last executing test programs: 16.301425714s ago: executing program 1 (id=657): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) 15.052771673s ago: executing program 1 (id=660): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") socket$inet(0xa, 0x801, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x300000a, 0x110, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}}, &(0x7f0000000000)='GPL\x00'}, 0x94) inotify_init() socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f48d7b}, 0xc) 13.411387635s ago: executing program 0 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) read(0xffffffffffffffff, &(0x7f0000000380)=""/153, 0x99) 11.68128419s ago: executing program 0 (id=664): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 10.43778044s ago: executing program 1 (id=667): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5, 0x7}, 0x80, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) r4 = dup2(r3, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000340)={0x6, 0x8201, 0x5, 0x4a95}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000480)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c53}, 0xc000) symlinkat(0x0, r4, &(0x7f0000000100)='./file0\x00') 9.122399621s ago: executing program 1 (id=668): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401000000f7"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.122075081s ago: executing program 2 (id=669): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 8.912714328s ago: executing program 3 (id=673): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000200)={0xa, 0x4}, 0xc) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) 7.191996412s ago: executing program 2 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 7.041477527s ago: executing program 2 (id=675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0x2, 0x631b, &(0x7f00000082c0)="$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") r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="c80c8ce881ab489800"], 0x1, 0x1540, &(0x7f0000000880)="$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") r1 = open(0x0, 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)={[{@acl}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@data_writeback}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@localflocks}, {@heartbeat_none}, {@coherency_full}, {@noacl}]}, 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") getpgid(0x0) 6.764283526s ago: executing program 4 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 5.406936879s ago: executing program 2 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) read(r3, &(0x7f0000000380)=""/153, 0x99) 5.321300962s ago: executing program 1 (id=678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") socket$inet(0xa, 0x801, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x300000a, 0x110, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}}, &(0x7f0000000000)='GPL\x00'}, 0x94) inotify_init() socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f48d7b}, 0xc) 5.321001742s ago: executing program 0 (id=679): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5, 0x7}, 0x80, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) r4 = dup2(r3, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000340)={0x6, 0x8201, 0x5, 0x4a95}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000480)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c53}, 0xc000) symlinkat(0x0, r4, &(0x7f0000000100)='./file0\x00') 5.296032723s ago: executing program 3 (id=680): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) unlink(0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003040), &(0x7f0000003080)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) 4.496883328s ago: executing program 0 (id=681): prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x8fff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000010c0)=""/125) 3.783072891s ago: executing program 2 (id=682): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000200), 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) 3.605574206s ago: executing program 3 (id=683): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb7852", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a198", 0x3e, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.281275727s ago: executing program 4 (id=684): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 2.392226655s ago: executing program 3 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.384469665s ago: executing program 4 (id=686): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.938315579s ago: executing program 2 (id=687): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(0x0, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f000000d080)=""/102397, 0x19008) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.938112989s ago: executing program 3 (id=688): socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000040), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 1.933175129s ago: executing program 0 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.794317774s ago: executing program 0 (id=689): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.59205117s ago: executing program 1 (id=690): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000200)={0xa, 0x4}, 0xc) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) 1.457203694s ago: executing program 4 (id=691): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5, 0x7}, 0x80, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) r4 = dup2(r3, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000340)={0x6, 0x8201, 0x5, 0x4a95}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000480)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c53}, 0xc000) symlinkat(0x0, r4, &(0x7f0000000100)='./file0\x00') 822.826494ms ago: executing program 4 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) read(r3, &(0x7f0000000380)=""/153, 0x99) 65.592468ms ago: executing program 4 (id=693): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xd437, 0x8, 0x6, 0x74ca3, 0x1, 0x8059f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xa}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x800, 0x0, 0x9, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x4}) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f0000000280)='timers\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 0s ago: executing program 3 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) kernel console output (not intermixed with test programs): Z tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 54.911722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 54.931733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.941721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.951723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 54.961730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 55.138342][ T4292] xt_connbytes: Forcing CT accounting to be enabled [ 55.145162][ T4292] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.157038][ T4292] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 55.703904][ T4243] Bluetooth: hci2: command 0x0419 tx timeout [ 55.710059][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 55.716340][ T4243] Bluetooth: hci0: command 0x0419 tx timeout [ 55.722613][ T4243] Bluetooth: hci3: command 0x0419 tx timeout [ 55.728639][ T4243] Bluetooth: hci4: command 0x0419 tx timeout [ 55.771734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 55.896394][ T4288] input: syz1 as /devices/virtual/input/input5 [ 55.984111][ T26] audit: type=1400 audit(1781824575.106:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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og Wrap ... Log Wrap ... Log Wrap ... [ 58.213465][ T4291] [ 59.181082][ T4291] [ 59.181082][ T4291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.181082][ T4291] [ 59.284794][ T4291] [ 59.284794][ T4291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.284794][ T4291] [ 59.295710][ T4291] [ 59.295710][ T4291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.295710][ T4291] [ 59.306584][ T4291] [ 59.306584][ T4291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.306584][ T4291] [ 59.339934][ T278] [ 59.339934][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.339934][ T278] [ 59.424564][ T4190] [ 59.424564][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.424564][ T4190] [ 59.457632][ T4190] [ 59.457632][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 59.457632][ T4190] [ 59.561450][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 59.585209][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.712731][ T4326] input: syz1 as /devices/virtual/input/input6 [ 59.831966][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.328187][ T4346] loop4: detected capacity change from 0 to 128 [ 60.887082][ T4346] ======================================================= [ 60.887082][ T4346] WARNING: The mand mount option has been deprecated and [ 60.887082][ T4346] and is ignored by this kernel. Remove the mand [ 60.887082][ T4346] option from the mount to silence this warning. [ 60.887082][ T4346] ======================================================= [ 61.258484][ T4398] loop2: detected capacity change from 0 to 512 [ 61.319423][ T4344] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 61.345672][ T4344] FAT-fs (loop4): Filesystem has been set read-only [ 61.360539][ T4401] loop1: detected capacity change from 0 to 512 [ 61.363008][ T4346] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 61.394673][ T4400] device syzkaller0 entered promiscuous mode [ 61.427862][ T4398] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.472254][ T4398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.664680][ T4401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.223410][ T4398] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.21: corrupted xattr entries [ 62.328207][ T4398] EXT4-fs (loop2): Remounting filesystem read-only [ 62.330194][ T4401] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.31: corrupted xattr entries [ 62.369895][ T4398] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.383997][ T4401] EXT4-fs (loop1): Remounting filesystem read-only [ 62.390533][ T4401] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.424990][ T4398] EXT4-fs (loop2): 1 truncate cleaned up [ 62.430681][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 62.554196][ T4401] EXT4-fs (loop1): 1 truncate cleaned up [ 62.560031][ T4401] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 62.592960][ T4410] device syzkaller0 entered promiscuous mode [ 62.599991][ T4413] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.628620][ T4412] device syzkaller0 entered promiscuous mode [ 63.517754][ T4422] loop0: detected capacity change from 0 to 128 [ 63.619231][ T4422] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 64.721921][ T4422] hpfs: filesystem error: improperly stopped [ 64.833757][ T4422] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 64.931702][ C0] sched: RT throttling activated [ 64.955315][ T4422] hpfs: You really don't want any checks? You are crazy... [ 64.963794][ T4422] hpfs: hpfs_map_sector(): read error [ 64.969195][ T4422] hpfs: code page support is disabled [ 65.036674][ T4422] hpfs: hpfs_map_4sectors(): unaligned read [ 65.052011][ T4422] hpfs: hpfs_map_4sectors(): unaligned read [ 65.103812][ T4422] hpfs: filesystem error: unable to find root dir [ 65.159517][ T4422] hpfs: hpfs_map_4sectors(): unaligned read [ 65.192345][ T4422] hpfs: hpfs_map_sector(): read error [ 65.313749][ T4440] loop4: detected capacity change from 0 to 32768 [ 65.349691][ T4422] hpfs: hpfs_map_4sectors(): unaligned read [ 65.376033][ T4422] hpfs: hpfs_map_sector(): read error [ 65.407959][ T4440] [ 65.407959][ T4440] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.407959][ T4440] [ 65.430701][ T4422] hpfs: hpfs_map_4sectors(): unaligned read [ 65.452876][ T4422] hpfs: hpfs_map_sector(): read error [ 65.497860][ T4442] [ 65.497860][ T4442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.497860][ T4442] [ 65.508887][ T4442] [ 65.508887][ T4442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.508887][ T4442] [ 65.519743][ T4442] [ 65.519743][ T4442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.519743][ T4442] [ 65.532702][ T4442] [ 65.532702][ T4442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.532702][ T4442] [ 65.545154][ T4442] [ 65.545154][ T4442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.545154][ T4442] [ 65.560304][ T278] [ 65.560304][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 65.560304][ T278] [ 66.187704][ T4445] input: syz1 as /devices/virtual/input/input7 [ 66.243635][ T26] audit: type=1400 audit(1781824585.366:3): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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og Wrap ... Log Wrap ... Log Wrap ... [ 67.781383][ T4189] [ 67.882552][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 67.924455][ T4189] [ 67.924455][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 67.924455][ T4189] [ 68.063779][ T4454] loop1: detected capacity change from 0 to 512 [ 68.109231][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 68.311477][ T4454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.026140][ T4466] loop4: detected capacity change from 0 to 512 [ 69.052180][ T4454] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.39: corrupted xattr entries [ 69.065148][ T4454] EXT4-fs (loop1): Remounting filesystem read-only [ 69.081908][ T4466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.092459][ T4454] EXT4-fs (loop1): 1 truncate cleaned up [ 69.098120][ T4454] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 69.121477][ T4468] device syzkaller0 entered promiscuous mode [ 69.165209][ T4466] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.38: corrupted xattr entries [ 69.222786][ T4471] device syzkaller0 entered promiscuous mode [ 69.324289][ T4466] EXT4-fs (loop4): Remounting filesystem read-only [ 69.361113][ T4466] EXT4-fs (loop4): 1 truncate cleaned up [ 69.396456][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 70.956228][ T4484] loop1: detected capacity change from 0 to 512 [ 71.055688][ T4484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.237705][ T4497] loop2: detected capacity change from 0 to 128 [ 71.260987][ T4484] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.53: corrupted xattr entries [ 71.287513][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294141][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.299961][ T4484] EXT4-fs (loop1): Remounting filesystem read-only [ 71.315551][ T4484] EXT4-fs (loop1): 1 truncate cleaned up [ 71.321239][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 71.382134][ T4497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 71.402048][ T4497] hpfs: filesystem error: improperly stopped [ 71.458797][ T4497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 71.532204][ T4497] hpfs: You really don't want any checks? You are crazy... [ 71.539702][ T4497] hpfs: hpfs_map_sector(): read error [ 71.565049][ T4500] input: syz1 as /devices/virtual/input/input8 [ 71.589409][ T4497] hpfs: code page support is disabled [ 71.634935][ T4497] hpfs: hpfs_map_4sectors(): unaligned read [ 71.681597][ T4497] hpfs: hpfs_map_4sectors(): unaligned read [ 71.687758][ T4497] hpfs: filesystem error: unable to find root dir [ 71.907812][ T4497] hpfs: hpfs_map_4sectors(): unaligned read [ 71.948671][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 71.973937][ T4497] hpfs: hpfs_map_sector(): read error [ 71.996513][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.008619][ T4516] hpfs: hpfs_map_4sectors(): unaligned read [ 72.040729][ T4516] hpfs: hpfs_map_sector(): read error [ 72.082481][ T4497] hpfs: hpfs_map_4sectors(): unaligned read [ 72.119083][ T4497] hpfs: hpfs_map_sector(): read error [ 72.171873][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.324084][ T4532] loop1: detected capacity change from 0 to 512 [ 72.413398][ T4518] device syzkaller0 entered promiscuous mode [ 72.433091][ T4532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.686678][ T4563] device syzkaller0 entered promiscuous mode [ 72.695462][ T4532] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.67: corrupted xattr entries [ 72.756526][ T4532] EXT4-fs (loop1): Remounting filesystem read-only [ 72.766130][ T4566] loop3: detected capacity change from 0 to 512 [ 72.782742][ T4532] EXT4-fs (loop1): 1 truncate cleaned up [ 72.788595][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 72.822434][ T4566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.050546][ T4566] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.57: corrupted xattr entries [ 73.106216][ T4566] EXT4-fs (loop3): Remounting filesystem read-only [ 73.120011][ T4566] EXT4-fs (loop3): 1 truncate cleaned up [ 73.663361][ T4566] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 75.155835][ T4588] loop1: detected capacity change from 0 to 128 [ 75.280575][ T4588] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.301265][ T4588] hpfs: filesystem error: improperly stopped [ 75.321843][ T4588] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 75.339967][ T4588] hpfs: You really don't want any checks? You are crazy... [ 75.403856][ T4588] hpfs: hpfs_map_sector(): read error [ 75.424439][ T4588] hpfs: code page support is disabled [ 75.430001][ T4588] hpfs: hpfs_map_4sectors(): unaligned read [ 75.441851][ T4588] hpfs: hpfs_map_4sectors(): unaligned read [ 75.447779][ T4588] hpfs: filesystem error: unable to find root dir [ 76.403351][ T1108] cfg80211: failed to load regulatory.db [ 76.591430][ T4598] loop2: detected capacity change from 0 to 32768 [ 76.608123][ T4588] hpfs: hpfs_map_4sectors(): unaligned read [ 76.629032][ T4588] hpfs: hpfs_map_sector(): read error [ 76.645206][ T4602] input: syz1 as /devices/virtual/input/input9 [ 76.671068][ T4588] hpfs: hpfs_map_4sectors(): unaligned read [ 76.686720][ T4598] [ 76.686720][ T4598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.686720][ T4598] [ 76.707365][ T4598] [ 76.707365][ T4598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.707365][ T4598] [ 76.717949][ T4598] [ 76.717949][ T4598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.717949][ T4598] [ 76.728481][ T4598] [ 76.728481][ T4598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.728481][ T4598] [ 76.738960][ T4598] [ 76.738960][ T4598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.738960][ T4598] [ 76.749828][ T4598] [ 76.749828][ T4598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.749828][ T4598] [ 76.885088][ T4588] hpfs: hpfs_map_sector(): read error [ 76.927849][ T278] [ 76.927849][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.927849][ T278] [ 77.091496][ T4190] [ 77.091496][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.091496][ T4190] [ 77.180658][ T4190] [ 77.180658][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.180658][ T4190] [ 77.272998][ T4622] loop1: detected capacity change from 0 to 512 [ 77.323749][ T4622] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.419556][ T4622] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.74: corrupted xattr entries [ 77.466828][ T4631] loop0: detected capacity change from 0 to 512 [ 77.618732][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 78.232029][ T4622] EXT4-fs (loop1): Remounting filesystem read-only [ 78.314670][ T4622] EXT4-fs (loop1): 1 truncate cleaned up [ 78.320358][ T4622] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 78.390343][ T4631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.504342][ T4631] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.75: corrupted xattr entries [ 78.698622][ T4631] EXT4-fs (loop0): Remounting filesystem read-only [ 78.845663][ T4631] EXT4-fs (loop0): 1 truncate cleaned up [ 79.287879][ T4631] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 80.425153][ T4650] loop3: detected capacity change from 0 to 128 [ 81.367832][ T4650] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 81.591827][ T4650] FAT-fs (loop3): Filesystem has been set read-only [ 81.700511][ T4661] input: syz1 as /devices/virtual/input/input10 [ 81.837378][ T4664] loop2: detected capacity change from 0 to 32768 [ 81.924431][ T4664] [ 81.924431][ T4664] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.924431][ T4664] [ 82.165670][ T4673] [ 82.165670][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.165670][ T4673] [ 82.177330][ T4673] [ 82.177330][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.177330][ T4673] [ 82.188935][ T4673] [ 82.188935][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.188935][ T4673] [ 82.199775][ T4673] [ 82.199775][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.199775][ T4673] [ 82.210610][ T4673] [ 82.210610][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.210610][ T4673] [ 82.234812][ T278] [ 82.234812][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.234812][ T278] [ 83.663309][ T4190] [ 83.663309][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.663309][ T4190] [ 83.687546][ T4190] [ 83.687546][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.687546][ T4190] [ 84.830153][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 84.877821][ T4716] loop1: detected capacity change from 0 to 512 [ 84.979884][ T4716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.396691][ T4716] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.94: corrupted xattr entries [ 85.626903][ T4716] EXT4-fs (loop1): Remounting filesystem read-only [ 85.643927][ T4710] device syzkaller0 entered promiscuous mode [ 85.790697][ T4716] EXT4-fs (loop1): 1 truncate cleaned up [ 85.820036][ T4716] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 85.838620][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 86.417040][ T4736] input: syz1 as /devices/virtual/input/input11 [ 87.031549][ T4741] loop4: detected capacity change from 0 to 32768 [ 87.039276][ T4296] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.077392][ T4741] [ 87.077392][ T4741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.077392][ T4741] [ 87.135625][ T4741] [ 87.135625][ T4741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.135625][ T4741] [ 87.146229][ T4741] [ 87.146229][ T4741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.146229][ T4741] [ 87.156759][ T4741] [ 87.156759][ T4741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.156759][ T4741] [ 87.167235][ T4741] [ 87.167235][ T4741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.167235][ T4741] [ 87.177759][ T4741] [ 87.177759][ T4741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.177759][ T4741] [ 87.352553][ T278] [ 87.352553][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.352553][ T278] [ 87.372119][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 87.518267][ T4748] loop1: detected capacity change from 0 to 128 [ 87.538551][ T4189] [ 87.538551][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.538551][ T4189] [ 87.550367][ T4750] device syzkaller0 entered promiscuous mode [ 87.557163][ T4189] [ 87.557163][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.557163][ T4189] [ 88.286371][ T4748] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 88.315467][ T4748] FAT-fs (loop1): Filesystem has been set read-only [ 88.322748][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.337220][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 88.350451][ T4296] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 88.350580][ T4743] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 88.361585][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.424719][ T4296] usb 1-1: config 0 descriptor?? [ 88.550087][ T4759] loop3: detected capacity change from 0 to 512 [ 88.780612][ T4759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.077632][ T4731] loop0: detected capacity change from 0 to 128 [ 89.246506][ T4759] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.108: corrupted xattr entries [ 89.271583][ T4765] device syzkaller0 entered promiscuous mode [ 89.291899][ T4759] EXT4-fs (loop3): Remounting filesystem read-only [ 89.299831][ T4731] EXT4-fs (loop0): Test dummy encryption mode enabled [ 89.310206][ T4731] EXT4-fs (loop0): inline encryption not supported [ 89.329494][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 89.356063][ T4759] EXT4-fs (loop3): 1 truncate cleaned up [ 89.362158][ T4731] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.386923][ T4759] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 89.482632][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 89.494148][ T4773] loop4: detected capacity change from 0 to 512 [ 89.726988][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 91.100938][ T4788] input: syz1 as /devices/virtual/input/input12 [ 91.658652][ T4773] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.695538][ T4773] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.110: corrupted xattr entries [ 91.826364][ T4792] loop2: detected capacity change from 0 to 32768 [ 91.833118][ T4296] usbhid 1-1:0.0: can't add hid device: -71 [ 91.839500][ T4296] usbhid: probe of 1-1:0.0 failed with error -71 [ 91.866064][ T4773] EXT4-fs (loop4): Remounting filesystem read-only [ 91.880766][ T4773] EXT4-fs (loop4): 1 truncate cleaned up [ 91.904669][ T4792] [ 91.904669][ T4792] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.904669][ T4792] [ 91.992825][ T4773] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 92.465126][ T4296] usb 1-1: USB disconnect, device number 2 [ 92.783739][ T4801] [ 92.783739][ T4801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.783739][ T4801] [ 93.147794][ T4801] [ 93.147794][ T4801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.147794][ T4801] [ 93.178345][ T4801] [ 93.178345][ T4801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.178345][ T4801] [ 93.191618][ T4801] [ 93.191618][ T4801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.191618][ T4801] [ 93.208594][ T4801] [ 93.208594][ T4801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.208594][ T4801] [ 93.225390][ T4808] device syzkaller0 entered promiscuous mode [ 93.868622][ T278] [ 93.868622][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.868622][ T278] [ 93.985985][ T4190] [ 93.985985][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.985985][ T4190] [ 94.051248][ T4190] [ 94.051248][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.051248][ T4190] [ 94.371889][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.992322][ T4822] device syzkaller0 entered promiscuous mode [ 94.997573][ T4829] loop3: detected capacity change from 0 to 512 [ 95.017169][ T4829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.110688][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 95.155296][ T4832] input: syz1 as /devices/virtual/input/input13 [ 95.208554][ T4829] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.124: corrupted xattr entries [ 95.282349][ T23] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.300968][ T4829] EXT4-fs (loop3): Remounting filesystem read-only [ 95.303979][ T23] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.320090][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.331496][ T23] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 95.348191][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.367722][ T23] usb 2-1: config 0 descriptor?? [ 95.373033][ T4829] EXT4-fs (loop3): 1 truncate cleaned up [ 95.379610][ T4829] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 96.071877][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.231377][ T4237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.376255][ T4851] loop3: detected capacity change from 0 to 512 [ 96.419506][ T4851] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.424936][ T23] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 96.455410][ T4851] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.129: corrupted xattr entries [ 96.467029][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 96.477597][ T4851] EXT4-fs (loop3): Remounting filesystem read-only [ 96.486474][ T4851] EXT4-fs (loop3): 1 truncate cleaned up [ 96.491991][ T4237] usb 3-1: Using ep0 maxpacket: 8 [ 96.496636][ T4851] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 96.652039][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.655539][ T23] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 96.892138][ T4237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.938291][ T23] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 97.032254][ T4237] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 97.055410][ T4237] usb 3-1: can't read configurations, error -71 [ 97.213324][ T23] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0001/input/input14 [ 97.278495][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.291776][ T4233] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 97.301264][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.330149][ T4233] usb 5-1: config 0 descriptor?? [ 97.372962][ T23] usb 2-1: USB disconnect, device number 2 [ 97.457997][ T23] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 97.597522][ T4858] fido_id[4858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.740024][ T4863] loop1: detected capacity change from 0 to 32768 [ 97.766898][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 97.799617][ T4840] loop4: detected capacity change from 0 to 128 [ 97.808539][ T4863] [ 97.808539][ T4863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.808539][ T4863] [ 97.897700][ T4865] [ 97.897700][ T4865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.897700][ T4865] [ 97.908661][ T4865] [ 97.908661][ T4865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.908661][ T4865] [ 97.919595][ T4865] [ 97.919595][ T4865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.919595][ T4865] [ 97.930493][ T4865] [ 97.930493][ T4865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.930493][ T4865] [ 97.970603][ T4865] [ 97.970603][ T4865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.970603][ T4865] [ 97.983189][ T278] [ 97.983189][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.983189][ T278] [ 98.490501][ T4840] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.620525][ T4840] EXT4-fs (loop4): inline encryption not supported [ 98.840685][ T4840] EXT4-fs: failed to create workqueue [ 98.986755][ T4840] EXT4-fs (loop4): mount failed [ 99.291932][ T4233] usbhid 5-1:0.0: can't add hid device: -71 [ 99.297950][ T4233] usbhid: probe of 5-1:0.0 failed with error -71 [ 99.333456][ T4873] device syzkaller0 entered promiscuous mode [ 99.333908][ T4187] [ 99.333908][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.333908][ T4187] [ 99.359581][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 100.551900][ T4233] usb 5-1: USB disconnect, device number 2 [ 100.574418][ T4187] [ 100.574418][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.574418][ T4187] [ 100.802873][ T4888] loop2: detected capacity change from 0 to 512 [ 100.838039][ T4888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.849829][ T4889] input: syz1 as /devices/virtual/input/input15 [ 100.959905][ T4888] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.142: corrupted xattr entries [ 101.019510][ T4888] EXT4-fs (loop2): Remounting filesystem read-only [ 101.078766][ T4898] loop1: detected capacity change from 0 to 512 [ 101.091273][ T4888] EXT4-fs (loop2): 1 truncate cleaned up [ 101.121485][ T4888] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 101.176837][ T4898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.291787][ T4236] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 101.505229][ T4898] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.139: corrupted xattr entries [ 101.726296][ T4898] EXT4-fs (loop1): Remounting filesystem read-only [ 101.733229][ T4898] EXT4-fs (loop1): 1 truncate cleaned up [ 101.738887][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 101.781868][ T4236] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.820891][ T4236] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.851611][ T4236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.891466][ T4236] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 101.950471][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.744775][ T4236] usb 5-1: config 0 descriptor?? [ 103.660175][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 103.848284][ T4920] loop3: detected capacity change from 0 to 32768 [ 103.858825][ T4236] hid-steam 0003:28DE:1102.0003: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 103.878239][ T4236] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 103.916634][ T4920] [ 103.916634][ T4920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.916634][ T4920] [ 104.683933][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.729423][ T4236] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 104.787977][ T4925] [ 104.787977][ T4925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.787977][ T4925] [ 104.799368][ T4925] [ 104.799368][ T4925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.799368][ T4925] [ 104.810685][ T4925] [ 104.810685][ T4925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.810685][ T4925] [ 104.821602][ T4925] [ 104.821602][ T4925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.821602][ T4925] [ 104.848142][ T4925] [ 104.848142][ T4925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 104.848142][ T4925] [ 105.007419][ T278] [ 105.007419][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.007419][ T278] [ 105.030513][ T4236] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0003/input/input16 [ 105.095747][ T4197] [ 105.095747][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.095747][ T4197] [ 105.112321][ T4197] [ 105.112321][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.112321][ T4197] [ 105.176769][ T4236] usb 5-1: USB disconnect, device number 3 [ 105.271847][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 106.052557][ T4236] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 106.081954][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.146968][ T4937] fido_id[4937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 106.172060][ T4942] input: syz1 as /devices/virtual/input/input17 [ 106.181222][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.196937][ T4940] device syzkaller0 entered promiscuous mode [ 106.232016][ T23] usb 1-1: can't read configurations, error -71 [ 106.367647][ T4951] loop4: detected capacity change from 0 to 512 [ 106.416582][ T4951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.536758][ T4951] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.157: corrupted xattr entries [ 106.563485][ T4951] EXT4-fs (loop4): Remounting filesystem read-only [ 106.599723][ T4955] loop3: detected capacity change from 0 to 512 [ 106.626053][ T4951] EXT4-fs (loop4): 1 truncate cleaned up [ 106.725290][ T4951] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 106.802469][ T4955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.661239][ T4955] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.158: corrupted xattr entries [ 108.179454][ T4974] netlink: 'syz.2.163': attribute type 12 has an invalid length. [ 108.294059][ T4955] EXT4-fs (loop3): Remounting filesystem read-only [ 109.291285][ T4965] loop1: detected capacity change from 0 to 32768 [ 109.342357][ T4955] EXT4-fs (loop3): 1 truncate cleaned up [ 109.348076][ T4955] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 109.376493][ T4965] [ 109.376493][ T4965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 109.376493][ T4965] [ 110.307670][ T4988] [ 110.307670][ T4988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.307670][ T4988] [ 110.318692][ T4988] [ 110.318692][ T4988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.318692][ T4988] [ 110.331017][ T4988] [ 110.331017][ T4988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.331017][ T4988] [ 110.342854][ T4988] [ 110.342854][ T4988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.342854][ T4988] [ 110.369766][ T4988] [ 110.369766][ T4988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.369766][ T4988] [ 111.064190][ T278] [ 111.064190][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.064190][ T278] [ 111.537881][ T4187] [ 111.537881][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.537881][ T4187] [ 111.552634][ T4187] [ 111.552634][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.552634][ T4187] [ 111.577741][ T4990] input: syz1 as /devices/virtual/input/input18 [ 112.512653][ T5012] lo speed is unknown, defaulting to 1000 [ 112.518857][ T5012] lo speed is unknown, defaulting to 1000 [ 112.533081][ T5012] lo speed is unknown, defaulting to 1000 [ 112.551546][ T5012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.636784][ T5012] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.716930][ T5012] lo speed is unknown, defaulting to 1000 [ 112.727910][ T5012] lo speed is unknown, defaulting to 1000 [ 112.738096][ T5012] lo speed is unknown, defaulting to 1000 [ 112.750317][ T5012] lo speed is unknown, defaulting to 1000 [ 112.759761][ T5012] lo speed is unknown, defaulting to 1000 [ 113.342600][ T5017] device syzkaller0 entered promiscuous mode [ 113.416549][ T5021] device syzkaller0 entered promiscuous mode [ 113.587955][ T5027] loop2: detected capacity change from 0 to 512 [ 113.648432][ T5027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.400197][ T5027] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.175: corrupted xattr entries [ 114.424102][ T5027] EXT4-fs (loop2): Remounting filesystem read-only [ 114.441086][ T5027] EXT4-fs (loop2): 1 truncate cleaned up [ 114.467758][ T5027] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 115.902893][ T5045] loop2: detected capacity change from 0 to 512 [ 115.956554][ T5045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.097506][ T5049] loop1: detected capacity change from 0 to 32768 [ 116.121584][ T5045] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.179: corrupted xattr entries [ 116.158036][ T5049] [ 116.158036][ T5049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.158036][ T5049] [ 116.169894][ T5045] EXT4-fs (loop2): Remounting filesystem read-only [ 116.178854][ T5045] EXT4-fs (loop2): 1 truncate cleaned up [ 116.238034][ T5051] [ 116.238034][ T5051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.238034][ T5051] [ 116.249022][ T5051] [ 116.249022][ T5051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.249022][ T5051] [ 116.259893][ T5051] [ 116.259893][ T5051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.259893][ T5051] [ 116.271160][ T5051] [ 116.271160][ T5051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.271160][ T5051] [ 116.299421][ T5051] [ 116.299421][ T5051] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.299421][ T5051] [ 116.356291][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 117.072227][ T278] [ 117.072227][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.072227][ T278] [ 117.922855][ T4300] Bluetooth: hci3: command 0x0406 tx timeout [ 118.138766][ T4187] [ 118.138766][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.138766][ T4187] [ 119.714168][ T4187] [ 119.714168][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.714168][ T4187] [ 119.836932][ T5067] device syzkaller0 entered promiscuous mode [ 119.933677][ T5063] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 119.940521][ T5063] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.949352][ T5063] vhci_hcd vhci_hcd.0: Device attached [ 119.966076][ T5063] netlink: 'syz.4.184': attribute type 12 has an invalid length. [ 120.736162][ T5066] vhci_hcd: connection closed [ 120.742071][ T4377] vhci_hcd: stop threads [ 120.756601][ T4377] vhci_hcd: release socket [ 120.778961][ T4377] vhci_hcd: disconnect device [ 120.814400][ T4296] usb 42-1: enqueue for inactive port 0 [ 120.888191][ T5076] device syzkaller0 entered promiscuous mode [ 120.977323][ T5080] loop2: detected capacity change from 0 to 512 [ 121.422600][ T4296] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 121.487676][ T5080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.516790][ T4296] usb usb42-port1: attempt power cycle [ 121.572487][ T5080] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.189: corrupted xattr entries [ 121.652298][ T5080] EXT4-fs (loop2): Remounting filesystem read-only [ 121.706291][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 121.712420][ T5080] EXT4-fs (loop2): 1 truncate cleaned up [ 121.745455][ T5080] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 121.767690][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.927664][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.025005][ T4296] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 123.210388][ T5103] loop2: detected capacity change from 0 to 32768 [ 123.217281][ T4296] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 123.228391][ T4296] usb usb42-port1: unable to enumerate USB device [ 123.255348][ T5108] loop4: detected capacity change from 0 to 512 [ 123.273260][ T5103] [ 123.273260][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.273260][ T5103] [ 123.287447][ T5103] [ 123.287447][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.287447][ T5103] [ 123.298031][ T5103] [ 123.298031][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.298031][ T5103] [ 123.308527][ T5103] [ 123.308527][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.308527][ T5103] [ 123.318983][ T5103] [ 123.318983][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.318983][ T5103] [ 123.329541][ T5103] [ 123.329541][ T5103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.329541][ T5103] [ 123.343881][ T278] [ 123.343881][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.343881][ T278] [ 123.542663][ T5108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.596287][ T5108] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.196: corrupted xattr entries [ 123.652722][ T5108] EXT4-fs (loop4): Remounting filesystem read-only [ 123.666714][ T5108] EXT4-fs (loop4): 1 truncate cleaned up [ 123.677060][ T5108] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 123.830634][ T4190] [ 123.830634][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.830634][ T4190] [ 124.147493][ T4190] [ 124.147493][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.147493][ T4190] [ 124.412695][ T5116] device syzkaller0 entered promiscuous mode [ 125.095726][ T5120] device syzkaller0 entered promiscuous mode [ 125.337262][ T5126] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 125.511544][ T5124] loop1: detected capacity change from 0 to 512 [ 125.935066][ T5129] loop0: detected capacity change from 0 to 512 [ 126.098580][ T5129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.152024][ T5129] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.203: corrupted xattr entries [ 126.209000][ T5124] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsddf,inode_readahead_blks=0x0000000000000100,,errors=continue. Quota mode: writeback. [ 126.247128][ T5129] EXT4-fs (loop0): Remounting filesystem read-only [ 126.252062][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 126.263557][ T5124] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.297277][ T5136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.376064][ T5129] EXT4-fs (loop0): 1 truncate cleaned up [ 126.404558][ T5129] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 126.475157][ T5142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 126.481713][ T5142] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 126.495548][ T5142] vhci_hcd vhci_hcd.0: Device attached [ 127.059510][ T5136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.601186][ T4300] usb 40-1: SetAddress Request (2) to port 0 [ 127.612827][ T5147] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 127.621265][ T4300] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 127.643267][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 127.687907][ T5145] netlink: 'syz.3.205': attribute type 12 has an invalid length. [ 128.628094][ T5153] lo speed is unknown, defaulting to 1000 [ 128.642170][ T5153] lo speed is unknown, defaulting to 1000 [ 128.648658][ T5153] lo speed is unknown, defaulting to 1000 [ 128.662396][ T5153] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 128.682995][ T5153] lo speed is unknown, defaulting to 1000 [ 128.690012][ T5153] lo speed is unknown, defaulting to 1000 [ 128.696652][ T5153] lo speed is unknown, defaulting to 1000 [ 128.703393][ T5153] lo speed is unknown, defaulting to 1000 [ 128.712817][ T5153] lo speed is unknown, defaulting to 1000 [ 128.834609][ T5155] loop2: detected capacity change from 0 to 32768 [ 128.846337][ T5143] vhci_hcd: connection reset by peer [ 128.852288][ T4290] vhci_hcd: stop threads [ 128.860274][ T4290] vhci_hcd: release socket [ 128.877018][ T4290] vhci_hcd: disconnect device [ 128.902696][ T5159] loop0: detected capacity change from 0 to 512 [ 128.930763][ T5155] [ 128.930763][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.930763][ T5155] [ 128.958826][ T5155] [ 128.958826][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.958826][ T5155] [ 128.969737][ T5155] [ 128.969737][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.969737][ T5155] [ 128.980318][ T5155] [ 128.980318][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.980318][ T5155] [ 128.990785][ T5155] [ 128.990785][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.990785][ T5155] [ 129.001257][ T5155] [ 129.001257][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.001257][ T5155] [ 129.013707][ T277] [ 129.013707][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.013707][ T277] [ 129.026553][ T5159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.245781][ T5159] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.210: corrupted xattr entries [ 129.259394][ T5162] device syzkaller0 entered promiscuous mode [ 129.271354][ T5159] EXT4-fs (loop0): Remounting filesystem read-only [ 129.279358][ T5159] EXT4-fs (loop0): 1 truncate cleaned up [ 129.285604][ T5159] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 129.453904][ T4190] [ 129.453904][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.453904][ T4190] [ 129.478646][ T4190] [ 129.478646][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.478646][ T4190] [ 130.044244][ T5169] device syzkaller0 entered promiscuous mode [ 130.838696][ T5181] loop1: detected capacity change from 0 to 512 [ 131.003573][ T5189] siw: device registration error -23 [ 131.780334][ T5186] device syzkaller0 entered promiscuous mode [ 131.799725][ T5181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.897300][ T5181] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.217: corrupted xattr entries [ 131.942142][ T5181] EXT4-fs (loop1): Remounting filesystem read-only [ 131.967553][ T5181] EXT4-fs (loop1): 1 truncate cleaned up [ 131.991825][ T5181] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 132.148930][ T5202] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 133.705348][ T4300] usb 40-1: device descriptor read/8, error -110 [ 133.713419][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.720194][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.741165][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 134.659212][ T5215] loop2: detected capacity change from 0 to 512 [ 134.660323][ T5216] loop1: detected capacity change from 0 to 512 [ 134.746344][ T5216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.765226][ T5215] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.196956][ T4300] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 135.264822][ T4300] usb usb40-port1: attempt power cycle [ 135.289509][ T5215] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.225: corrupted xattr entries [ 135.302032][ T5218] device syzkaller0 entered promiscuous mode [ 135.348418][ T5215] EXT4-fs (loop2): Remounting filesystem read-only [ 135.366334][ T5215] EXT4-fs (loop2): 1 truncate cleaned up [ 135.372714][ T5216] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.234: corrupted xattr entries [ 135.391967][ T5215] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 135.402135][ T5216] EXT4-fs (loop1): Remounting filesystem read-only [ 135.683084][ T5227] loop3: detected capacity change from 0 to 32768 [ 135.689963][ T5216] EXT4-fs (loop1): 1 truncate cleaned up [ 136.027205][ T4300] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 136.041217][ T5216] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 136.206027][ T5227] [ 136.206027][ T5227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.206027][ T5227] [ 136.939275][ T4300] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 137.007555][ T5233] [ 137.007555][ T5233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.007555][ T5233] [ 137.018403][ T5233] [ 137.018403][ T5233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.018403][ T5233] [ 137.029191][ T5233] [ 137.029191][ T5233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.029191][ T5233] [ 137.039993][ T5233] [ 137.039993][ T5233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.039993][ T5233] [ 137.050733][ T5233] [ 137.050733][ T5233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.050733][ T5233] [ 137.446341][ T278] [ 137.446341][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.446341][ T278] [ 138.174197][ T4300] usb usb40-port1: unable to enumerate USB device [ 138.343939][ T4197] [ 138.343939][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.343939][ T4197] [ 138.355446][ T4197] [ 138.355446][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.355446][ T4197] [ 138.652995][ T5253] siw: device registration error -23 [ 140.538498][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 140.591317][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.928773][ T5265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.252891][ T5270] tipc: Failed to remove unknown binding: 66,0,0/0:1561271983/1561271985 [ 141.271809][ T5270] tipc: Failed to remove unknown binding: 66,0,0/0:1561271983/1561271984 [ 141.292821][ T5276] loop4: detected capacity change from 0 to 512 [ 141.298119][ T5274] device syzkaller0 entered promiscuous mode [ 141.330120][ T5270] tipc: Failed to remove unknown binding: 66,0,0/0:1561271983/1561271985 [ 141.429993][ T5270] tipc: Failed to remove unknown binding: 66,0,0/0:1561271983/1561271984 [ 141.780392][ T5276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.890848][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 141.943034][ T5276] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.240: corrupted xattr entries [ 141.956179][ T5276] EXT4-fs (loop4): Remounting filesystem read-only [ 141.970767][ T5276] EXT4-fs (loop4): 1 truncate cleaned up [ 141.976755][ T5276] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 142.940981][ T5292] loop4: detected capacity change from 0 to 512 [ 143.107737][ T5295] loop2: detected capacity change from 0 to 32768 [ 143.129673][ T5292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.168047][ T5295] [ 143.168047][ T5295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.168047][ T5295] [ 143.243359][ T5297] [ 143.243359][ T5297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.243359][ T5297] [ 143.254324][ T5297] [ 143.254324][ T5297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.254324][ T5297] [ 143.265165][ T5297] [ 143.265165][ T5297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.265165][ T5297] [ 143.275962][ T5297] [ 143.275962][ T5297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.275962][ T5297] [ 143.302899][ T5297] [ 143.302899][ T5297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.302899][ T5297] [ 143.826225][ T5292] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.244: corrupted xattr entries [ 143.943986][ T5292] EXT4-fs (loop4): Remounting filesystem read-only [ 144.027196][ T5292] EXT4-fs (loop4): 1 truncate cleaned up [ 144.084369][ T5292] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 144.134855][ T277] [ 144.134855][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.134855][ T277] [ 145.069949][ T4190] [ 145.069949][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.069949][ T4190] [ 145.096122][ T5308] siw: device registration error -23 [ 145.107050][ T4190] [ 145.107050][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.107050][ T4190] [ 145.286663][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 145.333780][ T5315] device syzkaller0 entered promiscuous mode [ 145.495763][ T5321] siw: device registration error -23 [ 146.580583][ T5333] loop2: detected capacity change from 0 to 512 [ 146.663127][ T5333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.981508][ T5333] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.258: corrupted xattr entries [ 147.163617][ T5333] EXT4-fs (loop2): Remounting filesystem read-only [ 147.312047][ T5333] EXT4-fs (loop2): 1 truncate cleaned up [ 147.336051][ T5333] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 147.366380][ T5345] loop1: detected capacity change from 0 to 128 [ 147.498285][ T5346] loop3: detected capacity change from 0 to 32768 [ 147.566550][ T5350] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 147.611421][ T5345] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.843071][ T5345] EXT4-fs (loop1): inline encryption not supported [ 148.545862][ T5345] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 148.601576][ T5345] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.693126][ T5346] [ 148.693126][ T5346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.693126][ T5346] [ 148.818716][ T5346] [ 148.818716][ T5346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.818716][ T5346] [ 148.829695][ T5346] [ 148.829695][ T5346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.829695][ T5346] [ 148.840273][ T5346] [ 148.840273][ T5346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.840273][ T5346] [ 148.850886][ T5346] [ 148.850886][ T5346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.850886][ T5346] [ 148.861526][ T5346] [ 148.861526][ T5346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.861526][ T5346] [ 148.874720][ T277] [ 148.874720][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.874720][ T277] [ 149.426828][ T4197] [ 149.426828][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.426828][ T4197] [ 149.450954][ T4197] [ 149.450954][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.450954][ T4197] [ 149.474432][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 149.618727][ T5382] input: syz1 as /devices/virtual/input/input25 [ 149.743568][ T5384] device syzkaller0 entered promiscuous mode [ 149.791359][ T5385] tipc: Failed to remove unknown binding: 66,0,0/0:2897585952/2897585954 [ 149.803983][ T5385] tipc: Failed to remove unknown binding: 66,0,0/0:2897585952/2897585953 [ 150.782493][ T5385] tipc: Failed to remove unknown binding: 66,0,0/0:2897585952/2897585954 [ 150.803094][ T5385] tipc: Failed to remove unknown binding: 66,0,0/0:2897585952/2897585953 [ 151.878220][ T5407] siw: device registration error -23 [ 151.906128][ T5410] loop0: detected capacity change from 0 to 512 [ 152.142624][ T5415] loop3: detected capacity change from 0 to 32768 [ 152.157003][ T5410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.180529][ T5415] [ 152.180529][ T5415] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.180529][ T5415] [ 152.261230][ T5417] [ 152.261230][ T5417] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.261230][ T5417] [ 152.273828][ T5417] [ 152.273828][ T5417] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.273828][ T5417] [ 152.284996][ T5417] [ 152.284996][ T5417] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.284996][ T5417] [ 152.295905][ T5417] [ 152.295905][ T5417] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.295905][ T5417] [ 153.031529][ T5417] [ 153.031529][ T5417] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.031529][ T5417] [ 153.046090][ T277] [ 153.046090][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.046090][ T277] [ 153.489624][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 153.502619][ T4197] [ 153.502619][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.502619][ T4197] [ 153.515106][ T4197] [ 153.515106][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.515106][ T4197] [ 153.516412][ T5420] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 153.597941][ T5410] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.276: corrupted xattr entries [ 153.661244][ T5410] EXT4-fs (loop0): Remounting filesystem read-only [ 153.722317][ T5410] EXT4-fs (loop0): 1 truncate cleaned up [ 153.728094][ T5410] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 153.864233][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 154.350716][ T5411] [U]  [ 154.789727][ T5453] loop0: detected capacity change from 0 to 512 [ 154.908663][ T5453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.045832][ T5460] device syzkaller0 entered promiscuous mode [ 155.054254][ T5453] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.293: corrupted xattr entries [ 155.071328][ T5453] EXT4-fs (loop0): Remounting filesystem read-only [ 155.083252][ T5453] EXT4-fs (loop0): 1 truncate cleaned up [ 155.089151][ T5453] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 156.599448][ T5485] siw: device registration error -23 [ 156.718079][ T5457] loop3: detected capacity change from 0 to 32768 [ 156.784483][ T5488] siw: device registration error -23 [ 157.059047][ T5497] loop1: detected capacity change from 0 to 32768 [ 157.067275][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 157.120067][ T5497] [ 157.120067][ T5497] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.120067][ T5497] [ 158.785636][ T5507] [ 158.785636][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.785636][ T5507] [ 158.796645][ T5507] [ 158.796645][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.796645][ T5507] [ 159.683974][ T5507] [ 159.683974][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.683974][ T5507] [ 159.695025][ T5507] [ 159.695025][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.695025][ T5507] [ 159.705907][ T5507] [ 159.705907][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.705907][ T5507] [ 159.720749][ T277] [ 159.720749][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.720749][ T277] [ 160.340280][ T4187] [ 160.340280][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.340280][ T4187] [ 160.351228][ T4187] [ 160.351228][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.351228][ T4187] [ 160.388731][ T5513] device syzkaller0 entered promiscuous mode [ 160.790448][ T5528] loop3: detected capacity change from 0 to 512 [ 161.164354][ T5528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.464403][ T5522] tipc: Failed to remove unknown binding: 66,0,0/0:3873642312/3873642314 [ 161.551272][ T5533] netlink: 'syz.0.301': attribute type 12 has an invalid length. [ 161.562369][ T5522] tipc: Failed to remove unknown binding: 66,0,0/0:3873642312/3873642313 [ 161.576203][ T5522] tipc: Failed to remove unknown binding: 66,0,0/0:3873642312/3873642314 [ 161.586002][ T5522] tipc: Failed to remove unknown binding: 66,0,0/0:3873642312/3873642313 [ 161.635967][ T5528] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.299: corrupted xattr entries [ 161.650012][ T5533] netlink: 'syz.0.301': attribute type 4 has an invalid length. [ 161.696922][ T5528] EXT4-fs (loop3): Remounting filesystem read-only [ 161.708467][ T5528] EXT4-fs (loop3): 1 truncate cleaned up [ 161.714630][ T5528] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 161.894471][ T5543] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 162.785722][ T4191] lo speed is unknown, defaulting to 1000 [ 162.836605][ T5546] siw: device registration error -23 [ 163.220476][ T5552] loop4: detected capacity change from 0 to 32768 [ 163.282056][ T5552] [ 163.282056][ T5552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.282056][ T5552] [ 163.411958][ T5560] [ 163.411958][ T5560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.411958][ T5560] [ 163.423836][ T5560] [ 163.423836][ T5560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.423836][ T5560] [ 163.434752][ T5560] [ 163.434752][ T5560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.434752][ T5560] [ 163.445648][ T5560] [ 163.445648][ T5560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.445648][ T5560] [ 163.473040][ T5560] [ 163.473040][ T5560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 163.473040][ T5560] [ 164.209562][ T277] [ 164.209562][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.209562][ T277] [ 165.964348][ T4189] [ 165.964348][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.964348][ T4189] [ 166.015665][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 166.051251][ T4189] [ 166.051251][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.051251][ T4189] [ 166.071882][ T5573] device syzkaller0 entered promiscuous mode [ 166.480664][ T5592] loop0: detected capacity change from 0 to 512 [ 166.637449][ T5592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.233863][ T5592] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.313: corrupted xattr entries [ 167.282262][ T5592] EXT4-fs (loop0): Remounting filesystem read-only [ 167.303581][ T5592] EXT4-fs (loop0): 1 truncate cleaned up [ 167.357610][ T5592] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 168.262693][ T5618] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 168.535750][ T5626] siw: device registration error -23 [ 169.754377][ T5632] loop1: detected capacity change from 0 to 512 [ 169.826902][ T5632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.982027][ T5638] loop4: detected capacity change from 0 to 32768 [ 170.022622][ T5632] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.317: corrupted xattr entries [ 170.040383][ T5638] [ 170.040383][ T5638] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.040383][ T5638] [ 170.058819][ T5641] loop0: detected capacity change from 0 to 1024 [ 170.074659][ T5632] EXT4-fs (loop1): Remounting filesystem read-only [ 170.147269][ T5632] EXT4-fs (loop1): 1 truncate cleaned up [ 170.165566][ T5646] [ 170.165566][ T5646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.165566][ T5646] [ 170.176631][ T5646] [ 170.176631][ T5646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.176631][ T5646] [ 170.187578][ T5646] [ 170.187578][ T5646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.187578][ T5646] [ 170.198582][ T5646] [ 170.198582][ T5646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.198582][ T5646] [ 170.229538][ T5646] [ 170.229538][ T5646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.229538][ T5646] [ 170.318548][ T5632] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 170.473383][ T5641] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 170.641851][ T4191] Bluetooth: hci4: command 0x0406 tx timeout [ 170.650153][ T4191] Bluetooth: hci1: command 0x0406 tx timeout [ 170.762863][ T4191] Bluetooth: hci2: command 0x0406 tx timeout [ 170.835054][ T5641] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.878432][ T4191] Bluetooth: hci3: command 0x0406 tx timeout [ 171.385712][ T4191] Bluetooth: hci0: command 0x0406 tx timeout [ 171.436471][ T277] [ 171.436471][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.436471][ T277] [ 171.494852][ T26] audit: type=1800 audit(1781824690.616:4): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.319" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 171.539596][ T5641] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.319: lblock 0 mapped to illegal pblock 0 (length 1) [ 172.203235][ T26] audit: type=1800 audit(1781824691.326:5): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.319" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 172.288833][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 172.419006][ T4189] [ 172.419006][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.419006][ T4189] [ 172.460044][ T4189] [ 172.460044][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.460044][ T4189] [ 172.499899][ T5667] device syzkaller0 entered promiscuous mode [ 172.612991][ T5674] device syzkaller0 entered promiscuous mode [ 174.074774][ T5687] loop2: detected capacity change from 0 to 512 [ 174.202621][ T5687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.425522][ T5687] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.329: corrupted xattr entries [ 174.551709][ T5687] EXT4-fs (loop2): Remounting filesystem read-only [ 174.569724][ T5707] loop3: detected capacity change from 0 to 512 [ 175.331746][ T5687] EXT4-fs (loop2): 1 truncate cleaned up [ 175.337427][ T5687] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 175.411532][ T5707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.489134][ T5707] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.332: corrupted xattr entries [ 175.617961][ T5731] device syzkaller0 entered promiscuous mode [ 175.738160][ T5723] loop0: detected capacity change from 0 to 32768 [ 175.751125][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 175.779339][ T5707] EXT4-fs (loop3): Remounting filesystem read-only [ 175.800457][ T5707] EXT4-fs (loop3): 1 truncate cleaned up [ 175.804915][ T5723] [ 175.804915][ T5723] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.804915][ T5723] [ 175.840754][ T5707] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 176.180181][ T5729] [ 176.180181][ T5729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.180181][ T5729] [ 176.191083][ T5729] [ 176.191083][ T5729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.191083][ T5729] [ 176.202053][ T5729] [ 176.202053][ T5729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.202053][ T5729] [ 176.212820][ T5729] [ 176.212820][ T5729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.212820][ T5729] [ 176.223686][ T5729] [ 176.223686][ T5729] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.223686][ T5729] [ 176.244362][ T277] [ 176.244362][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.244362][ T277] [ 177.730098][ T4188] [ 177.730098][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.730098][ T4188] [ 177.951790][ T4188] [ 177.951790][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 177.951790][ T4188] [ 177.971988][ T5760] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 178.774020][ T5754] loop2: detected capacity change from 0 to 2048 [ 179.450741][ T5754] NILFS (loop2): invalid segment: Magic number mismatch [ 179.475778][ T5754] NILFS (loop2): trying rollback from an earlier position [ 180.292010][ T5754] NILFS (loop2): recovery complete [ 180.355612][ T5783] loop4: detected capacity change from 0 to 512 [ 180.388844][ T5784] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.434249][ T5789] loop3: detected capacity change from 0 to 512 [ 180.536316][ T5783] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.538111][ T5789] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.954134][ T5783] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.348: corrupted xattr entries [ 180.969780][ T5789] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.350: corrupted xattr entries [ 180.972166][ T5783] EXT4-fs (loop4): Remounting filesystem read-only [ 181.000431][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 181.022202][ T5789] EXT4-fs (loop3): Remounting filesystem read-only [ 181.029826][ T5789] EXT4-fs (loop3): 1 truncate cleaned up [ 181.036574][ T5789] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 181.060008][ T5783] EXT4-fs (loop4): 1 truncate cleaned up [ 181.066286][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 181.234545][ T5803] loop1: detected capacity change from 0 to 32768 [ 181.458284][ T5803] [ 181.458284][ T5803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.458284][ T5803] [ 181.863725][ T5808] [ 181.863725][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.863725][ T5808] [ 181.874671][ T5808] [ 181.874671][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.874671][ T5808] [ 181.885510][ T5808] [ 181.885510][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.885510][ T5808] [ 181.896384][ T5808] [ 181.896384][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.896384][ T5808] [ 181.925097][ T5808] [ 181.925097][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.925097][ T5808] [ 182.646820][ T278] [ 182.646820][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.646820][ T278] [ 183.118641][ T4187] [ 183.118641][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.118641][ T4187] [ 183.138236][ T4187] [ 183.138236][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.138236][ T4187] [ 183.221567][ T5812] device syzkaller0 entered promiscuous mode [ 184.156412][ T5823] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 185.274377][ T5823] team0: Device veth1_vlan failed to register rx_handler [ 185.704106][ T5843] mmap: syz.1.358 (5843) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 186.470418][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 186.505701][ T5823] syz.0.356 (5823) used greatest stack depth: 19760 bytes left [ 186.636023][ T5851] siw: device registration error -23 [ 187.475897][ T5855] loop1: detected capacity change from 0 to 512 [ 187.486962][ T5858] loop3: detected capacity change from 0 to 512 [ 187.578881][ T5858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.180197][ T5855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.367229][ T5863] loop4: detected capacity change from 0 to 32768 [ 188.403280][ T5858] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.363: corrupted xattr entries [ 188.437110][ T5855] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.362: corrupted xattr entries [ 188.455268][ T5858] EXT4-fs (loop3): Remounting filesystem read-only [ 188.455620][ T5863] [ 188.455620][ T5863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.455620][ T5863] [ 188.481168][ T5858] EXT4-fs (loop3): 1 truncate cleaned up [ 188.491067][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 188.539357][ T5855] EXT4-fs (loop1): Remounting filesystem read-only [ 188.552198][ T5866] [ 188.552198][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.552198][ T5866] [ 188.563353][ T5866] [ 188.563353][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.563353][ T5866] [ 188.574282][ T5866] [ 188.574282][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.574282][ T5866] [ 188.585097][ T5866] [ 188.585097][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.585097][ T5866] [ 188.595982][ T5866] [ 188.595982][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.595982][ T5866] [ 188.629363][ T278] [ 188.629363][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.629363][ T278] [ 188.702808][ T5855] EXT4-fs (loop1): 1 truncate cleaned up [ 188.828313][ T5855] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 188.910829][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 190.546222][ T4189] [ 190.546222][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.546222][ T4189] [ 190.732991][ T4189] [ 190.732991][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.732991][ T4189] [ 191.815494][ T5901] device syzkaller0 entered promiscuous mode [ 192.014342][ T5906] siw: device registration error -23 [ 193.000417][ T5914] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.070100][ T5916] loop1: detected capacity change from 0 to 512 [ 193.209962][ T5914] loop4: detected capacity change from 0 to 512 [ 193.269145][ T5916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.299585][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 193.350420][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 193.366423][ T5914] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.486441][ T5916] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.378: corrupted xattr entries [ 193.729692][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 193.784722][ T5916] EXT4-fs (loop1): 1 truncate cleaned up [ 193.993460][ T5916] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 194.122715][ T5932] loop0: detected capacity change from 0 to 512 [ 194.170852][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177311][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.256476][ T5932] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.140299][ T5932] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.381: corrupted xattr entries [ 195.191165][ T5932] EXT4-fs (loop0): Remounting filesystem read-only [ 195.203177][ T5932] EXT4-fs (loop0): 1 truncate cleaned up [ 195.223885][ T5932] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 195.509850][ T5947] loop2: detected capacity change from 0 to 64 [ 195.609952][ T5954] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 196.391212][ T26] audit: type=1800 audit(1781824715.506:6): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.385" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 196.556946][ T5959] siw: device registration error -23 [ 197.287922][ T5964] loop2: detected capacity change from 0 to 1024 [ 197.303084][ T5961] device syzkaller0 entered promiscuous mode [ 197.331029][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 197.475763][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 197.512107][ T5964] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.589224][ T26] audit: type=1800 audit(1781824716.706:7): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 197.625153][ T26] audit: type=1800 audit(1781824716.716:8): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 197.663137][ T5963] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.706815][ T5964] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.749308][ T5964] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.877902][ T26] audit: type=1800 audit(1781824716.996:9): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 197.883819][ T5964] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.037444][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 198.256521][ T5984] loop2: detected capacity change from 0 to 512 [ 198.331335][ T5981] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.375628][ T5984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.413774][ T5984] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.393: corrupted xattr entries [ 198.449741][ T5984] EXT4-fs (loop2): Remounting filesystem read-only [ 198.456986][ T5984] EXT4-fs (loop2): 1 truncate cleaned up [ 198.476712][ T5984] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 198.607837][ T5991] loop1: detected capacity change from 0 to 512 [ 198.691818][ T5991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.810368][ T5991] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.397: corrupted xattr entries [ 198.851239][ T5991] EXT4-fs (loop1): Remounting filesystem read-only [ 198.881732][ T5991] EXT4-fs (loop1): 1 truncate cleaned up [ 198.911755][ T5991] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 199.052790][ T5998] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 199.918262][ T6004] device syzkaller0 entered promiscuous mode [ 200.442151][ T6015] siw: device registration error -23 [ 201.063499][ T6020] device vlan0 entered promiscuous mode [ 201.297509][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 201.765109][ T6035] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 201.846726][ T6039] loop4: detected capacity change from 0 to 512 [ 201.910675][ T6041] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 202.152922][ T6039] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.697074][ T6039] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.410: corrupted xattr entries [ 202.812273][ T6039] EXT4-fs (loop4): Remounting filesystem read-only [ 202.850909][ T6047] loop2: detected capacity change from 0 to 512 [ 202.894052][ T6039] EXT4-fs (loop4): 1 truncate cleaned up [ 202.899749][ T6039] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 203.118892][ T6047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.661832][ T6047] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.412: corrupted xattr entries [ 203.715790][ T6047] EXT4-fs (loop2): Remounting filesystem read-only [ 203.725631][ T6047] EXT4-fs (loop2): 1 truncate cleaned up [ 203.745556][ T6054] device syzkaller0 entered promiscuous mode [ 203.841768][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 204.466468][ T6065] siw: device registration error -23 [ 205.029839][ T6063] loop0: detected capacity change from 0 to 256 [ 205.186420][ T6063] FAT-fs (loop0): Unrecognized mount option "umask=00000000000000000"00004" or missing value [ 206.328326][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 206.449296][ T6086] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 208.270010][ T6098] device syzkaller0 entered promiscuous mode [ 208.422239][ T6100] loop4: detected capacity change from 0 to 512 [ 208.504029][ T6100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.667744][ T6100] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.427: corrupted xattr entries [ 208.889270][ T6100] EXT4-fs (loop4): Remounting filesystem read-only [ 208.907500][ T6100] EXT4-fs (loop4): 1 truncate cleaned up [ 209.074852][ T6114] siw: device registration error -23 [ 209.742499][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 210.021778][ T6121] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.890605][ T6126] loop4: detected capacity change from 0 to 512 [ 210.999618][ T6126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.110221][ T6126] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.433: corrupted xattr entries [ 211.149037][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 211.199511][ T6126] EXT4-fs (loop4): Remounting filesystem read-only [ 211.222421][ T6126] EXT4-fs (loop4): 1 truncate cleaned up [ 211.228503][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 211.325801][ T6136] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.811652][ T6143] loop4: detected capacity change from 0 to 512 [ 211.979512][ T6143] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.075326][ T6144] device syzkaller0 entered promiscuous mode [ 212.153890][ T6143] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.436: bad orphan inode 131083 [ 212.300512][ T6143] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 212.460339][ T6143] EXT4-fs (loop4): shut down requested (0) [ 213.056163][ T6162] siw: device registration error -23 [ 213.319121][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 213.754355][ T6165] loop4: detected capacity change from 0 to 512 [ 213.970149][ T6172] loop3: detected capacity change from 0 to 512 [ 213.992021][ T6165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.574283][ T6177] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 214.777164][ T6172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.904663][ T6165] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.444: corrupted xattr entries [ 214.994119][ T6165] EXT4-fs (loop4): Remounting filesystem read-only [ 215.537175][ T6172] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.446: corrupted xattr entries [ 215.537390][ T6165] EXT4-fs (loop4): 1 truncate cleaned up [ 215.594003][ T6172] EXT4-fs (loop3): Remounting filesystem read-only [ 215.639935][ T6172] EXT4-fs (loop3): 1 truncate cleaned up [ 215.716242][ T6172] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 215.757286][ T6165] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 216.314820][ T6198] loop1: detected capacity change from 0 to 32768 [ 216.395601][ T6198] [ 216.395601][ T6198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.395601][ T6198] [ 216.413381][ T6194] [ 216.413381][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.413381][ T6194] [ 216.452156][ T6194] [ 216.452156][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.452156][ T6194] [ 216.541815][ T6194] [ 216.541815][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.541815][ T6194] [ 216.571421][ T6194] [ 216.571421][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.571421][ T6194] [ 216.582128][ T6194] [ 216.582128][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.582128][ T6194] [ 216.594683][ T277] [ 216.594683][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.594683][ T277] [ 216.623246][ T6209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 219.913002][ T6227] loop2: detected capacity change from 0 to 512 [ 219.965551][ T4187] [ 219.965551][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.965551][ T4187] [ 219.980882][ T6229] device syzkaller0 entered promiscuous mode [ 220.041928][ T4187] [ 220.041928][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.041928][ T4187] [ 220.061376][ T6227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.123056][ T6227] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.462: bad orphan inode 131083 [ 220.143077][ T6227] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 220.161186][ T6234] loop4: detected capacity change from 0 to 512 [ 220.227428][ T6234] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.311862][ T6227] EXT4-fs (loop2): shut down requested (0) [ 220.361505][ T6234] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.465: corrupted xattr entries [ 220.519086][ T6234] EXT4-fs (loop4): Remounting filesystem read-only [ 220.537737][ T6234] EXT4-fs (loop4): 1 truncate cleaned up [ 220.547561][ T6234] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 220.838557][ T6245] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 223.952940][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.116786][ T6274] loop2: detected capacity change from 0 to 32768 [ 224.179519][ T6274] [ 224.179519][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.179519][ T6274] [ 224.223776][ T6274] [ 224.223776][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.223776][ T6274] [ 224.234431][ T6274] [ 224.234431][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.234431][ T6274] [ 224.245061][ T6274] [ 224.245061][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.245061][ T6274] [ 224.255639][ T6274] [ 224.255639][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.255639][ T6274] [ 224.266155][ T6274] [ 224.266155][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.266155][ T6274] [ 224.280012][ T277] [ 224.280012][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.280012][ T277] [ 224.318835][ T6277] device syzkaller0 entered promiscuous mode [ 224.587990][ T4190] [ 224.587990][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.587990][ T4190] [ 224.614257][ T4190] [ 224.614257][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.614257][ T4190] [ 224.745063][ T6283] loop3: detected capacity change from 0 to 512 [ 224.792036][ T6283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.031746][ T4237] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 225.037095][ T6283] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.478: corrupted xattr entries [ 225.200352][ T6283] EXT4-fs (loop3): Remounting filesystem read-only [ 225.223601][ T6283] EXT4-fs (loop3): 1 truncate cleaned up [ 225.362893][ T6283] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 225.401802][ T4237] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 225.409928][ T4237] usb 2-1: config 0 has no interface number 0 [ 225.461971][ T4237] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.491930][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.511417][ T4237] usb 2-1: config 0 descriptor?? [ 225.620880][ T6292] siw: device registration error -23 [ 226.338442][ T4237] cp210x 2-1:0.32: cp210x converter detected [ 227.288657][ T4237] cp210x 2-1:0.32: failed to get vendor val 0x000e size 3: -71 [ 227.299527][ T4237] usb 2-1: cp210x converter now attached to ttyUSB0 [ 227.308463][ T4237] usb 2-1: USB disconnect, device number 3 [ 227.349269][ T4237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.393355][ T4237] cp210x 2-1:0.32: device disconnected [ 227.828557][ T6313] device syzkaller0 entered promiscuous mode [ 228.252477][ T6317] loop3: detected capacity change from 0 to 32768 [ 228.301192][ T6317] [ 228.301192][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.301192][ T6317] [ 228.319674][ T6317] [ 228.319674][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.319674][ T6317] [ 228.330675][ T6317] [ 228.330675][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.330675][ T6317] [ 228.341329][ T6317] [ 228.341329][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.341329][ T6317] [ 228.351889][ T6317] [ 228.351889][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.351889][ T6317] [ 228.362497][ T6317] [ 228.362497][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.362497][ T6317] [ 228.384019][ T277] [ 228.384019][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.384019][ T277] [ 228.460702][ T6327] siw: device registration error -23 [ 229.268615][ T6329] loop0: detected capacity change from 0 to 512 [ 229.465210][ T6329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.496903][ T4197] [ 229.496903][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.496903][ T4197] [ 229.541839][ T4197] [ 229.541839][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.541839][ T4197] [ 229.572141][ T6329] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.491: corrupted xattr entries [ 229.609044][ T6335] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 230.360399][ T6329] EXT4-fs (loop0): Remounting filesystem read-only [ 230.380300][ T6329] EXT4-fs (loop0): 1 truncate cleaned up [ 230.387336][ T6329] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 230.961754][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 231.212568][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 231.342663][ T4233] usb 4-1: config 0 has no interfaces? [ 231.349802][ T4233] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.361811][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.392296][ T4233] usb 4-1: config 0 descriptor?? [ 231.521743][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 231.638744][ T6341] udc-core: couldn't find an available UDC or it's busy [ 231.665964][ T6341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 231.697922][ T23] usb 4-1: USB disconnect, device number 2 [ 233.027344][ T6371] device syzkaller0 entered promiscuous mode [ 233.132659][ T6376] loop1: detected capacity change from 0 to 256 [ 233.145418][ T6376] exfat: Unknown parameter ' 聫H' [ 234.416053][ T6383] loop2: detected capacity change from 0 to 512 [ 234.535881][ T6383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.621498][ T6383] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.507: corrupted xattr entries [ 234.639290][ T6383] EXT4-fs (loop2): Remounting filesystem read-only [ 234.647677][ T6383] EXT4-fs (loop2): 1 truncate cleaned up [ 234.656830][ T6383] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 237.391695][ T6413] siw: device registration error -23 [ 237.904944][ T6418] loop1: detected capacity change from 0 to 256 [ 237.953668][ T6418] exfat: Unknown parameter ' 聫H' [ 239.498071][ T6430] loop1: detected capacity change from 0 to 512 [ 239.676276][ T6430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.720425][ T6436] siw: device registration error -23 [ 240.627539][ T6430] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.520: corrupted xattr entries [ 240.649992][ T6430] EXT4-fs (loop1): Remounting filesystem read-only [ 240.657367][ T6430] EXT4-fs (loop1): 1 truncate cleaned up [ 240.663630][ T6430] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 240.745098][ T6447] process 'syz.4.523' launched './file1' with NULL argv: empty string added [ 241.742970][ T6460] loop2: detected capacity change from 0 to 256 [ 241.783644][ T6460] exfat: Unknown parameter ' 聫H' [ 242.589424][ T6460] loop2: detected capacity change from 0 to 32768 [ 243.120498][ T6460] JBD2: Ignoring recovery information on journal [ 243.331859][ T6460] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 243.653147][ T6469] siw: device registration error -23 [ 244.430227][ T6468] device syzkaller0 entered promiscuous mode [ 244.454080][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 244.980436][ T6483] siw: device registration error -23 [ 247.748383][ T6505] loop2: detected capacity change from 0 to 64 [ 249.502117][ T6507] loop3: detected capacity change from 0 to 512 [ 249.674318][ T6511] siw: device registration error -23 [ 250.511586][ T6507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.657694][ T6523] siw: device registration error -23 [ 251.361410][ T6507] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.543: corrupted xattr entries [ 251.374604][ T6519] device syzkaller0 entered promiscuous mode [ 251.392357][ T6507] EXT4-fs (loop3): Remounting filesystem read-only [ 251.440207][ T6507] EXT4-fs (loop3): 1 truncate cleaned up [ 251.454480][ T6507] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 253.359617][ T6539] sg_write: data in/out 32734/24 bytes for SCSI command 0x0-- guessing data in; [ 253.359617][ T6539] program syz.2.553 not setting count and/or reply_len properly [ 253.701135][ T6554] siw: device registration error -23 [ 254.626256][ T6560] siw: device registration error -23 [ 255.642617][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649414][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.343954][ T6570] device syzkaller0 entered promiscuous mode [ 258.236804][ T6585] loop4: detected capacity change from 0 to 64 [ 259.718867][ T6587] loop0: detected capacity change from 0 to 512 [ 259.784665][ T6587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 259.863864][ T6587] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.568: corrupted xattr entries [ 259.894743][ T6587] EXT4-fs (loop0): Remounting filesystem read-only [ 259.904701][ T6587] EXT4-fs (loop0): 1 truncate cleaned up [ 259.910422][ T6587] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 260.583804][ T6580] hfs: request for non-existent node 8 in B*Tree [ 260.590423][ T6580] hfs: request for non-existent node 8 in B*Tree [ 260.758618][ T26] audit: type=1326 audit(1781824779.876:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba8e6e59 code=0x7ffc0000 [ 260.856736][ T26] audit: type=1326 audit(1781824779.876:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 260.931348][ T4363] attempt to access beyond end of device [ 260.931348][ T4363] loop4: rw=1, want=162, limit=64 [ 260.991534][ T4363] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 261.226543][ T4363] attempt to access beyond end of device [ 261.226543][ T4363] loop4: rw=1, want=163, limit=64 [ 261.228486][ T26] audit: type=1326 audit(1781824779.876:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 261.264173][ T4363] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 261.297629][ T4363] attempt to access beyond end of device [ 261.297629][ T4363] loop4: rw=1, want=164, limit=64 [ 261.334828][ T4363] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 261.363959][ T4363] attempt to access beyond end of device [ 261.363959][ T4363] loop4: rw=1, want=168, limit=64 [ 261.487890][ T4363] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 261.517087][ T26] audit: type=1326 audit(1781824779.876:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 261.540949][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.617368][ T4363] attempt to access beyond end of device [ 261.617368][ T4363] loop4: rw=1, want=170, limit=64 [ 261.658021][ T4363] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 261.660809][ T6598] 0x0000fffffffd-0x00010000fffd : "" [ 261.676099][ T4363] attempt to access beyond end of device [ 261.676099][ T4363] loop4: rw=1, want=172, limit=64 [ 261.691062][ T26] audit: type=1326 audit(1781824779.876:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 261.715373][ T6598] mtd: partition "" is out of reach -- disabled [ 261.733982][ T4363] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 261.755793][ T4363] attempt to access beyond end of device [ 261.755793][ T4363] loop4: rw=1, want=173, limit=64 [ 262.075201][ T6605] siw: device registration error -23 [ 262.086452][ T6598] ftl_cs: FTL header not found. [ 262.105796][ T26] audit: type=1326 audit(1781824779.876:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 262.166864][ T4363] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 262.291780][ T4363] attempt to access beyond end of device [ 262.291780][ T4363] loop4: rw=1, want=174, limit=64 [ 262.461744][ T4363] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 262.521331][ T26] audit: type=1326 audit(1781824779.876:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 262.576262][ T4363] attempt to access beyond end of device [ 262.576262][ T4363] loop4: rw=1, want=175, limit=64 [ 262.586962][ T4363] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 262.601137][ T4363] attempt to access beyond end of device [ 262.601137][ T4363] loop4: rw=1, want=176, limit=64 [ 262.611907][ T4363] Buffer I/O error on dev loop4, logical block 175, lost async page write [ 262.713103][ T26] audit: type=1326 audit(1781824779.876:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 262.736998][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.106287][ T26] audit: type=1326 audit(1781824779.876:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 263.282456][ T26] audit: type=1326 audit(1781824779.876:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.1.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bba8e6aeb code=0x7ffc0000 [ 263.306334][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.856538][ T6627] loop0: detected capacity change from 0 to 64 [ 264.971578][ T6639] loop0: detected capacity change from 0 to 64 [ 266.196610][ T6650] siw: device registration error -23 [ 266.425957][ T154] handle_bad_sector: 818 callbacks suppressed [ 266.425971][ T154] attempt to access beyond end of device [ 266.425971][ T154] loop0: rw=1, want=162, limit=64 [ 266.554230][ T6655] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 266.703206][ T154] buffer_io_error: 758 callbacks suppressed [ 266.703239][ T154] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 266.720577][ T154] attempt to access beyond end of device [ 266.720577][ T154] loop0: rw=1, want=163, limit=64 [ 266.733325][ T154] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 266.743933][ T154] attempt to access beyond end of device [ 266.743933][ T154] loop0: rw=1, want=164, limit=64 [ 267.658993][ T154] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 267.677340][ T6660] loop2: detected capacity change from 0 to 512 [ 267.792634][ T6665] siw: device registration error -23 [ 267.798924][ T6660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.621720][ T154] attempt to access beyond end of device [ 268.621720][ T154] loop0: rw=1, want=168, limit=64 [ 268.658323][ T154] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 268.668634][ T6664] 0x0000fffffffd-0x00010000fffd : "" [ 268.685709][ T6664] mtd: partition "" is out of reach -- disabled [ 268.732816][ T154] attempt to access beyond end of device [ 268.732816][ T154] loop0: rw=1, want=170, limit=64 [ 268.749633][ T6660] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.589: corrupted xattr entries [ 268.771906][ T6664] ftl_cs: FTL header not found. [ 268.784975][ T6660] EXT4-fs (loop2): Remounting filesystem read-only [ 268.802486][ T154] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 268.811283][ T154] attempt to access beyond end of device [ 268.811283][ T154] loop0: rw=1, want=172, limit=64 [ 268.822184][ T6660] EXT4-fs (loop2): 1 truncate cleaned up [ 268.827926][ T6660] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 268.894699][ T154] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 268.960253][ T154] attempt to access beyond end of device [ 268.960253][ T154] loop0: rw=1, want=173, limit=64 [ 269.026991][ T154] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 269.192447][ T154] attempt to access beyond end of device [ 269.192447][ T154] loop0: rw=1, want=174, limit=64 [ 269.203512][ T154] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 269.212571][ T154] attempt to access beyond end of device [ 269.212571][ T154] loop0: rw=1, want=175, limit=64 [ 269.223504][ T154] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 269.232309][ T154] attempt to access beyond end of device [ 269.232309][ T154] loop0: rw=1, want=176, limit=64 [ 269.264265][ T154] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 269.888443][ T6682] device syzkaller0 entered promiscuous mode [ 272.209234][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 272.270343][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 272.839947][ T6710] loop1: detected capacity change from 0 to 64 [ 272.890145][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 272.890159][ T26] audit: type=1800 audit(1781824792.006:43): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.598" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 274.374794][ T6716] siw: device registration error -23 [ 274.770664][ T6724] 0x0000fffffffd-0x00010000fffd : "" [ 274.787833][ T6725] device syzkaller0 entered promiscuous mode [ 274.801686][ T6724] mtd: partition "" is out of reach -- disabled [ 274.857113][ T6724] ftl_cs: FTL header not found. [ 277.336853][ T6735] loop2: detected capacity change from 0 to 512 [ 277.425710][ T6735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 277.558572][ T6735] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.607: corrupted xattr entries [ 277.618892][ T6735] EXT4-fs (loop2): Remounting filesystem read-only [ 277.661320][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 277.670691][ T6735] EXT4-fs (loop2): 1 truncate cleaned up [ 277.690669][ T6735] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 277.711927][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 278.363730][ T6739] loop4: detected capacity change from 0 to 32768 [ 278.462699][ T6739] [ 278.462699][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.462699][ T6739] [ 278.611712][ T6739] [ 278.611712][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.611712][ T6739] [ 278.657104][ T6739] [ 278.657104][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.657104][ T6739] [ 278.667795][ T6739] [ 278.667795][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.667795][ T6739] [ 278.678557][ T6739] [ 278.678557][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.678557][ T6739] [ 278.689593][ T6739] [ 278.689593][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.689593][ T6739] [ 278.700826][ T6739] [ 278.700826][ T6739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.700826][ T6739] [ 278.721111][ T277] [ 278.721111][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.721111][ T277] [ 278.804164][ T4189] [ 278.804164][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.804164][ T4189] [ 278.821539][ T4189] [ 278.821539][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.821539][ T4189] [ 278.843134][ T6761] siw: device registration error -23 [ 278.977029][ T6763] siw: device registration error -23 [ 282.222889][ T6778] loop3: detected capacity change from 0 to 32768 [ 282.497494][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 282.542084][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 282.699157][ T6793] loop1: detected capacity change from 0 to 512 [ 283.385886][ T6793] EXT4-fs (loop1): Unrecognized mount option "context=system_u" or missing value [ 283.447252][ T6795] loop2: detected capacity change from 0 to 512 [ 283.478412][ T6797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.624'. [ 283.525600][ T6795] EXT4-fs (loop2): Test dummy encryption mode enabled [ 283.579592][ T6795] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.623: inode has both inline data and extents flags [ 283.872310][ T6804] siw: device registration error -23 [ 284.642751][ T6795] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.623: couldn't read orphan inode 15 (err -117) [ 284.982200][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 285.117804][ T6812] device syzkaller0 entered promiscuous mode [ 286.295133][ T6795] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 287.581827][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 287.809831][ T6835] loop0: detected capacity change from 0 to 512 [ 287.875084][ T6835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.920987][ T6835] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.634: corrupted xattr entries [ 287.956350][ T6835] EXT4-fs (loop0): Remounting filesystem read-only [ 287.971871][ T7] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 287.983943][ T6835] EXT4-fs (loop0): 1 truncate cleaned up [ 287.989616][ T6835] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 287.994186][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.217845][ T7] usb 5-1: config 0 descriptor?? [ 288.264077][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 289.491862][ T7] gp8psk: usb in 128 operation failed. [ 289.511735][ T7] gp8psk: usb in 137 operation failed. [ 289.517346][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 289.532092][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 289.548544][ T7] usb 5-1: USB disconnect, device number 4 [ 289.565051][ T6845] input: syz1 as /devices/virtual/input/input26 [ 289.973491][ T6851] loop3: detected capacity change from 0 to 32768 [ 290.008375][ T6851] [ 290.008375][ T6851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.008375][ T6851] [ 290.135147][ T6854] [ 290.135147][ T6854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.135147][ T6854] [ 290.188924][ T6854] [ 290.188924][ T6854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.188924][ T6854] [ 290.348963][ T6854] [ 290.348963][ T6854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.348963][ T6854] [ 290.381783][ T6854] [ 290.381783][ T6854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.381783][ T6854] [ 290.518786][ T6854] [ 290.518786][ T6854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.518786][ T6854] [ 291.799553][ T277] [ 291.799553][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.799553][ T277] [ 292.143508][ T4197] [ 292.143508][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.143508][ T4197] [ 292.182446][ T6863] siw: device registration error -23 [ 292.237900][ T4197] [ 292.237900][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.237900][ T4197] [ 293.865285][ T6875] loop3: detected capacity change from 0 to 2048 [ 293.949692][ T6875] NILFS (loop3): invalid segment: Magic number mismatch [ 293.975698][ T6875] NILFS (loop3): trying rollback from an earlier position [ 294.023747][ T6875] NILFS (loop3): recovery complete [ 294.060968][ T6884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.301812][ T4237] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 295.751896][ T4237] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 295.760985][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.789131][ T6892] input: syz1 as /devices/virtual/input/input27 [ 295.806729][ T4237] usb 3-1: config 0 descriptor?? [ 295.878106][ T4237] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 296.023145][ T6868] loop1: detected capacity change from 0 to 32768 [ 296.163971][ T6900] loop3: detected capacity change from 0 to 512 [ 296.226696][ T6900] EXT4-fs (loop3): Unrecognized mount option "context=system_u" or missing value [ 296.292227][ T4237] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 296.317245][ T4237] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 296.516951][ T6906] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 296.557871][ T4236] usb 3-1: USB disconnect, device number 4 [ 298.967127][ T6926] loop1: detected capacity change from 0 to 512 [ 300.364227][ T6926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 300.454004][ T6926] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.660: corrupted xattr entries [ 300.474039][ T6926] EXT4-fs (loop1): Remounting filesystem read-only [ 300.491836][ T6926] EXT4-fs (loop1): 1 truncate cleaned up [ 300.497604][ T6926] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 300.763242][ T6938] input: syz1 as /devices/virtual/input/input28 [ 302.966619][ T6943] loop2: detected capacity change from 0 to 32768 [ 302.999327][ T6949] loop4: detected capacity change from 0 to 32768 [ 303.126095][ T6943] XFS (loop2): Mounting V5 Filesystem [ 303.495721][ T6943] XFS (loop2): Ending clean mount [ 304.569798][ T4190] XFS (loop2): Unmounting Filesystem [ 305.101716][ T4191] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 305.210115][ T6984] loop4: detected capacity change from 0 to 512 [ 306.419966][ T6985] siw: device registration error -23 [ 306.517669][ T6984] EXT4-fs (loop4): Unrecognized mount option "context=system_u" or missing value [ 306.823808][ T6987] input: syz1 as /devices/virtual/input/input29 [ 306.912558][ T4191] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 306.957125][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.079490][ T6989] loop2: detected capacity change from 0 to 32768 [ 307.162218][ T6989] [ 307.162218][ T6989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.162218][ T6989] [ 307.234470][ T6992] [ 307.234470][ T6992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.234470][ T6992] [ 307.245577][ T6992] [ 307.245577][ T6992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.245577][ T6992] [ 307.256551][ T6992] [ 307.256551][ T6992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.256551][ T6992] [ 307.267474][ T6992] [ 307.267474][ T6992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.267474][ T6992] [ 307.296516][ T6992] [ 307.296516][ T6992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.296516][ T6992] [ 308.059357][ T277] [ 308.059357][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.059357][ T277] [ 308.480313][ T4191] usb 2-1: config 0 descriptor?? [ 308.508754][ T4190] [ 308.508754][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.508754][ T4190] [ 308.532436][ T4191] usb 2-1: can't set config #0, error -71 [ 308.599363][ T4190] [ 308.599363][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.599363][ T4190] [ 308.632651][ T4191] usb 2-1: USB disconnect, device number 4 [ 308.699759][ T7000] loop1: detected capacity change from 0 to 512 [ 308.706184][ T7003] loop3: detected capacity change from 0 to 512 [ 308.764265][ T7003] EXT4-fs (loop3): Test dummy encryption mode enabled [ 308.901947][ T7000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 308.993390][ T7003] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.680: inode has both inline data and extents flags [ 309.045449][ T7000] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.678: corrupted xattr entries [ 309.065854][ T7003] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.680: couldn't read orphan inode 15 (err -117) [ 309.116417][ T7000] EXT4-fs (loop1): Remounting filesystem read-only [ 309.124796][ T7003] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 309.167543][ T7000] EXT4-fs (loop1): 1 truncate cleaned up [ 309.203336][ T7000] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 310.769297][ T7026] siw: device registration error -23 [ 311.630741][ T7031] input: syz1 as /devices/virtual/input/input30 [ 312.025961][ T7038] input: syz1 as /devices/virtual/input/input31 [ 312.331781][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 312.762021][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.863879][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.971820][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.983049][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.001508][ T23] usb 4-1: SerialNumber: syz [ 313.295690][ T23] usb 4-1: 0:2 : does not exist [ 313.344743][ T7046] loop1: detected capacity change from 0 to 32768 [ 313.427899][ T7046] JBD2: Ignoring recovery information on journal [ 313.538249][ T23] usb 4-1: USB disconnect, device number 3 [ 313.699506][ T7046] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 314.051828][ T7046] [ 314.054175][ T7046] ====================================================== [ 314.061175][ T7046] WARNING: possible circular locking dependency detected [ 314.068186][ T7046] syzkaller #0 Not tainted [ 314.072597][ T7046] ------------------------------------------------------ [ 314.079624][ T7046] syz.1.690/7046 is trying to acquire lock: [ 314.085512][ T7046] ffff888024c29488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 314.096514][ T7046] [ 314.096514][ T7046] but task is already holding lock: [ 314.103874][ T7046] ffff88805f4a22e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: __ocfs2_change_file_space+0x76f/0xe90 [ 314.115113][ T7046] [ 314.115113][ T7046] which lock already depends on the new lock. [ 314.115113][ T7046] [ 314.125512][ T7046] [ 314.125512][ T7046] the existing dependency chain (in reverse order) is: [ 314.134517][ T7046] [ 314.134517][ T7046] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 314.143305][ T7046] down_read+0x44/0x2e0 [ 314.147990][ T7046] ocfs2_read_virt_blocks+0x237/0x8d0 [ 314.153882][ T7046] ocfs2_find_entry+0x3ca/0x2060 [ 314.159335][ T7046] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 314.165307][ T7046] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 314.171369][ T7046] ocfs2_get_system_file_inode+0x32b/0x7f0 [ 314.177693][ T7046] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 314.184363][ T7046] ocfs2_fill_super+0x4060/0x50f0 [ 314.189908][ T7046] mount_bdev+0x287/0x3c0 [ 314.194753][ T7046] legacy_get_tree+0xe6/0x180 [ 314.199951][ T7046] vfs_get_tree+0x88/0x270 [ 314.204886][ T7046] do_new_mount+0x24a/0xa40 [ 314.209904][ T7046] __se_sys_mount+0x2e3/0x3d0 [ 314.215097][ T7046] do_syscall_64+0x4c/0xa0 [ 314.220028][ T7046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.226442][ T7046] [ 314.226442][ T7046] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 314.234779][ T7046] __lock_acquire+0x2c42/0x7d10 [ 314.240156][ T7046] lock_acquire+0x19e/0x400 [ 314.245194][ T7046] __mutex_lock_common+0x1e3/0x2400 [ 314.250924][ T7046] mutex_lock_nested+0x17/0x20 [ 314.256210][ T7046] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 314.262534][ T7046] ocfs2_reserve_suballoc_bits+0x12b/0x44d0 [ 314.268945][ T7046] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 314.275794][ T7046] ocfs2_lock_allocators+0x296/0x5f0 [ 314.281603][ T7046] ocfs2_extend_allocation+0x400/0x1830 [ 314.287669][ T7046] ocfs2_allocate_unwritten_extents+0x303/0x840 [ 314.294427][ T7046] __ocfs2_change_file_space+0x831/0xe90 [ 314.300580][ T7046] ocfs2_fallocate+0x1ee/0x240 [ 314.305863][ T7046] vfs_fallocate+0x587/0x6f0 [ 314.310983][ T7046] __x64_sys_fallocate+0xbd/0x100 [ 314.316537][ T7046] do_syscall_64+0x4c/0xa0 [ 314.321471][ T7046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.327882][ T7046] [ 314.327882][ T7046] other info that might help us debug this: [ 314.327882][ T7046] [ 314.338116][ T7046] Possible unsafe locking scenario: [ 314.338116][ T7046] [ 314.345563][ T7046] CPU0 CPU1 [ 314.350923][ T7046] ---- ---- [ 314.356277][ T7046] lock(&ocfs2_file_ip_alloc_sem_key); [ 314.361819][ T7046] lock(&osb->system_file_mutex); [ 314.369448][ T7046] lock(&ocfs2_file_ip_alloc_sem_key); [ 314.377514][ T7046] lock(&osb->system_file_mutex); [ 314.382629][ T7046] [ 314.382629][ T7046] *** DEADLOCK *** [ 314.382629][ T7046] [ 314.390768][ T7046] 3 locks held by syz.1.690/7046: [ 314.395790][ T7046] #0: ffff88807437c460 (sb_writers#22){.+.+}-{0:0}, at: vfs_fallocate+0x4f4/0x6f0 [ 314.405122][ T7046] #1: ffff88805f4a2648 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: __ocfs2_change_file_space+0x1d1/0xe90 [ 314.416717][ T7046] #2: ffff88805f4a22e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: __ocfs2_change_file_space+0x76f/0xe90 [ 314.428388][ T7046] [ 314.428388][ T7046] stack backtrace: [ 314.434282][ T7046] CPU: 1 PID: 7046 Comm: syz.1.690 Not tainted syzkaller #0 [ 314.441562][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.451618][ T7046] Call Trace: [ 314.454893][ T7046] [ 314.457822][ T7046] dump_stack_lvl+0x188/0x250 [ 314.462497][ T7046] ? load_image+0x400/0x400 [ 314.466998][ T7046] ? show_regs_print_info+0x20/0x20 [ 314.472196][ T7046] ? print_circular_bug+0x12b/0x1a0 [ 314.477398][ T7046] check_noncircular+0x296/0x330 [ 314.482331][ T7046] ? add_chain_block+0x940/0x940 [ 314.487259][ T7046] ? lockdep_lock+0xf1/0x1f0 [ 314.491846][ T7046] ? mark_lock+0x94/0x320 [ 314.496171][ T7046] __lock_acquire+0x2c42/0x7d10 [ 314.501035][ T7046] ? mark_lock+0x94/0x320 [ 314.505355][ T7046] ? __lock_acquire+0x12e8/0x7d10 [ 314.510375][ T7046] ? verify_lock_unused+0x140/0x140 [ 314.515573][ T7046] ? mark_lock+0x94/0x320 [ 314.519894][ T7046] ? __lock_acquire+0x13bc/0x7d10 [ 314.524921][ T7046] lock_acquire+0x19e/0x400 [ 314.529429][ T7046] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 314.535407][ T7046] ? __might_sleep+0xf0/0xf0 [ 314.539999][ T7046] ? __lock_acquire+0x13bc/0x7d10 [ 314.545021][ T7046] ? read_lock_is_recursive+0x10/0x10 [ 314.550393][ T7046] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 314.556373][ T7046] __mutex_lock_common+0x1e3/0x2400 [ 314.561571][ T7046] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 314.567549][ T7046] ? add_chain_block+0x940/0x940 [ 314.572484][ T7046] ? ocfs2_get_system_file_inode+0x156/0x7f0 [ 314.578458][ T7046] ? mutex_lock_io_nested+0x60/0x60 [ 314.583660][ T7046] ? __rwlock_init+0x140/0x140 [ 314.588423][ T7046] ? do_raw_spin_unlock+0x11d/0x230 [ 314.593616][ T7046] mutex_lock_nested+0x17/0x20 [ 314.598378][ T7046] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 314.604182][ T7046] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 314.610157][ T7046] ? __bfs+0x2a3/0x5c0 [ 314.614220][ T7046] ? verify_lock_unused+0x140/0x140 [ 314.619419][ T7046] ocfs2_reserve_suballoc_bits+0x12b/0x44d0 [ 314.625312][ T7046] ? __lock_acquire+0x7d10/0x7d10 [ 314.630340][ T7046] ? mark_lock+0x94/0x320 [ 314.634663][ T7046] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 314.640648][ T7046] ? lock_chain_count+0x20/0x20 [ 314.645500][ T7046] ? __rwlock_init+0x140/0x140 [ 314.650261][ T7046] ? ocfs2_block_group_search+0x470/0x470 [ 314.655979][ T7046] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.661878][ T7046] ? lockdep_hardirqs_on+0x94/0x140 [ 314.667076][ T7046] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.672963][ T7046] ? _raw_spin_unlock+0x40/0x40 [ 314.677810][ T7046] ? stack_trace_save+0xa6/0xf0 [ 314.682656][ T7046] ? stack_trace_snprint+0xf0/0xf0 [ 314.687769][ T7046] ? stack_depot_save+0x404/0x440 [ 314.692798][ T7046] ? __kasan_kmalloc+0xcc/0xf0 [ 314.697559][ T7046] ? __kasan_kmalloc+0xb5/0xf0 [ 314.702315][ T7046] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 314.708812][ T7046] ? ocfs2_lock_allocators+0x296/0x5f0 [ 314.714269][ T7046] ? ocfs2_extend_allocation+0x400/0x1830 [ 314.719985][ T7046] ? ocfs2_allocate_unwritten_extents+0x303/0x840 [ 314.726398][ T7046] ? __ocfs2_change_file_space+0x831/0xe90 [ 314.732201][ T7046] ? ocfs2_fallocate+0x1ee/0x240 [ 314.737136][ T7046] ? vfs_fallocate+0x587/0x6f0 [ 314.741895][ T7046] ? __x64_sys_fallocate+0xbd/0x100 [ 314.747091][ T7046] ? do_syscall_64+0x4c/0xa0 [ 314.751681][ T7046] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.757765][ T7046] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 314.764096][ T7046] ? ocfs2_init_steal_slots+0x150/0x150 [ 314.769640][ T7046] ? rcu_is_watching+0x11/0xa0 [ 314.774404][ T7046] ? ocfs2_num_free_extents+0x2eb/0x5b0 [ 314.779952][ T7046] ? ocfs2_validate_extent_block+0x570/0x570 [ 314.785929][ T7046] ? ocfs2_read_blocks_sync+0xb40/0xb40 [ 314.791473][ T7046] ? mutex_unlock+0x10/0x10 [ 314.795980][ T7046] ocfs2_lock_allocators+0x296/0x5f0 [ 314.801263][ T7046] ? _ocfs2_clear_bit+0x40/0x40 [ 314.806110][ T7046] ? ocfs2_read_inode_block+0x120/0x190 [ 314.811651][ T7046] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 314.817633][ T7046] ? ocfs2_figure_hole_clusters+0x329/0x5d0 [ 314.823537][ T7046] ocfs2_extend_allocation+0x400/0x1830 [ 314.829092][ T7046] ? register_shrinker_prepared+0x10/0x100 [ 314.834897][ T7046] ? ocfs2_extend_no_holes+0x4b0/0x4b0 [ 314.840356][ T7046] ? ocfs2_read_inode_block+0x120/0x190 [ 314.845898][ T7046] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 314.851875][ T7046] ? __brelse+0x55/0x90 [ 314.856025][ T7046] ? ocfs2_get_clusters+0x2a1/0xa60 [ 314.861225][ T7046] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 314.867205][ T7046] ? ocfs2_xattr_get_clusters+0x8b0/0x8b0 [ 314.872920][ T7046] ? ocfs2_inode_lock_full_nested+0xcdb/0x1bb0 [ 314.879081][ T7046] ocfs2_allocate_unwritten_extents+0x303/0x840 [ 314.885322][ T7046] ? __ocfs2_write_remove_suid+0x780/0x780 [ 314.891126][ T7046] ? inode_dio_wait+0x25a/0x2d0 [ 314.895978][ T7046] ? rwsem_write_trylock+0x135/0x1c0 [ 314.901259][ T7046] ? clear_nonspinnable+0x60/0x60 [ 314.906278][ T7046] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 314.912343][ T7046] __ocfs2_change_file_space+0x831/0xe90 [ 314.917978][ T7046] ? ocfs2_change_file_space+0x330/0x330 [ 314.923620][ T7046] ocfs2_fallocate+0x1ee/0x240 [ 314.928391][ T7046] vfs_fallocate+0x587/0x6f0 [ 314.932984][ T7046] __x64_sys_fallocate+0xbd/0x100 [ 314.938010][ T7046] do_syscall_64+0x4c/0xa0 [ 314.942423][ T7046] ? clear_bhb_loop+0x30/0x80 [ 314.947095][ T7046] ? clear_bhb_loop+0x30/0x80 [ 314.951767][ T7046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.957674][ T7046] RIP: 0033:0x7f0bba8e6e59 [ 314.962082][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.981682][ T7046] RSP: 002b:00007f0bb8b40028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 314.990096][ T7046] RAX: ffffffffffffffda RBX: 00007f0bbab5ffa0 RCX: 00007f0bba8e6e59 [ 314.998063][ T7046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 315.006058][ T7046] RBP: 00007f0bba97ce6f R08: 0000000000000000 R09: 0000000000000000 [ 315.014022][ T7046] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000000 [ 315.021987][ T7046] R13: 00007f0bbab60038 R14: 00007f0bbab5ffa0 R15: 00007fff2d492488 [ 315.029967][ T7046] [ 315.596298][ T26] audit: type=1804 audit(1781824834.716:44): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.690" name="/newroot/140/file1/file1" dev="loop1" ino=17059 res=1 errno=0 [ 315.825912][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 317.044191][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.050495][ T1421] ieee802154 phy1 wpan1: encryption failed: -22