.968421][ T5414] cp210x 1-1:0.0: device disconnected [ 297.970105][ T5463] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 297.988671][ T7003] netlink: 'syz.1.754': attribute type 8 has an invalid length. [ 298.000270][ T1803] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 298.003293][ T5463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.024078][ T3561] Dev loop4: unable to read RDB block 7 [ 298.036314][ T3561] loop4: unable to read partition table [ 298.050055][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.059663][ T5463] usb 4-1: Product: syz [ 298.064497][ T3561] loop4: partition table beyond EOD, truncated [ 298.079677][ T5463] usb 4-1: Manufacturer: syz [ 298.080069][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.102427][ T5463] usb 4-1: SerialNumber: syz [ 298.130743][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.199384][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.216094][ T3561] Dev loop4: unable to read RDB block 7 [ 298.227202][ T3561] loop4: unable to read partition table [ 298.240079][ T3561] loop4: partition table beyond EOD, truncated [ 298.381979][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.410048][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.430377][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 298.440394][ T6978] tipc: Resetting bearer [ 299.100017][ T1803] usb 3-1: unable to issue vendor read request (ret = -71) [ 299.195408][ T1803] usb 3-1: USB disconnect, device number 27 [ 299.196192][ T6978] tipc: Disabling bearer [ 299.270200][ T5463] usb 4-1: 0:2 : does not exist [ 299.275232][ T5463] usb 4-1: unit 3 not found! [ 299.292838][ T5463] usb 4-1: unit 64 not found! [ 299.336180][ T5463] usb 4-1: 1:2 : does not exist [ 299.341391][ T3561] Dev loop4: unable to read RDB block 7 [ 299.343536][ T6997] loop2: detected capacity change from 0 to 32768 [ 299.347125][ T3561] loop4: unable to read partition table [ 299.382492][ T5463] snd-usb-audio: probe of 4-1:1.1 failed with error -16 [ 299.390236][ T3561] loop4: partition table beyond EOD, truncated [ 299.409028][ T5463] usb 4-1: USB disconnect, device number 21 [ 299.511565][ T7004] loop0: detected capacity change from 0 to 32768 [ 299.536006][ T7006] loop1: detected capacity change from 0 to 32768 [ 299.790004][ T6997] ODEBUG: Out of memory. ODEBUG disabled [ 299.888623][ T5479] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 300.145587][ T7006] XFS (loop1): Mounting V5 Filesystem [ 300.193684][ T7006] XFS (loop1): Ending clean mount [ 300.210513][ T7006] XFS (loop1): Quotacheck needed: Please wait. [ 300.318418][ T7004] XFS (loop0): Mounting V5 Filesystem [ 300.405501][ T5479] usb 5-1: Using ep0 maxpacket: 32 [ 300.489106][ T7006] XFS (loop1): Quotacheck: Done. [ 300.550060][ T5479] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.604377][ T7004] XFS (loop0): Ending clean mount [ 300.630104][ T5479] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 300.654978][ T5479] usb 5-1: can't read configurations, error -71 [ 300.726586][ T4188] XFS (loop0): Unmounting Filesystem [ 300.738773][ T4185] XFS (loop1): Unmounting Filesystem [ 300.970033][ T7] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.209295][ T7051] loop1: detected capacity change from 0 to 764 [ 301.236281][ T7051] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 301.265433][ T7050] loop0: detected capacity change from 0 to 4096 [ 301.370074][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 301.579998][ T5479] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 301.840110][ T5479] usb 5-1: Using ep0 maxpacket: 32 [ 302.633322][ T7060] loop1: detected capacity change from 0 to 512 [ 302.680169][ T5479] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.697209][ T7065] loop2: detected capacity change from 0 to 1024 [ 302.727675][ T7065] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 302.741070][ T7060] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 302.766300][ T5479] usb 5-1: config 1 has an invalid interface number: 255 but max is 2 [ 302.786492][ T5479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.808428][ T7060] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 302.857761][ T5479] usb 5-1: config 1 has no interface number 2 [ 302.879989][ T7060] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.769: Corrupt directory, running e2fsck is recommended [ 302.901574][ T7060] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 302.910595][ T7060] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.769: corrupted in-inode xattr [ 302.912669][ T7065] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 302.922996][ T7060] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.769: couldn't read orphan inode 15 (err -117) [ 302.940184][ T5479] usb 5-1: config 1 interface 255 has no altsetting 0 [ 302.944367][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 302.974855][ T7] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 303.062881][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.141877][ T5479] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 303.273360][ T5479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.368580][ T5479] usb 5-1: Product: syz [ 303.406400][ T5479] usb 5-1: Manufacturer: syz [ 303.447871][ T5479] usb 5-1: SerialNumber: syz [ 303.606843][ T7060] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 303.626231][ T7060] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 303.637076][ T7060] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.769: Corrupt directory, running e2fsck is recommended [ 303.713238][ T7060] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 303.726829][ T7060] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 303.737114][ T7060] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.769: Corrupt directory, running e2fsck is recommended [ 303.763862][ T7060] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 303.781414][ T7060] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 303.795647][ T7060] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.769: Corrupt directory, running e2fsck is recommended [ 303.860951][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'. [ 303.901153][ T7060] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 303.915700][ T7060] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.769: path /163/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 303.968391][ T7060] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.769: path /163/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 304.004560][ T7060] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.769: path /163/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 304.071424][ T7] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 304.100325][ T7] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 304.170252][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.214493][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.270909][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.344741][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.422148][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.502250][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.760042][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.802267][ T7] usb 4-1: unable to issue vendor read request (ret = -71) [ 304.811353][ T7087] loop0: detected capacity change from 0 to 164 [ 304.905617][ T7091] FAULT_INJECTION: forcing a failure. [ 304.905617][ T7091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.919009][ T7091] CPU: 0 PID: 7091 Comm: syz.2.774 Not tainted syzkaller #0 [ 304.926307][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.936367][ T7091] Call Trace: [ 304.939649][ T7091] [ 304.942579][ T7091] dump_stack_lvl+0x188/0x250 [ 304.947267][ T7091] ? show_regs_print_info+0x20/0x20 [ 304.952475][ T7091] ? load_image+0x400/0x400 [ 304.956985][ T7091] ? __lock_acquire+0x7d10/0x7d10 [ 304.962022][ T7091] should_fail+0x38c/0x4c0 [ 304.966453][ T7091] _copy_from_user+0x2e/0x170 [ 304.971140][ T7091] userfaultfd_ioctl+0x614/0x43c0 [ 304.976175][ T7091] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 304.981820][ T7091] ? rcu_lock_release+0x5/0x20 [ 304.986598][ T7091] ? __lock_acquire+0x7d10/0x7d10 [ 304.991638][ T7091] ? userfaultfd_poll+0x1c0/0x1c0 [ 304.996667][ T7091] ? kfree+0xef/0x2a0 [ 305.000662][ T7091] ? tomoyo_path_number_perm+0x5b4/0x660 [ 305.006306][ T7091] ? verify_lock_unused+0x140/0x140 [ 305.011518][ T7091] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 305.017033][ T7091] ? bpf_lsm_file_ioctl+0x5/0x10 [ 305.021976][ T7091] ? security_file_ioctl+0x7c/0xa0 [ 305.027096][ T7091] ? userfaultfd_poll+0x1c0/0x1c0 [ 305.032129][ T7091] __se_sys_ioctl+0xfa/0x170 [ 305.036733][ T7091] do_syscall_64+0x4c/0xa0 [ 305.041172][ T7091] ? clear_bhb_loop+0x30/0x80 [ 305.045876][ T7091] ? clear_bhb_loop+0x30/0x80 [ 305.050571][ T7091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.056469][ T7091] RIP: 0033:0x7f54188fe799 [ 305.060900][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.080536][ T7091] RSP: 002b:00007f5416b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.088962][ T7091] RAX: ffffffffffffffda RBX: 00007f5418b78180 RCX: 00007f54188fe799 [ 305.096942][ T7091] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000008 [ 305.104922][ T7091] RBP: 00007f5416b16090 R08: 0000000000000000 R09: 0000000000000000 [ 305.112898][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.120882][ T7091] R13: 00007f5418b78218 R14: 00007f5418b78180 R15: 00007ffcb2fa5478 [ 305.128877][ T7091] [ 305.155111][ T7091] loop2: detected capacity change from 0 to 1024 [ 305.170394][ T7] usb 4-1: USB disconnect, device number 22 [ 305.206149][ T5479] usb 5-1: USB disconnect, device number 32 [ 307.146581][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.901263][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 307.925387][ T154] hfsplus: b-tree write err: -5, ino 25 [ 307.941676][ T154] hfsplus: b-tree write err: -5, ino 4 [ 307.965468][ T7110] loop4: detected capacity change from 0 to 512 [ 307.973760][ T154] hfsplus: b-tree write err: -5, ino 2 [ 308.859043][ T7110] EXT4-fs error (device loop4): ext4_init_orphan_info:584: comm syz.4.782: inode #0: comm syz.4.782: iget: illegal inode # [ 308.872695][ T7114] loop0: detected capacity change from 0 to 2048 [ 308.926689][ T7110] EXT4-fs (loop4): Remounting filesystem read-only [ 308.934926][ T7110] EXT4-fs (loop4): get orphan inode failed [ 308.977560][ T7110] EXT4-fs (loop4): mount failed [ 309.017464][ T7114] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 309.411914][ T4272] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 309.456054][ T4272] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 309.476495][ T4272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 309.476495][ T4272] [ 309.486711][ T4272] EXT4-fs (loop0): Total free blocks count 0 [ 309.498552][ T4272] EXT4-fs (loop0): Free/Dirty block details [ 309.504847][ T4272] EXT4-fs (loop0): free_blocks=66060288 [ 309.537003][ T4272] EXT4-fs (loop0): dirty_blocks=112 [ 309.560411][ T4272] EXT4-fs (loop0): Block reservation details [ 309.583295][ T4272] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 309.820279][ T1803] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 310.335097][ T1803] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.391583][ T1803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.465060][ T1803] usb 3-1: config 0 descriptor?? [ 310.498592][ T7124] loop3: detected capacity change from 0 to 32768 [ 310.546489][ T1803] cp210x 3-1:0.0: cp210x converter detected [ 311.284647][ T7156] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.789'. [ 311.419678][ T1803] usb 3-1: cp210x converter now attached to ttyUSB0 [ 311.771651][ T7158] loop4: detected capacity change from 0 to 8192 [ 311.792075][ T7162] loop3: detected capacity change from 0 to 32768 [ 311.879045][ T7158] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 311.889350][ T7158] REISERFS (device loop4): using ordered data mode [ 311.896460][ T7158] reiserfs: using flush barriers [ 311.903949][ T7158] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 311.921416][ T7158] REISERFS (device loop4): checking transaction log (loop4) [ 311.931395][ T7158] REISERFS (device loop4): Using r5 hash to sort names [ 311.939623][ T7158] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 311.951685][ T7162] XFS (loop3): Mounting V5 Filesystem [ 312.076688][ T7162] XFS (loop3): Ending clean mount [ 312.086237][ T7162] XFS (loop3): Quotacheck needed: Please wait. [ 312.286939][ T7162] XFS (loop3): Quotacheck: Done. [ 313.035090][ T4234] usb 3-1: USB disconnect, device number 28 [ 313.043672][ T4197] XFS (loop3): Unmounting Filesystem [ 313.105138][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.127721][ T4234] cp210x 3-1:0.0: device disconnected [ 313.162911][ T7183] xt_TCPMSS: Only works on TCP SYN packets [ 314.932348][ T7212] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 315.136147][ T7216] loop2: detected capacity change from 0 to 2048 [ 315.700886][ T7214] loop4: detected capacity change from 0 to 512 [ 315.999991][ T7] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 317.128005][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.134443][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.209954][ T4234] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 317.481073][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.499219][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.580917][ T4234] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.619534][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.646875][ T7] usb 4-1: config 0 descriptor?? [ 317.744088][ T7] cp210x 4-1:0.0: cp210x converter detected [ 317.752880][ T4234] usb 5-1: config 0 descriptor?? [ 317.794289][ T4234] cp210x 5-1:0.0: cp210x converter detected [ 317.887841][ T4341] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 318.022215][ T4234] usb 5-1: cp210x converter now attached to ttyUSB0 [ 318.152795][ T4341] usb 1-1: Using ep0 maxpacket: 16 [ 318.162453][ T7] usb 4-1: cp210x converter now attached to ttyUSB1 [ 318.276598][ T7248] loop1: detected capacity change from 0 to 1024 [ 318.511447][ T7251] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.815'. [ 319.020497][ T4341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.061731][ T7250] loop2: detected capacity change from 0 to 4096 [ 319.080049][ T7248] hfsplus: unable to parse mount options [ 319.112379][ T7250] ntfs: (device loop2): parse_options(): Unrecognized mount option ethtool. [ 319.120173][ T4341] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 319.146209][ T7253] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.798'. [ 319.230791][ T7248] loop1: detected capacity change from 0 to 4096 [ 319.320925][ T4341] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 319.330272][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.338410][ T4341] usb 1-1: Product: syz [ 319.344117][ T4341] usb 1-1: Manufacturer: syz [ 319.349599][ T4341] usb 1-1: SerialNumber: syz [ 319.356460][ T7248] NILFS (loop1): unrecognized mount option "#ŠìâL[ÁtÂ8mb•P&Ò«ºußÅ¡Ž×;¾È V0&§ñ¸?à¥ö(…Uñ}e}<´†Èâ [ 319.356460][ T7248] ÇÃÏ" [ 319.666519][ T4341] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 319.671367][ T7257] loop2: detected capacity change from 0 to 2048 [ 319.676468][ T4341] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 319.829026][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.870435][ T4341] usb 1-1: 2:1 : can't get High Capability descriptor [ 320.077114][ T4234] usb 5-1: USB disconnect, device number 33 [ 320.136459][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.167728][ T7267] netlink: 'syz.4.823': attribute type 3 has an invalid length. [ 320.193666][ T4234] cp210x 5-1:0.0: device disconnected [ 320.579936][ T4234] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 320.937713][ T7276] loop2: detected capacity change from 0 to 2048 [ 320.946851][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 321.231909][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.597118][ T4234] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 321.628727][ T1803] usb 4-1: USB disconnect, device number 23 [ 321.655961][ T1803] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 321.775120][ T7] usb 1-1: USB disconnect, device number 31 [ 322.439356][ T1803] cp210x 4-1:0.0: device disconnected [ 322.480042][ T4234] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 322.537960][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.566253][ T4234] usb 5-1: Product: syz [ 322.577342][ T4234] usb 5-1: Manufacturer: syz [ 322.594655][ T4234] usb 5-1: SerialNumber: syz [ 322.926050][ T4234] snd-ua101 5-1:1.1: invalid num_altsetting [ 322.974059][ T4234] snd-ua101 5-1:1.0: invalid num_altsetting [ 323.012958][ T4234] usb 5-1: USB disconnect, device number 34 [ 323.090171][ T1803] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 323.317486][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'. [ 323.324112][ T7300] loop0: detected capacity change from 0 to 1024 [ 323.370059][ T7] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 323.462139][ T7300] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,acl,resuid=0x0000000000000000,nogrpid,,errors=continue. Quota mode: none. [ 323.497743][ T7306] loop4: detected capacity change from 0 to 256 [ 323.509289][ T7300] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.557443][ T7306] FAT-fs (loop4): Directory bread(block 64) failed [ 323.570139][ T7306] FAT-fs (loop4): Directory bread(block 65) failed [ 323.577256][ T7306] FAT-fs (loop4): Directory bread(block 66) failed [ 323.598445][ T7306] FAT-fs (loop4): Directory bread(block 67) failed [ 323.601967][ T1803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.606722][ T7306] FAT-fs (loop4): Directory bread(block 68) failed [ 323.625431][ T7300] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.641062][ T1803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.653378][ T1803] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.663449][ T7300] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 323.667969][ T7306] FAT-fs (loop4): Directory bread(block 69) failed [ 323.688102][ T7306] FAT-fs (loop4): Directory bread(block 70) failed [ 323.695138][ T7306] FAT-fs (loop4): Directory bread(block 71) failed [ 323.702024][ T7300] EXT4-fs (loop0): This should not happen!! Data will be lost [ 323.702024][ T7300] [ 323.707644][ T7306] FAT-fs (loop4): Directory bread(block 72) failed [ 323.718758][ T7306] FAT-fs (loop4): Directory bread(block 73) failed [ 323.723745][ T7309] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.753912][ T7309] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.800175][ T7] usb 2-1: config 0 has no interfaces? [ 323.818071][ T7299] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.820385][ T1803] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.844095][ T1803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.846080][ T7309] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.875785][ T1803] usb 4-1: Product: syz [ 323.888242][ T7299] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.902332][ T1803] usb 4-1: Manufacturer: syz [ 323.908867][ T1803] usb 4-1: SerialNumber: syz [ 323.932269][ T7309] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.964495][ T7299] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.972186][ T1803] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 323.991143][ T7309] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 324.002190][ T1803] cdc_ncm 4-1:1.0: bind() failure [ 324.013303][ T7305] loop2: detected capacity change from 0 to 32768 [ 324.020229][ T7] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 324.029411][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.045546][ T7299] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.833: lblock 0 mapped to illegal pblock 0 (length 1) [ 324.084003][ T7] usb 2-1: Product: syz [ 324.106420][ T7305] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 324.106420][ T7305] [ 324.108319][ T7] usb 2-1: Manufacturer: syz [ 324.131903][ T7] usb 2-1: SerialNumber: syz [ 324.157253][ T7] usb 2-1: config 0 descriptor?? [ 324.168657][ T7305] ERROR: (device loop2): remounting filesystem as read-only [ 324.197518][ T7305] xtLookup: xtSearch returned -5 [ 324.204722][ T7305] add_index: get/read_metapage failed! [ 324.210516][ T7305] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 324.210516][ T7305] [ 324.249296][ T7290] netlink: 72 bytes leftover after parsing attributes in process `syz.3.829'. [ 324.259999][ T7305] xtLookup: xtSearch returned -5 [ 324.265053][ T7305] free_index: error reading directory table [ 324.301777][ T7305] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 324.301777][ T7305] [ 324.306212][ T7290] udc-core: couldn't find an available UDC or it's busy [ 324.393284][ T7290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 324.432679][ T1803] usb 4-1: USB disconnect, device number 24 [ 324.452513][ T7305] xtLookup: xtSearch returned -5 [ 324.469974][ T7305] free_index: error reading directory table [ 324.511894][ T7305] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 324.511894][ T7305] [ 324.524670][ T7305] xtLookup: xtSearch returned -5 [ 324.529724][ T7305] free_index: error reading directory table [ 324.536069][ T7305] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 324.536069][ T7305] [ 324.546455][ T7305] xtLookup: xtSearch returned -5 [ 324.561984][ T7305] free_index: error reading directory table [ 324.577326][ T7305] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 324.577326][ T7305] [ 324.616164][ T7305] xtLookup: xtSearch returned -5 [ 324.621313][ T7305] free_index: error reading directory table [ 324.735082][ T7295] loop1: detected capacity change from 0 to 1024 [ 324.953875][ T7321] loop4: detected capacity change from 0 to 2048 [ 325.072599][ T7295] loop1: detected capacity change from 0 to 1024 [ 325.456370][ T7295] EXT4-fs (loop1): inline encryption not supported [ 325.506437][ T7295] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.557214][ T7295] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 325.768436][ T26] audit: type=1800 audit(1774196354.375:169): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.831" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 326.092395][ T7339] loop4: detected capacity change from 0 to 128 [ 326.100842][ T7295] device veth0_vlan left promiscuous mode [ 326.108679][ T7295] device veth0_vlan entered promiscuous mode [ 326.165190][ T7] usb 2-1: USB disconnect, device number 27 [ 327.202577][ T7295] syz.1.831 (7295) used greatest stack depth: 19024 bytes left [ 327.846440][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.887256][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.909746][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.140844][ T7358] loop1: detected capacity change from 0 to 32768 [ 328.193568][ T7355] loop4: detected capacity change from 0 to 512 [ 328.256022][ T7358] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.847 (7358) [ 328.266163][ T7355] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 328.451176][ T7358] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 328.460005][ T7358] BTRFS info (device loop1): setting nodatacow, compression disabled [ 328.468233][ T7358] BTRFS info (device loop1): force clearing of disk cache [ 328.475509][ T7358] BTRFS info (device loop1): turning off barriers [ 328.482143][ T7358] BTRFS info (device loop1): use no compression [ 328.488493][ T7358] BTRFS info (device loop1): disabling free space tree [ 328.496182][ T7358] BTRFS info (device loop1): enabling ssd optimizations [ 328.503269][ T7358] BTRFS info (device loop1): using spread ssd allocation scheme [ 328.511055][ T7358] BTRFS info (device loop1): not using ssd optimizations [ 328.518181][ T7358] BTRFS info (device loop1): not using spread ssd allocation scheme [ 328.526335][ T7358] BTRFS info (device loop1): has skinny extents [ 328.746964][ T4175] udevd[4175]: incorrect ext4 checksum on /dev/loop4 [ 328.830012][ T6249] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 328.951109][ T7358] BTRFS info (device loop1): clearing free space tree [ 328.958122][ T7358] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 328.968122][ T7358] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.995454][ T7358] BTRFS info (device loop1): checking UUID tree [ 329.068737][ T7355] loop4: detected capacity change from 0 to 128 [ 329.129558][ T7355] hpfs: bad mount options. [ 329.152834][ T7396] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.853'. [ 329.277591][ T4341] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 329.751315][ T4341] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 329.791280][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.874894][ T4341] usb 4-1: config 0 descriptor?? [ 329.925640][ T4341] cp210x 4-1:0.0: cp210x converter detected [ 330.081233][ T6249] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.099963][ T6249] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.109018][ T6249] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.345887][ T6249] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.366045][ T6249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.366757][ T4341] usb 4-1: cp210x converter now attached to ttyUSB0 [ 330.380601][ T7399] loop4: detected capacity change from 0 to 32768 [ 330.388202][ T6249] usb 1-1: Product: syz [ 330.400842][ T6249] usb 1-1: Manufacturer: syz [ 330.405559][ T6249] usb 1-1: SerialNumber: syz [ 330.464420][ T6249] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 330.486566][ T6249] cdc_ncm 1-1:1.0: bind() failure [ 330.737536][ T7399] XFS (loop4): Mounting V5 Filesystem [ 330.806711][ T7371] netlink: 72 bytes leftover after parsing attributes in process `syz.0.850'. [ 330.855157][ T7414] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.852'. [ 330.974467][ T7371] udc-core: couldn't find an available UDC or it's busy [ 331.027185][ T7399] XFS (loop4): Ending clean mount [ 331.070125][ T7371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.078652][ T7399] XFS (loop4): Quotacheck needed: Please wait. [ 331.423401][ T7399] XFS (loop4): Quotacheck: Done. [ 331.448851][ T1803] usb 1-1: USB disconnect, device number 32 [ 331.549326][ T7420] fuse: Unknown parameter 'default_permissions00000000000000' [ 331.615730][ T4186] XFS (loop4): Unmounting Filesystem [ 331.780701][ T6249] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 332.210249][ T6249] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.229580][ T6249] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.330155][ T6249] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 332.340180][ T6249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.348464][ T6249] usb 2-1: SerialNumber: syz [ 332.534988][ T7] usb 4-1: USB disconnect, device number 25 [ 332.544926][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.554677][ T7] cp210x 4-1:0.0: device disconnected [ 332.632703][ T6249] usb 2-1: 0:2 : does not exist [ 332.674198][ T6249] usb 2-1: USB disconnect, device number 28 [ 332.960962][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.422968][ T7450] loop1: detected capacity change from 0 to 512 [ 333.483163][ T7453] loop2: detected capacity change from 0 to 256 [ 333.498224][ T7450] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.526589][ T7450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.554619][ T7450] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.865: Invalid block bitmap block 0 in block_group 0 [ 333.576793][ T7453] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 333.709198][ T7450] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 333.741882][ T7450] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.865: attempt to clear invalid blocks 983261 len 1 [ 333.765727][ T7450] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.865: Invalid inode table block 0 in block_group 0 [ 333.786509][ T7450] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 333.804067][ T7450] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 333.944204][ T7450] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.865: Invalid inode table block 0 in block_group 0 [ 334.115460][ T7450] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 334.266910][ T7462] loop4: detected capacity change from 0 to 1024 [ 334.667786][ T7450] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.865: mark_inode_dirty error [ 334.831038][ T7462] hfsplus: found bad thread record in catalog [ 334.837324][ T7462] hfsplus: b-tree write err: -5, ino 19 [ 334.845799][ T7450] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 334.903910][ T7450] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.865: Invalid inode table block 0 in block_group 0 [ 334.941605][ T7466] fuse: Unknown parameter 'default_permissions00000000000000' [ 334.947042][ T7450] EXT4-fs (loop1): 1 truncate cleaned up [ 335.051877][ T7450] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 335.240034][ T4234] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 335.286908][ T7468] loop4: detected capacity change from 0 to 4096 [ 335.384270][ T7473] comedi comedi0: No channels found! [ 335.588465][ T7468] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 335.616123][ T7468] ntfs3: loop4: Failed to load $Extend. [ 336.490194][ T4234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.546273][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 336.606450][ T4234] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.744092][ T4186] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 336.787258][ T4186] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 336.860090][ T4234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.879777][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.917166][ T4234] usb 4-1: Product: syz [ 336.923909][ T4234] usb 4-1: Manufacturer: syz [ 336.949382][ T4234] usb 4-1: SerialNumber: syz [ 337.030833][ T4234] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 337.047451][ T4234] cdc_ncm 4-1:1.0: bind() failure [ 337.126444][ T7495] loop0: detected capacity change from 0 to 512 [ 337.170405][ T7495] EXT4-fs (loop0): Ignoring removed oldalloc option [ 337.200837][ T7495] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.879: bg 0: block 167: padding at end of block bitmap is not set [ 337.233149][ T7495] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.879: inode #256: comm syz.0.879: iget: illegal inode # [ 337.236496][ T7465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.870'. [ 337.259694][ T7495] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.879: error while reading EA inode 256 err=-117 [ 337.267683][ T7465] udc-core: couldn't find an available UDC or it's busy [ 337.279189][ T7465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.290681][ T4234] usb 4-1: USB disconnect, device number 26 [ 337.298310][ T7495] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.879: corrupted inode contents [ 337.314350][ T7495] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 337.326438][ T7495] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.879: corrupted inode contents [ 337.438232][ T7495] EXT4-fs error (device loop0): ext4_evict_inode:330: inode #15: comm syz.0.879: mark_inode_dirty error [ 337.455219][ T7495] EXT4-fs (loop0): 1 orphan inode deleted [ 337.461231][ T7495] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,journal_dev=0x00000000040000ff,debug_want_extra_isize=0x000000000000005c,oldalloc,prjquota,acl,lazytime,,errors=continue. Quota mode: writeback. [ 337.591173][ T7501] loop1: detected capacity change from 0 to 1024 [ 338.176339][ T7501] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 338.398934][ T7511] loop4: detected capacity change from 0 to 512 [ 339.071769][ T7514] FAULT_INJECTION: forcing a failure. [ 339.071769][ T7514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.190467][ T7514] CPU: 0 PID: 7514 Comm: syz.1.883 Not tainted syzkaller #0 [ 339.197802][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.207868][ T7514] Call Trace: [ 339.211148][ T7514] [ 339.214073][ T7514] dump_stack_lvl+0x188/0x250 [ 339.218749][ T7514] ? show_regs_print_info+0x20/0x20 [ 339.223944][ T7514] ? load_image+0x400/0x400 [ 339.228444][ T7514] ? __lock_acquire+0x7d10/0x7d10 [ 339.233471][ T7514] should_fail+0x38c/0x4c0 [ 339.237889][ T7514] prepare_alloc_pages+0x1e4/0x5f0 [ 339.243011][ T7514] __alloc_pages+0x11b/0x480 [ 339.247601][ T7514] ? zone_statistics+0x170/0x170 [ 339.252537][ T7514] ? __lock_acquire+0x7d10/0x7d10 [ 339.257567][ T7514] ? up_write+0x1bb/0x420 [ 339.261894][ T7514] alloc_pages_vma+0x393/0x7c0 [ 339.266661][ T7514] handle_mm_fault+0x23be/0x4410 [ 339.271601][ T7514] ? get_page+0xe0/0xe0 [ 339.275755][ T7514] ? vmacache_find+0x238/0x590 [ 339.280515][ T7514] ? find_vma+0xd2/0x230 [ 339.284754][ T7514] do_user_addr_fault+0x489/0xc80 [ 339.289786][ T7514] exc_page_fault+0x60/0x100 [ 339.294388][ T7514] asm_exc_page_fault+0x22/0x30 [ 339.299234][ T7514] RIP: 0033:0x7f9103f0aa63 [ 339.303651][ T7514] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 339.323249][ T7514] RSP: 002b:00007f91022ac470 EFLAGS: 00010202 [ 339.329317][ T7514] RAX: 0000000000010001 RBX: 00007f91022ac530 RCX: 00007f90f9e8d000 [ 339.337287][ T7514] RDX: 00007f91022ac6d0 RSI: 0000000000000009 RDI: 00007f91022ac5d0 [ 339.345255][ T7514] RBP: 0000000000000004 R08: 0000000000000008 R09: 00000000000000d0 [ 339.353236][ T7514] R10: 00000000000000de R11: 00007f91022ac530 R12: 0000000000000001 [ 339.361202][ T7514] R13: 00007f9104109620 R14: 0000000000000004 R15: 00007f91022ac5d0 [ 339.369181][ T7514] [ 339.378057][ T7511] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.439065][ T7511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 339.479387][ T7511] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.882: Invalid block bitmap block 0 in block_group 0 [ 339.499890][ T7521] loop3: detected capacity change from 0 to 4096 [ 339.506857][ T7514] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 339.590319][ T7511] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 339.609695][ T7511] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.882: attempt to clear invalid blocks 983261 len 1 [ 339.649780][ T7521] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 339.670002][ T7521] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 339.685654][ T7511] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.882: Invalid inode table block 0 in block_group 0 [ 339.716203][ T7521] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 339.728589][ T7514] loop1: detected capacity change from 0 to 8192 [ 339.755325][ T7511] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 339.766414][ T7521] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 339.783890][ T7514] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 339.794343][ T7516] loop0: detected capacity change from 0 to 32768 [ 339.802694][ T7511] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 339.811878][ T7521] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 339.821245][ T7521] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 339.841643][ T7511] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.882: Invalid inode table block 0 in block_group 0 [ 339.841932][ T7514] REISERFS (device loop1): using ordered data mode [ 339.890881][ T7521] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 339.902944][ T7511] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 339.936401][ T7511] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.882: mark_inode_dirty error [ 339.948024][ T7514] reiserfs: using flush barriers [ 339.966347][ T7521] ntfs: volume version 3.1. [ 339.970419][ T7511] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 339.980023][ T7521] ntfs: (device loop3): ntfs_check_logfile(): $LogFile is too small. [ 339.989068][ T7521] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 339.998692][ T7511] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.882: Invalid inode table block 0 in block_group 0 [ 340.016777][ T7521] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 340.031487][ T7511] EXT4-fs (loop4): 1 truncate cleaned up [ 340.037239][ T7514] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.060406][ T7511] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 340.082544][ T7514] REISERFS (device loop1): checking transaction log (loop1) [ 340.104221][ T7516] XFS (loop0): Mounting V5 Filesystem [ 340.150104][ T7514] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1537 1 0x2 UNKNOWN], item_len 0, item_location 0, free_space(entry_count) 0 [ 340.169028][ T7508] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.882: Invalid inode table block 0 in block_group 0 [ 340.192415][ T7514] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 340.203766][ T7508] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 340.239361][ T7514] REISERFS (device loop1): Remounting filesystem read-only [ 340.246981][ T7514] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 340.264637][ T7516] XFS (loop0): Ending clean mount [ 340.276128][ T7508] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #2: comm syz.4.882: mark_inode_dirty error [ 340.305041][ T7516] XFS (loop0): Quotacheck needed: Please wait. [ 340.462079][ T7516] XFS (loop0): Quotacheck: Done. [ 340.483131][ T1166] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 340.491365][ T7547] FAULT_INJECTION: forcing a failure. [ 340.491365][ T7547] name failslab, interval 1, probability 0, space 0, times 1 [ 340.586228][ T7547] CPU: 0 PID: 7547 Comm: syz.1.890 Not tainted syzkaller #0 [ 340.593554][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.603605][ T7547] Call Trace: [ 340.606882][ T7547] [ 340.609805][ T7547] dump_stack_lvl+0x188/0x250 [ 340.614481][ T7547] ? show_regs_print_info+0x20/0x20 [ 340.619679][ T7547] ? load_image+0x400/0x400 [ 340.624178][ T7547] ? __might_sleep+0xf0/0xf0 [ 340.628767][ T7547] ? __lock_acquire+0x7d10/0x7d10 [ 340.633792][ T7547] should_fail+0x38c/0x4c0 [ 340.638215][ T7547] should_failslab+0x5/0x20 [ 340.642715][ T7547] slab_pre_alloc_hook+0x51/0xc0 [ 340.647653][ T7547] __kmalloc_node+0x6e/0x3b0 [ 340.652242][ T7547] ? kvmalloc_node+0x84/0x130 [ 340.656919][ T7547] kvmalloc_node+0x84/0x130 [ 340.661418][ T7547] fuse_dev_splice_write+0x109/0x800 [ 340.666709][ T7547] ? end_current_label_crit_section+0x14b/0x170 [ 340.672950][ T7547] ? common_file_perm+0x171/0x1c0 [ 340.677973][ T7547] ? fsnotify_perm+0x5d/0x560 [ 340.682649][ T7547] ? fuse_dev_fasync+0x90/0x90 [ 340.687411][ T7547] do_splice+0xe5a/0x1640 [ 340.691737][ T7547] ? __lock_acquire+0x7d10/0x7d10 [ 340.696770][ T7547] ? __fget_files+0x40f/0x480 [ 340.701448][ T7547] ? wait_for_space+0x2c0/0x2c0 [ 340.706298][ T7547] ? __fdget+0x18b/0x210 [ 340.710555][ T7547] __se_sys_splice+0x34d/0x440 [ 340.715318][ T7547] ? __x64_sys_splice+0xf0/0xf0 [ 340.720167][ T7547] ? __x64_sys_splice+0x1d/0xf0 [ 340.725016][ T7547] do_syscall_64+0x4c/0xa0 [ 340.729427][ T7547] ? clear_bhb_loop+0x30/0x80 [ 340.734102][ T7547] ? clear_bhb_loop+0x30/0x80 [ 340.738776][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.744670][ T7547] RIP: 0033:0x7f9104053799 [ 340.749081][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.768684][ T7547] RSP: 002b:00007f91022ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 340.777097][ T7547] RAX: ffffffffffffffda RBX: 00007f91042ccfa0 RCX: 00007f9104053799 [ 340.785083][ T7547] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 340.793051][ T7547] RBP: 00007f91022ad090 R08: 0000000000000028 R09: 0000000000000004 [ 340.801018][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.808983][ T7547] R13: 00007f91042cd038 R14: 00007f91042ccfa0 R15: 00007ffc44af1ba8 [ 340.816960][ T7547] [ 340.893143][ T4188] XFS (loop0): Unmounting Filesystem [ 341.320262][ T5424] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 341.381423][ T7559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.894'. [ 341.570046][ T5424] usb 3-1: Using ep0 maxpacket: 8 [ 341.690356][ T5424] usb 3-1: config 2 has an invalid interface number: 162 but max is 0 [ 341.698774][ T5424] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 341.715711][ T5424] usb 3-1: config 2 has no interface number 0 [ 341.729927][ T7] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 341.880243][ T5424] usb 3-1: New USB device found, idVendor=0930, idProduct=0a08, bcdDevice=fb.7e [ 341.896935][ T5424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.905277][ T5424] usb 3-1: Product: syz [ 341.909710][ T5424] usb 3-1: Manufacturer: syz [ 341.917360][ T5424] usb 3-1: SerialNumber: syz [ 342.200871][ T5424] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 342.242594][ T5424] usb 3-1: USB disconnect, device number 29 [ 342.271268][ T7567] loop1: detected capacity change from 0 to 128 [ 342.340135][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.360033][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.372557][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.386113][ T7567] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.410267][ T7567] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.455008][ T7572] vivid-001: disconnect [ 342.532580][ T7567] device wlan0 entered promiscuous mode [ 342.541030][ T7567] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 342.580290][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.592231][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.606804][ T7] usb 4-1: Product: syz [ 342.620765][ T7] usb 4-1: Manufacturer: syz [ 342.629814][ T7] usb 4-1: SerialNumber: syz [ 342.723368][ T7] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 342.731117][ T7] cdc_ncm 4-1:1.0: bind() failure [ 342.929932][ T7561] netlink: 72 bytes leftover after parsing attributes in process `syz.3.895'. [ 342.951094][ T7561] udc-core: couldn't find an available UDC or it's busy [ 342.958542][ T7561] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 342.968769][ T6249] usb 4-1: USB disconnect, device number 27 [ 343.353514][ T7591] loop0: detected capacity change from 0 to 512 [ 343.990033][ T7591] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 344.005813][ T7586] loop4: detected capacity change from 0 to 32768 [ 344.011985][ T7591] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 344.048353][ T7591] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.904: Corrupt directory, running e2fsck is recommended [ 344.082039][ T7591] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 344.222340][ T7591] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.904: corrupted in-inode xattr [ 344.266798][ T7591] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.904: couldn't read orphan inode 15 (err -117) [ 344.279514][ T7586] (syz.4.902,7586,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 344.656079][ T7591] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 344.680602][ T7586] (syz.4.902,7586,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 344.890254][ T7591] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.014407][ T7586] JBD2: Ignoring recovery information on journal [ 345.051512][ T7591] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 345.062496][ T7591] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.904: Corrupt directory, running e2fsck is recommended [ 345.104699][ T7618] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.161172][ T7586] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 345.372520][ T7618] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 345.426750][ T7618] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.904: Corrupt directory, running e2fsck is recommended [ 345.611358][ T7591] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.627665][ T7591] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 345.638296][ T7591] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.904: Corrupt directory, running e2fsck is recommended [ 345.663731][ T7628] vivid-000: disconnect [ 345.682902][ T7629] loop1: detected capacity change from 0 to 8 [ 345.750475][ T7591] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.770171][ T7591] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.904: path /170/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 345.810225][ T7629] SQUASHFS error: Unable to read directory block [1d0:0] [ 345.836670][ T7591] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.904: path /170/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 345.865078][ T7591] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 8: comm syz.0.904: path /170/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 346.227385][ T7637] device syzkaller0 entered promiscuous mode [ 346.264702][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 346.341998][ T7624] vivid-000: reconnect [ 347.071120][ T4341] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 347.526599][ T7659] loop1: detected capacity change from 0 to 4096 [ 347.555883][ T7666] loop2: detected capacity change from 0 to 2048 [ 347.581901][ T7659] __ntfs_error: 3 callbacks suppressed [ 347.581917][ T7659] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 347.637078][ T7659] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 347.667390][ T7666] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.728715][ T7659] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 347.758098][ T7666] device batadv_slave_1 entered promiscuous mode [ 347.764697][ T7659] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 347.764841][ T4341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.793826][ T7659] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 347.829048][ T4341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.855138][ T4341] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.859094][ T7659] ntfs: volume version 3.1. [ 348.150212][ T4341] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.169912][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.207295][ T7671] tipc: Enabling of bearer rejected, failed to enable media [ 348.223544][ T4341] usb 5-1: Product: syz [ 348.654368][ T7665] device batadv_slave_1 left promiscuous mode [ 348.696833][ T4341] usb 5-1: Manufacturer: syz [ 348.740758][ T4341] usb 5-1: SerialNumber: syz [ 348.878911][ T7666] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1370: i_size: 159744 lbcount: 163840 extent 129+129536 [ 348.911583][ T4341] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 348.918983][ T4341] cdc_ncm 5-1:1.0: bind() failure [ 348.977901][ T7677] FAULT_INJECTION: forcing a failure. [ 348.977901][ T7677] name failslab, interval 1, probability 0, space 0, times 0 [ 348.990934][ T7677] CPU: 0 PID: 7677 Comm: syz.3.929 Not tainted syzkaller #0 [ 348.998235][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.008291][ T7677] Call Trace: [ 349.011570][ T7677] [ 349.014495][ T7677] dump_stack_lvl+0x188/0x250 [ 349.019173][ T7677] ? show_regs_print_info+0x20/0x20 [ 349.024370][ T7677] ? load_image+0x400/0x400 [ 349.028868][ T7677] ? __might_sleep+0xf0/0xf0 [ 349.033455][ T7677] ? __lock_acquire+0x7d10/0x7d10 [ 349.038474][ T7677] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 349.044804][ T7677] should_fail+0x38c/0x4c0 [ 349.049225][ T7677] should_failslab+0x5/0x20 [ 349.053723][ T7677] slab_pre_alloc_hook+0x51/0xc0 [ 349.058656][ T7677] __kmalloc+0x6b/0x330 [ 349.062805][ T7677] ? tomoyo_encode+0x27e/0x540 [ 349.067579][ T7677] tomoyo_encode+0x27e/0x540 [ 349.072177][ T7677] tomoyo_realpath_from_path+0x5cd/0x610 [ 349.077812][ T7677] tomoyo_path_number_perm+0x242/0x660 [ 349.083272][ T7677] ? verify_lock_unused+0x140/0x140 [ 349.088476][ T7677] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 349.093945][ T7677] ? ksys_write+0x1c6/0x260 [ 349.098477][ T7677] security_file_ioctl+0x6c/0xa0 [ 349.103418][ T7677] __se_sys_ioctl+0x48/0x170 [ 349.108002][ T7677] do_syscall_64+0x4c/0xa0 [ 349.112409][ T7677] ? clear_bhb_loop+0x30/0x80 [ 349.117080][ T7677] ? clear_bhb_loop+0x30/0x80 [ 349.121751][ T7677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.127640][ T7677] RIP: 0033:0x7fa1f2b9c799 [ 349.132052][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.151821][ T7677] RSP: 002b:00007fa1f0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.160234][ T7677] RAX: ffffffffffffffda RBX: 00007fa1f2e15fa0 RCX: 00007fa1f2b9c799 [ 349.168206][ T7677] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 349.176174][ T7677] RBP: 00007fa1f0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.184139][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.192103][ T7677] R13: 00007fa1f2e16038 R14: 00007fa1f2e15fa0 R15: 00007fff07b048d8 [ 349.200082][ T7677] [ 349.228248][ T7650] netlink: 72 bytes leftover after parsing attributes in process `syz.4.916'. [ 349.238033][ T7677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.295426][ T7650] udc-core: couldn't find an available UDC or it's busy [ 349.319620][ T7650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 349.343186][ T4341] usb 5-1: USB disconnect, device number 35 [ 349.421924][ T7688] qnx4: no qnx4 filesystem (no root dir). [ 349.497707][ T7691] vivid-000: disconnect [ 349.630045][ T4234] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 349.879936][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 349.960327][ T7699] loop3: detected capacity change from 0 to 32768 [ 350.000200][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.015434][ T4234] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.055319][ T7699] XFS (loop3): Mounting V5 Filesystem [ 350.098875][ T7701] loop4: detected capacity change from 0 to 8192 [ 350.154021][ T7699] XFS (loop3): Ending clean mount [ 350.165300][ T7701] REISERFS warning (device loop4): super-6507 reiserfs_parse_options: bad value 0x0000000000000401=context=sysadm_u for -oresize [ 350.165300][ T7701] [ 350.180449][ T7699] XFS (loop3): Quotacheck needed: Please wait. [ 350.189997][ T4234] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.209474][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.232675][ T4234] usb 2-1: Product: syz [ 350.237022][ T4234] usb 2-1: Manufacturer: syz [ 350.241984][ T4234] usb 2-1: SerialNumber: syz [ 350.251693][ T7685] vivid-000: reconnect [ 350.327364][ T7699] XFS (loop3): Quotacheck: Done. [ 350.520226][ T4197] XFS (loop3): Unmounting Filesystem [ 350.594263][ T4234] usb 2-1: 0:2 : does not exist [ 350.599955][ T7] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 350.643226][ T4234] usb 2-1: USB disconnect, device number 29 [ 350.788988][ T7714] loop2: detected capacity change from 0 to 32768 [ 350.819973][ T7] usb 5-1: device descriptor read/64, error -71 [ 350.931053][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.107127][ T7] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 351.369969][ T7] usb 5-1: device descriptor read/64, error -71 [ 351.376438][ T6249] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 352.122458][ T7] usb usb5-port1: attempt power cycle [ 352.440211][ T6249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 352.459907][ T6249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 352.479088][ T7722] loop3: detected capacity change from 0 to 32768 [ 352.491731][ T6249] usb 3-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 352.519952][ T6249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.542826][ T6249] usb 3-1: config 0 descriptor?? [ 352.550102][ T7] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 352.560520][ T7716] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 352.640125][ T7] usb 5-1: device descriptor read/8, error -71 [ 352.649071][ T4533] udevd[4533]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.820104][ T5479] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 352.870014][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 352.896292][ T7743] loop3: detected capacity change from 0 to 1024 [ 352.910154][ T7] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 352.933762][ T7717] bond0: option arp_interval: invalid value (18446744071951403948) [ 352.950349][ T7717] bond0: option arp_interval: allowed values 0 - 2147483647 [ 353.154165][ T7745] loop4: detected capacity change from 0 to 512 [ 353.312775][ T7743] hfsplus: found bad thread record in catalog [ 353.319286][ T7743] hfsplus: b-tree write err: -5, ino 19 [ 353.403456][ T4341] usb 3-1: USB disconnect, device number 30 [ 353.591550][ T7730] loop1: detected capacity change from 0 to 40427 [ 353.601697][ T7745] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.948: inode has both inline data and extents flags [ 353.632247][ T7] usb 5-1: device descriptor read/8, error -71 [ 353.642228][ T7745] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.948: couldn't read orphan inode 15 (err -117) [ 353.657414][ T7745] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 353.750097][ T7] usb usb5-port1: unable to enumerate USB device [ 353.759511][ T7730] F2FS-fs (loop1): invalid crc value [ 353.782035][ T7730] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 353.925309][ T5479] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.949928][ T5479] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.958983][ T5479] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.012932][ T7730] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 354.044250][ T7730] F2FS-fs (loop1): Start checkpoint disabled! [ 354.082923][ T7756] loop2: detected capacity change from 0 to 4096 [ 354.095440][ T7730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 354.140227][ T5479] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.149458][ T5479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.158951][ T7756] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 354.200050][ T5479] usb 1-1: Product: syz [ 354.205524][ T5479] usb 1-1: Manufacturer: syz [ 354.216728][ T7756] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 354.227378][ T5479] usb 1-1: SerialNumber: syz [ 354.246262][ T7756] ntfs: (device loop2): ntfs_read_inode_mount(): Failed to lookup $MFT/$DATA attribute extent. $MFT is corrupt. Run chkdsk. [ 354.291625][ T7749] loop3: detected capacity change from 0 to 32768 [ 354.311073][ T5479] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 354.318004][ T5479] cdc_ncm 1-1:1.0: bind() failure [ 354.335856][ T7756] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 354.359377][ T1535] attempt to access beyond end of device [ 354.359377][ T1535] loop1: rw=2049, want=45120, limit=40427 [ 354.400006][ T7756] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 354.529490][ T7738] netlink: 72 bytes leftover after parsing attributes in process `syz.0.946'. [ 354.586140][ T7738] udc-core: couldn't find an available UDC or it's busy [ 354.623887][ T7738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 354.640472][ T7] usb 1-1: USB disconnect, device number 33 [ 354.923294][ T5479] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 354.933744][ T7771] blktrace: Concurrent blktraces are not allowed on sg0 [ 355.170045][ T5479] usb 4-1: Using ep0 maxpacket: 32 [ 355.220028][ T7] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 355.247095][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 355.299993][ T5479] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 355.308354][ T5479] usb 4-1: config 0 has no interface number 0 [ 355.749818][ T7782] loop2: detected capacity change from 0 to 1024 [ 356.685489][ T7782] hfsplus: found bad thread record in catalog [ 356.692692][ T7782] hfsplus: b-tree write err: -5, ino 19 [ 356.747675][ T5479] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 356.765794][ T5479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.776948][ T5479] usb 4-1: Product: syz [ 356.782531][ T5479] usb 4-1: Manufacturer: syz [ 356.787296][ T5479] usb 4-1: SerialNumber: syz [ 356.891706][ T5479] usb 4-1: config 0 descriptor?? [ 356.920046][ T7] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 356.931288][ T5479] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 356.949923][ T7] usb 2-1: config 0 has no interface number 0 [ 356.956390][ T7] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.968813][ T7] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 356.978333][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.997960][ T7] usb 2-1: config 0 descriptor?? [ 357.041824][ T7] ttusbir 2-1:0.83: cannot find expected altsetting [ 357.067945][ T4341] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 357.151987][ T5479] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 357.177536][ T5479] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 357.239924][ T1803] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 357.350153][ T4341] usb 5-1: Using ep0 maxpacket: 32 [ 357.480117][ T4341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.491326][ T4341] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.502955][ T4341] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.513438][ T4341] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.527055][ T4341] usb 5-1: config 0 interface 0 has no altsetting 0 [ 357.534154][ T4341] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 357.543645][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.561856][ T4341] usb 5-1: config 0 descriptor?? [ 357.659006][ T1803] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.679204][ T1803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.700566][ T1803] usb 3-1: config 0 descriptor?? [ 357.751385][ T1803] cp210x 3-1:0.0: cp210x converter detected [ 357.767642][ T7797] loop0: detected capacity change from 0 to 32768 [ 358.016831][ T7800] loop0: detected capacity change from 0 to 4096 [ 358.104948][ T7800] EXT4-fs (loop0): fragment/cluster size (1024) != block size (4096) [ 358.198807][ T1803] usb 3-1: cp210x converter now attached to ttyUSB2 [ 358.366313][ T7787] loop4: detected capacity change from 0 to 32768 [ 358.420665][ T7787] xfs: Unknown parameter 'biosize' [ 358.619942][ T5479] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 358.706196][ T7802] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.964'. [ 358.920365][ T7787] udc-core: couldn't find an available UDC or it's busy [ 358.989995][ T7787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 359.293193][ T4341] corsair-psu 0003:1B1C:1C09.0004: item fetching failed at offset 3/5 [ 359.310944][ T4234] usb 4-1: USB disconnect, device number 28 [ 359.329913][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 359.349099][ T4234] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 359.362650][ T4341] corsair-psu: probe of 0003:1B1C:1C09.0004 failed with error -22 [ 359.404210][ T4234] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 359.436511][ T4234] quatech2 4-1:0.51: device disconnected [ 359.503147][ T7] usb 5-1: USB disconnect, device number 40 [ 359.587977][ T4341] usb 2-1: USB disconnect, device number 30 [ 359.650428][ T5479] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 359.667079][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 359.672851][ T5479] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 359.719425][ T5479] usb 1-1: config 0 has no interface number 0 [ 359.733998][ T5479] usb 1-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30 [ 359.747294][ T5479] usb 1-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 359.767528][ T5479] usb 1-1: config 0 interface 39 has no altsetting 0 [ 359.774966][ T5479] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 359.790734][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.810141][ T4234] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 359.833783][ T5479] usb 1-1: config 0 descriptor?? [ 359.929512][ T7817] IPVS: length: 57 != 8 [ 360.110167][ T5479] usb 1-1: string descriptor 0 read error: -71 [ 360.117320][ T7] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 360.129373][ T5479] ftdi_sio 1-1:0.39: FTDI USB Serial Device converter detected [ 360.139522][ T5479] usb 1-1: Detected FT-X [ 360.160387][ T5479] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 360.179997][ T5479] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 360.190141][ T4234] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.199338][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.207687][ T5479] ftdi_sio 1-1:0.39: GPIO initialisation failed: -71 [ 360.222585][ T4234] usb 4-1: config 0 descriptor?? [ 360.227874][ T5479] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 360.239062][ T5479] usb 1-1: USB disconnect, device number 34 [ 360.249367][ T5479] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 360.259991][ T5479] ftdi_sio 1-1:0.39: device disconnected [ 360.271718][ T4234] cp210x 4-1:0.0: cp210x converter detected [ 360.395706][ T6249] usb 3-1: USB disconnect, device number 31 [ 360.415070][ T6249] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 360.427903][ T7819] loop2: detected capacity change from 0 to 16 [ 360.438221][ T6249] cp210x 3-1:0.0: device disconnected [ 360.564095][ T7821] loop1: detected capacity change from 0 to 1024 [ 360.579402][ T7819] erofs: (device loop2): mounted with root inode @ nid 36. [ 360.630101][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.660289][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.698790][ T7825] FAULT_INJECTION: forcing a failure. [ 360.698790][ T7825] name failslab, interval 1, probability 0, space 0, times 0 [ 360.699976][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.719218][ T7825] CPU: 1 PID: 7825 Comm: syz.0.975 Not tainted syzkaller #0 [ 360.728695][ T4234] usb 4-1: cp210x converter now attached to ttyUSB0 [ 360.731821][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.731836][ T7825] Call Trace: [ 360.731843][ T7825] [ 360.731851][ T7825] dump_stack_lvl+0x188/0x250 [ 360.731875][ T7825] ? show_regs_print_info+0x20/0x20 [ 360.731897][ T7825] ? load_image+0x400/0x400 [ 360.731914][ T7825] ? __might_sleep+0xf0/0xf0 [ 360.731931][ T7825] ? __lock_acquire+0x7d10/0x7d10 [ 360.778722][ T7825] should_fail+0x38c/0x4c0 [ 360.783161][ T7825] should_failslab+0x5/0x20 [ 360.787682][ T7825] slab_pre_alloc_hook+0x51/0xc0 [ 360.792642][ T7825] ? getname_flags+0xb5/0x500 [ 360.797335][ T7825] kmem_cache_alloc+0x3d/0x290 [ 360.802116][ T7825] getname_flags+0xb5/0x500 [ 360.806641][ T7825] __x64_sys_renameat2+0xac/0xe0 [ 360.811592][ T7825] do_syscall_64+0x4c/0xa0 [ 360.816019][ T7825] ? clear_bhb_loop+0x30/0x80 [ 360.820710][ T7825] ? clear_bhb_loop+0x30/0x80 [ 360.825403][ T7825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.831318][ T7825] RIP: 0033:0x7fe51ba33799 [ 360.835742][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.855369][ T7825] RSP: 002b:00007fe519c8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 360.863812][ T7825] RAX: ffffffffffffffda RBX: 00007fe51bcacfa0 RCX: 00007fe51ba33799 [ 360.871791][ T7825] RDX: ffffffffffffff9c RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 360.879775][ T7825] RBP: 00007fe519c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 360.887757][ T7825] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 360.895740][ T7825] R13: 00007fe51bcad038 R14: 00007fe51bcacfa0 R15: 00007ffc36dbd5a8 [ 360.903740][ T7825] [ 360.958058][ T7826] kvm [7820]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0x1 [ 360.990055][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.999261][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.030777][ T7] usb 5-1: Product: syz [ 361.040278][ T7] usb 5-1: Manufacturer: syz [ 361.044993][ T7] usb 5-1: SerialNumber: syz [ 361.101887][ T7] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 361.108818][ T7] cdc_ncm 5-1:1.0: bind() failure [ 361.170537][ T7833] attempt to access beyond end of device [ 361.170537][ T7833] loop2: rw=0, want=34359739352, limit=16 [ 361.216067][ T7833] attempt to access beyond end of device [ 361.216067][ T7833] loop2: rw=0, want=34359739352, limit=16 [ 361.232950][ T7833] attempt to access beyond end of device [ 361.232950][ T7833] loop2: rw=0, want=34359739352, limit=16 [ 361.265564][ T7834] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.968'. [ 361.812037][ T7815] netlink: 72 bytes leftover after parsing attributes in process `syz.4.970'. [ 361.822712][ T7815] udc-core: couldn't find an available UDC or it's busy [ 361.829677][ T7815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 361.851190][ T4327] usb 5-1: USB disconnect, device number 41 [ 361.959964][ T4234] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 361.971148][ T7839] loop1: detected capacity change from 0 to 1024 [ 362.036073][ T3079] hfsplus: b-tree write err: -5, ino 25 [ 362.049400][ T3079] hfsplus: b-tree write err: -5, ino 4 [ 362.063965][ T3079] hfsplus: b-tree write err: -5, ino 2 [ 362.200203][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 362.349992][ T4234] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 362.361844][ T4234] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 362.384241][ T4234] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 362.399169][ T4234] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 362.570066][ T4234] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.570100][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.570121][ T4234] usb 3-1: Product: syz [ 362.570137][ T4234] usb 3-1: Manufacturer: syz [ 362.570318][ T4234] usb 3-1: SerialNumber: syz [ 362.996975][ T5479] usb 4-1: USB disconnect, device number 29 [ 363.171697][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 363.282220][ T5479] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.300992][ T5479] cp210x 4-1:0.0: device disconnected [ 363.408179][ T7856] FAULT_INJECTION: forcing a failure. [ 363.408179][ T7856] name failslab, interval 1, probability 0, space 0, times 0 [ 363.421937][ T7856] CPU: 1 PID: 7856 Comm: syz.3.983 Not tainted syzkaller #0 [ 363.429244][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.439309][ T7856] Call Trace: [ 363.442612][ T7856] [ 363.445556][ T7856] dump_stack_lvl+0x188/0x250 [ 363.450259][ T7856] ? show_regs_print_info+0x20/0x20 [ 363.455476][ T7856] ? load_image+0x400/0x400 [ 363.459998][ T7856] ? __might_sleep+0xf0/0xf0 [ 363.464605][ T7856] ? __lock_acquire+0x7d10/0x7d10 [ 363.469651][ T7856] should_fail+0x38c/0x4c0 [ 363.474094][ T7856] should_failslab+0x5/0x20 [ 363.478610][ T7856] slab_pre_alloc_hook+0x51/0xc0 [ 363.483562][ T7856] __kmalloc_node_track_caller+0x68/0x3a0 [ 363.489296][ T7856] ? __ip6_append_data+0x266c/0x38c0 [ 363.494580][ T7856] ? kmem_cache_alloc_node+0x162/0x2d0 [ 363.500053][ T7856] ? __alloc_skb+0xf4/0x750 [ 363.504566][ T7856] ? __ip6_append_data+0x266c/0x38c0 [ 363.509854][ T7856] __alloc_skb+0x22c/0x750 [ 363.514281][ T7856] __ip6_append_data+0x266c/0x38c0 [ 363.519406][ T7856] ? ip6_setup_cork+0x11e0/0x11e0 [ 363.524428][ T7856] ? ip6_setup_cork+0xc63/0x11e0 [ 363.529368][ T7856] ip6_append_data+0x1d4/0x310 [ 363.534137][ T7856] ? rawv6_send_hdrinc+0x1690/0x1690 [ 363.539440][ T7856] ? rawv6_send_hdrinc+0x1690/0x1690 [ 363.544719][ T7856] rawv6_sendmsg+0x1222/0x1700 [ 363.549483][ T7856] ? compat_rawv6_ioctl+0x60/0x60 [ 363.554509][ T7856] ? aa_af_perm+0x340/0x340 [ 363.559013][ T7856] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 363.565442][ T7856] ? sock_rps_record_flow+0x17/0x3b0 [ 363.570819][ T7856] ? inet_sendmsg+0x78/0x2f0 [ 363.575452][ T7856] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 363.580732][ T7856] ? security_socket_sendmsg+0x7c/0xa0 [ 363.586204][ T7856] ? inet_send_prepare+0x260/0x260 [ 363.591316][ T7856] ____sys_sendmsg+0x5b7/0x8f0 [ 363.596098][ T7856] ? __sys_sendmsg_sock+0x30/0x30 [ 363.601124][ T7856] ? rcu_is_watching+0x11/0xa0 [ 363.605903][ T7856] ? import_iovec+0x6f/0xa0 [ 363.610406][ T7856] ___sys_sendmsg+0x236/0x2e0 [ 363.615099][ T7856] ? __sys_sendmsg+0x2a0/0x2a0 [ 363.619887][ T7856] ? __might_fault+0xb3/0x110 [ 363.624578][ T7856] __sys_sendmmsg+0x2ba/0x500 [ 363.629265][ T7856] ? __ia32_sys_sendmsg+0x80/0x80 [ 363.634294][ T7856] ? __context_tracking_exit+0x4c/0x80 [ 363.639771][ T7856] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 363.645754][ T7856] ? lock_chain_count+0x20/0x20 [ 363.650627][ T7856] ? vtime_user_exit+0x2c8/0x3e0 [ 363.655581][ T7856] __x64_sys_sendmmsg+0x9c/0xb0 [ 363.660450][ T7856] do_syscall_64+0x4c/0xa0 [ 363.664871][ T7856] ? clear_bhb_loop+0x30/0x80 [ 363.669537][ T7856] ? clear_bhb_loop+0x30/0x80 [ 363.674212][ T7856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.680097][ T7856] RIP: 0033:0x7fa1f2b9c799 [ 363.684518][ T7856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.704111][ T7856] RSP: 002b:00007fa1f0dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.712539][ T7856] RAX: ffffffffffffffda RBX: 00007fa1f2e16090 RCX: 00007fa1f2b9c799 [ 363.720517][ T7856] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000007 [ 363.728494][ T7856] RBP: 00007fa1f0dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 363.736466][ T7856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.744455][ T7856] R13: 00007fa1f2e16128 R14: 00007fa1f2e16090 R15: 00007fff07b048d8 [ 363.752444][ T7856] [ 363.875915][ T7863] loop1: detected capacity change from 0 to 512 [ 363.915535][ T7863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.092786][ T5479] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 364.235221][ T7874] loop0: detected capacity change from 0 to 512 [ 364.280767][ T7874] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 364.295643][ T7874] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.342857][ T5479] usb 5-1: Using ep0 maxpacket: 32 [ 364.480239][ T5479] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 364.489178][ T5479] usb 5-1: config 0 has no interface number 0 [ 364.520127][ T4234] usb 3-1: 0:2 : does not exist [ 364.542839][ T4234] usb 3-1: USB disconnect, device number 32 [ 364.650366][ T5479] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 364.692899][ T5479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.705285][ T5479] usb 5-1: Product: syz [ 364.709689][ T5479] usb 5-1: Manufacturer: syz [ 364.717499][ T5479] usb 5-1: SerialNumber: syz [ 364.728644][ T5479] usb 5-1: config 0 descriptor?? [ 364.781563][ T5479] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 364.810702][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.909905][ T4327] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 365.111843][ T5479] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 365.269076][ T5479] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 365.354976][ T7861] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 365.902126][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 47 [ 366.296283][ T7896] loop2: detected capacity change from 0 to 32768 [ 366.321830][ T4327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.337986][ T4327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.347604][ T4327] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.386374][ T7896] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.997 (7896) [ 366.550313][ T4327] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.563182][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.574078][ T4327] usb 1-1: Product: syz [ 366.578358][ T4327] usb 1-1: Manufacturer: syz [ 366.587040][ T4327] usb 1-1: SerialNumber: syz [ 366.660961][ T4327] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 366.669215][ T4327] cdc_ncm 1-1:1.0: bind() failure [ 366.819570][ T7861] loop4: detected capacity change from 0 to 131072 [ 366.846868][ T7896] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 366.887721][ T7880] netlink: 72 bytes leftover after parsing attributes in process `syz.0.990'. [ 366.907773][ T7896] BTRFS info (device loop2): enabling disk space caching [ 366.916500][ T7861] F2FS-fs (loop4): invalid crc value [ 366.927201][ T7896] BTRFS info (device loop2): force clearing of disk cache [ 366.945430][ T7880] udc-core: couldn't find an available UDC or it's busy [ 366.952896][ T7896] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 366.965726][ T7880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 366.970034][ T4234] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 366.982198][ T7861] F2FS-fs (loop4): Found nat_bits in checkpoint [ 366.984650][ T4327] usb 1-1: USB disconnect, device number 35 [ 367.014454][ T7896] BTRFS info (device loop2): use lzo compression, level 0 [ 367.024725][ T7896] BTRFS info (device loop2): disk space caching is enabled [ 367.044490][ T7861] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 367.055633][ T7896] BTRFS info (device loop2): has skinny extents [ 367.105422][ T1803] usb 5-1: USB disconnect, device number 42 [ 367.109971][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 367.147048][ T1803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 367.164402][ T1803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 367.191702][ T7896] BTRFS info (device loop2): enabling ssd optimizations [ 367.203893][ T7896] BTRFS info (device loop2): clearing free space tree [ 367.211081][ T1803] quatech2 5-1:0.51: device disconnected [ 367.220076][ T7896] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 367.245477][ T7896] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 367.307199][ T7896] 9pnet: Insufficient options for proto=fd [ 367.417881][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.438818][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 367.456276][ T4234] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 367.465735][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.505881][ T4234] usb 2-1: config 0 descriptor?? [ 367.551843][ T4234] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 367.564034][ T4234] dvb-usb: bulk message failed: -22 (3/0) [ 367.618345][ T4234] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 367.667172][ T4234] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 367.696163][ T4234] usb 2-1: media controller created [ 367.704211][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.791838][ T4234] dvb-usb: bulk message failed: -22 (6/0) [ 367.798303][ T4234] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 367.871442][ T4234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 367.921728][ T4234] dvb-usb: schedule remote query interval to 150 msecs. [ 367.928821][ T4234] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 368.085998][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 368.098797][ T7] dvb-usb: error while querying for an remote control event. [ 368.223809][ T5414] usb 2-1: USB disconnect, device number 31 [ 368.265242][ T5414] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 368.319812][ T7932] loop0: detected capacity change from 0 to 40427 [ 368.356965][ T7932] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 368.383937][ T7932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 368.418292][ T7932] F2FS-fs (loop0): invalid crc value [ 368.446742][ T7932] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 368.507463][ T7932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 368.516088][ T7932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 368.668511][ T7945] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 368.697738][ T7932] can: request_module (can-proto-0) failed. [ 369.363968][ T7944] block nbd4: shutting down sockets [ 371.269501][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 371.301852][ T7981] loop0: detected capacity change from 0 to 512 [ 371.500023][ T4234] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 371.558802][ T7989] loop3: detected capacity change from 0 to 512 [ 371.624790][ T7989] FAT-fs (loop3): Directory bread(block 199916) failed [ 371.665274][ T7989] FAT-fs (loop3): Directory bread(block 199917) failed [ 371.675142][ T7989] FAT-fs (loop3): Directory bread(block 199918) failed [ 371.690256][ T7989] FAT-fs (loop3): Directory bread(block 199919) failed [ 371.697830][ T7989] FAT-fs (loop3): Directory bread(block 199920) failed [ 371.706293][ T7989] FAT-fs (loop3): Directory bread(block 199921) failed [ 371.737206][ T7989] FAT-fs (loop3): Directory bread(block 199922) failed [ 371.744719][ T7989] FAT-fs (loop3): Directory bread(block 199923) failed [ 371.783838][ T7989] FAT-fs (loop3): Directory bread(block 199916) failed [ 371.798734][ T7989] FAT-fs (loop3): Directory bread(block 199917) failed [ 371.980244][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.993082][ T4234] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.006503][ T7999] loop3: detected capacity change from 0 to 256 [ 372.013170][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.129686][ T7999] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 372.159410][ T7999] attempt to access beyond end of device [ 372.159410][ T7999] loop3: rw=524288, want=34359738496, limit=256 [ 372.172381][ T7999] attempt to access beyond end of device [ 372.172381][ T7999] loop3: rw=0, want=34359738496, limit=256 [ 372.184084][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.189260][ T7999] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 372.193587][ T26] audit: type=1800 audit(1774196400.795:170): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1017" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 372.203696][ T7999] exFAT-fs (loop3): Filesystem has been set read-only [ 372.222060][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.236971][ T4234] usb 5-1: Product: syz [ 372.242026][ T4234] usb 5-1: Manufacturer: syz [ 372.246791][ T4234] usb 5-1: SerialNumber: syz [ 372.300759][ T4234] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 372.307986][ T4234] cdc_ncm 5-1:1.0: bind() failure [ 372.598870][ T8005] loop3: detected capacity change from 0 to 1024 [ 372.821264][ T8005] hfsplus: found bad thread record in catalog [ 372.827689][ T8005] hfsplus: b-tree write err: -5, ino 19 [ 373.079487][ T7969] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1010'. [ 373.155599][ T7969] udc-core: couldn't find an available UDC or it's busy [ 373.219050][ T7969] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.294755][ T5418] usb 5-1: USB disconnect, device number 43 [ 374.424192][ T8024] vivid-003: disconnect [ 374.582463][ T8010] vivid-003: reconnect [ 375.310262][ T5414] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 375.508931][ T8053] FAULT_INJECTION: forcing a failure. [ 375.508931][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.522239][ T8053] CPU: 0 PID: 8053 Comm: syz.2.1028 Not tainted syzkaller #0 [ 375.529621][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.539683][ T8053] Call Trace: [ 375.542966][ T8053] [ 375.545899][ T8053] dump_stack_lvl+0x188/0x250 [ 375.550586][ T8053] ? show_regs_print_info+0x20/0x20 [ 375.555795][ T8053] ? load_image+0x400/0x400 [ 375.560306][ T8053] ? __lock_acquire+0x7d10/0x7d10 [ 375.565344][ T8053] should_fail+0x38c/0x4c0 [ 375.569773][ T8053] _copy_from_user+0x2e/0x170 [ 375.574719][ T8053] iovec_from_user+0x142/0x370 [ 375.579497][ T8053] __import_iovec+0x70/0x490 [ 375.584104][ T8053] import_iovec+0x6f/0xa0 [ 375.588445][ T8053] ___sys_sendmsg+0x1fd/0x2e0 [ 375.593139][ T8053] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.597945][ T8053] __se_sys_sendmsg+0x1af/0x290 [ 375.602811][ T8053] ? __x64_sys_sendmsg+0x80/0x80 [ 375.607755][ T8053] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 375.613755][ T8053] ? lockdep_hardirqs_on+0x94/0x140 [ 375.618967][ T8053] do_syscall_64+0x4c/0xa0 [ 375.623387][ T8053] ? clear_bhb_loop+0x30/0x80 [ 375.628068][ T8053] ? clear_bhb_loop+0x30/0x80 [ 375.632750][ T8053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.638653][ T8053] RIP: 0033:0x7f54188fe799 [ 375.643074][ T8053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.662682][ T8053] RSP: 002b:00007f5416b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.671105][ T8053] RAX: ffffffffffffffda RBX: 00007f5418b78180 RCX: 00007f54188fe799 [ 375.679087][ T8053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 375.687065][ T8053] RBP: 00007f5416b16090 R08: 0000000000000000 R09: 0000000000000000 [ 375.695040][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.703015][ T8053] R13: 00007f5418b78218 R14: 00007f5418b78180 R15: 00007ffcb2fa5478 [ 375.711008][ T8053] [ 375.986771][ T8056] loop1: detected capacity change from 0 to 64 [ 376.011407][ T5414] usb 5-1: Using ep0 maxpacket: 16 [ 376.152349][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.182986][ T5414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.223158][ T5414] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 376.224983][ T8058] loop3: detected capacity change from 0 to 4096 [ 376.245605][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.267611][ T5414] usb 5-1: config 0 descriptor?? [ 376.880937][ T8070] vivid-000: disconnect [ 376.888954][ T5414] corsair 0003:1B1C:1B02.0005: unbalanced delimiter at end of report description [ 376.899074][ T5414] corsair 0003:1B1C:1B02.0005: parse failed [ 376.905350][ T5414] corsair: probe of 0003:1B1C:1B02.0005 failed with error -22 [ 376.960546][ T5479] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 377.058456][ T8060] loop0: detected capacity change from 0 to 40427 [ 377.102435][ T4234] usb 5-1: USB disconnect, device number 44 [ 377.136762][ T8060] F2FS-fs (loop0): invalid crc value [ 377.158006][ T8060] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 377.217038][ T8060] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 377.227082][ T8060] F2FS-fs (loop0): Start checkpoint disabled! [ 377.248992][ T8060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 377.331286][ T5479] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 377.341188][ T5479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.352160][ T5479] usb 4-1: config 0 descriptor?? [ 377.392727][ T5479] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 377.409800][ T5479] usb 4-1: Detected FT-X [ 377.432672][ T8063] vivid-000: reconnect [ 377.675410][ T8081] loop0: detected capacity change from 0 to 256 [ 377.702094][ T8083] loop4: detected capacity change from 0 to 256 [ 377.996917][ T8081] FAULT_INJECTION: forcing a failure. [ 377.996917][ T8081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.128238][ T8081] CPU: 0 PID: 8081 Comm: syz.0.1037 Not tainted syzkaller #0 [ 378.135656][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.145715][ T8081] Call Trace: [ 378.149000][ T8081] [ 378.151932][ T8081] dump_stack_lvl+0x188/0x250 [ 378.156624][ T8081] ? show_regs_print_info+0x20/0x20 [ 378.161834][ T8081] ? load_image+0x400/0x400 [ 378.166352][ T8081] ? __lock_acquire+0x7d10/0x7d10 [ 378.171407][ T8081] should_fail+0x38c/0x4c0 [ 378.175843][ T8081] _copy_to_user+0x2e/0x130 [ 378.180355][ T8081] simple_read_from_buffer+0xe3/0x150 [ 378.185745][ T8081] proc_fail_nth_read+0x1a6/0x220 [ 378.190788][ T8081] ? proc_fault_inject_write+0x310/0x310 [ 378.196435][ T8081] ? fsnotify_perm+0x254/0x560 [ 378.201217][ T8081] ? proc_fault_inject_write+0x310/0x310 [ 378.206868][ T8081] vfs_read+0x301/0xd60 [ 378.211044][ T8081] ? kernel_read+0x1e0/0x1e0 [ 378.215652][ T8081] ? __fget_files+0x40f/0x480 [ 378.220349][ T8081] ? mutex_lock_nested+0x17/0x20 [ 378.225301][ T8081] ? __fdget_pos+0x2bf/0x370 [ 378.229894][ T8081] ? ksys_read+0x71/0x260 [ 378.234228][ T8081] ksys_read+0x152/0x260 [ 378.238483][ T8081] ? vfs_write+0xd60/0xd60 [ 378.242917][ T8081] ? lockdep_hardirqs_on+0x94/0x140 [ 378.248133][ T8081] do_syscall_64+0x4c/0xa0 [ 378.252562][ T8081] ? clear_bhb_loop+0x30/0x80 [ 378.257248][ T8081] ? clear_bhb_loop+0x30/0x80 [ 378.261946][ T8081] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.267849][ T8081] RIP: 0033:0x7fe51b9f3fce [ 378.272276][ T8081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.291893][ T8081] RSP: 002b:00007fe519c8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.300324][ T8081] RAX: ffffffffffffffda RBX: 00007fe519c8d6c0 RCX: 00007fe51b9f3fce [ 378.308312][ T8081] RDX: 000000000000000f RSI: 00007fe519c8d0a0 RDI: 0000000000000005 [ 378.316388][ T8081] RBP: 00007fe519c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 378.324395][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.332389][ T8081] R13: 00007fe51bcad038 R14: 00007fe51bcacfa0 R15: 00007ffc36dbd5a8 [ 378.340400][ T8081] [ 378.352279][ T5425] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 378.549103][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.555650][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.699373][ T26] audit: type=1800 audit(1774196407.305:171): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 378.720493][ T5479] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 378.754688][ T5479] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 378.780014][ T5479] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 378.791785][ T5479] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 378.808001][ T5479] usb 4-1: USB disconnect, device number 30 [ 378.832346][ T5479] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 378.852749][ T5479] ftdi_sio 4-1:0.0: device disconnected [ 378.885136][ T7] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 379.160121][ T5425] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.171147][ T5425] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 379.180436][ T5425] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.370094][ T5425] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.379344][ T5425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.388103][ T5425] usb 3-1: Product: syz [ 379.398703][ T5425] usb 3-1: Manufacturer: syz [ 379.405569][ T5425] usb 3-1: SerialNumber: syz [ 379.450447][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 379.465288][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.475825][ T7] usb 5-1: config 0 descriptor?? [ 379.481325][ T5425] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 379.491602][ T5425] cdc_ncm 3-1:1.0: bind() failure [ 379.561159][ T7] cp210x 5-1:0.0: cp210x converter detected [ 379.716831][ T8076] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1038'. [ 379.822124][ T8076] udc-core: couldn't find an available UDC or it's busy [ 379.839546][ T8076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 379.859110][ T5414] usb 3-1: USB disconnect, device number 33 [ 380.502549][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 381.947723][ T8137] loop3: detected capacity change from 0 to 4096 [ 382.620305][ T8137] ntfs: volume version 3.1. [ 383.140103][ T8161] vivid-002: disconnect [ 383.948298][ T8159] vivid-002: reconnect [ 384.096026][ T8158] mkiss: ax0: crc mode is auto. [ 384.374071][ T8175] dummy0: Caught tx_queue_len zero misconfig [ 384.398965][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 384.446679][ T8175] loop0: detected capacity change from 0 to 16 [ 384.488235][ T8175] erofs: Unknown parameter '€' [ 384.501204][ T8175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1067'. [ 384.594210][ T21] usb 5-1: USB disconnect, device number 45 [ 384.630485][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 384.649147][ T21] cp210x 5-1:0.0: device disconnected [ 384.907351][ T8183] loop4: detected capacity change from 0 to 1024 [ 384.949897][ T4227] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 384.975381][ T8183] EXT4-fs (loop4): Ignoring removed orlov option [ 385.014573][ T8183] EXT4-fs (loop4): Ignoring removed oldalloc option [ 385.051823][ T8183] EXT4-fs (loop4): Ignoring removed bh option [ 385.079539][ T8183] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 385.136305][ T8183] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,data_err=abort,nodelalloc,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,discard,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 385.201909][ T8187] loop2: detected capacity change from 0 to 4096 [ 385.214531][ T8187] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 385.253595][ T8187] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 385.275491][ T8187] ntfs: (device loop2): ntfs_read_inode_mount(): Failed to lookup $MFT/$DATA attribute extent. $MFT is corrupt. Run chkdsk. [ 385.306926][ T8187] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 385.316615][ T8187] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 385.375200][ T4227] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 385.389946][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.425811][ T4227] usb 1-1: config 0 descriptor?? [ 385.491106][ T4227] cp210x 1-1:0.0: cp210x converter detected [ 385.556373][ T8194] loop1: detected capacity change from 0 to 32768 [ 385.882885][ T8203] loop3: detected capacity change from 0 to 1024 [ 385.983255][ T4227] usb 1-1: cp210x converter now attached to ttyUSB0 [ 386.159680][ T8203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1077'. [ 386.507850][ T8214] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1068'. [ 387.121794][ T5479] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 387.186116][ T8216] loop3: detected capacity change from 0 to 256 [ 387.241016][ T8216] exfat: Deprecated parameter 'namecase' [ 387.248000][ T8216] exfat: Deprecated parameter 'namecase' [ 387.331783][ T8216] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 387.480079][ T5479] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.493541][ T5479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.514553][ T5479] usb 3-1: config 0 descriptor?? [ 387.536738][ T8216] exFAT-fs (loop3): invalid start cluster (4278190088) [ 387.561053][ T5479] cp210x 3-1:0.0: cp210x converter detected [ 388.110242][ T8230] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1084'. [ 388.132248][ T8230] loop3: detected capacity change from 0 to 64 [ 388.686992][ T5479] usb 3-1: cp210x converter now attached to ttyUSB1 [ 389.088008][ T8234] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1079'. [ 389.219895][ T1107] usb 1-1: USB disconnect, device number 36 [ 389.240392][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 389.335847][ T1107] cp210x 1-1:0.0: device disconnected [ 389.797881][ T8237] loop4: detected capacity change from 0 to 32768 [ 389.873807][ T8237] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 389.921639][ T8237] BTRFS info (device loop4): turning on sync discard [ 389.955090][ T8237] BTRFS info (device loop4): turning on async discard [ 389.984871][ T8237] BTRFS info (device loop4): using free space tree [ 390.031254][ T8237] BTRFS info (device loop4): has skinny extents [ 390.275872][ T8257] loop1: detected capacity change from 0 to 256 [ 390.949984][ T8257] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 391.008128][ T5479] usb 3-1: USB disconnect, device number 34 [ 391.020323][ T5479] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 391.039102][ T5479] cp210x 3-1:0.0: device disconnected [ 391.210693][ T4272] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 391.290405][ T8266] loop3: detected capacity change from 0 to 1024 [ 391.299011][ T8265] device syzkaller0 entered promiscuous mode [ 391.348935][ T8237] BTRFS info (device loop4): enabling ssd optimizations [ 391.351987][ T8266] hfsplus: unable to parse mount options [ 391.540173][ T5479] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 391.775414][ T5479] usb 2-1: device descriptor read/64, error -71 [ 391.929108][ T8286] loop2: detected capacity change from 0 to 32768 [ 392.075254][ T5479] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 392.359985][ T5479] usb 2-1: device descriptor read/64, error -71 [ 392.501261][ T5479] usb usb2-port1: attempt power cycle [ 392.810819][ T8295] loop3: detected capacity change from 0 to 32768 [ 392.940032][ T5479] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 392.980897][ T8295] XFS (loop3): Mounting V5 Filesystem [ 393.052513][ T5479] usb 2-1: device descriptor read/8, error -71 [ 393.076792][ T8295] XFS (loop3): Ending clean mount [ 393.087520][ T8295] XFS (loop3): Quotacheck needed: Please wait. [ 393.174676][ T8295] XFS (loop3): Quotacheck: Done. [ 393.252455][ T4197] XFS (loop3): Unmounting Filesystem [ 393.330026][ T5479] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 393.438031][ T5479] usb 2-1: device descriptor read/8, error -71 [ 393.560449][ T5479] usb usb2-port1: unable to enumerate USB device [ 394.034562][ T8320] loop0: detected capacity change from 0 to 32768 [ 394.151817][ T8320] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1104 (8320) [ 394.219921][ T4227] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 394.228758][ T8320] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 394.260384][ T8320] BTRFS info (device loop0): turning on sync discard [ 394.267102][ T8320] BTRFS info (device loop0): turning on async discard [ 394.293020][ T8320] BTRFS info (device loop0): using free space tree [ 394.299598][ T8320] BTRFS info (device loop0): has skinny extents [ 394.623662][ T8350] loop4: detected capacity change from 0 to 1024 [ 394.679993][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 394.830521][ T4227] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 394.838903][ T4227] usb 4-1: config 0 has no interface number 0 [ 395.206905][ T8350] hfsplus: found bad thread record in catalog [ 395.213248][ T8350] hfsplus: b-tree write err: -5, ino 19 [ 395.219707][ T4227] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 395.314614][ T8320] BTRFS info (device loop0): enabling ssd optimizations [ 395.430105][ T4227] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 395.480262][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.501279][ T8362] 9pnet: Insufficient options for proto=fd [ 395.523138][ T4227] usb 4-1: Product: syz [ 395.539161][ T4227] usb 4-1: Manufacturer: syz [ 395.563125][ T4227] usb 4-1: SerialNumber: syz [ 395.601170][ T4227] usb 4-1: config 0 descriptor?? [ 395.630391][ T8324] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 395.876070][ T8324] loop3: detected capacity change from 0 to 512 [ 395.983241][ T8324] loop3: detected capacity change from 0 to 256 [ 396.046410][ T8324] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 396.182507][ T8378] FAULT_INJECTION: forcing a failure. [ 396.182507][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 396.237210][ T8378] CPU: 1 PID: 8378 Comm: syz.0.1113 Not tainted syzkaller #0 [ 396.244622][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.254689][ T8378] Call Trace: [ 396.257960][ T8378] [ 396.260878][ T8378] dump_stack_lvl+0x188/0x250 [ 396.265556][ T8378] ? show_regs_print_info+0x20/0x20 [ 396.270755][ T8378] ? load_image+0x400/0x400 [ 396.275245][ T8378] ? __might_sleep+0xf0/0xf0 [ 396.279831][ T8378] ? __lock_acquire+0x7d10/0x7d10 [ 396.284854][ T8378] ? mark_lock+0x94/0x320 [ 396.289171][ T8378] should_fail+0x38c/0x4c0 [ 396.293584][ T8378] should_failslab+0x5/0x20 [ 396.298088][ T8378] slab_pre_alloc_hook+0x51/0xc0 [ 396.303010][ T8378] __kmalloc+0x6b/0x330 [ 396.307150][ T8378] ? tomoyo_realpath_from_path+0x118/0x610 [ 396.312943][ T8378] tomoyo_realpath_from_path+0x118/0x610 [ 396.318569][ T8378] tomoyo_path_number_perm+0x242/0x660 [ 396.324033][ T8378] ? verify_lock_unused+0x140/0x140 [ 396.329222][ T8378] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 396.334669][ T8378] ? ksys_write+0x1c6/0x260 [ 396.339184][ T8378] security_file_ioctl+0x6c/0xa0 [ 396.344115][ T8378] __se_sys_ioctl+0x48/0x170 [ 396.348694][ T8378] do_syscall_64+0x4c/0xa0 [ 396.353096][ T8378] ? clear_bhb_loop+0x30/0x80 [ 396.357756][ T8378] ? clear_bhb_loop+0x30/0x80 [ 396.362419][ T8378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.368298][ T8378] RIP: 0033:0x7fe51ba33799 [ 396.372703][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.392729][ T8378] RSP: 002b:00007fe519c8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.401131][ T8378] RAX: ffffffffffffffda RBX: 00007fe51bcacfa0 RCX: 00007fe51ba33799 [ 396.409092][ T8378] RDX: 0000200000000140 RSI: 00000000c0205649 RDI: 0000000000000003 [ 396.417052][ T8378] RBP: 00007fe519c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 396.425009][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.432965][ T8378] R13: 00007fe51bcad038 R14: 00007fe51bcacfa0 R15: 00007ffc36dbd5a8 [ 396.440931][ T8378] [ 396.443997][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.458449][ T4227] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 396.498593][ T4227] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 396.518379][ T4227] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 396.526013][ T8378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.536554][ T4227] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 396.580156][ T4227] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 396.640986][ T4227] usb 4-1: USB disconnect, device number 31 [ 396.668571][ T4227] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 396.707781][ T4227] keyspan 4-1:0.133: device disconnected [ 397.450689][ T8376] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 397.459284][ T5414] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 397.520032][ T8406] 9pnet: Insufficient options for proto=fd [ 397.720073][ T5414] usb 5-1: Using ep0 maxpacket: 16 [ 397.880197][ T8376] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 397.888404][ T5414] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.898684][ T4231] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 397.908830][ T8376] usb 1-1: config 0 has no interface number 0 [ 397.916195][ T5414] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.926028][ T8376] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 397.936478][ T8376] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.100069][ T5414] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.112516][ T5414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.120995][ T8376] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 398.133596][ T5414] usb 5-1: Product: syz [ 398.137804][ T8376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.145956][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 398.151498][ T5414] usb 5-1: Manufacturer: syz [ 398.156401][ T5414] usb 5-1: SerialNumber: syz [ 398.161152][ T8376] usb 1-1: Product: syz [ 398.165964][ T8376] usb 1-1: Manufacturer: syz [ 398.171897][ T8376] usb 1-1: SerialNumber: syz [ 398.179461][ T8376] usb 1-1: config 0 descriptor?? [ 398.200328][ T8390] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 398.221191][ T8376] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 398.232851][ T8376] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 398.270160][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.284253][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.294245][ T4231] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 398.303562][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.315298][ T4231] usb 2-1: config 0 descriptor?? [ 398.463701][ T8417] loop3: detected capacity change from 0 to 4096 [ 398.490081][ T5414] usb 5-1: 0:2 : does not exist [ 398.542758][ T5414] usb 5-1: USB disconnect, device number 46 [ 398.659282][ T8390] loop0: detected capacity change from 0 to 256 [ 398.712615][ T8390] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.723869][ T4231] usbhid 2-1:0.0: can't add hid device: -71 [ 398.724771][ T8427] loop3: detected capacity change from 0 to 1024 [ 398.735668][ T4231] usbhid: probe of 2-1:0.0 failed with error -71 [ 398.755549][ T8390] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 398.784807][ T4231] usb 2-1: USB disconnect, device number 36 [ 398.805796][ T8390] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 398.819056][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.909401][ T5414] usb 1-1: USB disconnect, device number 37 [ 398.931998][ T5414] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 398.970305][ T5414] cyberjack 1-1:0.69: device disconnected [ 399.215374][ T8440] 9pnet: Insufficient options for proto=fd [ 399.635452][ T8449] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 399.948794][ T8459] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1142'. [ 401.129936][ T5479] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 401.482249][ T8467] loop3: detected capacity change from 0 to 2048 [ 401.496671][ T8449] loop1: detected capacity change from 0 to 32768 [ 401.552825][ T8449] JBD2: Ignoring recovery information on journal [ 401.562867][ T8449] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 401.575283][ T8449] JBD2: bad block at offset 32 [ 401.584443][ T8449] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 401.610774][ T8449] [ 401.613137][ T8449] ====================================================== [ 401.620153][ T8449] WARNING: possible circular locking dependency detected [ 401.627186][ T8449] syzkaller #0 Not tainted [ 401.631598][ T8449] ------------------------------------------------------ [ 401.638612][ T8449] syz.1.1139/8449 is trying to acquire lock: [ 401.644585][ T8449] ffff8880597db488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 401.657808][ T8449] [ 401.657808][ T8449] but task is already holding lock: [ 401.665162][ T8449] ffff8880597d9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 401.674645][ T8449] [ 401.674645][ T8449] which lock already depends on the new lock. [ 401.674645][ T8449] [ 401.685040][ T8449] [ 401.685040][ T8449] the existing dependency chain (in reverse order) is: [ 401.694048][ T8449] [ 401.694048][ T8449] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 401.701860][ T8449] down_read+0x44/0x2e0 [ 401.706536][ T8449] ocfs2_init_acl+0x307/0x770 [ 401.711731][ T8449] ocfs2_mknod+0x15cb/0x2510 [ 401.716836][ T8449] ocfs2_mkdir+0x192/0x420 [ 401.721764][ T8449] vfs_mkdir+0x387/0x570 [ 401.726520][ T8449] do_mkdirat+0x1df/0x5b0 [ 401.731366][ T8449] __x64_sys_mkdir+0x6a/0x80 [ 401.736471][ T8449] do_syscall_64+0x4c/0xa0 [ 401.741404][ T8449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.747811][ T8449] [ 401.747811][ T8449] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 401.756321][ T8449] down_read+0x44/0x2e0 [ 401.760995][ T8449] ocfs2_start_trans+0x3a6/0x6f0 [ 401.766446][ T8449] ocfs2_modify_bh+0xe0/0x4c0 [ 401.771637][ T8449] ocfs2_local_read_info+0x13c8/0x1750 [ 401.777610][ T8449] dquot_load_quota_sb+0x756/0xac0 [ 401.783243][ T8449] dquot_load_quota_inode+0x2d8/0x5d0 [ 401.789133][ T8449] ocfs2_enable_quotas+0x1c5/0x490 [ 401.794764][ T8449] ocfs2_fill_super+0x3cd2/0x50f0 [ 401.800309][ T8449] mount_bdev+0x287/0x3c0 [ 401.805152][ T8449] legacy_get_tree+0xe6/0x180 [ 401.810345][ T8449] vfs_get_tree+0x88/0x270 [ 401.815280][ T8449] do_new_mount+0x24a/0xa40 [ 401.820297][ T8449] __se_sys_mount+0x2e3/0x3d0 [ 401.825489][ T8449] do_syscall_64+0x4c/0xa0 [ 401.830419][ T8449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.836829][ T8449] [ 401.836829][ T8449] -> #2 (sb_internal#6){.+.+}-{0:0}: [ 401.844296][ T8449] ocfs2_start_trans+0x2a7/0x6f0 [ 401.849752][ T8449] ocfs2_mknod+0xf5a/0x2510 [ 401.854770][ T8449] ocfs2_mkdir+0x192/0x420 [ 401.859700][ T8449] vfs_mkdir+0x387/0x570 [ 401.864454][ T8449] do_mkdirat+0x1df/0x5b0 [ 401.869298][ T8449] __x64_sys_mkdir+0x6a/0x80 [ 401.874404][ T8449] do_syscall_64+0x4c/0xa0 [ 401.879336][ T8449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.885743][ T8449] [ 401.885743][ T8449] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 401.896255][ T8449] down_write+0x38/0x60 [ 401.900933][ T8449] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 401.907603][ T8449] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 401.914447][ T8449] ocfs2_mknod+0xef8/0x2510 [ 401.919466][ T8449] ocfs2_mkdir+0x192/0x420 [ 401.924398][ T8449] vfs_mkdir+0x387/0x570 [ 401.929154][ T8449] do_mkdirat+0x1df/0x5b0 [ 401.933999][ T8449] __x64_sys_mkdir+0x6a/0x80 [ 401.939102][ T8449] do_syscall_64+0x4c/0xa0 [ 401.944033][ T8449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.950440][ T8449] [ 401.950440][ T8449] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 401.960953][ T8449] __lock_acquire+0x2c42/0x7d10 [ 401.966329][ T8449] lock_acquire+0x19e/0x400 [ 401.971347][ T8449] down_write+0x38/0x60 [ 401.976017][ T8449] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 401.982434][ T8449] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 401.989281][ T8449] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 401.995433][ T8449] ocfs2_xattr_set+0xc38/0x13e0 [ 402.000801][ T8449] ocfs2_set_acl+0x4e1/0x590 [ 402.005908][ T8449] ocfs2_iop_set_acl+0x190/0x2b0 [ 402.011370][ T8449] posix_acl_xattr_set+0x36f/0x3e0 [ 402.016998][ T8449] __vfs_setxattr+0x3e0/0x420 [ 402.022189][ T8449] __vfs_setxattr_noperm+0x129/0x5e0 [ 402.027995][ T8449] vfs_setxattr+0x167/0x2e0 [ 402.033013][ T8449] setxattr+0x36c/0x390 [ 402.037682][ T8449] path_setxattr+0x147/0x290 [ 402.042782][ T8449] __x64_sys_setxattr+0xb7/0xd0 [ 402.048146][ T8449] do_syscall_64+0x4c/0xa0 [ 402.053078][ T8449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 402.059490][ T8449] [ 402.059490][ T8449] other info that might help us debug this: [ 402.059490][ T8449] [ 402.069703][ T8449] Chain exists of: [ 402.069703][ T8449] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 402.069703][ T8449] [ 402.086644][ T8449] Possible unsafe locking scenario: [ 402.086644][ T8449] [ 402.094084][ T8449] CPU0 CPU1 [ 402.099438][ T8449] ---- ---- [ 402.104789][ T8449] lock(&oi->ip_xattr_sem); [ 402.109367][ T8449] lock(&journal->j_trans_barrier); [ 402.117162][ T8449] lock(&oi->ip_xattr_sem); [ 402.124263][ T8449] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 402.131545][ T8449] [ 402.131545][ T8449] *** DEADLOCK *** [ 402.131545][ T8449] [ 402.139676][ T8449] 3 locks held by syz.1.1139/8449: [ 402.144775][ T8449] #0: ffff888059080460 (sb_writers#36){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 402.153999][ T8449] #1: ffff8880597d9808 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 402.164262][ T8449] #2: ffff8880597d9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 402.174180][ T8449] [ 402.174180][ T8449] stack backtrace: [ 402.180062][ T8449] CPU: 1 PID: 8449 Comm: syz.1.1139 Not tainted syzkaller #0 [ 402.187421][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.197468][ T8449] Call Trace: [ 402.200739][ T8449] [ 402.203661][ T8449] dump_stack_lvl+0x188/0x250 [ 402.208334][ T8449] ? load_image+0x400/0x400 [ 402.212829][ T8449] ? show_regs_print_info+0x20/0x20 [ 402.218026][ T8449] ? print_circular_bug+0x12b/0x1a0 [ 402.223223][ T8449] check_noncircular+0x296/0x330 [ 402.228154][ T8449] ? look_up_lock_class+0x71/0x110 [ 402.233267][ T8449] ? add_chain_block+0x940/0x940 [ 402.238199][ T8449] ? lockdep_lock+0xf1/0x1f0 [ 402.242789][ T8449] ? mark_lock+0x94/0x320 [ 402.247113][ T8449] __lock_acquire+0x2c42/0x7d10 [ 402.251970][ T8449] ? verify_lock_unused+0x140/0x140 [ 402.257164][ T8449] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 402.262795][ T8449] ? do_raw_spin_lock+0x128/0x2f0 [ 402.267814][ T8449] ? mutex_unlock+0x10/0x10 [ 402.272312][ T8449] ? __rwlock_init+0x140/0x140 [ 402.277071][ T8449] ? do_raw_spin_unlock+0x11d/0x230 [ 402.282269][ T8449] lock_acquire+0x19e/0x400 [ 402.286771][ T8449] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 402.292837][ T8449] ? stack_trace_save+0xa6/0xf0 [ 402.297682][ T8449] ? __might_sleep+0xf0/0xf0 [ 402.302267][ T8449] ? check_noncircular+0x189/0x330 [ 402.307372][ T8449] ? read_lock_is_recursive+0x10/0x10 [ 402.312743][ T8449] ? verify_lock_unused+0x140/0x140 [ 402.317948][ T8449] down_write+0x38/0x60 [ 402.322104][ T8449] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 402.328170][ T8449] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 402.334074][ T8449] ? mark_lock+0x94/0x320 [ 402.338398][ T8449] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 402.344375][ T8449] ? lock_chain_count+0x20/0x20 [ 402.349226][ T8449] ? __rwlock_init+0x140/0x140 [ 402.353984][ T8449] ? ocfs2_block_group_search+0x470/0x470 [ 402.359702][ T8449] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 402.365591][ T8449] ? lockdep_hardirqs_on+0x94/0x140 [ 402.370786][ T8449] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 402.376686][ T8449] ? _raw_spin_unlock+0x40/0x40 [ 402.381536][ T8449] ? stack_trace_save+0xa6/0xf0 [ 402.386382][ T8449] ? stack_trace_snprint+0xf0/0xf0 [ 402.391488][ T8449] ? stack_depot_save+0x404/0x440 [ 402.396511][ T8449] ? __kasan_kmalloc+0xcc/0xf0 [ 402.401270][ T8449] ? __kasan_kmalloc+0xb5/0xf0 [ 402.406025][ T8449] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 402.412523][ T8449] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 402.418330][ T8449] ? ocfs2_xattr_set+0xc38/0x13e0 [ 402.423347][ T8449] ? ocfs2_set_acl+0x4e1/0x590 [ 402.428107][ T8449] ? ocfs2_iop_set_acl+0x190/0x2b0 [ 402.433213][ T8449] ? posix_acl_xattr_set+0x36f/0x3e0 [ 402.438491][ T8449] ? __vfs_setxattr+0x3e0/0x420 [ 402.443332][ T8449] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 402.448779][ T8449] ? vfs_setxattr+0x167/0x2e0 [ 402.453446][ T8449] ? setxattr+0x36c/0x390 [ 402.457764][ T8449] ? path_setxattr+0x147/0x290 [ 402.462517][ T8449] ? __x64_sys_setxattr+0xb7/0xd0 [ 402.467532][ T8449] ? do_syscall_64+0x4c/0xa0 [ 402.472119][ T8449] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 402.478197][ T8449] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 402.484530][ T8449] ? ocfs2_init_steal_slots+0x150/0x150 [ 402.490076][ T8449] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 402.495704][ T8449] ? do_raw_spin_lock+0x128/0x2f0 [ 402.500730][ T8449] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 402.506360][ T8449] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 402.512421][ T8449] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 402.518663][ T8449] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 402.524558][ T8449] ? up_write+0x1bb/0x420 [ 402.528887][ T8449] ocfs2_xattr_set+0xc38/0x13e0 [ 402.533743][ T8449] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 402.539459][ T8449] ? stack_depot_save+0x404/0x440 [ 402.544530][ T8449] ? ocfs2_iop_set_acl+0x190/0x2b0 [ 402.549642][ T8449] ? posix_acl_xattr_set+0x36f/0x3e0 [ 402.554922][ T8449] ? __vfs_setxattr+0x3e0/0x420 [ 402.559764][ T8449] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 402.565218][ T8449] ? setxattr+0x36c/0x390 [ 402.569539][ T8449] ? path_setxattr+0x147/0x290 [ 402.574296][ T8449] ? __x64_sys_setxattr+0xb7/0xd0 [ 402.579327][ T8449] ocfs2_set_acl+0x4e1/0x590 [ 402.583921][ T8449] ocfs2_iop_set_acl+0x190/0x2b0 [ 402.588855][ T8449] ? ocfs2_xattr_get+0x260/0x260 [ 402.593793][ T8449] ? posix_acl_valid+0x320/0x3a0 [ 402.598724][ T8449] posix_acl_xattr_set+0x36f/0x3e0 [ 402.603848][ T8449] ? posix_acl_xattr_get+0x550/0x550 [ 402.609125][ T8449] __vfs_setxattr+0x3e0/0x420 [ 402.613801][ T8449] __vfs_setxattr_noperm+0x129/0x5e0 [ 402.619085][ T8449] vfs_setxattr+0x167/0x2e0 [ 402.623588][ T8449] ? xattr_permission+0x500/0x500 [ 402.628608][ T8449] ? _copy_from_user+0x111/0x170 [ 402.633551][ T8449] ? posix_acl_fix_xattr_from_user+0xcf/0x110 [ 402.639612][ T8449] setxattr+0x36c/0x390 [ 402.643762][ T8449] ? path_setxattr+0x290/0x290 [ 402.648526][ T8449] ? __mnt_want_write+0x1e2/0x260 [ 402.653549][ T8449] path_setxattr+0x147/0x290 [ 402.658135][ T8449] ? simple_xattr_list_add+0xf0/0xf0 [ 402.663418][ T8449] ? lock_chain_count+0x20/0x20 [ 402.668266][ T8449] ? vtime_user_exit+0x2c8/0x3e0 [ 402.673205][ T8449] __x64_sys_setxattr+0xb7/0xd0 [ 402.678052][ T8449] do_syscall_64+0x4c/0xa0 [ 402.682463][ T8449] ? clear_bhb_loop+0x30/0x80 [ 402.687133][ T8449] ? clear_bhb_loop+0x30/0x80 [ 402.691808][ T8449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 402.697700][ T8449] RIP: 0033:0x7f9104053799 [ 402.702119][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.721722][ T8449] RSP: 002b:00007f91022ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 402.730133][ T8449] RAX: ffffffffffffffda RBX: 00007f91042ccfa0 RCX: 00007f9104053799 [ 402.738106][ T8449] RDX: 0000200000002b40 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 402.746075][ T8449] RBP: 00007f91040e9c99 R08: 0000000000000000 R09: 0000000000000000 [ 402.754042][ T8449] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 402.762008][ T8449] R13: 00007f91042cd038 R14: 00007f91042ccfa0 R15: 00007ffc44af1ba8 [ 402.769982][ T8449] [ 402.808940][ T8449] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 402.837746][ T8449] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 402.847721][ T8449] OCFS2: File system is now read-only. [ 402.849848][ T5678] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 402.853844][ T8449] (syz.1.1139,8449,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 402.879633][ T8467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.880665][ T8449] (syz.1.1139,8449,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 402.900600][ T5479] usb 1-1: device descriptor read/all, error -71 [ 402.928307][ T8449] (syz.1.1139,8449,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 402.938703][ T8449] (syz.1.1139,8449,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 402.949207][ T8449] (syz.1.1139,8449,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 402.957671][ T8449] (syz.1.1139,8449,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 402.965885][ T8449] (syz.1.1139,8449,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 402.983308][ T8449] (syz.1.1139,8449,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 402.991963][ T8449] (syz.1.1139,8449,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 403.001148][ T8449] (syz.1.1139,8449,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 403.010498][ T8449] (syz.1.1139,8449,1):ocfs2_init_xattr_set_ctxt:3284 ERROR: status = -30 [ 403.018923][ T8449] (syz.1.1139,8449,1):ocfs2_xattr_set:3641 ERROR: status = -30 [ 403.033950][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 403.129981][ T5678] usb 3-1: Using ep0 maxpacket: 16 [ 403.259930][ T5678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.270124][ T5678] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.429985][ T5678] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.439086][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.448135][ T5678] usb 3-1: Product: syz [ 403.452668][ T5678] usb 3-1: Manufacturer: syz [ 403.457288][ T5678] usb 3-1: SerialNumber: syz [ 403.780006][ T5678] usb 3-1: 0:2 : does not exist [ 403.825253][ T5678] usb 3-1: USB disconnect, device number 35 [ 404.030765][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory