last executing test programs: 2m40.888634206s ago: executing program 2 (id=41): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) listen(r0, 0x50) 2m40.589619803s ago: executing program 2 (id=43): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m40.32501018s ago: executing program 2 (id=45): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003600)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x3, 0x620, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m40.043718286s ago: executing program 2 (id=47): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m39.835230841s ago: executing program 2 (id=48): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 2m39.332447163s ago: executing program 2 (id=49): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000400)) 2m38.818337816s ago: executing program 32 (id=49): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000400)) 2m29.636368416s ago: executing program 0 (id=81): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='gfs2meta\x00', 0x800, 0x0) 2m28.63331633s ago: executing program 0 (id=83): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000540)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020283", 0x4}], 0x3) 2m27.757442391s ago: executing program 0 (id=87): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 2m27.509268197s ago: executing program 0 (id=88): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 2m26.656622937s ago: executing program 0 (id=90): syz_clone3(&(0x7f0000000480)={0xa00600, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) acct(&(0x7f0000000180)='./bus\x00') 2m25.527479165s ago: executing program 0 (id=98): getpid() memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r0, r0, 0x0, 0x1000000201005) 2m24.876786871s ago: executing program 33 (id=98): getpid() memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r0, r0, 0x0, 0x1000000201005) 50.732315802s ago: executing program 5 (id=652): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000180), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000011c0)={0x0, 0x0, 0x5, 0x200000ffe}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 50.276320123s ago: executing program 5 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write(r0, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c56401010264010101", 0x22) 49.759315795s ago: executing program 5 (id=659): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) 49.456148203s ago: executing program 5 (id=661): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4c000, 0x14c) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x20, 0x0, 0x0, 0x1f) 49.15768735s ago: executing program 5 (id=665): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0\x00', 0x9000, &(0x7f0000001dc0)={0x200005, 0xd, 0x80000}, 0x20) 48.488120566s ago: executing program 5 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='8086 2922 ffffffff ffffffff 0 0 b', 0x21) 47.938291559s ago: executing program 34 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='8086 2922 ffffffff ffffffff 0 0 b', 0x21) 3.505227316s ago: executing program 4 (id=994): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x8, @private1, 0x4}, {0xa, 0x4e22, 0xdb2a, @empty, 0x20000000}, 0x1, {[0x4, 0x3, 0x8, 0x845b, 0x0, 0x6, 0x6, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 3.230648573s ago: executing program 4 (id=996): iopl(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x6, 0xffff}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x44) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) openat(0xffffffffffffffff, 0x0, 0x141840, 0x12a) 2.844008192s ago: executing program 6 (id=999): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x401, 0xfffffffd, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x1234, 0x9a, 0x0, 0xfffd, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x33}, @in6=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b57, 0xffffffffffffffff}, {}, {}, 0x70bd2b, 0x0, 0xa}}, 0xf0}}, 0x4000800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 2.781187694s ago: executing program 6 (id=1001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.672083356s ago: executing program 6 (id=1003): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) 2.352431854s ago: executing program 3 (id=1006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RSETATTR(r2, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0x7) 2.211578547s ago: executing program 3 (id=1007): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={r2, 0x8, 0x1, 'x'}, 0x9) 1.70441649s ago: executing program 1 (id=1008): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x8) fcntl$setpipe(r0, 0x407, 0xfffffffffffffff8) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 1.600366542s ago: executing program 4 (id=1009): sendmsg$unix(0xffffffffffffffff, 0x0, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.455241846s ago: executing program 1 (id=1010): r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xd989, 0xc00, 0x2, 0x53}, &(0x7f0000000780)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x41, 0x0, 0x0, 0x2d, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0xc, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r0, 0x66ec, 0xffeb, 0x0, 0x0, 0x0) 1.438596106s ago: executing program 4 (id=1011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x716e) accept$inet6(r0, 0x0, 0x0) 1.25528295s ago: executing program 6 (id=1012): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000300)='./file0\x00', 0x100000005) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1.208275532s ago: executing program 3 (id=1013): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50) sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000004c0)="3c9e9a4125c048c3e28d825595b9925ad6e8980fb31261f56127667eaf9512932441e9965a7a28eb7b1413c7db4c9ea79d5b450c881b2911047091f18e66e7508fea792fb02bdaa39b3a9f874178c6c849b9a4d5fc91445cb712190e5273b6f4a85d50d7417efdccc3af4311dd5345eda227e3126db7dbd16fdb61dc93dc506e73bf033d222639d5cb522f2987971c5e7c52f3c9948a99542e334efb018576dd766e0f3ef04d8d3bafde39156a7a8d1c52154156267cae360020b672332b35078a6ac4ab2f060098", 0xc8}], 0x1, 0x0, 0x0, 0x40094}, 0x44801) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000580), 0x0}, 0x20) 1.208133302s ago: executing program 4 (id=1014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.149903333s ago: executing program 1 (id=1015): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x2}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 1.009260816s ago: executing program 3 (id=1016): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) 808.377341ms ago: executing program 1 (id=1017): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaf3, &(0x7f0000002400)="$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") mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x101, 0x1) getdents(r0, 0x0, 0x0) 808.204391ms ago: executing program 4 (id=1018): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0/file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 725.533383ms ago: executing program 3 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x80402, 0x68) ppoll(&(0x7f0000000080)=[{r0, 0x2640}, {r0, 0x1004}, {r0, 0x8001}], 0x3, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801") 351.462262ms ago: executing program 3 (id=1020): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x3777ad815288e3f7, 0x1, "ba"}, 0x0, 0x0, 0x0, 0x0}) 292.451524ms ago: executing program 6 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='2', 0x1) 292.237784ms ago: executing program 1 (id=1022): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x3520883, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c000000f800000000000000fb24cdf2b8072089db"], 0x200000) 50.983159ms ago: executing program 6 (id=1023): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000001c0)=ANY=[], 0x0, 0x18e, &(0x7f0000000680)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) 0s ago: executing program 1 (id=1024): syz_mount_image$ext4(&(0x7f00000011c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x5dc, &(0x7f0000003080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000640), 0x42e, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) kernel console output (not intermixed with test programs): datazone [ 161.210602][ T7106] Trying to free block not in datazone [ 161.255331][ T7106] Trying to free block not in datazone [ 161.260893][ T7106] Trying to free block not in datazone [ 161.276149][ T7169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.302870][ T7106] Trying to free block not in datazone [ 161.310976][ T7106] Trying to free block not in datazone [ 161.317455][ T7106] Trying to free block not in datazone [ 161.323133][ T7106] Trying to free block not in datazone [ 161.329079][ T7106] Trying to free block not in datazone [ 161.335446][ T7106] Trying to free block not in datazone [ 161.341018][ T7106] Trying to free block not in datazone [ 161.346678][ T7106] Trying to free block not in datazone [ 161.352565][ T7106] Trying to free block not in datazone [ 161.358170][ T7106] Trying to free block not in datazone [ 161.364778][ T7106] Trying to free block not in datazone [ 161.371502][ T7106] Trying to free block not in datazone [ 161.383863][ T7106] Trying to free block not in datazone [ 161.390092][ T7106] Trying to free block not in datazone [ 161.397046][ T7106] Trying to free block not in datazone [ 161.402722][ T7106] Trying to free block not in datazone [ 161.421336][ T7176] loop1: detected capacity change from 0 to 2048 [ 161.430231][ T7106] Trying to free block not in datazone [ 161.454380][ T7106] Trying to free block not in datazone [ 161.460408][ T7169] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 161.482970][ T7106] Trying to free block not in datazone [ 161.495121][ T7106] Trying to free block not in datazone [ 161.515339][ T7106] Trying to free block not in datazone [ 161.536865][ T7106] Trying to free block not in datazone [ 161.561456][ T7176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.561670][ T7106] Trying to free block not in datazone [ 161.601533][ T6231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.605335][ T7106] Trying to free block not in datazone [ 161.656770][ T7106] Trying to free block not in datazone [ 161.665145][ T7106] Trying to free block not in datazone [ 161.688144][ T7106] Trying to free block not in datazone [ 161.693708][ T7106] Trying to free block not in datazone [ 161.705229][ T28] audit: type=1800 audit(1791450539.165:414): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.314" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 161.776459][ T7106] Trying to free block not in datazone [ 161.815672][ T7106] Trying to free block not in datazone [ 161.835829][ T7106] Trying to free block not in datazone [ 161.841394][ T7106] Trying to free block not in datazone [ 161.858959][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 161.886064][ T7106] Trying to free block not in datazone [ 161.899937][ T7106] Trying to free block not in datazone [ 161.920945][ T7106] Trying to free block not in datazone [ 161.927345][ T7106] Trying to free block not in datazone [ 161.932863][ T7106] Trying to free block not in datazone [ 161.946734][ T7106] Trying to free block not in datazone [ 161.959653][ T7106] Trying to free block not in datazone [ 161.968081][ T7106] Trying to free block not in datazone [ 161.973648][ T7106] Trying to free block not in datazone [ 161.979733][ T7106] Trying to free block not in datazone [ 161.985584][ T7106] Trying to free block not in datazone [ 161.991188][ T7106] Trying to free block not in datazone [ 161.996995][ T7106] Trying to free block not in datazone [ 162.002597][ T7106] Trying to free block not in datazone [ 162.008536][ T7106] Trying to free block not in datazone [ 162.014173][ T7106] Trying to free block not in datazone [ 162.019962][ T7106] Trying to free block not in datazone [ 162.031419][ T7106] Trying to free block not in datazone [ 162.045019][ T7106] Trying to free block not in datazone [ 162.061802][ T7106] Trying to free block not in datazone [ 162.079038][ T7106] Trying to free block not in datazone [ 162.084598][ T7106] Trying to free block not in datazone [ 162.123122][ T7106] Trying to free block not in datazone [ 162.128983][ T7106] Trying to free block not in datazone [ 162.134502][ T7106] Trying to free block not in datazone [ 162.175257][ T7106] Trying to free block not in datazone [ 162.180831][ T7106] Trying to free block not in datazone [ 162.204374][ T7106] Trying to free block not in datazone [ 162.234938][ T7106] Trying to free block not in datazone [ 162.256989][ T7106] Trying to free block not in datazone [ 162.262538][ T7106] Trying to free block not in datazone [ 162.278395][ T7106] Trying to free block not in datazone [ 162.283936][ T7106] Trying to free block not in datazone [ 162.305626][ T7106] Trying to free block not in datazone [ 162.311457][ T7106] Trying to free block not in datazone [ 162.352033][ T7106] Trying to free block not in datazone [ 162.370459][ T7106] Trying to free block not in datazone [ 162.392219][ T7106] Trying to free block not in datazone [ 163.192089][ T7199] loop5: detected capacity change from 0 to 32768 [ 163.309825][ T7199] JBD2: Ignoring recovery information on journal [ 163.532558][ T7199] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 164.178619][ T7199] syz.5.321 (7199) used greatest stack depth: 18808 bytes left [ 164.320643][ T6231] ocfs2: Unmounting device (7,5) on (node local) [ 164.359141][ T7240] loop3: detected capacity change from 0 to 16 [ 164.428612][ T7240] erofs: (device loop3): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block) [ 164.562818][ T7226] loop4: detected capacity change from 0 to 32768 [ 164.649794][ T7226] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.947748][ T7226] XFS (loop4): Ending clean mount [ 165.180512][ T7256] loop3: detected capacity change from 0 to 8192 [ 165.283116][ T6010] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.101058][ T7273] loop4: detected capacity change from 0 to 256 [ 166.568652][ T7289] loop5: detected capacity change from 0 to 128 [ 166.661576][ T7289] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.805724][ T7289] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.869125][ T7294] loop3: detected capacity change from 0 to 2048 [ 167.030063][ T6231] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.271023][ T7302] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.318228][ T7303] loop5: detected capacity change from 0 to 256 [ 167.426025][ T7303] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 167.690760][ T7273] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 168.108113][ T5846] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 168.315109][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 168.333501][ T5846] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 168.363959][ T5846] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.395156][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 168.425120][ T5846] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 168.455687][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.486738][ T5846] usb 6-1: config 0 descriptor?? [ 168.817006][ T7333] loop4: detected capacity change from 0 to 128 [ 168.845673][ T7333] EXT4-fs: Ignoring removed nobh option [ 168.858594][ T7335] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.898306][ T7333] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 168.929353][ T5846] logitech 0003:046D:C24F.0005: unknown main item tag 0x2 [ 168.939514][ T7335] loop1: detected capacity change from 0 to 1024 [ 168.946156][ T5846] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 168.961527][ T5846] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 168.973031][ T5846] input: HID 046d:c24f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C24F.0005/input/input10 [ 168.990827][ T7333] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.211190][ T42] hfsplus: b-tree write err: -5, ino 25 [ 169.262053][ T42] hfsplus: b-tree write err: -5, ino 4 [ 169.271069][ T5846] logitech 0003:046D:C24F.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c24f] on usb-dummy_hcd.5-1/input0 [ 169.290707][ T42] hfsplus: b-tree write err: -5, ino 2 [ 169.332190][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 245 (n: 0)! (kworker/0:4) [ 169.392991][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 248 (n: 0)! (kworker/0:4) [ 169.403685][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 129 (n: 0)! (kworker/0:4) [ 169.414340][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 132 (n: 0)! (kworker/0:4) [ 169.424990][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 3 (n: 0)! (kworker/0:4) [ 169.551175][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 248 (n: 0)! (kworker/0:4) [ 169.562255][ T5846] logitech 0003:046D:C24F.0005: implement() called with too large value 18 (n: 0)! (kworker/0:4) [ 169.666704][ T5846] logitech 0003:046D:C24F.0005: Force feedback support for Logitech Gaming Wheels [ 169.710577][ T5846] usb 6-1: USB disconnect, device number 7 [ 169.740862][ T6010] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.215740][ T7366] loop5: detected capacity change from 0 to 256 [ 170.375127][ T2179] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.580195][ T2179] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 170.592444][ T2179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.636457][ T2179] usb 2-1: config 0 descriptor?? [ 170.645521][ T7377] device-mapper: ioctl: Target spec extends beyond end of parameters [ 170.669185][ T2179] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 170.685022][ T7377] device-mapper: ioctl: unable to find target [ 170.779251][ T7380] process 'syz.3.357' launched './file2' with NULL argv: empty string added [ 170.877467][ T7383] input: syz0 as /devices/virtual/input/input11 [ 171.145020][ T28] audit: type=1800 audit(1791450548.605:415): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.360" name="zone_nr_conv" dev="configfs" ino=12357 res=0 errno=0 [ 171.356797][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 171.496390][ T2179] gspca_stv06xx: I2C: Read error writing address: -71 [ 171.518921][ T2179] usb 2-1: USB disconnect, device number 11 [ 171.572614][ T7407] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 171.873772][ T7415] syzkaller1: entered promiscuous mode [ 171.890850][ T7415] syzkaller1: entered allmulticast mode [ 171.925137][ T7415] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 172.244459][ T7424] MTD: Couldn't look up './file0': -15 [ 172.540387][ T7429] loop3: detected capacity change from 0 to 2048 [ 172.632671][ T7429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.908138][ T7436] loop1: detected capacity change from 0 to 1024 [ 173.389431][ T7446] loop1: detected capacity change from 0 to 2048 [ 173.494092][ T7446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.586125][ T7446] EXT4-fs error (device loop1): ext4_find_extent:911: inode #2: comm syz.1.374: inode has invalid extent depth: 8 [ 173.605084][ T6185] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 173.670978][ T7446] EXT4-fs (loop1): Remounting filesystem read-only [ 173.768537][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.837887][ T6185] usb 5-1: not running at top speed; connect to a high speed hub [ 173.872893][ T6185] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 173.898949][ T6185] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 173.918825][ T6185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.942505][ T6185] usb 5-1: Product: syz [ 173.950914][ T6185] usb 5-1: Manufacturer: syz [ 173.962717][ T6185] usb 5-1: SerialNumber: syz [ 173.997382][ T6185] oti6858 5-1:1.0: oti6858 converter detected [ 174.019359][ T6185] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 174.035377][ T5846] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.240490][ T5846] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.265139][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.294488][ T5846] usb 4-1: config 0 descriptor?? [ 174.316754][ T5846] cp210x 4-1:0.0: cp210x converter detected [ 174.748091][ T5846] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 174.794123][ T5846] usb 4-1: cp210x converter now attached to ttyUSB1 [ 174.977141][ T2179] usb 5-1: USB disconnect, device number 6 [ 175.000026][ T2179] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 175.016372][ T5846] usb 4-1: USB disconnect, device number 9 [ 175.023078][ T2179] oti6858 5-1:1.0: device disconnected [ 175.033269][ T5846] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 175.071041][ T5846] cp210x 4-1:0.0: device disconnected [ 176.035606][ T7509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 176.903055][ T7534] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 176.916458][ T7534] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 176.924639][ T7534] netlink: 203268 bytes leftover after parsing attributes in process `syz.3.405'. [ 176.946127][ T56] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.109190][ T7532] loop5: detected capacity change from 0 to 32768 [ 177.145089][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 177.175820][ T7532] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.208199][ T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 177.230015][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.277306][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.336901][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.402607][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.433802][ T7532] XFS (loop5): Ending clean mount [ 177.453137][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.482949][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.546965][ T7550] loop3: detected capacity change from 0 to 4096 [ 177.620878][ T6231] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.641948][ T7550] ntfs3: loop3: Failed to load $Extend (-22). [ 177.668563][ T7550] ntfs3: loop3: Failed to initialize $Extend. [ 177.739477][ T56] usb 5-1: usb_control_msg returned -32 [ 177.755178][ T56] usbtmc 5-1:16.0: can't read capabilities [ 177.775771][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.979981][ T7552] 9pnet: p9_errstr2errno: server reported unknown error  [ 177.987664][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 178.005185][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 178.025065][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.045032][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.058789][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.072000][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.081199][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.304665][ T7559] loop3: detected capacity change from 0 to 2048 [ 178.324600][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 178.340241][ T27] usbtmc 2-1:16.0: can't read capabilities [ 178.374562][ T7559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.408764][ T7559] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.413014][ T7557] loop5: detected capacity change from 0 to 8192 [ 178.448620][ T7557] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.472936][ T7557] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 178.493855][ T7557] REISERFS (device loop5): using ordered data mode [ 178.505368][ T7557] reiserfs: using flush barriers [ 178.521107][ T7557] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.571282][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.595679][ T7557] REISERFS (device loop5): checking transaction log (loop5) [ 178.618220][ T27] usb 2-1: USB disconnect, device number 12 [ 178.854579][ T7557] REISERFS (device loop5): Using tea hash to sort names [ 178.863489][ T7557] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 179.505153][ T2135] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.514334][ T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 179.692295][ T6185] usb 5-1: USB disconnect, device number 7 [ 179.725308][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 179.738848][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 179.752709][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.773937][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.798333][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 179.809846][ T27] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.823472][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 179.834298][ T27] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 179.859529][ T27] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 179.887676][ T2135] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 179.901187][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.910110][ T27] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.922672][ T2135] usb 2-1: Product: syz [ 179.930188][ T2135] usb 2-1: Manufacturer: syz [ 179.935335][ T27] usb 6-1: config 1 interface 1 has no altsetting 0 [ 179.942477][ T2135] usb 2-1: SerialNumber: syz [ 179.953060][ T27] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 179.965725][ T2135] usb 2-1: config 0 descriptor?? [ 179.977407][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.986619][ T27] usb 6-1: Product: syz [ 179.990866][ T27] usb 6-1: Manufacturer: syz [ 179.995643][ T27] usb 6-1: SerialNumber: syz [ 180.197606][ T2135] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 180.276636][ T27] usb 6-1: selecting invalid altsetting 0 [ 180.437638][ T6185] usb 2-1: USB disconnect, device number 13 [ 180.482450][ T27] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 180.703188][ T27] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -960440429 [ 181.005497][ T27] usb 6-1: USB disconnect, device number 8 [ 181.163981][ T7607] loop1: detected capacity change from 0 to 2048 [ 181.208244][ T7608] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.360742][ T7610] loop3: detected capacity change from 0 to 128 [ 181.381546][ T7610] EXT4-fs: Ignoring removed nobh option [ 181.444277][ T7610] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 181.493052][ T7610] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.792043][ T7619] loop1: detected capacity change from 0 to 8192 [ 181.819992][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.221095][ T7634] loop5: detected capacity change from 0 to 4096 [ 182.295461][ T6185] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 182.332445][ T7639] loop3: detected capacity change from 0 to 16 [ 182.352164][ T7639] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.495081][ T6185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 182.543144][ T6185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.565157][ T6185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 182.583608][ T6185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 182.605659][ T6185] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 182.614904][ T6185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.655047][ T6185] usb 5-1: Product: syz [ 182.659306][ T6185] usb 5-1: Manufacturer: syz [ 182.693698][ T6185] usb 5-1: SerialNumber: syz [ 182.718339][ T6185] usb 5-1: config 0 descriptor?? [ 182.972473][ T7648] loop5: detected capacity change from 0 to 128 [ 182.973601][ T6185] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 183.004782][ T7648] EXT4-fs: Ignoring removed nobh option [ 183.067147][ T7648] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 183.159509][ T7648] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.259105][ T23] usb 5-1: USB disconnect, device number 8 [ 183.411499][ T6231] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.685871][ T7658] loop1: detected capacity change from 0 to 512 [ 183.863603][ T7660] loop3: detected capacity change from 0 to 8192 [ 183.943976][ T7665] loop4: detected capacity change from 0 to 1024 [ 184.937713][ T7684] loop4: detected capacity change from 0 to 4096 [ 185.020890][ T7682] loop5: detected capacity change from 0 to 8192 [ 185.048394][ T7684] ntfs3: loop4: Failed to load $Extend (-22). [ 185.062401][ T7684] ntfs3: loop4: Failed to initialize $Extend. [ 185.839746][ T7680] loop3: detected capacity change from 0 to 32768 [ 185.881566][ T7680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.461 (7680) [ 185.939148][ T7680] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.968213][ T7680] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 185.989835][ T7680] BTRFS info (device loop3): using free space tree [ 186.089388][ T7691] loop4: detected capacity change from 0 to 8192 [ 186.108434][ T7691] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.123491][ T7691] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 186.133091][ T7691] REISERFS (device loop4): using ordered data mode [ 186.139897][ T7691] reiserfs: using flush barriers [ 186.148549][ T7691] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.228530][ T7691] REISERFS (device loop4): checking transaction log (loop4) [ 186.268050][ T7680] BTRFS info (device loop3): enabling ssd optimizations [ 186.276886][ T7680] BTRFS info (device loop3): auto enabling async discard [ 186.543825][ T7691] REISERFS (device loop4): Using tea hash to sort names [ 186.560198][ T7691] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 187.016692][ T7710] ntfs3: loop1: failed to convert "0080" to koi8-ru [ 187.045227][ T7710] ntfs3: loop1: failed to convert name for inode 1e. [ 187.058274][ T5779] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.080461][ T7710] ntfs3: loop1: ino=1f, mi_enum_attr [ 187.088075][ T7710] ntfs3: loop1: failed to convert "256c" to koi8-ru [ 187.116502][ T7718] ntfs3: loop1: failed to convert "256c" to koi8-ru [ 187.835183][ T5846] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 187.905339][ T7730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 187.953397][ T7717] set_capacity_and_notify: 1 callbacks suppressed [ 187.953414][ T7717] loop5: detected capacity change from 0 to 32768 [ 188.031376][ T7717] JBD2: Ignoring recovery information on journal [ 188.051938][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 188.078750][ T5846] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.106266][ T5846] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.125359][ T5846] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.147292][ T5846] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.165236][ T7717] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 188.176529][ T5846] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.215323][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.453912][ T5846] usb 5-1: GET_CAPABILITIES returned 0 [ 188.469736][ T5846] usbtmc 5-1:16.0: can't read capabilities [ 188.500183][ T6231] ocfs2: Unmounting device (7,5) on (node local) [ 188.608381][ T7726] loop1: detected capacity change from 0 to 40427 [ 188.638474][ T7726] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 188.650338][ T7726] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.682234][ T7726] F2FS-fs (loop1): invalid crc value [ 188.699735][ T7726] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 188.725254][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 188.748393][ T5846] usb 5-1: USB disconnect, device number 9 [ 188.801693][ T7726] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.953581][ T7726] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.973870][ T7726] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.145287][ T5777] syz-executor: attempt to access beyond end of device [ 189.145287][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.162232][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 189.454154][ T7740] loop5: detected capacity change from 0 to 32768 [ 189.538455][ T7740] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 189.642486][ T7759] loop4: detected capacity change from 0 to 4096 [ 189.674489][ T7740] XFS (loop5): Ending clean mount [ 189.695971][ T7759] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 189.831548][ T7759] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 189.852371][ T7759] ntfs3: loop4: Failed to load $Extend (-22). [ 189.878528][ T7759] ntfs3: loop4: Failed to initialize $Extend. [ 189.936877][ T7771] loop3: detected capacity change from 0 to 1024 [ 190.163126][ T6231] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 190.703156][ T7790] loop3: detected capacity change from 0 to 256 [ 191.303214][ T7804] loop1: detected capacity change from 0 to 1024 [ 191.351668][ T7787] loop4: detected capacity change from 0 to 32768 [ 192.208599][ T7830] loop3: detected capacity change from 0 to 512 [ 192.322887][ T7834] loop1: detected capacity change from 0 to 512 [ 192.330531][ T7834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.400920][ T7834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.495233][ T7834] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.606340][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.982036][ T7854] set_capacity_and_notify: 1 callbacks suppressed [ 192.982048][ T7854] loop4: detected capacity change from 0 to 128 [ 193.028878][ T7854] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 193.045149][ T6185] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.106250][ T7854] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.142016][ T7854] ext2 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.166071][ T12] wlan0: Trigger new scan to find an IBSS to join [ 193.255072][ T6185] usb 4-1: Using ep0 maxpacket: 16 [ 193.262942][ T6185] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.272690][ T6185] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 193.283127][ T6185] usb 4-1: config 9 has no interface number 0 [ 193.289833][ T6185] usb 4-1: config 9 interface 57 has no altsetting 0 [ 193.301224][ T6185] usb 4-1: string descriptor 0 read error: -22 [ 193.316934][ T6185] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 193.327447][ T6185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.368431][ T6010] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.705689][ T7866] netlink: 'syz.5.521': attribute type 11 has an invalid length. [ 193.864440][ T7872] loop5: detected capacity change from 0 to 1024 [ 194.381991][ T6185] video4linux radio48: keene_cmd_set failed (-71) [ 194.406228][ T6185] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 194.432152][ T6185] usb 4-1: USB disconnect, device number 10 [ 194.591722][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.601790][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.797880][ T7894] loop5: detected capacity change from 0 to 4096 [ 194.807599][ T7894] EXT4-fs: Ignoring removed nobh option [ 194.842316][ T7894] EXT4-fs: Ignoring removed bh option [ 194.864143][ T7894] EXT4-fs (loop5): Test dummy encryption mode enabled [ 194.904626][ T7894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.975394][ T56] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.009029][ T7902] input: syz1 as /devices/virtual/input/input14 [ 195.022124][ T7894] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 195.098841][ T7907] loop3: detected capacity change from 0 to 1024 [ 195.180286][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 195.198019][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.222233][ T6231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.228892][ T56] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.263010][ T56] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.278650][ T56] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 195.292519][ T56] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.300641][ T56] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 195.330289][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.384878][ T56] usb 5-1: config 0 descriptor?? [ 195.862803][ T56] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 196.095271][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.175498][ T7934] loop1: detected capacity change from 0 to 1024 [ 196.195248][ T12] wlan0: Trigger new scan to find an IBSS to join [ 196.227176][ T7934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.285281][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 196.299455][ T23] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 196.309335][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.319796][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.331255][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.341542][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.355604][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.364809][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.490110][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.598855][ T23] usb 6-1: usb_control_msg returned -32 [ 196.611261][ T23] usbtmc 6-1:16.0: can't read capabilities [ 197.564825][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 197.597210][ T7969] loop4: detected capacity change from 0 to 1024 [ 197.604779][ T7969] EXT4-fs: Ignoring removed oldalloc option [ 197.674353][ T7969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.715584][ T7969] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.769680][ T7969] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.561: lblock 3 mapped to illegal pblock 3 (length 3) [ 197.785229][ T2135] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 197.820437][ T23] usb 5-1: USB disconnect, device number 10 [ 197.824455][ T7969] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 197.847140][ T7969] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.847140][ T7969] [ 197.938016][ T60] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 197.969297][ T60] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 197.984839][ T60] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.984839][ T60] [ 198.005246][ T6010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.016737][ T2135] usb 4-1: not running at top speed; connect to a high speed hub [ 198.046650][ T2135] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 198.056340][ T2135] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.068685][ T2135] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 198.096676][ T2135] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 198.107173][ T2135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.128544][ T2135] usb 4-1: config 0 descriptor?? [ 198.167180][ T2135] usb 4-1: Found UVC 9.00 device (046d:0825) [ 198.276606][ T7984] loop1: detected capacity change from 0 to 1024 [ 198.832681][ T56] usb 6-1: USB disconnect, device number 9 [ 198.980231][ T2135] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 199.001665][ T2135] uvcvideo 4-1:0.1: Failed to initialize the device (-71). [ 199.051870][ T2135] usb 4-1: USB disconnect, device number 11 [ 199.230629][ T63] wlan0: Trigger new scan to find an IBSS to join [ 199.395345][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.628685][ T23] usb 2-1: config index 0 descriptor too short (expected 64906, got 45) [ 199.641499][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 199.661800][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.681409][ T23] usb 2-1: Product: syz [ 199.690073][ T23] usb 2-1: Manufacturer: syz [ 199.710043][ T23] usb 2-1: SerialNumber: syz [ 199.941063][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 199.983323][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 200.014497][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 200.037686][ T8014] loop5: detected capacity change from 0 to 1024 [ 200.045087][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 200.087963][ T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.116845][ T23] lan78xx: probe of 2-1:1.0 failed with error -71 [ 200.163271][ T23] usb 2-1: USB disconnect, device number 14 [ 200.201270][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.553755][ T8025] input: syz0 as /devices/virtual/input/input15 [ 200.577320][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 200.792396][ T9] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 200.810963][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 200.821868][ T9] usb 4-1: config 4 has no interface number 0 [ 200.828577][ T9] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.846650][ T9] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 200.865030][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.883697][ T9] usb 4-1: Product: syz [ 200.888411][ T9] usb 4-1: Manufacturer: syz [ 200.893072][ T9] usb 4-1: SerialNumber: syz [ 201.330940][ T9] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 201.351920][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 201.369694][ T9] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 201.381138][ T9] usb 4-1: media controller created [ 201.415963][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.456491][ T9] DVB: Unable to find symbol dib7000p_attach() [ 201.462726][ T9] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 201.491597][ T9] rc_core: Couldn't load IR keymap rc-dib0700-rc5 [ 201.499393][ T9] Registered IR keymap rc-empty [ 201.505296][ T9] dvb-usb: could not initialize remote control. [ 201.511613][ T9] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 201.544013][ T9] usb 4-1: USB disconnect, device number 12 [ 201.596767][ T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 202.162154][ T8051] FAULT_INJECTION: forcing a failure. [ 202.162154][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 202.175183][ T8051] CPU: 1 PID: 8051 Comm: syz.4.593 Not tainted syzkaller #0 [ 202.182593][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 202.192704][ T8051] Call Trace: [ 202.196129][ T8051] [ 202.199375][ T8051] dump_stack_lvl+0x18c/0x250 [ 202.204335][ T8051] ? show_regs_print_info+0x20/0x20 [ 202.209594][ T8051] ? load_image+0x420/0x420 [ 202.214164][ T8051] ? __lock_acquire+0x7eb0/0x7eb0 [ 202.219236][ T8051] should_fail_ex+0x394/0x4c0 [ 202.223964][ T8051] should_failslab+0x9/0x20 [ 202.228510][ T8051] slab_pre_alloc_hook+0x59/0x300 [ 202.233576][ T8051] kmem_cache_alloc_lru+0x4d/0x2b0 [ 202.238743][ T8051] ? sock_alloc_inode+0x28/0xc0 [ 202.243663][ T8051] sock_alloc_inode+0x28/0xc0 [ 202.248379][ T8051] ? sockfs_init_fs_context+0xb0/0xb0 [ 202.253790][ T8051] new_inode_pseudo+0x63/0x1d0 [ 202.258592][ T8051] __sock_create+0x12d/0x940 [ 202.263225][ T8051] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 202.269257][ T8051] __sys_socket+0xd7/0x1b0 [ 202.273714][ T8051] __x64_sys_socket+0x7a/0x90 [ 202.278429][ T8051] do_syscall_64+0x55/0xb0 [ 202.282877][ T8051] ? clear_bhb_loop+0x40/0x90 [ 202.287583][ T8051] ? clear_bhb_loop+0x40/0x90 [ 202.292324][ T8051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.298270][ T8051] RIP: 0033:0x7f549299e199 [ 202.302719][ T8051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.322622][ T8051] RSP: 002b:00007f5490bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 202.331074][ T8051] RAX: ffffffffffffffda RBX: 00007f5492c25fa0 RCX: 00007f549299e199 [ 202.339077][ T8051] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 202.347076][ T8051] RBP: 00007f5492a35888 R08: 0000000000000000 R09: 0000000000000000 [ 202.355088][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.363091][ T8051] R13: 00007f5492c26038 R14: 00007f5492c25fa0 R15: 00007ffc272afeb8 [ 202.371108][ T8051] [ 202.378934][ T8049] loop3: detected capacity change from 0 to 1024 [ 202.417048][ T8051] socket: no more sockets [ 203.035072][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 203.225229][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 203.238751][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 203.258911][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.282480][ T8050] loop5: detected capacity change from 0 to 32768 [ 203.293876][ T9] usb 2-1: config 0 descriptor?? [ 203.309611][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 203.331507][ T8050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.599 (8050) [ 203.383098][ T8050] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.431739][ T8050] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 203.455794][ T8050] BTRFS info (device loop5): using free space tree [ 203.568470][ T8050] BTRFS info (device loop5): enabling ssd optimizations [ 203.590237][ T8050] BTRFS info (device loop5): auto enabling async discard [ 203.673741][ T8058] loop3: detected capacity change from 0 to 40427 [ 203.714127][ T8058] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 203.771812][ T8058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 203.810412][ T8058] F2FS-fs (loop3): invalid crc value [ 204.058050][ T8058] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 204.067425][ T6231] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.089375][ T8058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 204.393230][ T9] usb 2-1: USB disconnect, device number 15 [ 204.466959][ T5779] syz-executor: attempt to access beyond end of device [ 204.466959][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.498547][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 205.321340][ T8112] loop1: detected capacity change from 0 to 1024 [ 205.455909][ T2135] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 205.550754][ T8116] loop5: detected capacity change from 0 to 8 [ 205.583305][ T8116] SQUASHFS error: lzo decompression failed, data probably corrupt [ 205.626800][ T8116] SQUASHFS error: Failed to read block 0x91: -5 [ 205.633148][ T8116] SQUASHFS error: Unable to read metadata cache entry [8f] [ 205.661858][ T2135] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.698122][ T2135] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.711359][ T2135] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.724395][ T8116] SQUASHFS error: Unable to read inode 0x11f [ 205.734785][ T2135] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.759823][ T2135] usb 5-1: New USB device found, idVendor=056a, idProduct=401e, bcdDevice= 0.00 [ 205.775751][ T2135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.804857][ T2135] usb 5-1: config 0 descriptor?? [ 206.108503][ T8124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.247016][ T2135] wacom 0003:056A:401E.0007: Unknown device_type for 'HID 056a:401e'. Ignoring. [ 206.383827][ T8118] loop1: detected capacity change from 0 to 32768 [ 206.406608][ T8118] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.607 (8118) [ 206.439741][ T8118] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.465134][ T8118] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 206.484465][ T8118] BTRFS info (device loop1): using free space tree [ 206.485058][ T23] usb 5-1: USB disconnect, device number 11 [ 206.588301][ T8118] BTRFS info (device loop1): enabling ssd optimizations [ 206.606099][ T8118] BTRFS info (device loop1): auto enabling async discard [ 206.871553][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.140523][ T8129] loop3: detected capacity change from 0 to 40427 [ 207.192682][ T5797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5797) [ 207.222333][ T8129] F2FS-fs (loop3): invalid crc value [ 207.286805][ T8129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.546516][ T8129] F2FS-fs (loop3): Start checkpoint disabled! [ 207.638877][ T8129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 207.699864][ T8129] syz.3.612: attempt to access beyond end of device [ 207.699864][ T8129] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 208.656869][ T8187] overlayfs: failed to clone upperpath [ 208.741796][ T8189] input: syz1 as /devices/virtual/input/input20 [ 208.826513][ T8193] loop5: detected capacity change from 0 to 1024 [ 208.900987][ T8193] hfsplus: invalid length 1280 has been corrected to 255 [ 209.400395][ T8183] loop4: detected capacity change from 0 to 32768 [ 209.428597][ T8183] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 209.681603][ T5797] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 210.005499][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 210.199890][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 210.230522][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 210.253581][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 210.273871][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.304820][ T9] usb 4-1: Product: syz [ 210.314548][ T9] usb 4-1: Manufacturer: syz [ 210.325383][ T9] usb 4-1: SerialNumber: syz [ 210.338808][ T9] usb 4-1: config 0 descriptor?? [ 210.355543][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 210.364396][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 210.411582][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 210.449783][ T8226] netlink: 'syz.4.642': attribute type 2 has an invalid length. [ 210.459315][ T9] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 210.484283][ T8223] loop5: detected capacity change from 0 to 4096 [ 210.526318][ T28] audit: type=1326 audit(1791450587.995:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.1.644" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38d939e199 code=0x0 [ 210.529622][ T8223] EXT4-fs: Ignoring removed orlov option [ 210.632033][ T8223] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.648074][ T9] usbtouchscreen: probe of 4-1:0.0 failed with error -8 [ 210.676497][ T8223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.710222][ T9] usb 4-1: USB disconnect, device number 13 [ 210.915522][ T8223] EXT4-fs error (device loop5): __ext4_remount:6756: comm syz.5.643: Abort forced by user [ 210.951460][ T8223] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.066472][ T6231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.211671][ T8242] syzkaller1: entered allmulticast mode [ 211.305216][ T2135] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.514501][ T8250] netlink: 104 bytes leftover after parsing attributes in process `syz.3.651'. [ 211.536634][ T2135] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 211.550283][ T2135] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 211.559273][ T2135] usb 5-1: Product: syz [ 211.563622][ T2135] usb 5-1: Manufacturer: syz [ 211.578117][ T2135] usb 5-1: SerialNumber: syz [ 211.596994][ T2135] usb 5-1: config 0 descriptor?? [ 211.606563][ T2135] ch341 5-1:0.0: ch341-uart converter detected [ 211.676710][ T8252] loop5: detected capacity change from 0 to 2048 [ 211.750878][ T8252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.792370][ T8252] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.986320][ T6231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.028309][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 212.034496][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 212.207356][ T8246] loop1: detected capacity change from 0 to 40427 [ 212.224360][ T8246] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 212.245087][ T8246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 212.276842][ T8246] F2FS-fs (loop1): invalid crc value [ 212.282338][ T8246] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 212.382440][ T8246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.391669][ T8271] loop3: detected capacity change from 0 to 1024 [ 212.422418][ T8271] EXT4-fs: Ignoring removed bh option [ 212.450068][ T2135] usb 5-1: failed to send control message: -71 [ 212.469711][ T2135] ch341-uart: probe of ttyUSB0 failed with error -71 [ 212.488847][ T2135] usb 5-1: USB disconnect, device number 12 [ 212.500086][ T2135] ch341 5-1:0.0: device disconnected [ 212.523196][ T8271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.658947][ T8246] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 212.670323][ T8246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 212.689116][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.712794][ T8246] syz.1.649: attempt to access beyond end of device [ 212.712794][ T8246] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 212.732680][ T28] audit: type=1800 audit(1791450590.195:417): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.649" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 212.847124][ T5777] syz-executor: attempt to access beyond end of device [ 212.847124][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.872735][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 212.897848][ T8281] loop3: detected capacity change from 0 to 128 [ 212.930384][ T8280] loop5: detected capacity change from 0 to 2048 [ 213.056950][ T8280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.103719][ T6231] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 213.145565][ T6231] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 213.575224][ T8274] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 213.660485][ T6231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.762177][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.851111][ T8294] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 213.989704][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.166612][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.213039][ T8287] loop3: detected capacity change from 0 to 40427 [ 214.236380][ T8287] F2FS-fs (loop3): invalid crc value [ 214.278457][ T8287] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.311862][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.426892][ T8287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.611279][ T5779] syz-executor: attempt to access beyond end of device [ 214.611279][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.675390][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 215.631359][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.653509][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.664659][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.673075][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.681217][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.689570][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.037030][ T8324] loop3: detected capacity change from 0 to 1024 [ 216.083000][ T8324] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.104446][ T8324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.128564][ T8324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 216.151212][ T8324] System zones: 0-1, 3-36 [ 216.206829][ T8324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.526812][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.297014][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 217.342104][ T8353] overlayfs: failed to verify origin (/syz3, ino=36, err=-116) [ 217.378177][ T8353] overlayfs: failed to verify upper root origin [ 217.631506][ T12] hsr_slave_0: left promiscuous mode [ 217.721203][ T12] hsr_slave_1: left promiscuous mode [ 217.752793][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.764457][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.775081][ T56] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.785365][ T5784] Bluetooth: hci1: command tx timeout [ 217.811114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.847992][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.890402][ T12] bridge_slave_1: left allmulticast mode [ 217.911488][ T12] bridge_slave_1: left promiscuous mode [ 217.930520][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.953496][ T12] bridge_slave_0: left allmulticast mode [ 217.975126][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 217.981613][ T12] bridge_slave_0: left promiscuous mode [ 217.990048][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.998006][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.011472][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.045184][ T56] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 218.073571][ T56] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 218.091997][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.110724][ T56] usb 5-1: Product: syz [ 218.118637][ T56] usb 5-1: Manufacturer: syz [ 218.140108][ T12] veth1_macvtap: left promiscuous mode [ 218.140807][ T56] usb 5-1: SerialNumber: syz [ 218.162444][ T12] veth0_macvtap: left promiscuous mode [ 218.179155][ T12] veth1_vlan: left promiscuous mode [ 218.188442][ T12] veth0_vlan: left promiscuous mode [ 218.193223][ T8358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.481973][ T56] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 218.514903][ T56] usb 5-1: MIDIStreaming interface descriptor not found [ 218.632658][ T56] usb 5-1: USB disconnect, device number 13 [ 218.703909][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.985208][ T8380] loop1: detected capacity change from 0 to 256 [ 218.996484][ T8380] exfat: Deprecated parameter 'utf8' [ 219.005256][ T8380] exfat: Deprecated parameter 'namecase' [ 219.011101][ T8380] exfat: Deprecated parameter 'utf8' [ 219.079410][ T8380] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 219.124394][ T8380] syz.1.686: attempt to access beyond end of device [ 219.124394][ T8380] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 219.163295][ T8380] syz.1.686: attempt to access beyond end of device [ 219.163295][ T8380] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 219.249952][ T28] audit: type=1800 audit(1791450596.695:418): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.686" name="file1" dev="loop1" ino=1048661 res=0 errno=0 [ 219.338409][ T8380] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 219.872348][ T5784] Bluetooth: hci1: command tx timeout [ 220.039365][ T12] team0 (unregistering): Port device team_slave_1 removed [ 220.106550][ T12] team0 (unregistering): Port device team_slave_0 removed [ 220.168726][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.243112][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.763619][ T12] bond0 (unregistering): Released all slaves [ 220.886782][ T8388] veth0: entered promiscuous mode [ 220.908490][ T8391] netlink: 'syz.1.690': attribute type 34 has an invalid length. [ 220.940377][ T8392] veth0: left promiscuous mode [ 221.086102][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.093329][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.156622][ T8317] bridge_slave_0: entered allmulticast mode [ 221.183359][ T8317] bridge_slave_0: entered promiscuous mode [ 221.235883][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.316092][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.354891][ T8317] bridge_slave_1: entered allmulticast mode [ 221.396278][ T8317] bridge_slave_1: entered promiscuous mode [ 221.663682][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.774258][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.945181][ T5784] Bluetooth: hci1: command tx timeout [ 222.078446][ T8317] team0: Port device team_slave_0 added [ 222.108683][ T8317] team0: Port device team_slave_1 added [ 222.224198][ T8396] loop3: detected capacity change from 0 to 131072 [ 222.241055][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.253694][ T8396] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 222.262349][ T8396] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 222.272136][ T8396] F2FS-fs (loop3): invalid crc value [ 222.280204][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.305288][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.308688][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.333492][ T8396] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.395323][ T8396] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 222.402446][ T8396] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 222.449400][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.491236][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.555278][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 222.570009][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 222.570136][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.591600][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.635253][ T9] usb 2-1: Product: syz [ 222.639518][ T9] usb 2-1: Manufacturer: syz [ 222.644210][ T9] usb 2-1: SerialNumber: syz [ 222.792843][ T8317] hsr_slave_0: entered promiscuous mode [ 222.800803][ T8317] hsr_slave_1: entered promiscuous mode [ 222.818092][ T8317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.835137][ T8317] Cannot create hsr debugfs directory [ 222.964685][ T8428] loop3: detected capacity change from 0 to 1024 [ 223.047272][ T8428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.202089][ T8435] loop4: detected capacity change from 0 to 512 [ 223.499079][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.625636][ T8439] loop4: detected capacity change from 0 to 256 [ 223.648398][ T8439] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 223.742205][ T9] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 223.817361][ T9] usb 2-1: USB disconnect, device number 16 [ 223.874351][ T8317] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.909089][ T8317] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.948874][ T8317] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 223.990801][ T8317] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.028599][ T5784] Bluetooth: hci1: command tx timeout [ 224.413648][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.493948][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.534181][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.541459][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.588787][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.596093][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.914649][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.106673][ T8317] veth0_vlan: entered promiscuous mode [ 225.154685][ T8317] veth1_vlan: entered promiscuous mode [ 225.263904][ T8317] veth0_macvtap: entered promiscuous mode [ 225.298320][ T8317] veth1_macvtap: entered promiscuous mode [ 225.372019][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.422693][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.453177][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.464699][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.478249][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.489086][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.507000][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.548931][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.595204][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.614406][ T8463] loop3: detected capacity change from 0 to 32768 [ 225.624125][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.648493][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.657210][ T8463] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.708 (8463) [ 225.677077][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.702929][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.728852][ T8463] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 225.740284][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.782706][ T8463] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 225.805138][ T8463] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 225.826730][ T8317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.855656][ T8463] BTRFS info (device loop3): use zstd compression, level 3 [ 225.863697][ T8463] BTRFS info (device loop3): force clearing of disk cache [ 225.873701][ T8317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.897013][ T8317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.907660][ T8463] BTRFS info (device loop3): enabling disk space caching [ 225.914888][ T8463] BTRFS info (device loop3): disk space caching is enabled [ 225.923017][ T8317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.158663][ T8463] BTRFS info (device loop3): enabling ssd optimizations [ 226.181149][ T8463] BTRFS info (device loop3): auto enabling async discard [ 226.252164][ T8463] BTRFS info (device loop3): rebuilding free space tree [ 226.327894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.347620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.420759][ T8463] BTRFS info (device loop3): disabling free space tree [ 226.430243][ T8463] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.443718][ T8463] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.505643][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.513633][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.905447][ T5779] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 227.313931][ T8547] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 227.378066][ T8547] CPU: 0 PID: 8547 Comm: syz.1.726 Not tainted syzkaller #0 [ 227.385458][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.396370][ T8547] Call Trace: [ 227.399712][ T8547] [ 227.402713][ T8547] dump_stack_lvl+0x18c/0x250 [ 227.407464][ T8547] ? show_regs_print_info+0x20/0x20 [ 227.412732][ T8547] ? load_image+0x420/0x420 [ 227.417316][ T8547] sysfs_create_dir_ns+0x26e/0x2a0 [ 227.422489][ T8547] ? __lock_acquire+0x7eb0/0x7eb0 [ 227.427577][ T8547] ? sysfs_warn_dup+0xa0/0xa0 [ 227.432314][ T8547] ? rcu_is_watching+0x15/0xb0 [ 227.437166][ T8547] ? do_raw_spin_unlock+0x121/0x230 [ 227.442444][ T8547] kobject_add_internal+0x617/0xc90 [ 227.447717][ T8547] kobject_add+0x164/0x240 [ 227.452201][ T8547] ? kobject_init+0x1d0/0x1d0 [ 227.456972][ T8547] ? get_device_parent+0x366/0x390 [ 227.462528][ T8547] device_add+0x3fa/0xc40 [ 227.466961][ T8547] tty_register_device_attr+0x428/0x990 [ 227.472589][ T8547] ? tty_register_device+0x30/0x30 [ 227.477791][ T8547] ? tty_port_init+0x132/0x1a0 [ 227.482660][ T8547] ? gsm_dlci_alloc+0x32a/0x630 [ 227.487593][ T8547] ? __might_fault+0xaa/0x120 [ 227.492338][ T8547] gsm_activate_mux+0x110/0x2a0 [ 227.497283][ T8547] gsmld_ioctl+0x12ca/0x1900 [ 227.501957][ T8547] ? gsmld_write+0x120/0x120 [ 227.506640][ T8547] ? __init_ldsem+0x150/0x150 [ 227.511395][ T8547] ? __fget_files+0x28/0x460 [ 227.516071][ T8547] ? gsmld_write+0x120/0x120 [ 227.520732][ T8547] tty_ioctl+0x9b5/0xdc0 [ 227.525056][ T8547] ? tty_get_icount+0xb0/0xb0 [ 227.529805][ T8547] __se_sys_ioctl+0xfd/0x170 [ 227.534480][ T8547] do_syscall_64+0x55/0xb0 [ 227.538962][ T8547] ? clear_bhb_loop+0x40/0x90 [ 227.543720][ T8547] ? clear_bhb_loop+0x40/0x90 [ 227.548466][ T8547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.554440][ T8547] RIP: 0033:0x7f38d939e199 [ 227.558920][ T8547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.578594][ T8547] RSP: 002b:00007f38da27b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.587634][ T8547] RAX: ffffffffffffffda RBX: 00007f38d9626090 RCX: 00007f38d939e199 [ 227.595741][ T8547] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 227.604246][ T8547] RBP: 00007f38d9435888 R08: 0000000000000000 R09: 0000000000000000 [ 227.612375][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.620411][ T8547] R13: 00007f38d9626128 R14: 00007f38d9626090 R15: 00007ffdf5736a28 [ 227.628475][ T8547] [ 227.655426][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 227.662305][ T8547] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.401171][ T8556] loop3: detected capacity change from 0 to 2048 [ 228.481831][ T8556] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 228.548502][ T8556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.895161][ T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 229.115923][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 229.142675][ T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.159682][ T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.177748][ T27] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.194191][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.204309][ T27] usb 7-1: Product: syz [ 229.213368][ T27] usb 7-1: Manufacturer: syz [ 229.218435][ T27] usb 7-1: SerialNumber: syz [ 229.444607][ T27] usb 7-1: 0:2 : does not exist [ 229.481469][ T27] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 229.565420][ T27] usb 7-1: USB disconnect, device number 2 [ 229.647619][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.003970][ T8597] x86/PAT: syz.4.739:8597 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 230.255315][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'. [ 230.314054][ T8612] veth1_to_team: entered promiscuous mode [ 230.337814][ T8612] veth1_to_team: left promiscuous mode [ 230.485200][ T2179] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.702340][ T2179] usb 4-1: Using ep0 maxpacket: 8 [ 230.719005][ T2179] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 230.775719][ T2179] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.795458][ T2179] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.824993][ T2179] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.865394][ T2179] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.890244][ T2179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.135162][ T2179] usb 4-1: GET_CAPABILITIES returned 0 [ 231.148118][ T2179] usbtmc 4-1:16.0: can't read capabilities [ 231.372532][ T2179] kernel write not supported for file /usbtmc0 (pid: 2179 comm: kworker/1:3) [ 231.413852][ T2179] usb 4-1: USB disconnect, device number 14 [ 231.559664][ T51] block nbd1: Receive control failed (result -107) [ 231.610971][ T5797] block nbd1: shutting down sockets [ 231.699920][ T8655] FAULT_INJECTION: forcing a failure. [ 231.699920][ T8655] name failslab, interval 1, probability 0, space 0, times 0 [ 231.714408][ T8655] CPU: 1 PID: 8655 Comm: syz.6.756 Not tainted syzkaller #0 [ 231.721789][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.732085][ T8655] Call Trace: [ 231.735659][ T8655] [ 231.738738][ T8655] dump_stack_lvl+0x18c/0x250 [ 231.743847][ T8655] ? show_regs_print_info+0x20/0x20 [ 231.749139][ T8655] ? load_image+0x420/0x420 [ 231.753731][ T8655] ? __might_sleep+0xe0/0xe0 [ 231.758407][ T8655] ? __lock_acquire+0x7eb0/0x7eb0 [ 231.763512][ T8655] should_fail_ex+0x394/0x4c0 [ 231.768288][ T8655] should_failslab+0x9/0x20 [ 231.772896][ T8655] slab_pre_alloc_hook+0x59/0x300 [ 231.778100][ T8655] ? nfs_alloc_fhandle+0x4a/0x90 [ 231.783930][ T8655] __kmem_cache_alloc_node+0x53/0x250 [ 231.789366][ T8655] ? nfs_alloc_fhandle+0x4a/0x90 [ 231.794387][ T8655] kmalloc_trace+0x2a/0xe0 [ 231.798866][ T8655] nfs_alloc_fhandle+0x4a/0x90 [ 231.803689][ T8655] nfs_init_fs_context+0x69/0xf60 [ 231.808766][ T8655] alloc_fs_context+0x618/0x7a0 [ 231.813680][ T8655] __se_sys_fsopen+0xa0/0x2c0 [ 231.818424][ T8655] do_syscall_64+0x55/0xb0 [ 231.822977][ T8655] ? clear_bhb_loop+0x40/0x90 [ 231.827788][ T8655] ? clear_bhb_loop+0x40/0x90 [ 231.832505][ T8655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.838617][ T8655] RIP: 0033:0x7f051079e199 [ 231.843677][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.863326][ T8655] RSP: 002b:00007f0511597028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 231.871786][ T8655] RAX: ffffffffffffffda RBX: 00007f0510a25fa0 RCX: 00007f051079e199 [ 231.879812][ T8655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 231.887831][ T8655] RBP: 00007f0510835888 R08: 0000000000000000 R09: 0000000000000000 [ 231.895840][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.903844][ T8655] R13: 00007f0510a26038 R14: 00007f0510a25fa0 R15: 00007ffedc7db8d8 [ 231.911881][ T8655] [ 231.953064][ T8657] loop1: detected capacity change from 0 to 512 [ 231.960460][ T8657] EXT4-fs: Ignoring removed nobh option [ 231.988562][ T8657] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 232.014671][ T8657] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 232.092377][ T8657] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.757: inode has both inline data and extents flags [ 232.157453][ T8657] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.757: couldn't read orphan inode 13 (err -117) [ 232.184409][ T8662] serio: Serial port ptm0 [ 232.199256][ T8657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.231688][ T8657] EXT4-fs (loop1): shut down requested (2) [ 232.315623][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.655303][ T8677] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 232.685192][ T8681] FAULT_INJECTION: forcing a failure. [ 232.685192][ T8681] name failslab, interval 1, probability 0, space 0, times 0 [ 232.716500][ T8681] CPU: 1 PID: 8681 Comm: syz.3.764 Not tainted syzkaller #0 [ 232.723995][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 232.734214][ T8681] Call Trace: [ 232.737566][ T8681] [ 232.740570][ T8681] dump_stack_lvl+0x18c/0x250 [ 232.745321][ T8681] ? show_regs_print_info+0x20/0x20 [ 232.750602][ T8681] ? load_image+0x420/0x420 [ 232.755982][ T8681] ? __might_sleep+0xe0/0xe0 [ 232.760668][ T8681] ? __lock_acquire+0x7eb0/0x7eb0 [ 232.765759][ T8681] ? mark_lock+0x94/0x320 [ 232.770162][ T8681] should_fail_ex+0x394/0x4c0 [ 232.774937][ T8681] should_failslab+0x9/0x20 [ 232.779508][ T8681] slab_pre_alloc_hook+0x59/0x300 [ 232.784602][ T8681] kmem_cache_alloc+0x5a/0x2c0 [ 232.789509][ T8681] ? mas_alloc_nodes+0x2f8/0x8c0 [ 232.794502][ T8681] mas_alloc_nodes+0x2f8/0x8c0 [ 232.799316][ T8681] mas_preallocate+0xa1f/0x1170 [ 232.804218][ T8681] ? lockdep_softirqs_off+0x440/0x440 [ 232.809743][ T8681] ? mas_destroy+0x20a0/0x20a0 [ 232.814759][ T8681] ? vma_iter_config+0xe6/0x270 [ 232.819655][ T8681] __split_vma+0x2dd/0xc20 [ 232.824552][ T8681] ? mmap_write_unlock+0x160/0x160 [ 232.829801][ T8681] ? split_vma+0x8f/0x110 [ 232.834213][ T8681] madvise_update_vma+0x44e/0xda0 [ 232.839468][ T8681] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 232.845419][ T8681] ? read_lock_is_recursive+0x20/0x20 [ 232.850929][ T8681] madvise_set_anon_name+0x30b/0x440 [ 232.856377][ T8681] ? anon_vma_name+0x140/0x140 [ 232.861180][ T8681] ? prctl_set_vma+0x199/0x400 [ 232.865987][ T8681] prctl_set_vma+0x1dc/0x400 [ 232.870610][ T8681] __se_sys_prctl+0x3fe/0x1510 [ 232.875430][ T8681] ? __x64_sys_prctl+0xc0/0xc0 [ 232.880245][ T8681] ? lockdep_hardirqs_on+0x98/0x150 [ 232.885485][ T8681] ? __x64_sys_prctl+0x20/0xc0 [ 232.890292][ T8681] do_syscall_64+0x55/0xb0 [ 232.894830][ T8681] ? clear_bhb_loop+0x40/0x90 [ 232.899542][ T8681] ? clear_bhb_loop+0x40/0x90 [ 232.904362][ T8681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.910301][ T8681] RIP: 0033:0x7fcc4859e199 [ 232.914756][ T8681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.934838][ T8681] RSP: 002b:00007fcc49441028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 232.943312][ T8681] RAX: ffffffffffffffda RBX: 00007fcc48825fa0 RCX: 00007fcc4859e199 [ 232.951318][ T8681] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 232.959324][ T8681] RBP: 00007fcc48635888 R08: 0000200000000b40 R09: 0000000000000000 [ 232.967328][ T8681] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 232.975518][ T8681] R13: 00007fcc48826038 R14: 00007fcc48825fa0 R15: 00007ffff8076df8 [ 232.983540][ T8681] [ 232.994180][ T8677] CIFS mount error: No usable UNC path provided in device string! [ 232.994180][ T8677] [ 233.004616][ T8677] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.348064][ T8689] loop6: detected capacity change from 0 to 4096 [ 233.497995][ T8689] ntfs: volume version 3.1. [ 233.619402][ T8706] loop1: detected capacity change from 0 to 64 [ 233.711345][ T8706] hfs: keylen 1794 too large [ 233.742570][ T8706] hfs: keylen 1794 too large [ 233.765725][ T8712] hfs: keylen 1794 too large [ 233.822451][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.775'. [ 233.917833][ T49] hfs: keylen 1794 too large [ 234.089381][ T8719] loop4: detected capacity change from 0 to 1024 [ 234.117413][ T8719] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.188007][ T8719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.285135][ T5846] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 234.388382][ T8732] loop6: detected capacity change from 0 to 128 [ 234.406640][ T8732] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.442972][ T6010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.486697][ T8732] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.497752][ T5846] usb 4-1: config index 0 descriptor too short (expected 50, got 32) [ 234.515049][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.531708][ T5846] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 234.575529][ T5846] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.594462][ T11] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.620304][ T5846] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 234.653787][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.678709][ T5846] usb 4-1: Product: syz [ 234.682995][ T5846] usb 4-1: Manufacturer: syz [ 234.702031][ T5846] usb 4-1: SerialNumber: syz [ 234.729430][ T8715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.776349][ T5846] usb_debug 4-1:1.0: debug converter detected [ 234.801718][ T5846] usb 4-1: debug converter now attached to ttyUSB0 [ 235.001867][ C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.030901][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.040563][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.050660][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.060122][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.074454][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.084084][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 235.102273][ T5846] usb 4-1: USB disconnect, device number 15 [ 235.120364][ T5846] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 235.148865][ T5846] usb_debug 4-1:1.0: device disconnected [ 235.493378][ T8759] vivid-003: ================= START STATUS ================= [ 235.506104][ T8759] vivid-003: Radio HW Seek Mode: Bounded [ 235.512598][ T8759] vivid-003: Radio Programmable HW Seek: false [ 235.528682][ T8759] vivid-003: RDS Rx I/O Mode: Block I/O [ 235.534714][ T8759] vivid-003: Generate RBDS Instead of RDS: false [ 235.554519][ T8759] vivid-003: RDS Reception: true [ 235.561517][ T8759] vivid-003: RDS Program Type: 0 inactive [ 235.572163][ T8759] vivid-003: RDS PS Name: inactive [ 235.579106][ T8759] vivid-003: RDS Radio Text: inactive [ 235.595267][ T8759] vivid-003: RDS Traffic Announcement: false inactive [ 235.602175][ T8759] vivid-003: RDS Traffic Program: false inactive [ 235.632836][ T8759] vivid-003: RDS Music: false inactive [ 235.647632][ T8759] vivid-003: ================== END STATUS ================== [ 235.998202][ T8769] loop4: detected capacity change from 0 to 2048 [ 236.023745][ T8769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.298646][ T8774] tunl0: entered promiscuous mode [ 236.324403][ T8774] netlink: 'syz.6.791': attribute type 4 has an invalid length. [ 236.351018][ T8774] netlink: 9 bytes leftover after parsing attributes in process `syz.6.791'. [ 236.436150][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 236.653184][ T8791] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 237.160068][ T8806] loop3: detected capacity change from 0 to 256 [ 237.202709][ T8789] loop6: detected capacity change from 0 to 32768 [ 237.283467][ T8806] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 237.302207][ T8789] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 237.335745][ T8789] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 237.470059][ T28] audit: type=1800 audit(1791450614.935:419): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.808" name="file2" dev="loop3" ino=1048679 res=0 errno=0 [ 237.521723][ T8789] XFS (loop6): Ending clean mount [ 237.573474][ T8789] XFS (loop6): Quotacheck needed: Please wait. [ 237.753976][ T8789] XFS (loop6): Quotacheck: Done. [ 238.008812][ T8815] loop1: detected capacity change from 0 to 32768 [ 238.065650][ T8815] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.115547][ T8836] Invalid argument reading file caps for ./file0 [ 238.147957][ T8317] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.214125][ T8815] XFS (loop1): Ending clean mount [ 238.221052][ T8841] Bluetooth: hci0: load_link_keys: too big key_count value 6144 [ 238.547632][ T28] audit: type=1326 audit(1791450616.015:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.571927][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.581258][ T28] audit: type=1326 audit(1791450616.015:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.606204][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.636344][ T28] audit: type=1326 audit(1791450616.055:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.660487][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.669034][ T28] audit: type=1326 audit(1791450616.065:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.693092][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.701930][ T28] audit: type=1326 audit(1791450616.065:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.726174][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.732888][ T28] audit: type=1326 audit(1791450616.065:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.756860][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.765668][ T28] audit: type=1326 audit(1791450616.075:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.789618][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.797131][ T28] audit: type=1326 audit(1791450616.075:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.854259][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.882865][ T28] audit: type=1326 audit(1791450616.075:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.6.820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051079e199 code=0x7ffc0000 [ 238.906862][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.016849][ T8889] loop4: detected capacity change from 0 to 256 [ 240.135297][ T8889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 240.199544][ T8873] loop6: detected capacity change from 0 to 32768 [ 241.060551][ T8914] loop1: detected capacity change from 0 to 4096 [ 241.250414][ T8914] ntfs3: Cannot use different iocharset when remounting! [ 241.290253][ T8927] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 241.324288][ T8927] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 241.827214][ T8949] loop3: detected capacity change from 0 to 512 [ 241.850393][ T8949] EXT4-fs: inline encryption not supported [ 241.900044][ T8949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.932546][ T8949] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.034475][ T8949] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.857: Failed to acquire dquot type 1 [ 242.111676][ T8949] EXT4-fs (loop3): Remounting filesystem read-only [ 242.132316][ T8949] EXT4-fs (loop3): 1 truncate cleaned up [ 242.141778][ T8949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.320424][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.521490][ T8979] loop1: detected capacity change from 0 to 256 [ 242.567015][ T8979] exfat: Deprecated parameter 'utf8' [ 242.572451][ T8979] exfat: Deprecated parameter 'namecase' [ 242.638616][ T8979] exfat: Deprecated parameter 'namecase' [ 242.660265][ T8979] exfat: Deprecated parameter 'utf8' [ 242.696850][ T8986] loop6: detected capacity change from 0 to 128 [ 242.722735][ T8981] loop3: detected capacity change from 0 to 4096 [ 242.732698][ T8979] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 242.757480][ T8986] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 242.782220][ T8981] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.824012][ T8981] EXT4-fs (loop3): Test dummy encryption mode enabled [ 242.894861][ T8981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.950604][ T8986] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 242.979587][ T8986] FAT-fs (loop6): Filesystem has been set read-only [ 243.133777][ T8317] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 243.198861][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.103112][ T9021] loop4: detected capacity change from 0 to 2048 [ 244.152555][ T9021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.292449][ T9007] loop1: detected capacity change from 0 to 32768 [ 244.348672][ T9007] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.870 (9007) [ 244.373833][ T9021] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.403267][ T9007] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 244.431035][ T9007] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 244.465146][ T9007] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 244.505568][ T9007] BTRFS info (device loop1): use zstd compression, level 3 [ 244.512892][ T9007] BTRFS info (device loop1): using free space tree [ 244.699873][ T9035] loop6: detected capacity change from 0 to 2048 [ 244.716401][ T9007] BTRFS info (device loop1): enabling ssd optimizations [ 244.723453][ T9007] BTRFS info (device loop1): auto enabling async discard [ 244.793172][ T9035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.914529][ T9051] netlink: 64 bytes leftover after parsing attributes in process `syz.4.881'. [ 245.226175][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 245.833570][ T9078] loop4: detected capacity change from 0 to 64 [ 245.853655][ T9073] loop6: detected capacity change from 0 to 4096 [ 245.969827][ T9073] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 246.335729][ T9086] loop6: detected capacity change from 4096 to 4095 [ 246.745517][ T2179] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 246.795418][ T5846] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 246.947671][ T2179] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 246.960499][ T2179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.994361][ T2179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.998505][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 247.018214][ T2179] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.032210][ T5846] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.052066][ T2179] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.057367][ T5846] usb 5-1: config 0 has no interface number 0 [ 247.074696][ T5846] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.083724][ T2179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.105013][ T5846] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.134790][ T2179] usb 4-1: config 0 descriptor?? [ 247.142362][ T5846] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 247.165623][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.190545][ T5846] usb 5-1: config 0 descriptor?? [ 247.574210][ T2179] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 247.621578][ T2179] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 247.850240][ T9] usb 4-1: USB disconnect, device number 16 [ 247.873221][ T5846] uclogic 0003:28BD:0071.0009: pen parameters not found [ 247.918435][ T5846] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 248.073782][ T2179] usb 5-1: USB disconnect, device number 14 [ 248.643689][ T9170] loop1: detected capacity change from 0 to 128 [ 248.695062][ T9170] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 248.735998][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 248.765377][ T9170] FAT-fs (loop1): Filesystem has been set read-only [ 248.787907][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 248.798181][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 248.822886][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 248.932098][ T5777] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 249.083677][ T9184] FAULT_INJECTION: forcing a failure. [ 249.083677][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 249.115087][ T9184] CPU: 0 PID: 9184 Comm: syz.1.922 Not tainted syzkaller #0 [ 249.117621][ T9181] nbd3: detected capacity change from 0 to 127 [ 249.122467][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.122486][ T9184] Call Trace: [ 249.122496][ T9184] [ 249.122506][ T9184] dump_stack_lvl+0x18c/0x250 [ 249.150743][ T9184] ? show_regs_print_info+0x20/0x20 [ 249.156026][ T9184] ? load_image+0x420/0x420 [ 249.160632][ T9184] ? __might_sleep+0xe0/0xe0 [ 249.165300][ T9184] ? __lock_acquire+0x7eb0/0x7eb0 [ 249.170399][ T9184] should_fail_ex+0x394/0x4c0 [ 249.175187][ T9184] should_failslab+0x9/0x20 [ 249.179786][ T9184] slab_pre_alloc_hook+0x59/0x300 [ 249.184874][ T9184] ? fsnotify_alloc_group+0x74/0x3b0 [ 249.190226][ T9184] __kmem_cache_alloc_node+0x53/0x250 [ 249.195766][ T9184] ? fsnotify_alloc_group+0x74/0x3b0 [ 249.201126][ T9184] kmalloc_trace+0x2a/0xe0 [ 249.205373][ T9187] block nbd3: NBD_DISCONNECT [ 249.205594][ T9184] fsnotify_alloc_group+0x74/0x3b0 [ 249.215414][ T9184] do_inotify_init+0x51/0x450 [ 249.220157][ T9184] ? __ia32_sys_inotify_init+0x9/0x20 [ 249.225595][ T9184] __ia32_sys_inotify_init+0x10/0x20 [ 249.230944][ T9184] do_syscall_64+0x55/0xb0 [ 249.235417][ T9184] ? clear_bhb_loop+0x40/0x90 [ 249.240156][ T9184] ? clear_bhb_loop+0x40/0x90 [ 249.244894][ T9184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.250850][ T9184] RIP: 0033:0x7f38d939e199 [ 249.255323][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.264262][ T9187] block nbd3: Disconnected due to user request. [ 249.274960][ T9184] RSP: 002b:00007f38da29c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 249.274993][ T9184] RAX: ffffffffffffffda RBX: 00007f38d9625fa0 RCX: 00007f38d939e199 [ 249.275009][ T9184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.275023][ T9184] RBP: 00007f38d9625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 249.275037][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.275052][ T9184] R13: 00007f38d9626038 R14: 00007f38d9625fa0 R15: 00007ffdf5736a28 [ 249.275133][ T9184] [ 249.311926][ T9187] block nbd3: shutting down sockets [ 249.346495][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.357766][ T24] Buffer I/O error on dev nbd3, logical block 0, async page read [ 249.367132][ T24] Buffer I/O error on dev nbd3, logical block 1, async page read [ 249.376222][ T24] Buffer I/O error on dev nbd3, logical block 2, async page read [ 249.384165][ T24] Buffer I/O error on dev nbd3, logical block 3, async page read [ 249.408263][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.417733][ T24] Buffer I/O error on dev nbd3, logical block 0, async page read [ 249.431107][ T24] Buffer I/O error on dev nbd3, logical block 1, async page read [ 249.439207][ T24] Buffer I/O error on dev nbd3, logical block 2, async page read [ 249.447253][ T24] Buffer I/O error on dev nbd3, logical block 3, async page read [ 249.455654][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.464762][ T24] Buffer I/O error on dev nbd3, logical block 0, async page read [ 249.473611][ T24] Buffer I/O error on dev nbd3, logical block 1, async page read [ 249.519010][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.529618][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.539470][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.549153][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.559145][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 249.568954][ T5797] ldm_validate_partition_table(): Disk read failed. [ 249.576072][ T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.618866][ T9193] loop6: detected capacity change from 0 to 512 [ 249.620129][ T55] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.657609][ T9193] EXT4-fs: Ignoring removed bh option [ 249.667469][ T5797] Dev nbd3: unable to read RDB block 0 [ 249.707196][ T5797] nbd3: unable to read partition table [ 249.755147][ T9193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002] [ 249.766899][ T5797] ldm_validate_partition_table(): Disk read failed. [ 249.809820][ T9199] loop3: detected capacity change from 0 to 1024 [ 249.815552][ T9193] System zones: 1-12 [ 249.821370][ T5797] Dev nbd3: unable to read RDB block 0 [ 249.854802][ T5797] nbd3: unable to read partition table [ 249.872806][ T9193] EXT4-fs (loop6): 1 truncate cleaned up [ 249.999544][ T9193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.035193][ T9206] loop1: detected capacity change from 0 to 2048 [ 250.042870][ T9206] EXT4-fs: Ignoring removed nobh option [ 250.105614][ T9206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.122113][ T9206] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.150208][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 250.150226][ T28] audit: type=1800 audit(1791450627.605:442): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 250.187658][ T9206] fs-verity: sha512 using implementation "sha512-avx2" [ 250.279035][ T8317] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.316002][ T9211] loop4: detected capacity change from 0 to 2048 [ 250.387271][ T9211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.492030][ T9216] loop3: detected capacity change from 0 to 256 [ 250.541077][ T9216] exfat: Deprecated parameter 'utf8' [ 250.562776][ T9216] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 250.630667][ T9211] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 250.663291][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.722881][ T9211] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 250.775913][ T9211] EXT4-fs (loop4): This should not happen!! Data will be lost [ 250.775913][ T9211] [ 250.878407][ T9211] EXT4-fs (loop4): Total free blocks count 0 [ 250.884531][ T9211] EXT4-fs (loop4): Free/Dirty block details [ 250.975018][ T9211] EXT4-fs (loop4): free_blocks=4096 [ 250.980543][ T9211] EXT4-fs (loop4): dirty_blocks=32 [ 251.002265][ T9211] EXT4-fs (loop4): Block reservation details [ 251.024451][ T9211] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 251.149502][ T6010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.295197][ T5846] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 251.326640][ T9237] FAULT_INJECTION: forcing a failure. [ 251.326640][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 251.358592][ T9237] CPU: 0 PID: 9237 Comm: syz.3.935 Not tainted syzkaller #0 [ 251.365985][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.376102][ T9237] Call Trace: [ 251.379433][ T9237] [ 251.382411][ T9237] dump_stack_lvl+0x18c/0x250 [ 251.387202][ T9237] ? show_regs_print_info+0x20/0x20 [ 251.392459][ T9237] ? load_image+0x420/0x420 [ 251.397027][ T9237] ? __might_sleep+0xe0/0xe0 [ 251.401698][ T9237] ? __lock_acquire+0x7eb0/0x7eb0 [ 251.406793][ T9237] ? mtree_load+0x109/0x840 [ 251.411360][ T9237] should_fail_ex+0x394/0x4c0 [ 251.416111][ T9237] should_failslab+0x9/0x20 [ 251.420682][ T9237] slab_pre_alloc_hook+0x59/0x300 [ 251.425763][ T9237] ? can_vma_merge_before+0x6e/0x280 [ 251.431118][ T9237] kmem_cache_alloc+0x5a/0x2c0 [ 251.435957][ T9237] ? vm_area_dup+0x27/0x270 [ 251.440555][ T9237] vm_area_dup+0x27/0x270 [ 251.444954][ T9237] __split_vma+0x1a8/0xc20 [ 251.449460][ T9237] ? mmap_write_unlock+0x160/0x160 [ 251.454655][ T9237] ? split_vma+0x8f/0x110 [ 251.459061][ T9237] mprotect_fixup+0xa3b/0xcd0 [ 251.463811][ T9237] ? change_protection+0x31e0/0x31e0 [ 251.469152][ T9237] ? apparmor_file_mprotect+0xfe/0x120 [ 251.474672][ T9237] ? bpf_lsm_file_mprotect+0x9/0x10 [ 251.479934][ T9237] do_mprotect_pkey+0x7c3/0xcc0 [ 251.484868][ T9237] ? prot_none_test+0x10/0x10 [ 251.489664][ T9237] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 251.495743][ T9237] __x64_sys_mprotect+0x80/0x90 [ 251.500660][ T9237] do_syscall_64+0x55/0xb0 [ 251.505128][ T9237] ? clear_bhb_loop+0x40/0x90 [ 251.509877][ T9237] ? clear_bhb_loop+0x40/0x90 [ 251.514725][ T9237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.520708][ T9237] RIP: 0033:0x7fcc4859e199 [ 251.525203][ T9237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.544871][ T9237] RSP: 002b:00007fcc49441028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 251.553884][ T9237] RAX: ffffffffffffffda RBX: 00007fcc48825fa0 RCX: 00007fcc4859e199 [ 251.561915][ T9237] RDX: 000000000000000e RSI: 0000000000003000 RDI: 0000200000ffc000 [ 251.569954][ T9237] RBP: 00007fcc48635888 R08: 0000000000000000 R09: 0000000000000000 [ 251.578072][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.586112][ T9237] R13: 00007fcc48826038 R14: 00007fcc48825fa0 R15: 00007ffff8076df8 [ 251.594172][ T9237] [ 251.695842][ T9247] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 251.699030][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.732996][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.760668][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.789587][ T5846] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.809905][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.842930][ T5846] usb 7-1: config 0 descriptor?? [ 251.925211][ T56] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 251.983134][ T9257] loop3: detected capacity change from 0 to 64 [ 252.107866][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 252.151083][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 252.174545][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.188761][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.241943][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.297867][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.321214][ T5846] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 252.335036][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.370828][ T5846] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 252.384151][ T9264] loop3: detected capacity change from 0 to 16 [ 252.400383][ T9263] loop1: detected capacity change from 0 to 256 [ 252.427448][ T9264] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300) [ 252.438265][ T9263] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.465123][ T9263] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 252.545089][ T9263] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 252.594367][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 252.609766][ T9263] exFAT-fs (loop1): failed to load alloc-bitmap [ 252.613600][ T56] usbtmc 5-1:16.0: can't read capabilities [ 252.643650][ T9263] exFAT-fs (loop1): failed to recognize exfat type [ 252.854767][ T9264] loop3: detected capacity change from 0 to 8192 [ 252.956767][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 252.972320][ T9264] FAT-fs (loop3): Filesystem has been set read-only [ 252.982286][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 252.990453][ T2179] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 253.000278][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.013790][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.027902][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.038698][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.052078][ T9264] syz.3.942: attempt to access beyond end of device [ 253.052078][ T9264] loop3: rw=0, sector=15583, nr_sectors = 1 limit=8192 [ 253.074882][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.087735][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.096429][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.104535][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.133957][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.152383][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.191807][ T2179] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 253.203925][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.220100][ T2179] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.243431][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.261943][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.271194][ T2179] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.286316][ T2179] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 253.296015][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.304259][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.325503][ T2179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.346719][ T2179] usb 2-1: config 0 descriptor?? [ 253.352026][ T9264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 253.361955][ T9263] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 253.392753][ T28] audit: type=1800 audit(1791450630.855:443): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.942" name="file2" dev="loop3" ino=1048689 res=0 errno=0 [ 253.640546][ T5846] usb 7-1: USB disconnect, device number 3 [ 253.666774][ T9279] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 253.720921][ T56] usb 5-1: USB disconnect, device number 15 [ 253.796349][ T2179] input: HID 046d:c623 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C623.000B/input/input23 [ 253.876309][ T9283] loop3: detected capacity change from 0 to 128 [ 253.929674][ T2179] logitech 0003:046D:C623.000B: input,hidraw0: USB HID v0.08 Joystick [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 253.991940][ T2179] usb 2-1: USB disconnect, device number 17 [ 254.216232][ T9286] fido_id[9286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 254.242335][ T9291] capability: warning: `syz.3.946' uses deprecated v2 capabilities in a way that may be insecure [ 254.898982][ T9321] loop4: detected capacity change from 0 to 16 [ 254.953153][ T9321] erofs: (device loop4): mounted with root inode @ nid 36. [ 255.325966][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 255.474513][ T9344] FAULT_INJECTION: forcing a failure. [ 255.474513][ T9344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.515048][ T9344] CPU: 1 PID: 9344 Comm: syz.6.963 Not tainted syzkaller #0 [ 255.523054][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 255.533176][ T9344] Call Trace: [ 255.536508][ T9344] [ 255.539494][ T9344] dump_stack_lvl+0x18c/0x250 [ 255.544328][ T9344] ? show_regs_print_info+0x20/0x20 [ 255.549678][ T9344] ? load_image+0x420/0x420 [ 255.554275][ T9344] ? __lock_acquire+0x7eb0/0x7eb0 [ 255.559374][ T9344] should_fail_ex+0x394/0x4c0 [ 255.564129][ T9344] prepare_alloc_pages+0x1e1/0x5b0 [ 255.569317][ T9344] __alloc_pages+0x134/0x460 [ 255.573968][ T9344] ? zone_statistics+0x170/0x170 [ 255.578975][ T9344] ? alloc_pages+0x4e1/0x740 [ 255.583623][ T9344] ? do_raw_spin_unlock+0x121/0x230 [ 255.588907][ T9344] __get_free_pages+0xc/0x30 [ 255.593557][ T9344] kasan_populate_vmalloc_pte+0x35/0x100 [ 255.599277][ T9344] __apply_to_page_range+0x860/0xdd0 [ 255.604638][ T9344] ? kasan_populate_vmalloc+0x70/0x70 [ 255.610094][ T9344] ? apply_to_page_range+0x50/0x50 [ 255.615268][ T9344] ? do_raw_spin_unlock+0x121/0x230 [ 255.620540][ T9344] alloc_vmap_area+0x1d26/0x1e50 [ 255.625597][ T9344] ? vm_map_ram+0xcf0/0xcf0 [ 255.630292][ T9344] ? rcu_is_watching+0x15/0xb0 [ 255.635154][ T9344] __get_vm_area_node+0x162/0x370 [ 255.640349][ T9344] __vmalloc_node_range+0x36f/0x1320 [ 255.645795][ T9344] ? array_map_alloc+0x28a/0x700 [ 255.650810][ T9344] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 255.656791][ T9344] ? aa_get_newest_label+0xfd/0x5c0 [ 255.662653][ T9344] ? end_current_label_crit_section+0x170/0x170 [ 255.668984][ T9344] ? free_vm_area+0x50/0x50 [ 255.673563][ T9344] ? apparmor_capable+0x137/0x1a0 [ 255.678656][ T9344] ? bpf_lsm_capable+0x9/0x10 [ 255.683412][ T9344] bpf_map_area_alloc+0xf1/0x110 [ 255.688606][ T9344] ? array_map_alloc+0x28a/0x700 [ 255.693714][ T9344] array_map_alloc+0x28a/0x700 [ 255.698655][ T9344] map_create+0x877/0x12f0 [ 255.703164][ T9344] __sys_bpf+0x651/0x890 [ 255.707499][ T9344] ? bpf_link_show_fdinfo+0x560/0x560 [ 255.712981][ T9344] ? lock_chain_count+0x20/0x20 [ 255.717948][ T9344] __x64_sys_bpf+0x7c/0x90 [ 255.722441][ T9344] do_syscall_64+0x55/0xb0 [ 255.726996][ T9344] ? clear_bhb_loop+0x40/0x90 [ 255.732018][ T9344] ? clear_bhb_loop+0x40/0x90 [ 255.736773][ T9344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.743063][ T9344] RIP: 0033:0x7f051079e199 [ 255.747546][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.768053][ T9344] RSP: 002b:00007f0511597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.778247][ T9344] RAX: ffffffffffffffda RBX: 00007f0510a25fa0 RCX: 00007f051079e199 [ 255.788395][ T9344] RDX: 0000000000000048 RSI: 00002000000001c0 RDI: 0000000000000000 [ 255.792650][ T9347] loop4: detected capacity change from 0 to 1024 [ 255.796752][ T9344] RBP: 00007f0510835888 R08: 0000000000000000 R09: 0000000000000000 [ 255.796774][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.796788][ T9344] R13: 00007f0510a26038 R14: 00007f0510a25fa0 R15: 00007ffedc7db8d8 [ 255.796820][ T9344] [ 256.034724][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.048741][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.219184][ T9360] loop3: detected capacity change from 0 to 512 [ 256.322204][ T9360] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.966: bad orphan inode 16 [ 256.387293][ T9360] ext4_test_bit(bit=15, block=18) = 1 [ 256.392788][ T9360] is_bad_inode(inode)=0 [ 256.399249][ T9360] NEXT_ORPHAN(inode)=83886080 [ 256.404020][ T9360] max_ino=32 [ 256.409191][ T9360] i_nlink=0 [ 256.446650][ T9360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.477632][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 256.488892][ T9360] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.521416][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 256.633749][ T9374] loop6: detected capacity change from 0 to 2048 [ 256.694603][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.731531][ T9374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.864623][ T9379] FAULT_INJECTION: forcing a failure. [ 256.864623][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 256.932251][ T9379] CPU: 0 PID: 9379 Comm: syz.1.974 Not tainted syzkaller #0 [ 256.939638][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 256.949779][ T9379] Call Trace: [ 256.953122][ T9379] [ 256.956126][ T9379] dump_stack_lvl+0x18c/0x250 [ 256.960874][ T9379] ? show_regs_print_info+0x20/0x20 [ 256.966151][ T9379] ? load_image+0x420/0x420 [ 256.970733][ T9379] ? __might_sleep+0xe0/0xe0 [ 256.975401][ T9379] ? __lock_acquire+0x7eb0/0x7eb0 [ 256.980500][ T9379] should_fail_ex+0x394/0x4c0 [ 256.985257][ T9379] should_failslab+0x9/0x20 [ 256.989827][ T9379] slab_pre_alloc_hook+0x59/0x300 [ 256.994914][ T9379] ? tomoyo_encode+0x2ad/0x570 [ 256.999740][ T9379] ? tomoyo_encode+0x2ad/0x570 [ 257.004660][ T9379] __kmem_cache_alloc_node+0x53/0x250 [ 257.010114][ T9379] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 257.016087][ T9379] ? tomoyo_encode+0x2ad/0x570 [ 257.020939][ T9379] __kmalloc+0xa7/0x240 [ 257.025180][ T9379] tomoyo_encode+0x2ad/0x570 [ 257.029946][ T9379] tomoyo_realpath_from_path+0x57c/0x5c0 [ 257.035675][ T9379] ? tomoyo_domain+0xd6/0x120 [ 257.040511][ T9379] tomoyo_path_number_perm+0x248/0x5e0 [ 257.046152][ T9379] ? tomoyo_path_number_perm+0x217/0x5e0 [ 257.051857][ T9379] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 257.057393][ T9379] ? futex_wake_mark+0x150/0x150 [ 257.062434][ T9379] ? __fget_files+0x28/0x460 [ 257.067129][ T9379] security_file_ioctl+0x70/0xa0 [ 257.072238][ T9379] __se_sys_ioctl+0x48/0x170 [ 257.076962][ T9379] do_syscall_64+0x55/0xb0 [ 257.081612][ T9379] ? clear_bhb_loop+0x40/0x90 [ 257.086349][ T9379] ? clear_bhb_loop+0x40/0x90 [ 257.091093][ T9379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.097067][ T9379] RIP: 0033:0x7f38d939e199 [ 257.101555][ T9379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.110575][ T9384] loop4: detected capacity change from 0 to 2048 [ 257.121279][ T9379] RSP: 002b:00007f38da29c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.121349][ T9379] RAX: ffffffffffffffda RBX: 00007f38d9625fa0 RCX: 00007f38d939e199 [ 257.121366][ T9379] RDX: 0000000000000000 RSI: 00000000000089f8 RDI: 0000000000000003 [ 257.121381][ T9379] RBP: 00007f38d9435888 R08: 0000000000000000 R09: 0000000000000000 [ 257.160509][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.168623][ T9379] R13: 00007f38d9626038 R14: 00007f38d9625fa0 R15: 00007ffdf5736a28 [ 257.176673][ T9379] [ 257.260315][ T9379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.511072][ T9394] loop1: detected capacity change from 0 to 256 [ 257.536427][ T9394] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.570944][ T9398] loop4: detected capacity change from 0 to 512 [ 257.590866][ T9398] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.642150][ T9394] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.095607][ T2135] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 258.305071][ T2135] usb 4-1: Using ep0 maxpacket: 16 [ 258.323156][ T2135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.344656][ T2135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.367495][ T2135] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 258.394982][ T2135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.431985][ T2135] usb 4-1: config 0 descriptor?? [ 258.904156][ T2135] hid (null): report_id 0 is invalid [ 258.927709][ T2135] hid (null): report_id 4252247276 is invalid [ 258.956630][ T2135] hid (null): unknown global tag 0xe [ 258.962024][ T2135] hid (null): global environment stack underflow [ 259.024552][ T2135] hid (null): usage index exceeded [ 259.093635][ T2135] usb 4-1: string descriptor 0 read error: -71 [ 259.134891][ T2135] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 259.155018][ T2135] letsketch: probe of 0003:6161:4D15.000C failed with error -32 [ 259.221052][ T2135] usb 4-1: USB disconnect, device number 17 [ 259.451672][ T9463] netlink: 104 bytes leftover after parsing attributes in process `syz.6.999'. [ 259.465699][ T5783] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 259.683936][ T5783] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 259.702858][ T5783] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 259.725622][ T5783] usb 5-1: config 220 has no interface number 2 [ 259.732022][ T5783] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 259.761560][ T5783] usb 5-1: config 220 interface 0 has no altsetting 0 [ 259.773659][ T5783] usb 5-1: config 220 interface 76 has no altsetting 0 [ 259.784296][ T5783] usb 5-1: config 220 interface 1 has no altsetting 0 [ 259.805439][ T5783] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 259.814566][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.838306][ T5783] usb 5-1: Product: syz [ 259.853605][ T5783] usb 5-1: Manufacturer: syz [ 259.859533][ T5783] usb 5-1: SerialNumber: syz [ 260.106929][ T5783] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 260.120886][ T5783] usb 5-1: No valid video chain found. [ 260.136170][ T5783] usb 5-1: selecting invalid altsetting 0 [ 260.187015][ T5783] usb 5-1: selecting invalid altsetting 0 [ 260.203145][ T5783] usbtest: probe of 5-1:220.1 failed with error -22 [ 260.223594][ T5783] usb 5-1: USB disconnect, device number 16 [ 260.284058][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 260.341256][ T9471] loop6: detected capacity change from 0 to 32768 [ 260.404096][ T9471] JBD2: Ignoring recovery information on journal [ 260.507349][ T9471] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 260.884064][ T9471] (syz.6.1003,9471,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 261.101858][ T8317] ocfs2: Unmounting device (7,6) on (node local) [ 261.179675][ T9509] loop4: detected capacity change from 0 to 7 [ 261.215551][ T9509] Dev loop4: unable to read RDB block 7 [ 261.221245][ T9509] loop4: AHDI p1 p2 [ 261.245984][ T9509] loop4: partition table partially beyond EOD, truncated [ 261.287172][ T9509] loop4: p1 start 1702258030 is beyond EOD, truncated [ 261.563603][ T9518] loop1: detected capacity change from 0 to 2048 [ 261.665053][ T9525] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.753818][ T9520] loop4: detected capacity change from 0 to 8192 [ 261.776334][ T9520] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 261.789139][ T9518] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 261.846875][ T9518] Remounting filesystem read-only [ 261.875137][ T9520] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 261.898954][ T9520] REISERFS (device loop4): using ordered data mode [ 261.916283][ T9520] reiserfs: using flush barriers [ 261.946241][ T9520] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.005634][ T9520] REISERFS (device loop4): checking transaction log (loop4) [ 262.205939][ T9536] overlayfs: failed to decode file handle (len=11, type=248, flags=0, err=-61) [ 262.281872][ T9520] REISERFS (device loop4): Using tea hash to sort names [ 262.298875][ T9520] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 262.317826][ T9539] loop6: detected capacity change from 0 to 8 [ 262.357582][ T9539] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 262.365082][ T5783] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 262.398516][ T9542] loop1: detected capacity change from 0 to 512 [ 262.415101][ T9542] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 262.467569][ T8560] udevd[8560]: incorrect ext4 checksum on /dev/loop1 [ 262.485332][ T5797] blk_print_req_error: 53 callbacks suppressed [ 262.485350][ T5797] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.522448][ T9520] [ 262.524852][ T9520] ====================================================== [ 262.531907][ T9520] WARNING: possible circular locking dependency detected [ 262.539002][ T9520] syzkaller #0 Not tainted [ 262.543472][ T9520] ------------------------------------------------------ [ 262.550538][ T9520] syz.4.1018/9520 is trying to acquire lock: [ 262.556564][ T9520] ffff88805c18a410 (&type->i_mutex_dir_key#15/2){+.+.}-{3:3}, at: delete_one_xattr+0xfa/0x2d0 [ 262.566925][ T9520] [ 262.566925][ T9520] but task is already holding lock: [ 262.574342][ T9520] ffff88805c189d70 (&type->i_mutex_dir_key#15/3){+.+.}-{3:3}, at: reiserfs_for_each_xattr+0x89a/0xa30 [ 262.585400][ T9520] [ 262.585400][ T9520] which lock already depends on the new lock. [ 262.585400][ T9520] [ 262.595857][ T9520] [ 262.595857][ T9520] the existing dependency chain (in reverse order) is: [ 262.604917][ T9520] [ 262.604917][ T9520] -> #2 (&type->i_mutex_dir_key#15/3){+.+.}-{3:3}: [ 262.613698][ T9520] down_write_nested+0x9e/0x200 [ 262.619167][ T9520] open_xa_dir+0x146/0x6f0 [ 262.624269][ T9520] xattr_lookup+0x22/0x2a0 [ 262.629480][ T9520] reiserfs_xattr_set_handle+0x11a/0xd10 [ 262.635696][ T9520] reiserfs_xattr_set+0x47b/0x5b0 [ 262.641308][ T9520] __vfs_setxattr+0x437/0x470 [ 262.646831][ T9520] __vfs_setxattr_noperm+0x12a/0x5e0 [ 262.652963][ T9520] vfs_setxattr+0x16b/0x2f0 [ 262.658057][ T9520] path_setxattr+0x33a/0x590 [ 262.663695][ T9520] __x64_sys_lsetxattr+0xb8/0xd0 [ 262.669217][ T9520] do_syscall_64+0x55/0xb0 [ 262.674375][ T9520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.680906][ T9520] [ 262.680906][ T9520] -> #1 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}: [ 262.689762][ T9520] down_write+0x97/0x200 [ 262.694598][ T9520] vfs_rename+0x6f4/0xe60 [ 262.699517][ T9520] do_renameat2+0x8b0/0xc80 [ 262.704606][ T9520] __x64_sys_renameat2+0xd2/0xe0 [ 262.710123][ T9520] do_syscall_64+0x55/0xb0 [ 262.715126][ T9520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.721609][ T9520] [ 262.721609][ T9520] -> #0 (&type->i_mutex_dir_key#15/2){+.+.}-{3:3}: [ 262.730375][ T9520] __lock_acquire+0x3a07/0x7eb0 [ 262.735788][ T9520] lock_acquire+0x19e/0x420 [ 262.740928][ T9520] down_write_nested+0x9e/0x200 [ 262.746355][ T9520] delete_one_xattr+0xfa/0x2d0 [ 262.751675][ T9520] reiserfs_for_each_xattr+0x8a6/0xa30 [ 262.757688][ T9520] reiserfs_delete_xattrs+0x20/0x90 [ 262.763443][ T9520] reiserfs_evict_inode+0x24a/0x4c0 [ 262.769204][ T9520] evict+0x4b7/0x8a0 [ 262.773646][ T9520] vfs_rmdir+0x378/0x4b0 [ 262.778461][ T9520] do_rmdir+0x29f/0x590 [ 262.783161][ T9520] __x64_sys_unlinkat+0xc4/0xe0 [ 262.788559][ T9520] do_syscall_64+0x55/0xb0 [ 262.793523][ T9520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.799984][ T9520] [ 262.799984][ T9520] other info that might help us debug this: [ 262.799984][ T9520] [ 262.810236][ T9520] Chain exists of: [ 262.810236][ T9520] &type->i_mutex_dir_key#15/2 --> &sb->s_type->i_mutex_key#30 --> &type->i_mutex_dir_key#15/3 [ 262.810236][ T9520] [ 262.826478][ T9520] Possible unsafe locking scenario: [ 262.826478][ T9520] [ 262.833956][ T9520] CPU0 CPU1 [ 262.839343][ T9520] ---- ---- [ 262.844731][ T9520] lock(&type->i_mutex_dir_key#15/3); [ 262.850238][ T9520] lock(&sb->s_type->i_mutex_key#30); [ 262.858265][ T9520] lock(&type->i_mutex_dir_key#15/3); [ 262.866293][ T9520] lock(&type->i_mutex_dir_key#15/2); [ 262.871787][ T9520] [ 262.871787][ T9520] *** DEADLOCK *** [ 262.871787][ T9520] [ 262.879949][ T9520] 3 locks held by syz.4.1018/9520: [ 262.885078][ T9520] #0: ffff888058c3c418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 262.894343][ T9520] #1: ffff88805e7fd910 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 262.904567][ T9520] #2: ffff88805c189d70 (&type->i_mutex_dir_key#15/3){+.+.}-{3:3}, at: reiserfs_for_each_xattr+0x89a/0xa30 [ 262.916022][ T9520] [ 262.916022][ T9520] stack backtrace: [ 262.921941][ T9520] CPU: 1 PID: 9520 Comm: syz.4.1018 Not tainted syzkaller #0 [ 262.929334][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.939425][ T9520] Call Trace: [ 262.942748][ T9520] [ 262.945708][ T9520] dump_stack_lvl+0x18c/0x250 [ 262.950419][ T9520] ? load_image+0x420/0x420 [ 262.954961][ T9520] ? show_regs_print_info+0x20/0x20 [ 262.960212][ T9520] ? print_circular_bug+0x12b/0x1a0 [ 262.965464][ T9520] check_noncircular+0x2fc/0x400 [ 262.970450][ T9520] ? reiserfs_write_lock_nested+0x60/0xd0 [ 262.976206][ T9520] ? look_up_lock_class+0x75/0x140 [ 262.981348][ T9520] ? print_deadlock_bug+0x5d0/0x5d0 [ 262.986575][ T9520] ? lockdep_lock+0xf5/0x230 [ 262.991193][ T9520] ? _find_first_zero_bit+0xd6/0x100 [ 262.996560][ T9520] __lock_acquire+0x3a07/0x7eb0 [ 263.001457][ T9520] ? verify_lock_unused+0x140/0x140 [ 263.006686][ T9520] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 263.012353][ T9520] ? verify_lock_unused+0x140/0x140 [ 263.017607][ T9520] ? mutex_unlock+0x10/0x10 [ 263.022146][ T9520] lock_acquire+0x19e/0x420 [ 263.026683][ T9520] ? delete_one_xattr+0xfa/0x2d0 [ 263.031658][ T9520] ? __might_sleep+0xe0/0xe0 [ 263.036366][ T9520] ? read_lock_is_recursive+0x20/0x20 [ 263.041773][ T9520] ? __might_sleep+0xe0/0xe0 [ 263.046393][ T9520] ? read_lock_is_recursive+0x20/0x20 [ 263.051798][ T9520] down_write_nested+0x9e/0x200 [ 263.056679][ T9520] ? delete_one_xattr+0xfa/0x2d0 [ 263.061652][ T9520] ? down_read_non_owner+0x310/0x310 [ 263.066962][ T9520] ? down_write_nested+0x175/0x200 [ 263.072100][ T9520] ? down_read_non_owner+0x310/0x310 [ 263.077414][ T9520] delete_one_xattr+0xfa/0x2d0 [ 263.082210][ T9520] reiserfs_for_each_xattr+0x8a6/0xa30 [ 263.087702][ T9520] ? reiserfs_for_each_xattr+0xa30/0xa30 [ 263.093367][ T9520] ? reiserfs_delete_xattrs+0x90/0x90 [ 263.098777][ T9520] ? reiserfs_xattr_init+0x6a0/0x6a0 [ 263.104098][ T9520] ? inode_wait_for_writeback+0x1e3/0x230 [ 263.109857][ T9520] ? __rwlock_init+0x150/0x150 [ 263.114657][ T9520] reiserfs_delete_xattrs+0x20/0x90 [ 263.119917][ T9520] reiserfs_evict_inode+0x24a/0x4c0 [ 263.125153][ T9520] ? evict+0x482/0x8a0 [ 263.129257][ T9520] ? entry_points_to_object+0x260/0x260 [ 263.134837][ T9520] ? do_raw_spin_lock+0x11f/0x2b0 [ 263.139904][ T9520] ? do_raw_spin_unlock+0x121/0x230 [ 263.145136][ T9520] ? entry_points_to_object+0x260/0x260 [ 263.150715][ T9520] evict+0x4b7/0x8a0 [ 263.154639][ T9520] ? __lock_acquire+0x7eb0/0x7eb0 [ 263.159697][ T9520] ? proc_nr_inodes+0x230/0x230 [ 263.164579][ T9520] ? do_raw_spin_unlock+0x121/0x230 [ 263.169807][ T9520] ? _raw_spin_unlock+0x28/0x40 [ 263.174694][ T9520] vfs_rmdir+0x378/0x4b0 [ 263.178965][ T9520] do_rmdir+0x29f/0x590 [ 263.183156][ T9520] ? __check_object_size+0x4fc/0xa40 [ 263.188487][ T9520] ? d_delete_notify+0x150/0x150 [ 263.193456][ T9520] ? getname_flags+0x20a/0x500 [ 263.198244][ T9520] __x64_sys_unlinkat+0xc4/0xe0 [ 263.203140][ T9520] do_syscall_64+0x55/0xb0 [ 263.207582][ T9520] ? clear_bhb_loop+0x40/0x90 [ 263.212287][ T9520] ? clear_bhb_loop+0x40/0x90 [ 263.216987][ T9520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.222933][ T9520] RIP: 0033:0x7f549299e199 [ 263.227374][ T9520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.247023][ T9520] RSP: 002b:00007f5490bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 263.255476][ T9520] RAX: ffffffffffffffda RBX: 00007f5492c25fa0 RCX: 00007f549299e199 [ 263.263476][ T9520] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 263.271468][ T9520] RBP: 00007f5492a35888 R08: 0000000000000000 R09: 0000000000000000 [ 263.279490][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.287485][ T9520] R13: 00007f5492c26038 R14: 00007f5492c25fa0 R15: 00007ffc272afeb8 [ 263.295523][ T9520] [ 263.386745][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 263.401349][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 263.411270][ T5783] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 263.420739][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.445301][ T5783] pegasus: probe of 4-1:1.0 failed with error -71 [ 264.459760][ T5783] usb 4-1: USB disconnect, device number 18