last executing test programs: 2m28.537432509s ago: executing program 1 (id=125): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff00000009041b0000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xa, @string={0xa, 0x3, "d2f6a19682971579"}}}, 0x0) 2m26.014212192s ago: executing program 1 (id=150): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 2m25.843539266s ago: executing program 1 (id=151): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000040)) 2m25.538854533s ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x96) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 2m25.313031249s ago: executing program 1 (id=156): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xfd}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) 2m24.84870427s ago: executing program 1 (id=161): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffdf}, 0x1c) 2m24.394234901s ago: executing program 32 (id=161): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffdf}, 0x1c) 2m1.387236339s ago: executing program 5 (id=260): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008804}, 0x0) 1m59.944232374s ago: executing program 5 (id=267): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000000100000280000001", 0x13) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) 1m58.593197148s ago: executing program 5 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 1m58.011298292s ago: executing program 5 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) unshare(0x22020400) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 1m57.615421461s ago: executing program 5 (id=282): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m57.076025165s ago: executing program 5 (id=288): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0x402) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 1m56.651145805s ago: executing program 33 (id=288): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0x402) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 1m26.068184519s ago: executing program 6 (id=483): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x4, 0x3, 0x3, 0x5, 0x333, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x361, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x204, 0x10, 0xce1, 0x400}]}, 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x52000a11) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m25.656354429s ago: executing program 6 (id=488): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2000, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast2, 0x80}, r2, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) 1m25.289588888s ago: executing program 6 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000300)) 1m24.739245002s ago: executing program 6 (id=496): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) open(0x0, 0x55783, 0xa0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)='\v', 0x1}, {&(0x7f0000000480)="738c", 0x2}], 0x2) 1m24.156025837s ago: executing program 6 (id=500): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000340)={0x7, 0x1b, 0x1}, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) splice(r0, 0x0, r3, 0x0, 0x20000000000002, 0x2) 1m23.534094922s ago: executing program 6 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) 1m22.963917966s ago: executing program 34 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) 10.232823468s ago: executing program 2 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="0100000007000000000000", 0xb) 9.953797825s ago: executing program 2 (id=904): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) 8.868173102s ago: executing program 2 (id=911): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) epoll_create1(0x80000) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES32=r0], 0x0) 6.11190746s ago: executing program 2 (id=926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffff4, 0x4) 5.056891856s ago: executing program 2 (id=936): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 5.055412186s ago: executing program 0 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 4.448146211s ago: executing program 4 (id=943): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, 0x0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.332221733s ago: executing program 0 (id=944): socket$inet_icmp(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xcec, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.860154575s ago: executing program 4 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffff4, 0x4) 3.857467636s ago: executing program 0 (id=948): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x5}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}}, 0xf0}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000018000002000000000000000018000000020800000000000041000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 3.834091866s ago: executing program 2 (id=949): write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/153, 0x99) 3.66492529s ago: executing program 3 (id=951): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.806782862s ago: executing program 4 (id=952): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001a00)}, 0xfffffffb}], 0x1, 0x0, 0x0) 2.805117671s ago: executing program 0 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1.903515114s ago: executing program 0 (id=954): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x2) 1.704185178s ago: executing program 7 (id=956): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.604609161s ago: executing program 3 (id=958): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) timerfd_create(0x8, 0x800) mknodat(0xffffffffffffff9c, 0x0, 0x10, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x1}) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000140)={[{@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@resuid}, {@debug}, {@norecovery}, {@jqfmt_vfsold}, {@nogrpid}, {@noauto_da_alloc}]}, 0x1, 0x5ee, &(0x7f0000000bc0)="$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") 1.424016545s ago: executing program 7 (id=959): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0180001001c000000000000000000000008"], 0x38}}], 0x1, 0xc050) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.423910425s ago: executing program 4 (id=960): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, &(0x7f0000000600)='dir .', 0x5) write(r1, &(0x7f0000000700)='bind', 0x4) 1.191119791s ago: executing program 3 (id=961): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb33278ae95bc7f52363c468b257ff3e2485254bdeb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af370a42e6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000300)=0x8) 1.104363883s ago: executing program 7 (id=962): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 974.524806ms ago: executing program 3 (id=963): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x3c8, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 974.437746ms ago: executing program 4 (id=965): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE '], 0x8c) close(r1) 723.561673ms ago: executing program 4 (id=966): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') unlink(&(0x7f0000000280)='./file1\x00') 722.234482ms ago: executing program 7 (id=976): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 333.701562ms ago: executing program 7 (id=967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffc002}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "00311caa45112857", "f3058586bcce6528ef05705f3b2a9bdd", "3bcdecfa", "631b8b1ebdc544db"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304, 0x34}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 326.925532ms ago: executing program 3 (id=978): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000240)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x203, 0x7ae, 0x0, 0x0, 0x1000, 0x83, 0xffffffffffffffff, 0x0, 0x25}}}, 0x0) r4 = eventfd2(0x7fff, 0x801) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r4, 0x1) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 79.958369ms ago: executing program 7 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 70.262269ms ago: executing program 0 (id=969): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 0s ago: executing program 3 (id=970): r0 = open(&(0x7f0000000600)='./file0\x00', 0xe2742, 0xef) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)="b4d21eff73daa738c1e83458df2c5da151782200a1d4694ee3baf0b7f39f49", 0x1f}, {&(0x7f0000000040)="7993ec782b76698f111abc5e2eccbddeb7aa38709f2061d0fb0ece8828182ac37c3b8bf892103f4b46", 0x29}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000280)=0x45, 0x3) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered blocking state [ 151.887113][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.897343][ T5371] loop0: detected capacity change from 0 to 764 [ 151.913282][ T5308] device bridge_slave_0 entered promiscuous mode [ 151.957220][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.972634][ T5371] rock: directory entry would overflow storage [ 151.988787][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.000133][ T5371] rock: sig=0x5245, size=8, remaining=5 [ 152.002418][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 152.022846][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.036282][ T5308] device bridge_slave_1 entered promiscuous mode [ 152.234013][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.255827][ T7] usb 4-1: config 1 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 152.286576][ T7] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 152.321441][ T7] usb 4-1: config 1 interface 0 has no altsetting 1 [ 152.340206][ T5381] Invalid ELF header magic: != ELF [ 152.352829][ T7] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 152.377391][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.387241][ T7] usb 4-1: Product: syz [ 152.391480][ T7] usb 4-1: Manufacturer: syz [ 152.400055][ T7] usb 4-1: SerialNumber: syz [ 152.539822][ T5308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.589515][ T5308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.656595][ T5389] ip_tables: iptables: counters copy to user failed while replacing table [ 152.670050][ T7] dvbdev: DVB: registering new adapter (DEC3000-s) [ 152.720538][ T7] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 152.787064][ T68] device hsr_slave_0 left promiscuous mode [ 152.801376][ T68] device hsr_slave_1 left promiscuous mode [ 152.814966][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.841994][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.861569][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.875701][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.886049][ T68] device bridge_slave_1 left promiscuous mode [ 152.901016][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.920502][ T68] device bridge_slave_0 left promiscuous mode [ 152.939121][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.052107][ T68] device veth1_macvtap left promiscuous mode [ 153.079372][ T7] usb 4-1: USB disconnect, device number 7 [ 153.137377][ T68] device veth0_macvtap left promiscuous mode [ 153.162739][ T68] device veth1_vlan left promiscuous mode [ 153.193737][ T68] device veth0_vlan left promiscuous mode [ 154.021557][ T5406] loop4: detected capacity change from 0 to 512 [ 154.082720][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 154.146223][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.266089][ T5400] loop0: detected capacity change from 0 to 32768 [ 154.353051][ T5400] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 154.616404][ T4289] EXT4-fs (loop4): unmounting filesystem. [ 154.747519][ T4523] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 154.879830][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 155.874129][ T68] team0 (unregistering): Port device team_slave_1 removed [ 155.994932][ T68] team0 (unregistering): Port device team_slave_0 removed [ 156.097382][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.169050][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 156.232826][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.265261][ T5413] loop3: detected capacity change from 0 to 32768 [ 156.350295][ T5413] XFS (loop3): Mounting V5 Filesystem [ 156.511108][ T5413] XFS (loop3): Ending clean mount [ 156.566519][ T5413] XFS (loop3): Quotacheck needed: Please wait. [ 156.727592][ T5413] XFS (loop3): Quotacheck: Done. [ 157.091192][ T4288] XFS (loop3): Unmounting Filesystem [ 157.417744][ T68] bond0 (unregistering): Released all slaves [ 157.642193][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.658846][ T5308] team0: Port device team_slave_0 added [ 157.708999][ T5308] team0: Port device team_slave_1 added [ 157.788070][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.810123][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.860810][ T5308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.880432][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 157.889834][ T126] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.906712][ T126] usb 1-1: config 0 has no interface number 0 [ 157.929973][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.937669][ T126] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 157.948794][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.988563][ T126] usb 1-1: config 0 interface 184 has no altsetting 0 [ 157.998137][ T5308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.025315][ T126] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.043010][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.070723][ T126] usb 1-1: Product: syz [ 158.083467][ T126] usb 1-1: Manufacturer: syz [ 158.089080][ T126] usb 1-1: SerialNumber: syz [ 158.152590][ T126] usb 1-1: config 0 descriptor?? [ 158.161044][ T5434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.185847][ T126] smsc75xx v1.0.0 [ 158.232159][ T5308] device hsr_slave_0 entered promiscuous mode [ 158.243083][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 158.282557][ T5308] device hsr_slave_1 entered promiscuous mode [ 158.380487][ T5434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.478895][ T5448] loop4: detected capacity change from 0 to 1024 [ 158.528389][ T5448] EXT4-fs: Ignoring removed orlov option [ 158.653065][ T5448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.820883][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.852225][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.043885][ T5308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 159.064875][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 159.106972][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 159.130086][ T5308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 159.140916][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 159.164332][ T5308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 159.170153][ T126] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 159.186246][ T5308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.195944][ T4289] EXT4-fs (loop4): unmounting filesystem. [ 159.285968][ T126] usb 1-1: USB disconnect, device number 9 [ 159.533051][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.591172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.614113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.653093][ T5308] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.708920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.731621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.778177][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.787605][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.829879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.873357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.893577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.930430][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.937943][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.978346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.025482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.096662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.148223][ T5494] syz.2.352: attempt to access beyond end of device [ 160.148223][ T5494] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 160.175645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.223202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.254503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.263246][ T5494] qnx6: Unable to read first mmi superblock [ 160.292992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.325667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.389904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.419264][ T5308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.474466][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.503970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.543064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.646311][ T5506] loop0: detected capacity change from 0 to 512 [ 160.716889][ T5506] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.770896][ T5506] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.356: corrupted in-inode xattr [ 160.902162][ T5506] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.356: couldn't read orphan inode 15 (err -117) [ 160.928193][ T5506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.981296][ T5506] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 12: comm syz.0.356: lblock 3 mapped to illegal pblock 12 (length 1) [ 161.181225][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 161.341617][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 161.665888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.683666][ T4328] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 161.692265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.720342][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.894871][ T4328] usb 5-1: config 0 has no interfaces? [ 161.912258][ T4330] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.913169][ T4328] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 161.947946][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.968287][ T4328] usb 5-1: Product: syz [ 162.000937][ T4328] usb 5-1: Manufacturer: syz [ 162.028090][ T4328] usb 5-1: SerialNumber: syz [ 162.052620][ T4328] usb 5-1: config 0 descriptor?? [ 162.131977][ T4330] usb 4-1: Using ep0 maxpacket: 16 [ 162.154202][ T4330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.184485][ T4330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.224395][ T4330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.262055][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.285742][ T4330] usb 4-1: Product: syz [ 162.311607][ T4330] usb 4-1: Manufacturer: syz [ 162.334521][ T4330] usb 4-1: SerialNumber: syz [ 162.621415][ T4330] usb 4-1: 0:2 : does not exist [ 162.659542][ T4330] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 162.790830][ T4330] usb 4-1: USB disconnect, device number 8 [ 162.871736][ T4328] usb 5-1: USB disconnect, device number 5 [ 162.919168][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.563325][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.580403][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.713029][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.743083][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.780079][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.824787][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.881274][ T5308] device veth0_vlan entered promiscuous mode [ 164.100246][ T5308] device veth1_vlan entered promiscuous mode [ 164.179269][ T5565] loop3: detected capacity change from 0 to 32768 [ 164.235227][ T5565] (syz.3.366,5565,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.256128][ T5565] (syz.3.366,5565,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.301141][ T5565] JBD2: Ignoring recovery information on journal [ 164.349429][ T5565] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.411096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.441557][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 164.459966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.513561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.531616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.601680][ T5308] device veth0_macvtap entered promiscuous mode [ 164.635712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.683783][ T5308] device veth1_macvtap entered promiscuous mode [ 164.840461][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.924515][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.990000][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.047831][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.081942][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.111905][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.145405][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.177442][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.251454][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.310133][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.340293][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.367265][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.377095][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 165.399031][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.436747][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.480229][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.519103][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.554694][ T5591] netlink: 'syz.2.375': attribute type 10 has an invalid length. [ 165.580339][ T4288] ocfs2: Unmounting device (7,3) on (node local) [ 165.589672][ T5591] device syz_tun entered promiscuous mode [ 165.637137][ T5591] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 165.701593][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.723630][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.777127][ T5308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.806675][ T5308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.831136][ T5308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.864610][ T5308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.279339][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.300495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.351967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.375017][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.397481][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.436729][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.677730][ T4330] smpboot: CPU 1 is now offline [ 167.020160][ T5618] x86: Booting SMP configuration: [ 167.097251][ T5618] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 167.946848][ T5655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.393'. [ 168.317932][ T5661] loop2: detected capacity change from 0 to 1024 [ 168.405501][ T5661] EXT4-fs (loop2): filesystem is read-only [ 168.502990][ T5667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.660556][ T5672] CacheFiles: Failed to register: -95 [ 169.046709][ T5687] Bluetooth: MGMT ver 1.22 [ 169.590844][ T5701] loop4: detected capacity change from 0 to 512 [ 169.666276][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.994206][ T4289] EXT4-fs (loop4): unmounting filesystem. [ 170.358527][ T5667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.592310][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.795329][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.828852][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.878012][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.939402][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.003213][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.045003][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.074509][ T7] usb 3-1: Product: syz [ 171.089107][ T7] usb 3-1: Manufacturer: syz [ 171.141192][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 171.160377][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 171.201295][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 171.221428][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 171.409823][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 171.416903][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 171.423537][ T5754] loop6: detected capacity change from 0 to 128 [ 171.432268][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 171.439422][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 171.451933][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 171.458786][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 171.465512][ T4327] usb 3-1: USB disconnect, device number 7 [ 171.515422][ T5754] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 171.605107][ T5754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.803189][ T5762] netlink: 14 bytes leftover after parsing attributes in process `syz.0.420'. [ 172.391973][ T4327] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.475432][ T5780] loop2: detected capacity change from 0 to 2048 [ 172.546837][ T5780] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 172.562051][ T5780] UDF-fs: Scanning with blocksize 512 failed [ 172.592084][ T4327] usb 5-1: Using ep0 maxpacket: 8 [ 172.599259][ T4327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.643393][ T4327] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 172.691408][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.710002][ T5780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.750820][ T4327] usb 5-1: config 0 descriptor?? [ 172.788029][ T4327] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 173.421905][ T4330] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.635431][ T4330] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 173.698816][ T4330] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.751887][ T4330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.790553][ T4330] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 173.817814][ T4327] gspca_vc032x: reg_r err -71 [ 173.827436][ T4327] vc032x: probe of 5-1:0.0 failed with error -71 [ 173.846672][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.863665][ T5815] device gretap0 entered promiscuous mode [ 173.881220][ T4327] usb 5-1: USB disconnect, device number 6 [ 173.903266][ T4330] usb 1-1: config 0 descriptor?? [ 174.035279][ T5814] loop6: detected capacity change from 0 to 4096 [ 174.357994][ T4330] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 174.397180][ T4330] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 174.426486][ T4330] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 174.471956][ T4330] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 174.515583][ T4330] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 174.551902][ T4330] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 174.653041][ T4330] wacom 0003:056A:0084.0003: hidraw0: USB HID v10.03 Device [HID 056a:0084] on usb-dummy_hcd.0-1/input0 [ 174.677928][ T5825] loop3: detected capacity change from 0 to 4096 [ 174.748951][ T5825] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.805198][ T4330] usb 1-1: USB disconnect, device number 10 [ 174.827540][ T5838] loop2: detected capacity change from 0 to 1024 [ 174.862935][ T5825] EXT4-fs: Ignoring removed orlov option [ 175.144383][ T5825] EXT4-fs (loop3): Test dummy encryption mode enabled [ 175.312272][ T5841] fido_id[5841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 175.426125][ T5825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.582371][ T5857] loop0: detected capacity change from 0 to 512 [ 175.655453][ T27] audit: type=1800 audit(1791253594.054:10): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.437" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 175.755583][ T5857] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 175.881354][ T5863] netlink: 'syz.6.445': attribute type 13 has an invalid length. [ 175.979128][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.445'. [ 175.991347][ T5825] EXT4-fs (loop3): shut down requested (1) [ 176.065894][ T5863] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.076470][ T5863] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.086264][ T5863] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.095648][ T5863] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.139783][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 176.301217][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 176.315708][ T5863] netlink: 'syz.6.445': attribute type 13 has an invalid length. [ 176.359421][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.445'. [ 176.368859][ T11] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 176.392099][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 176.428242][ T11] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 176.454627][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 177.072036][ T4330] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 177.293748][ T4330] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.322782][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.370980][ T4330] usb 3-1: config 0 descriptor?? [ 177.399945][ T4330] cp210x 3-1:0.0: cp210x converter detected [ 177.512177][ T126] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.603249][ T5917] netlink: 15 bytes leftover after parsing attributes in process `syz.6.465'. [ 177.724354][ T126] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.749477][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.787054][ T126] usb 1-1: config 0 descriptor?? [ 177.804864][ T4330] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 177.822372][ T4330] usb 3-1: cp210x converter now attached to ttyUSB0 [ 177.838197][ T126] cp210x 1-1:0.0: cp210x converter detected [ 178.033682][ T126] usb 1-1: cp210x converter now attached to ttyUSB1 [ 178.084955][ T126] usb 3-1: USB disconnect, device number 8 [ 178.131598][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.208349][ T126] cp210x 3-1:0.0: device disconnected [ 178.275322][ T4291] usb 1-1: USB disconnect, device number 11 [ 178.305495][ T4291] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 178.341017][ T4291] cp210x 1-1:0.0: device disconnected [ 178.719713][ T5941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.073589][ T5953] loop0: detected capacity change from 0 to 256 [ 179.208262][ T5953] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 179.469432][ T5959] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 179.551480][ T5966] process 'syz.6.483' launched './file0' with NULL argv: empty string added [ 179.687631][ T5974] loop0: detected capacity change from 0 to 256 [ 179.779559][ T5976] nvmet: Invalid value 'nonexistent [ 179.779559][ T5976] ' for trtype [ 179.797078][ T5974] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.152036][ T4291] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 180.353764][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 27815, setting to 64 [ 180.415882][ T4291] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 180.445954][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.489015][ T4291] usb 1-1: config 0 descriptor?? [ 180.512253][ T5974] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.932653][ T6020] loop6: detected capacity change from 0 to 1024 [ 180.985037][ T4291] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 181.008605][ T4291] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 181.074001][ T4291] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 181.245657][ T4291] usb 1-1: USB disconnect, device number 12 [ 181.307867][ T6027] fido_id[6027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 182.125290][ T4337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.211848][ T4337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.434201][ T4337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.472839][ T4337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.666472][ T4337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.749310][ T4337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.008245][ T4337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.025349][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 183.077860][ T4337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.608721][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.622783][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.647977][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.665476][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.678453][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.687930][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.504152][ T6109] FAULT_INJECTION: forcing a failure. [ 184.504152][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 184.543948][ T6107] loop0: detected capacity change from 0 to 1024 [ 184.580393][ T6107] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 184.649303][ T6107] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 184.712076][ T6109] CPU: 0 PID: 6109 Comm: syz.2.520 Not tainted syzkaller #0 [ 184.719467][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.730531][ T6109] Call Trace: [ 184.733869][ T6109] [ 184.737019][ T6109] dump_stack_lvl+0x188/0x24e [ 184.741979][ T6109] ? show_regs_print_info+0x12/0x12 [ 184.747517][ T6109] ? load_image+0x410/0x410 [ 184.752187][ T6109] ? __lock_acquire+0x7ea0/0x7ea0 [ 184.757716][ T6109] should_fail_ex+0x390/0x4c0 [ 184.762917][ T6109] should_failslab+0x5/0x20 [ 184.767578][ T6109] slab_pre_alloc_hook+0x59/0x300 [ 184.772947][ T6109] ? __split_vma+0x4f0/0x4f0 [ 184.777800][ T6109] ? vma_merge+0x883/0xa50 [ 184.782320][ T6109] kmem_cache_alloc+0x56/0x2f0 [ 184.787169][ T6109] ? vm_area_dup+0x23/0x1a0 [ 184.791921][ T6109] vm_area_dup+0x23/0x1a0 [ 184.796687][ T6109] __split_vma+0xb9/0x4f0 [ 184.801183][ T6109] madvise_update_vma+0x3de/0xad0 [ 184.806914][ T6109] do_madvise+0xfae/0x3520 [ 184.811679][ T6109] ? release_firmware_map_entry+0x187/0x187 [ 184.819253][ T6109] ? plist_add+0x3d7/0x490 [ 184.823792][ T6109] ? madvise_set_anon_name+0x420/0x420 [ 184.829770][ T6109] ? schedule+0xd0/0x180 [ 184.834177][ T6109] ? futex_wait_queue+0x23/0x1b0 [ 184.839372][ T6109] ? futex_wait_queue+0x134/0x1b0 [ 184.844914][ T6109] ? futex_unqueue+0xc7/0xf0 [ 184.850871][ T6109] ? futex_wait+0x4a3/0x5c0 [ 184.856190][ T6109] ? futex_wait_setup+0x270/0x270 [ 184.861845][ T6109] ? file_end_write+0x156/0x250 [ 184.867382][ T6109] ? vfs_write+0x777/0x9a0 [ 184.873285][ T6109] ? do_futex+0x310/0x320 [ 184.880130][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 184.880283][ T6109] ? __ia32_sys_get_robust_list+0x100/0x100 [ 184.895366][ T6109] ? lock_chain_count+0x20/0x20 [ 184.900896][ T6109] __x64_sys_madvise+0xa2/0xb0 [ 184.905723][ T6109] do_syscall_64+0x4c/0xa0 [ 184.910595][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 184.915788][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 184.921116][ T6109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.927518][ T6109] RIP: 0033:0x7f936319e199 [ 184.932226][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.953254][ T6109] RSP: 002b:00007f936401e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 184.962615][ T6109] RAX: ffffffffffffffda RBX: 00007f9363425fa0 RCX: 00007f936319e199 [ 184.970918][ T6109] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 184.979732][ T6109] RBP: 00007f93632358e0 R08: 0000000000000000 R09: 0000000000000000 [ 184.988578][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.998766][ T6109] R13: 00007f9363426038 R14: 00007f9363425fa0 R15: 00007ffc729a9288 [ 185.010183][ T6109] [ 185.063315][ T6107] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.519: unexpected bad inode w/o EXT4_IGET_BAD [ 185.127789][ T6107] EXT4-fs (loop0): no journal found [ 185.138438][ T6107] EXT4-fs (loop0): can't get journal size [ 185.169407][ T6107] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.204590][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.212669][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.222165][ T6081] device bridge_slave_0 entered promiscuous mode [ 185.370579][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.378873][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.402169][ T6081] device bridge_slave_1 entered promiscuous mode [ 185.447650][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 185.576721][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.753783][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.766861][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 186.067176][ T6081] team0: Port device team_slave_0 added [ 186.210990][ T6081] team0: Port device team_slave_1 added [ 186.271615][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.307937][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.431881][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.859011][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.870369][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.959447][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.548726][ T6081] device hsr_slave_0 entered promiscuous mode [ 187.578033][ T6081] device hsr_slave_1 entered promiscuous mode [ 187.601047][ T6081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.641978][ T6081] Cannot create hsr debugfs directory [ 187.851935][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 189.201673][ T4337] device hsr_slave_0 left promiscuous mode [ 189.223331][ T4337] device hsr_slave_1 left promiscuous mode [ 189.231660][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.247409][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.258267][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.274454][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.296708][ T4337] device bridge_slave_1 left promiscuous mode [ 189.307746][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.341148][ T4337] device bridge_slave_0 left promiscuous mode [ 189.355228][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.444496][ T4337] device veth1_macvtap left promiscuous mode [ 189.451648][ T4337] device veth0_macvtap left promiscuous mode [ 189.469567][ T4337] device veth1_vlan left promiscuous mode [ 189.476272][ T4337] device veth0_vlan left promiscuous mode [ 189.703947][ T6197] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 189.751668][ T6197] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.875145][ T6202] loop3: detected capacity change from 0 to 512 [ 189.922062][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 190.027417][ T6202] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.542: iget: bad i_size value: 38620345925642 [ 190.123665][ T6202] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.542: couldn't read orphan inode 15 (err -117) [ 190.213518][ T6202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.659153][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 190.710751][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 28 with error 28 [ 190.757587][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.757587][ T9] [ 190.797704][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 190.805408][ T9] EXT4-fs (loop3): Free/Dirty block details [ 190.812478][ T9] EXT4-fs (loop3): free_blocks=0 [ 190.818240][ T9] EXT4-fs (loop3): dirty_blocks=28 [ 190.824277][ T9] EXT4-fs (loop3): Block reservation details [ 190.830418][ T9] EXT4-fs (loop3): i_reserved_data_blocks=28 [ 190.923476][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 191.271002][ T6219] loop0: detected capacity change from 0 to 8192 [ 191.318235][ T6219] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.910724][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 192.006200][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 192.055025][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 192.174011][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.295470][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.300469][ T4337] bond0 (unregistering): Released all slaves [ 194.301175][ T6255] loop0: detected capacity change from 0 to 512 [ 194.361297][ T6255] EXT4-fs: inline encryption not supported [ 194.419392][ T6255] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.485832][ T6258] netlink: 27 bytes leftover after parsing attributes in process `syz.3.558'. [ 194.610750][ T6255] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 194.686881][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 9 is 1049 jiffies old. [ 194.705756][ T6081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.740961][ T6255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.557: bg 0: block 248: padding at end of block bitmap is not set [ 194.772628][ T6081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.810844][ T6081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.872683][ T6081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.890413][ T6255] Quota error (device loop0): write_blk: dquota write failed [ 194.910535][ T6255] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 194.962115][ T6255] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.557: Failed to acquire dquot type 1 [ 195.104885][ T6255] EXT4-fs (loop0): 1 truncate cleaned up [ 195.142107][ T6255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.205533][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.212649][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.249473][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.299344][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.322872][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.342358][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.419098][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.449984][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.496251][ T4929] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.504050][ T4929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.520480][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 195.549092][ T4337] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 195.568854][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.596699][ T4337] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 195.641156][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.671341][ T4929] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.679609][ T4929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.720849][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.775189][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.807771][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.856620][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.900436][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.923787][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.951253][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.008632][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.074086][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.112929][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.144563][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.167916][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.202112][ T126] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 196.223057][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.310195][ T27] audit: type=1326 audit(1791253870.706:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 196.392887][ T27] audit: type=1326 audit(1791253870.706:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 196.430984][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.472049][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.511605][ T126] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 196.552337][ T27] audit: type=1326 audit(1791253870.706:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 196.560709][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.686554][ T27] audit: type=1326 audit(1791253870.706:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 196.696110][ T126] usb 1-1: config 0 descriptor?? [ 196.812664][ T27] audit: type=1326 audit(1791253870.706:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 196.929419][ T27] audit: type=1326 audit(1791253870.706:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 196.956765][ T27] audit: type=1326 audit(1791253870.766:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.4.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fe66559e199 code=0x7ffc0000 [ 197.065754][ T4330] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.181446][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.207064][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.215982][ T126] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 197.232602][ T126] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 197.246322][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.269387][ T126] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0005/input/input8 [ 197.284841][ T4330] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 197.299202][ T4330] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.362709][ T4330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.406765][ T4330] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.458912][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.495766][ T4330] usb 3-1: Product: syz [ 197.512229][ T126] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 197.534267][ T4330] usb 3-1: Manufacturer: syz [ 197.546881][ T4330] usb 3-1: SerialNumber: syz [ 197.577072][ T4330] usb 3-1: config 0 descriptor?? [ 197.645232][ T4330] hub 3-1:0.0: bad descriptor, ignoring hub [ 197.684369][ T4330] hub: probe of 3-1:0.0 failed with error -5 [ 197.714642][ T4330] usb 3-1: selecting invalid altsetting 0 [ 197.902600][ T7] usb 1-1: USB disconnect, device number 13 [ 197.982510][ T126] usb 3-1: USB disconnect, device number 9 [ 198.558872][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.584346][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.621865][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.622173][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.649312][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.661739][ T6081] device veth0_vlan entered promiscuous mode [ 198.676297][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.688637][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.710185][ T6081] device veth1_vlan entered promiscuous mode [ 198.808659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.813648][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.818655][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.848010][ T126] usb 3-1: config 0 has no interfaces? [ 198.871379][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.881357][ T126] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 198.898152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.929515][ T6081] device veth0_macvtap entered promiscuous mode [ 198.952938][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.965222][ T6081] device veth1_macvtap entered promiscuous mode [ 199.010176][ T126] usb 3-1: Product: syz [ 199.035957][ T126] usb 3-1: Manufacturer: syz [ 199.040832][ T126] usb 3-1: SerialNumber: syz [ 199.043003][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.101078][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.109453][ T126] usb 3-1: config 0 descriptor?? [ 199.154319][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.186990][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.277882][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.318957][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.359595][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.386210][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.406664][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.447315][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.447749][ T126] usb 3-1: USB disconnect, device number 10 [ 199.477991][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.545575][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.590192][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.627392][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.647940][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.691583][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.728090][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.753907][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.795634][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.820167][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.910958][ T6081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.943119][ T6081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.980106][ T6081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.015587][ T6081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.271520][ T6379] tipc: Started in network mode [ 200.281275][ T6379] tipc: Node identity ac14142f, cluster identity 4711 [ 200.306056][ T6379] tipc: New replicast peer: 127.0.0.1 [ 200.343912][ T6379] tipc: Enabled bearer , priority 10 [ 200.383045][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.398888][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.460504][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.500895][ T6384] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 200.536359][ T4929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.563337][ T4929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.656292][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.115313][ T6413] loop3: detected capacity change from 0 to 128 [ 201.157102][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.222875][ T6410] loop7: detected capacity change from 0 to 4096 [ 201.233980][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.338029][ T6410] ntfs3: loop7: Failed to load $Extend. [ 201.345782][ T6410] ntfs3: loop7: Failed to load root. [ 201.352087][ T6413] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.442318][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 201.472942][ T4327] tipc: Node number set to 2886997039 [ 201.623217][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 201.655877][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.692228][ T126] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.754315][ T126] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 201.808506][ T126] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 201.867267][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.924698][ T126] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 201.952160][ T126] keyspan 3-1:1.0: unsupported endpoint type 0 [ 201.968875][ T126] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 202.010830][ T126] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 202.040802][ T126] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 202.074045][ T126] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 202.112671][ T126] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 202.146323][ T126] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 202.177333][ T126] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 202.227066][ T126] usb 3-1: USB disconnect, device number 11 [ 202.257637][ T126] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 202.269864][ T4523] udevd[4523]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 202.314080][ T126] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 202.348000][ T126] keyspan 3-1:1.0: device disconnected [ 202.652010][ T4330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 202.841905][ T4330] usb 4-1: Using ep0 maxpacket: 8 [ 202.849932][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.893075][ T4330] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.927138][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.972098][ T4330] usb 4-1: config 0 descriptor?? [ 203.201038][ T4330] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.751398][ T126] usb 4-1: USB disconnect, device number 9 [ 203.871643][ T6493] tipc: Started in network mode [ 203.894496][ T6493] tipc: Node identity ac1414aa, cluster identity 4711 [ 203.922967][ T6493] tipc: New replicast peer: 172.20.20.187 [ 203.947055][ T6493] tipc: Enabled bearer , priority 10 [ 204.858380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055effc00: rx timeout, send abort [ 204.871918][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055effc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 205.090545][ T4291] tipc: Node number set to 2886997162 [ 205.419686][ T6515] loop3: detected capacity change from 0 to 32768 [ 205.479379][ T6515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.617 (6515) [ 205.549110][ T6515] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.596706][ T6515] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 205.672110][ T6515] BTRFS info (device loop3): using free space tree [ 205.932150][ T6515] BTRFS info (device loop3): enabling ssd optimizations [ 206.324660][ T6578] FAULT_INJECTION: forcing a failure. [ 206.324660][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 206.329135][ T6577] jffs2: notice: (6577) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.362209][ T4288] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.402192][ T6578] CPU: 0 PID: 6578 Comm: syz.0.628 Not tainted syzkaller #0 [ 206.411365][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.422637][ T6578] Call Trace: [ 206.427113][ T6578] [ 206.430438][ T6578] dump_stack_lvl+0x188/0x24e [ 206.435227][ T6578] ? show_regs_print_info+0x12/0x12 [ 206.441939][ T6578] ? load_image+0x410/0x410 [ 206.447343][ T6578] ? __might_sleep+0xd0/0xd0 [ 206.452867][ T6578] ? __lock_acquire+0x7ea0/0x7ea0 [ 206.454653][ T6579] overlayfs: missing 'lowerdir' [ 206.460084][ T6578] should_fail_ex+0x390/0x4c0 [ 206.460135][ T6578] should_failslab+0x5/0x20 [ 206.476918][ T6578] slab_pre_alloc_hook+0x59/0x300 [ 206.483423][ T6578] kmem_cache_alloc_node+0x5a/0x310 [ 206.491145][ T6578] ? lock_chain_count+0x20/0x20 [ 206.496193][ T6578] ? dup_task_struct+0x57/0x700 [ 206.501380][ T6578] dup_task_struct+0x57/0x700 [ 206.506495][ T6578] ? lockdep_hardirqs_on+0x94/0x140 [ 206.513416][ T6578] copy_process+0x621/0x4070 [ 206.518596][ T6578] ? plist_add+0x3d7/0x490 [ 206.523965][ T6578] ? schedule+0xd0/0x180 [ 206.530556][ T6578] ? futex_wait_queue+0x23/0x1b0 [ 206.536644][ T6578] ? futex_unqueue+0xc7/0xf0 [ 206.542538][ T6578] ? futex_wait+0x4a3/0x5c0 [ 206.548167][ T6578] ? idle_dummy+0x10/0x10 [ 206.554934][ T6578] kernel_clone+0x24b/0x900 [ 206.560662][ T6578] ? create_io_thread+0x170/0x170 [ 206.567345][ T6578] ? do_futex+0x310/0x320 [ 206.574273][ T6578] __x64_sys_clone+0x1a7/0x220 [ 206.581643][ T6578] ? __ia32_sys_vfork+0x140/0x140 [ 206.588561][ T6578] ? lock_chain_count+0x20/0x20 [ 206.594411][ T6578] ? lockdep_hardirqs_on+0x94/0x140 [ 206.602410][ T6578] do_syscall_64+0x4c/0xa0 [ 206.609032][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 206.617184][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 206.623915][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.632401][ T6578] RIP: 0033:0x7fd3b8b9e199 [ 206.638013][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.663142][ T6578] RSP: 002b:00007fd3b9a54fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 206.675006][ T6578] RAX: ffffffffffffffda RBX: 00007fd3b8e25fa0 RCX: 00007fd3b8b9e199 [ 206.684857][ T6578] RDX: 0000000000000000 RSI: ffffffffffffff20 RDI: 0000000001100400 [ 206.695515][ T6578] RBP: 00007fd3b8c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 206.705426][ T6578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.715347][ T6578] R13: 00007fd3b8e26038 R14: 00007fd3b8e25fa0 R15: 00007fffca151168 [ 206.724604][ T6578] [ 207.264695][ T6522] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 208.170414][ T6617] loop2: detected capacity change from 0 to 512 [ 208.179934][ T6615] loop0: detected capacity change from 0 to 128 [ 208.252268][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 208.271325][ T6617] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 208.276014][ T6622] loop7: detected capacity change from 0 to 256 [ 208.330270][ T6615] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 208.349396][ T6617] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 208.384960][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 208.407329][ T6615] hpfs: filesystem error: improperly stopped [ 208.416215][ T6617] EXT4-fs (loop2): group descriptors corrupted! [ 208.439006][ T6615] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 208.454057][ T6622] exfat: Deprecated parameter 'utf8' [ 208.498052][ T6622] exfat: Deprecated parameter 'namecase' [ 208.525528][ T6615] hpfs: You really don't want any checks? You are crazy... [ 208.544114][ T6622] exfat: Deprecated parameter 'namecase' [ 208.587609][ T6622] exfat: Deprecated parameter 'namecase' [ 208.601471][ T6615] hpfs: Code page index out of array [ 208.632058][ T6615] hpfs: code page support is disabled [ 208.641368][ T6615] hpfs: hpfs_map_4sectors(): unaligned read [ 208.690448][ T6622] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 208.722749][ T6615] hpfs: hpfs_map_4sectors(): unaligned read [ 208.729067][ T6615] hpfs: filesystem error: unable to find root dir [ 208.814684][ T6622] netlink: 104 bytes leftover after parsing attributes in process `syz.7.640'. [ 208.942491][ T6634] netlink: 'syz.2.641': attribute type 20 has an invalid length. [ 208.962544][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 209.026958][ T6634] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.036281][ T6634] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.046140][ T6634] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.055710][ T6634] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.155908][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 209.155929][ T27] audit: type=1800 audit(1791253883.556:23): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.643" name="ana_grpid" dev="configfs" ino=41921 res=0 errno=0 [ 209.218393][ T6634] netlink: 'syz.2.641': attribute type 20 has an invalid length. [ 209.262079][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 209.832841][ T6655] loop2: detected capacity change from 0 to 8192 [ 209.870648][ T6597] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.073829][ T6597] usb 4-1: config 1 has an invalid interface number: 27 but max is 1 [ 210.091170][ T6597] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.142566][ T6597] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 210.192024][ T6597] usb 4-1: config 1 has no interface number 2 [ 210.222099][ T6597] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 210.260653][ T6669] loop0: detected capacity change from 0 to 512 [ 210.272018][ T6597] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.319148][ T6597] usb 4-1: config 1 interface 1 has no altsetting 0 [ 210.396350][ T6597] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 210.463353][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.513983][ T6597] usb 4-1: Product: syz [ 210.518601][ T6597] usb 4-1: Manufacturer: syz [ 210.581272][ T6597] usb 4-1: SerialNumber: syz [ 210.582986][ T4835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 210.664891][ T6680] FAULT_INJECTION: forcing a failure. [ 210.664891][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 210.712903][ T6680] CPU: 0 PID: 6680 Comm: syz.2.665 Not tainted syzkaller #0 [ 210.720742][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.731440][ T6680] Call Trace: [ 210.736472][ T6680] [ 210.740166][ T6680] dump_stack_lvl+0x188/0x24e [ 210.745113][ T6680] ? show_regs_print_info+0x12/0x12 [ 210.750661][ T6680] ? load_image+0x410/0x410 [ 210.755739][ T6680] ? __might_sleep+0xd0/0xd0 [ 210.760472][ T6680] ? __lock_acquire+0x7ea0/0x7ea0 [ 210.765591][ T6680] should_fail_ex+0x390/0x4c0 [ 210.770455][ T6680] should_failslab+0x5/0x20 [ 210.774990][ T6680] slab_pre_alloc_hook+0x59/0x300 [ 210.780329][ T6680] ? tomoyo_encode+0x28a/0x550 [ 210.785906][ T6680] __kmem_cache_alloc_node+0x4f/0x270 [ 210.791740][ T6680] ? tomoyo_encode+0x28a/0x550 [ 210.796612][ T6680] __kmalloc+0xa3/0x240 [ 210.800883][ T6680] tomoyo_encode+0x28a/0x550 [ 210.805621][ T6680] tomoyo_realpath_from_path+0x578/0x5c0 [ 210.811376][ T6680] ? tomoyo_domain+0xd2/0x120 [ 210.816289][ T6680] ? tomoyo_path_number_perm+0x205/0x650 [ 210.822240][ T6680] tomoyo_path_number_perm+0x22f/0x650 [ 210.828019][ T6680] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 210.833510][ T6680] ? __lock_acquire+0x7ea0/0x7ea0 [ 210.838551][ T6680] ? do_raw_spin_lock+0x128/0x2f0 [ 210.843604][ T6680] ? d_set_d_op+0x25b/0x370 [ 210.848213][ T6680] ? hook_path_mkdir+0x3a0/0x460 [ 210.853172][ T6680] ? simple_lookup+0xc1/0xf0 [ 210.857833][ T6680] ? lookup_one_qstr_excl+0x11c/0x240 [ 210.863244][ T6680] tomoyo_path_mkdir+0xad/0xf0 [ 210.868082][ T6680] ? tomoyo_path_unlink+0xf0/0xf0 [ 210.873179][ T6680] ? kern_path_create+0x50/0x50 [ 210.878224][ T6680] security_path_mkdir+0xe0/0x130 [ 210.883358][ T6680] do_mkdirat+0x15e/0x440 [ 210.887819][ T6680] ? vfs_mkdir+0x570/0x570 [ 210.892265][ T6680] __x64_sys_mkdirat+0x85/0x90 [ 210.897050][ T6680] do_syscall_64+0x4c/0xa0 [ 210.901483][ T6680] ? clear_bhb_loop+0x60/0xb0 [ 210.906264][ T6680] ? clear_bhb_loop+0x60/0xb0 [ 210.911490][ T6680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.917420][ T6680] RIP: 0033:0x7f936319e199 [ 210.921853][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.942014][ T6680] RSP: 002b:00007f936401e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 210.950450][ T6680] RAX: ffffffffffffffda RBX: 00007f9363425fa0 RCX: 00007f936319e199 [ 210.958440][ T6680] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 210.966765][ T6680] RBP: 00007f93632358e0 R08: 0000000000000000 R09: 0000000000000000 [ 210.974846][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.983289][ T6680] R13: 00007f9363426038 R14: 00007f9363425fa0 R15: 00007ffc729a9288 [ 210.991421][ T6680] [ 211.021978][ T4835] usb 8-1: Using ep0 maxpacket: 8 [ 211.029601][ T4835] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.065685][ T4835] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.106111][ T4835] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.144452][ T4835] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.175167][ T4835] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.198531][ T4835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.232720][ T6653] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.247122][ T6684] loop0: detected capacity change from 0 to 512 [ 211.311474][ T6684] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.657: iget: bad i_size value: 38620345925642 [ 211.374576][ T6684] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.657: couldn't read orphan inode 15 (err -117) [ 211.420420][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.444084][ T4835] usb 8-1: GET_CAPABILITIES returned 0 [ 211.449693][ T4835] usbtmc 8-1:16.0: can't read capabilities [ 211.632985][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 211.711204][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.720857][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.730282][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.739428][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.749070][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.760463][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.857943][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.867399][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.875614][ T6597] ATM dev 0: failed to start ADSL synchronisation: -71 [ 211.877131][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.894178][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.896648][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbd00 failed (-71)! [ 211.908702][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbc00 failed (-71)! [ 211.917283][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8db600 failed (-71)! [ 211.925729][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbf00 failed (-71)! [ 211.976700][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.986774][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 211.997090][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.001180][ T6597] speedtch 4-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 212.006259][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.027140][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbd00 failed (-71)! [ 212.035188][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbc00 failed (-71)! [ 212.044864][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8db600 failed (-71)! [ 212.052153][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.053577][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbf00 failed (-71)! [ 212.063631][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.082735][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.093182][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.103207][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.151286][ T6597] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -16! [ 212.178024][ T6680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.185066][ T6597] speedtch: probe of 4-1:1.27 failed with error -16 [ 212.209936][ T4835] usb 8-1: USB disconnect, device number 2 [ 212.218381][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802f8dbd00 failed (-71)! [ 212.273332][ T6597] usb 4-1: USB disconnect, device number 10 [ 213.100953][ T6721] loop3: detected capacity change from 0 to 4096 [ 213.134178][ T6721] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.208752][ T6721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 213.445990][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 213.457284][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 213.882955][ T4835] kernel read not supported for file /video7 (pid: 4835 comm: kworker/1:9) [ 213.912376][ T6741] loop7: detected capacity change from 0 to 8192 [ 213.941539][ T6741] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.335577][ T6756] loop3: detected capacity change from 0 to 131072 [ 215.343836][ T6756] XFS: ikeep mount option is deprecated. [ 215.476651][ T6758] loop7: detected capacity change from 0 to 131072 [ 215.503176][ T6758] F2FS-fs (loop7): invalid crc value [ 215.573480][ T6758] F2FS-fs (loop7): Found nat_bits in checkpoint [ 215.590555][ T6756] XFS (loop3): Mounting V5 Filesystem [ 215.630442][ T6758] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 215.771633][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 215.771652][ T27] audit: type=1800 audit(1791253890.166:24): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.675" name="file2" dev="loop7" ino=8 res=0 errno=0 [ 215.923437][ T6756] XFS (loop3): Starting recovery (logdev: internal) [ 215.997324][ T6756] XFS (loop3): Ending recovery (logdev: internal) [ 216.316551][ T4288] XFS (loop3): Unmounting Filesystem [ 217.584898][ T6796] 9p: Unknown uid 00000000004294967295 [ 217.761948][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 217.772033][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 217.772569][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 218.006739][ T6782] loop2: detected capacity change from 0 to 40427 [ 218.099765][ T6782] F2FS-fs (loop2): invalid crc value [ 218.146003][ T6782] F2FS-fs (loop2): Found nat_bits in checkpoint [ 218.335646][ T6782] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 218.393239][ T6782] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 218.628266][ T6782] syz.2.678: attempt to access beyond end of device [ 218.628266][ T6782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.001691][ T4273] syz-executor: attempt to access beyond end of device [ 219.001691][ T4273] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 219.057925][ T4273] syz-executor: attempt to access beyond end of device [ 219.057925][ T4273] loop2: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 219.102059][ T4273] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 219.102126][ T4273] F2FS-fs (loop2): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 219.191959][ T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.414217][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.458607][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.501290][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.535325][ T126] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.570459][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.612688][ T126] usb 1-1: config 0 descriptor?? [ 221.321456][ T126] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 221.372477][ T126] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 221.393177][ T6878] loop3: detected capacity change from 0 to 64 [ 221.895544][ T6597] usb 1-1: USB disconnect, device number 14 [ 223.235080][ T6906] loop7: detected capacity change from 0 to 32768 [ 223.267536][ T6899] loop3: detected capacity change from 0 to 40427 [ 223.409494][ T6906] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 223.447415][ T6906] JBD2: Ignoring recovery information on journal [ 223.482556][ T6899] F2FS-fs (loop3): invalid crc value [ 223.551535][ T6906] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 223.620510][ T6899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 223.835849][ T6899] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 223.933617][ T6899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 223.952553][ T6081] ocfs2: Unmounting device (7,7) on (node local) [ 224.236505][ T6899] syz.3.704: attempt to access beyond end of device [ 224.236505][ T6899] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.721219][ T4288] syz-executor: attempt to access beyond end of device [ 224.721219][ T4288] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 224.779940][ T4288] syz-executor: attempt to access beyond end of device [ 224.779940][ T4288] loop3: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 224.844374][ T4288] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 224.844430][ T4288] F2FS-fs (loop3): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 225.148148][ T4835] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 225.389353][ T4835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.420756][ T4835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.440398][ T4835] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.487886][ T4835] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.528711][ T4835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.555185][ T4835] usb 8-1: config 0 descriptor?? [ 225.985226][ T4835] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 226.027104][ T4835] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 226.496509][ T4835] usb 8-1: USB disconnect, device number 3 [ 228.686755][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.734662][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.773154][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.806505][ T7051] device bridge_slave_0 left promiscuous mode [ 228.834143][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.870104][ T7051] device bridge_slave_1 left promiscuous mode [ 228.889735][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.930290][ T7051] bond0: (slave bond_slave_0): Releasing backup interface [ 228.975378][ T7051] bond0: (slave bond_slave_1): Releasing backup interface [ 229.135376][ T7051] team0: Port device team_slave_0 removed [ 229.214623][ T7051] team0: Port device team_slave_1 removed [ 229.237063][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.268724][ T7051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.297621][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.326518][ T7051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.647707][ T7072] FAULT_INJECTION: forcing a failure. [ 229.647707][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 229.663437][ T7072] CPU: 1 PID: 7072 Comm: syz.7.759 Not tainted syzkaller #0 [ 229.670896][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.681460][ T7072] Call Trace: [ 229.684962][ T7072] [ 229.688129][ T7072] dump_stack_lvl+0x188/0x24e [ 229.693698][ T7072] ? lock_chain_count+0x20/0x20 [ 229.698704][ T7072] ? show_regs_print_info+0x12/0x12 [ 229.704489][ T7072] ? load_image+0x410/0x410 [ 229.709062][ T7072] ? get_random_u32+0x4d1/0x930 [ 229.714416][ T7072] ? get_random_u32+0x16b/0x930 [ 229.719507][ T7072] should_fail_ex+0x390/0x4c0 [ 229.724789][ T7072] should_failslab+0x5/0x20 [ 229.730169][ T7072] slab_pre_alloc_hook+0x59/0x300 [ 229.735637][ T7072] kmem_cache_alloc+0x56/0x2f0 [ 229.740567][ T7072] ? inet_bind_bucket_create+0x2b/0x230 [ 229.746220][ T7072] inet_bind_bucket_create+0x2b/0x230 [ 229.752205][ T7072] inet_csk_get_port+0xd63/0x1880 [ 229.758390][ T7072] ? inet_csk_update_fastreuse+0xaa0/0xaa0 [ 229.765841][ T7072] inet_csk_listen_start+0x120/0x300 [ 229.771684][ T7072] inet_listen+0x2cb/0x580 [ 229.777163][ T7072] __sys_listen+0x19d/0x220 [ 229.782044][ T7072] __x64_sys_listen+0x56/0x60 [ 229.786963][ T7072] do_syscall_64+0x4c/0xa0 [ 229.791635][ T7072] ? clear_bhb_loop+0x60/0xb0 [ 229.796809][ T7072] ? clear_bhb_loop+0x60/0xb0 [ 229.801805][ T7072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.808113][ T7072] RIP: 0033:0x7f0dfc19e199 [ 229.813027][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.833652][ T7072] RSP: 002b:00007f0dfcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 229.842571][ T7072] RAX: ffffffffffffffda RBX: 00007f0dfc425fa0 RCX: 00007f0dfc19e199 [ 229.850883][ T7072] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000000003 [ 229.859471][ T7072] RBP: 00007f0dfc2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 229.867846][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.876828][ T7072] R13: 00007f0dfc426038 R14: 00007f0dfc425fa0 R15: 00007ffe27410c38 [ 229.885587][ T7072] [ 230.311297][ T7084] loop3: detected capacity change from 0 to 2048 [ 230.426561][ T7084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 230.861969][ T4929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 230.892182][ T4835] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 230.921364][ T4929] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 230.964995][ T4929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 230.964995][ T4929] [ 230.994814][ T4929] EXT4-fs (loop3): Total free blocks count 0 [ 231.021682][ T4929] EXT4-fs (loop3): Free/Dirty block details [ 231.035149][ T4929] EXT4-fs (loop3): free_blocks=4096 [ 231.040938][ T4929] EXT4-fs (loop3): dirty_blocks=512 [ 231.072008][ T4929] EXT4-fs (loop3): Block reservation details [ 231.089310][ T4929] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 231.106712][ T4835] usb 8-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 231.140453][ T4835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.168740][ T4835] usb 8-1: Product: syz [ 231.174982][ T4835] usb 8-1: Manufacturer: syz [ 231.178197][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 231.179727][ T4835] usb 8-1: SerialNumber: syz [ 231.631261][ T7122] FAULT_INJECTION: forcing a failure. [ 231.631261][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 231.645334][ T7122] CPU: 0 PID: 7122 Comm: syz.3.764 Not tainted syzkaller #0 [ 231.654169][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.665343][ T7122] Call Trace: [ 231.668799][ T7122] [ 231.671906][ T7122] dump_stack_lvl+0x188/0x24e [ 231.677674][ T7122] ? lock_chain_count+0x20/0x20 [ 231.682884][ T7122] ? show_regs_print_info+0x12/0x12 [ 231.688508][ T7122] ? load_image+0x410/0x410 [ 231.693529][ T7122] ? get_random_u32+0x4d1/0x930 [ 231.698625][ T7122] ? get_random_u32+0x16b/0x930 [ 231.703746][ T7122] should_fail_ex+0x390/0x4c0 [ 231.708768][ T7122] should_failslab+0x5/0x20 [ 231.713569][ T7122] slab_pre_alloc_hook+0x59/0x300 [ 231.718718][ T7122] kmem_cache_alloc+0x56/0x2f0 [ 231.723766][ T7122] ? inet_bind_bucket_create+0x2b/0x230 [ 231.729516][ T7122] inet_bind_bucket_create+0x2b/0x230 [ 231.735733][ T7122] inet_csk_get_port+0xd63/0x1880 [ 231.740977][ T7122] ? inet_csk_update_fastreuse+0xaa0/0xaa0 [ 231.747084][ T7122] inet_csk_listen_start+0x120/0x300 [ 231.752572][ T7122] inet_listen+0x2cb/0x580 [ 231.757446][ T7122] __sys_listen+0x19d/0x220 [ 231.762248][ T7122] __x64_sys_listen+0x56/0x60 [ 231.767295][ T7122] do_syscall_64+0x4c/0xa0 [ 231.771847][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 231.776633][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 231.781639][ T7122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.788033][ T7122] RIP: 0033:0x7f0ccd99e199 [ 231.792560][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.812816][ T7122] RSP: 002b:00007f0cce912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 231.821554][ T7122] RAX: ffffffffffffffda RBX: 00007f0ccdc25fa0 RCX: 00007f0ccd99e199 [ 231.829698][ T7122] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000000003 [ 231.838156][ T7122] RBP: 00007f0ccda358e0 R08: 0000000000000000 R09: 0000000000000000 [ 231.846781][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.855424][ T7122] R13: 00007f0ccdc26038 R14: 00007f0ccdc25fa0 R15: 00007ffc25043948 [ 231.863634][ T7122] [ 232.087441][ T4835] usb 8-1: MIDIStreaming interface descriptor not found [ 232.308663][ T4360] usb 8-1: USB disconnect, device number 4 [ 232.415622][ T7130] FAULT_INJECTION: forcing a failure. [ 232.415622][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 232.449769][ T7130] CPU: 0 PID: 7130 Comm: syz.3.766 Not tainted syzkaller #0 [ 232.457379][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 232.468791][ T7130] Call Trace: [ 232.472462][ T7130] [ 232.475967][ T7130] dump_stack_lvl+0x188/0x24e [ 232.480920][ T7130] ? show_regs_print_info+0x12/0x12 [ 232.486470][ T7130] ? load_image+0x410/0x410 [ 232.491284][ T7130] ? __might_sleep+0xd0/0xd0 [ 232.496229][ T7130] ? __lock_acquire+0x7ea0/0x7ea0 [ 232.501650][ T7130] should_fail_ex+0x390/0x4c0 [ 232.506535][ T7130] should_failslab+0x5/0x20 [ 232.511153][ T7130] slab_pre_alloc_hook+0x59/0x300 [ 232.516569][ T7130] ? check_stack_access_within_bounds+0x4e9/0x600 [ 232.523677][ T7130] ? check_stack_write+0x4d0/0x3860 [ 232.529214][ T7130] __kmem_cache_alloc_node+0x4f/0x270 [ 232.534783][ T7130] ? check_stack_write+0x4d0/0x3860 [ 232.540105][ T7130] __kmalloc_node_track_caller+0xa0/0x240 [ 232.546199][ T7130] ? __phys_addr+0xb6/0x170 [ 232.550727][ T7130] krealloc+0x6a/0x100 [ 232.555133][ T7130] check_stack_write+0x4d0/0x3860 [ 232.561003][ T7130] ? check_reg_arg+0x2ba/0xa50 [ 232.566584][ T7130] do_check_common+0x5d9a/0xc560 [ 232.571950][ T7130] ? push_insn+0x670/0x670 [ 232.577306][ T7130] ? do_check_subprogs+0x313/0x360 [ 232.582871][ T7130] bpf_check+0x3eb5/0x11010 [ 232.587512][ T7130] ? mark_lock+0x94/0x320 [ 232.592047][ T7130] ? bpf_get_btf_vmlinux+0x10/0x10 [ 232.597494][ T7130] ? __lock_acquire+0x142d/0x7ea0 [ 232.602584][ T7130] ? mark_lock+0x94/0x320 [ 232.607220][ T7130] ? __lock_acquire+0x1359/0x7ea0 [ 232.612384][ T7130] ? mark_lock+0x94/0x320 [ 232.617025][ T7130] ? __lock_acquire+0x142d/0x7ea0 [ 232.622204][ T7130] ? verify_lock_unused+0x140/0x140 [ 232.627824][ T7130] ? verify_lock_unused+0x140/0x140 [ 232.633375][ T7130] ? verify_lock_unused+0x140/0x140 [ 232.638919][ T7130] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 232.644875][ T7130] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 232.650891][ T7130] ? __lock_acquire+0x7ea0/0x7ea0 [ 232.656688][ T7130] ? lock_chain_count+0x20/0x20 [ 232.661780][ T7130] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 232.668765][ T7130] ? lockdep_hardirqs_on+0x94/0x140 [ 232.674081][ T7130] ? ktime_get_with_offset+0xff/0x320 [ 232.679830][ T7130] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 232.686837][ T7130] ? ktime_get_real_ts64+0x440/0x440 [ 232.694452][ T7130] ? do_raw_spin_unlock+0x11d/0x230 [ 232.699996][ T7130] ? __might_fault+0xc2/0x120 [ 232.704853][ T7130] ? memset+0x1e/0x40 [ 232.709041][ T7130] ? bpf_obj_name_cpy+0x190/0x1d0 [ 232.714179][ T7130] bpf_prog_load+0x100e/0x1530 [ 232.719651][ T7130] ? map_freeze+0x390/0x390 [ 232.724570][ T7130] ? __might_fault+0xa6/0x120 [ 232.729468][ T7130] ? __might_fault+0xa6/0x120 [ 232.734422][ T7130] ? __might_fault+0xc2/0x120 [ 232.739197][ T7130] ? __might_fault+0xa6/0x120 [ 232.744083][ T7130] ? bpf_lsm_bpf+0x5/0x10 [ 232.748607][ T7130] ? security_bpf+0x7a/0xa0 [ 232.753144][ T7130] __sys_bpf+0x5b8/0x780 [ 232.757524][ T7130] ? bpf_link_show_fdinfo+0x380/0x380 [ 232.765243][ T7130] ? lock_chain_count+0x20/0x20 [ 232.771608][ T7130] __x64_sys_bpf+0x78/0x90 [ 232.776336][ T7130] do_syscall_64+0x4c/0xa0 [ 232.780890][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 232.785804][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 232.790697][ T7130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.796665][ T7130] RIP: 0033:0x7f0ccd99e199 [ 232.801105][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.820937][ T7130] RSP: 002b:00007f0cce912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.829411][ T7130] RAX: ffffffffffffffda RBX: 00007f0ccdc25fa0 RCX: 00007f0ccd99e199 [ 232.837537][ T7130] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 232.845538][ T7130] RBP: 00007f0ccda358e0 R08: 0000000000000000 R09: 0000000000000000 [ 232.853701][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.861703][ T7130] R13: 00007f0ccdc26038 R14: 00007f0ccdc25fa0 R15: 00007ffc25043948 [ 232.870332][ T7130] [ 233.122080][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 233.440207][ T7143] loop7: detected capacity change from 0 to 2048 [ 233.508423][ T7143] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 233.750134][ T4337] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 233.755219][ T7155] overlayfs: failed to clone upperpath [ 233.780367][ T4337] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 930 with error 28 [ 233.804797][ T4337] EXT4-fs (loop7): This should not happen!! Data will be lost [ 233.804797][ T4337] [ 233.819460][ T4337] EXT4-fs (loop7): Total free blocks count 0 [ 233.829416][ T4337] EXT4-fs (loop7): Free/Dirty block details [ 233.844378][ T4337] EXT4-fs (loop7): free_blocks=4096 [ 233.850283][ T4337] EXT4-fs (loop7): dirty_blocks=944 [ 233.869486][ T4337] EXT4-fs (loop7): Block reservation details [ 233.878596][ T4337] EXT4-fs (loop7): i_reserved_data_blocks=59 [ 233.936651][ T6081] EXT4-fs (loop7): unmounting filesystem. [ 234.050000][ T7160] loop0: detected capacity change from 0 to 256 [ 234.126992][ T7162] loop7: detected capacity change from 0 to 512 [ 234.257387][ T7162] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 234.330967][ T7162] FAT-fs (loop7): Filesystem has been set read-only [ 234.368769][ T7167] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 234.626010][ T7152] loop3: detected capacity change from 0 to 32768 [ 234.635796][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.694402][ T7152] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 234.697162][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.720742][ T7152] JBD2: Ignoring recovery information on journal [ 234.771636][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.813434][ T7152] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 234.821522][ T7175] device bridge_slave_0 left promiscuous mode [ 234.831679][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.893201][ T7175] device bridge_slave_1 left promiscuous mode [ 234.918976][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.971088][ T7175] bond0: (slave bond_slave_0): Releasing backup interface [ 235.028720][ T7175] bond0: (slave bond_slave_1): Releasing backup interface [ 235.117355][ T7182] loop0: detected capacity change from 0 to 1024 [ 235.175695][ T7182] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.190936][ T4288] ocfs2: Unmounting device (7,3) on (node local) [ 235.268785][ T7184] gadgetfs: bound to dummy_udc driver [ 235.318577][ T7182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.438634][ T7175] team0: Port device team_slave_0 removed [ 235.521393][ T7175] team0: Port device team_slave_1 removed [ 235.553816][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.561327][ T7175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.604236][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.631393][ T7175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.869749][ T7197] FAULT_INJECTION: forcing a failure. [ 235.869749][ T7197] name failslab, interval 1, probability 0, space 0, times 0 [ 235.889377][ T7197] CPU: 1 PID: 7197 Comm: syz.7.799 Not tainted syzkaller #0 [ 235.896823][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.907122][ T7197] Call Trace: [ 235.910534][ T7197] [ 235.913833][ T7197] dump_stack_lvl+0x188/0x24e [ 235.918678][ T7197] ? show_regs_print_info+0x12/0x12 [ 235.924198][ T7197] ? load_image+0x410/0x410 [ 235.928982][ T7197] ? __might_sleep+0xd0/0xd0 [ 235.933620][ T7197] ? __lock_acquire+0x7ea0/0x7ea0 [ 235.938803][ T7197] ? krealloc+0xd6/0x100 [ 235.943204][ T7197] should_fail_ex+0x390/0x4c0 [ 235.948074][ T7197] should_failslab+0x5/0x20 [ 235.952655][ T7197] slab_pre_alloc_hook+0x59/0x300 [ 235.957864][ T7197] ? do_check_common+0x3499/0xc560 [ 235.963050][ T7197] __kmem_cache_alloc_node+0x4f/0x270 [ 235.968669][ T7197] ? do_check_common+0x3499/0xc560 [ 235.973838][ T7197] kmalloc_trace+0x26/0xe0 [ 235.978403][ T7197] do_check_common+0x3499/0xc560 [ 235.983550][ T7197] ? push_insn+0x670/0x670 [ 235.988927][ T7197] ? do_check_subprogs+0x313/0x360 [ 235.994221][ T7197] bpf_check+0x3eb5/0x11010 [ 235.999532][ T7197] ? mark_lock+0x94/0x320 [ 236.004022][ T7197] ? bpf_get_btf_vmlinux+0x10/0x10 [ 236.009372][ T7197] ? __lock_acquire+0x142d/0x7ea0 [ 236.014774][ T7197] ? mark_lock+0x94/0x320 [ 236.019464][ T7197] ? __lock_acquire+0x1359/0x7ea0 [ 236.025127][ T7197] ? mark_lock+0x94/0x320 [ 236.029557][ T7197] ? __lock_acquire+0x142d/0x7ea0 [ 236.035199][ T7197] ? verify_lock_unused+0x140/0x140 [ 236.040891][ T7197] ? verify_lock_unused+0x140/0x140 [ 236.046510][ T7197] ? verify_lock_unused+0x140/0x140 [ 236.051782][ T7197] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 236.057762][ T7197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.064181][ T7197] ? __lock_acquire+0x7ea0/0x7ea0 [ 236.069886][ T7197] ? lock_chain_count+0x20/0x20 [ 236.076025][ T7197] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 236.082586][ T7197] ? lockdep_hardirqs_on+0x94/0x140 [ 236.088246][ T7197] ? ktime_get_with_offset+0xff/0x320 [ 236.094082][ T7197] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 236.100763][ T7197] ? ktime_get_real_ts64+0x440/0x440 [ 236.106454][ T7197] ? do_raw_spin_unlock+0x11d/0x230 [ 236.111730][ T7197] ? __might_fault+0xc2/0x120 [ 236.116567][ T7197] ? memset+0x1e/0x40 [ 236.120596][ T7197] ? bpf_obj_name_cpy+0x190/0x1d0 [ 236.126056][ T7197] bpf_prog_load+0x100e/0x1530 [ 236.131173][ T7197] ? map_freeze+0x390/0x390 [ 236.135851][ T7197] ? __might_fault+0xa6/0x120 [ 236.140785][ T7197] ? __might_fault+0xa6/0x120 [ 236.145699][ T7197] ? __might_fault+0xc2/0x120 [ 236.150703][ T7197] ? __might_fault+0xa6/0x120 [ 236.155480][ T7197] ? bpf_lsm_bpf+0x5/0x10 [ 236.159985][ T7197] ? security_bpf+0x7a/0xa0 [ 236.164670][ T7197] __sys_bpf+0x5b8/0x780 [ 236.169009][ T7197] ? bpf_link_show_fdinfo+0x380/0x380 [ 236.174561][ T7197] ? lock_chain_count+0x20/0x20 [ 236.179489][ T7197] __x64_sys_bpf+0x78/0x90 [ 236.184070][ T7197] do_syscall_64+0x4c/0xa0 [ 236.188643][ T7197] ? clear_bhb_loop+0x60/0xb0 [ 236.193451][ T7197] ? clear_bhb_loop+0x60/0xb0 [ 236.198395][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.204632][ T7197] RIP: 0033:0x7f0dfc19e199 [ 236.209179][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.229380][ T7197] RSP: 002b:00007f0dfcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.238650][ T7197] RAX: ffffffffffffffda RBX: 00007f0dfc425fa0 RCX: 00007f0dfc19e199 [ 236.247460][ T7197] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 236.256100][ T7197] RBP: 00007f0dfc2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 236.264379][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.273131][ T7197] R13: 00007f0dfc426038 R14: 00007f0dfc425fa0 R15: 00007ffe27410c38 [ 236.281598][ T7197] [ 236.318824][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 236.405458][ T7202] netlink: 'syz.3.791': attribute type 21 has an invalid length. [ 236.474886][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 236.532184][ T7202] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.541199][ T7202] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.550086][ T7202] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.559246][ T7202] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.585936][ T7207] loop7: detected capacity change from 0 to 256 [ 236.698312][ T7202] netlink: 'syz.3.791': attribute type 21 has an invalid length. [ 236.741976][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 237.713178][ T7230] loop3: detected capacity change from 0 to 764 [ 237.729271][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.748299][ T7220] loop7: detected capacity change from 0 to 40427 [ 237.786481][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.803408][ T7230] rock: directory entry would overflow storage [ 237.812534][ T7230] rock: sig=0x5245, size=8, remaining=5 [ 237.813843][ T7220] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 237.844280][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.864660][ T7231] device bridge_slave_0 left promiscuous mode [ 237.893446][ T7220] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 237.902638][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.963262][ T7231] device bridge_slave_1 left promiscuous mode [ 237.979103][ T7220] F2FS-fs (loop7): invalid crc value [ 237.986658][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.021671][ T7220] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 238.117115][ T7231] bond0: (slave bond_slave_0): Releasing backup interface [ 238.187589][ T7239] Invalid ELF header magic: != ELF [ 238.211204][ T7231] bond0: (slave bond_slave_1): Releasing backup interface [ 238.287678][ T27] audit: type=1326 audit(1791253912.686:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.3.802" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ccd99e199 code=0x0 [ 238.401254][ T7220] F2FS-fs (loop7): Start checkpoint disabled! [ 238.442680][ T7220] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 238.450602][ T7220] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 238.469655][ T7231] team0: Port device team_slave_0 removed [ 238.566038][ T7231] team0: Port device team_slave_1 removed [ 238.575979][ T41] kworker/u4:2: attempt to access beyond end of device [ 238.575979][ T41] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 238.606369][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.639176][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.679962][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.713098][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.752629][ T6600] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 238.941890][ T6600] usb 1-1: Using ep0 maxpacket: 8 [ 238.949606][ T6600] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 238.967468][ T6600] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.991984][ T6600] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.013475][ T6600] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.036515][ T6600] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.066531][ T6600] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.111323][ T6600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.358169][ T6600] usb 1-1: usb_control_msg returned -32 [ 239.367002][ T6600] usbtmc 1-1:16.0: can't read capabilities [ 239.763663][ T7258] FAULT_INJECTION: forcing a failure. [ 239.763663][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 239.807881][ T7258] CPU: 0 PID: 7258 Comm: syz.2.805 Not tainted syzkaller #0 [ 239.815534][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.825902][ T7258] Call Trace: [ 239.829215][ T7258] [ 239.832176][ T7258] dump_stack_lvl+0x188/0x24e [ 239.836900][ T7258] ? show_regs_print_info+0x12/0x12 [ 239.842211][ T7258] ? load_image+0x410/0x410 [ 239.846881][ T7258] ? __might_sleep+0xd0/0xd0 [ 239.851705][ T7258] ? __lock_acquire+0x7ea0/0x7ea0 [ 239.856901][ T7258] should_fail_ex+0x390/0x4c0 [ 239.861662][ T7258] should_failslab+0x5/0x20 [ 239.866298][ T7258] slab_pre_alloc_hook+0x59/0x300 [ 239.871685][ T7258] ? check_stack_access_within_bounds+0x4e9/0x600 [ 239.878299][ T7258] ? check_stack_write+0x4d0/0x3860 [ 239.883635][ T7258] __kmem_cache_alloc_node+0x4f/0x270 [ 239.889711][ T7258] ? check_stack_write+0x4d0/0x3860 [ 239.895116][ T7258] __kmalloc_node_track_caller+0xa0/0x240 [ 239.900956][ T7258] ? __phys_addr+0xb6/0x170 [ 239.905513][ T7258] krealloc+0x6a/0x100 [ 239.909663][ T7258] check_stack_write+0x4d0/0x3860 [ 239.914821][ T7258] ? check_reg_arg+0x2ba/0xa50 [ 239.919697][ T7258] do_check_common+0x5d9a/0xc560 [ 239.924960][ T7258] ? push_insn+0x670/0x670 [ 239.929423][ T7258] ? do_check_subprogs+0x313/0x360 [ 239.934740][ T7258] bpf_check+0x3eb5/0x11010 [ 239.939378][ T7258] ? mark_lock+0x94/0x320 [ 239.943731][ T7258] ? bpf_get_btf_vmlinux+0x10/0x10 [ 239.948949][ T7258] ? __lock_acquire+0x142d/0x7ea0 [ 239.954837][ T7258] ? mark_lock+0x94/0x320 [ 239.959916][ T7258] ? __lock_acquire+0x1359/0x7ea0 [ 239.965184][ T7258] ? mark_lock+0x94/0x320 [ 239.969677][ T7258] ? __lock_acquire+0x142d/0x7ea0 [ 239.974938][ T7258] ? verify_lock_unused+0x140/0x140 [ 239.980556][ T7258] ? verify_lock_unused+0x140/0x140 [ 239.985876][ T7258] ? verify_lock_unused+0x140/0x140 [ 239.991216][ T7258] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 239.997822][ T7258] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.003999][ T7258] ? __lock_acquire+0x7ea0/0x7ea0 [ 240.009323][ T7258] ? lock_chain_count+0x20/0x20 [ 240.014376][ T7258] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 240.020761][ T7258] ? lockdep_hardirqs_on+0x94/0x140 [ 240.026423][ T7258] ? ktime_get_with_offset+0xff/0x320 [ 240.031944][ T7258] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 240.038378][ T7258] ? ktime_get_real_ts64+0x440/0x440 [ 240.043855][ T7258] ? do_raw_spin_unlock+0x11d/0x230 [ 240.049609][ T7258] ? __might_fault+0xc2/0x120 [ 240.054834][ T7258] ? memset+0x1e/0x40 [ 240.059358][ T7258] ? bpf_obj_name_cpy+0x190/0x1d0 [ 240.064715][ T7258] bpf_prog_load+0x100e/0x1530 [ 240.070078][ T7258] ? map_freeze+0x390/0x390 [ 240.074783][ T7258] ? __might_fault+0xa6/0x120 [ 240.079673][ T7258] ? __might_fault+0xa6/0x120 [ 240.085213][ T7258] ? __might_fault+0xc2/0x120 [ 240.090025][ T7258] ? __might_fault+0xa6/0x120 [ 240.095450][ T7258] ? bpf_lsm_bpf+0x5/0x10 [ 240.099915][ T7258] ? security_bpf+0x7a/0xa0 [ 240.104582][ T7258] __sys_bpf+0x5b8/0x780 [ 240.109334][ T7258] ? bpf_link_show_fdinfo+0x380/0x380 [ 240.114948][ T7258] ? lock_chain_count+0x20/0x20 [ 240.120208][ T7258] __x64_sys_bpf+0x78/0x90 [ 240.124834][ T7258] do_syscall_64+0x4c/0xa0 [ 240.129482][ T7258] ? clear_bhb_loop+0x60/0xb0 [ 240.134327][ T7258] ? clear_bhb_loop+0x60/0xb0 [ 240.139119][ T7258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.145165][ T7258] RIP: 0033:0x7f936319e199 [ 240.149783][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.170649][ T7258] RSP: 002b:00007f936401e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.179180][ T7258] RAX: ffffffffffffffda RBX: 00007f9363425fa0 RCX: 00007f936319e199 [ 240.187818][ T7258] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 240.196668][ T7258] RBP: 00007f93632358e0 R08: 0000000000000000 R09: 0000000000000000 [ 240.204985][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.213070][ T7258] R13: 00007f9363426038 R14: 00007f9363425fa0 R15: 00007ffc729a9288 [ 240.221278][ T7258] [ 240.302764][ T7259] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 240.508651][ T126] usb 1-1: USB disconnect, device number 16 [ 240.725731][ T7271] loop2: detected capacity change from 0 to 2048 [ 240.842848][ T7271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 240.869083][ T7280] FAULT_INJECTION: forcing a failure. [ 240.869083][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 240.896757][ T7280] CPU: 0 PID: 7280 Comm: syz.3.815 Not tainted syzkaller #0 [ 240.904150][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.914700][ T7280] Call Trace: [ 240.918024][ T7280] [ 240.920992][ T7280] dump_stack_lvl+0x188/0x24e [ 240.925763][ T7280] ? show_regs_print_info+0x12/0x12 [ 240.931119][ T7280] ? load_image+0x410/0x410 [ 240.935695][ T7280] ? __might_sleep+0xd0/0xd0 [ 240.940338][ T7280] ? __lock_acquire+0x7ea0/0x7ea0 [ 240.945430][ T7280] should_fail_ex+0x390/0x4c0 [ 240.950230][ T7280] should_failslab+0x5/0x20 [ 240.954788][ T7280] slab_pre_alloc_hook+0x59/0x300 [ 240.959946][ T7280] ? vfs_write+0x777/0x9a0 [ 240.964411][ T7280] kmem_cache_alloc+0x56/0x2f0 [ 240.969198][ T7280] ? getname_flags+0xb7/0x500 [ 240.974070][ T7280] getname_flags+0xb7/0x500 [ 240.979039][ T7280] do_sys_openat2+0xdd/0x4f0 [ 240.983741][ T7280] ? do_sys_open+0xe0/0xe0 [ 240.988557][ T7280] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.994716][ T7280] ? lock_chain_count+0x20/0x20 [ 240.999721][ T7280] __x64_sys_openat+0x135/0x160 [ 241.004942][ T7280] do_syscall_64+0x4c/0xa0 [ 241.009598][ T7280] ? clear_bhb_loop+0x60/0xb0 [ 241.014578][ T7280] ? clear_bhb_loop+0x60/0xb0 [ 241.019540][ T7280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.026129][ T7280] RIP: 0033:0x7f0ccd95e9ce [ 241.030843][ T7280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.051804][ T7280] RSP: 002b:00007f0cce911ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.060766][ T7280] RAX: ffffffffffffffda RBX: 00007f0cce9126c0 RCX: 00007f0ccd95e9ce [ 241.068875][ T7280] RDX: 0000000000000002 RSI: 00007f0cce911f90 RDI: ffffffffffffff9c [ 241.077308][ T7280] RBP: 00007f0ccda358e0 R08: 0000000000000000 R09: 0000000000000000 [ 241.085384][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.093910][ T7280] R13: 00007f0ccdc26038 R14: 00007f0ccdc25fa0 R15: 00007ffc25043948 [ 241.102387][ T7280] [ 241.282259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.400525][ T7286] loop0: detected capacity change from 0 to 512 [ 241.409388][ T4826] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 241.458655][ T4826] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 241.459103][ T7286] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.816: invalid indirect mapped block 256 (level 2) [ 241.472397][ T4826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 241.472397][ T4826] [ 241.496899][ T4826] EXT4-fs (loop2): Total free blocks count 0 [ 241.503098][ T4826] EXT4-fs (loop2): Free/Dirty block details [ 241.509476][ T4826] EXT4-fs (loop2): free_blocks=4096 [ 241.515173][ T4826] EXT4-fs (loop2): dirty_blocks=512 [ 241.520512][ T4826] EXT4-fs (loop2): Block reservation details [ 241.527971][ T4826] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 241.553216][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 241.651274][ T7286] EXT4-fs (loop0): 2 truncates cleaned up [ 241.679819][ T7286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 241.784306][ T7286] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.816: bg 0: block 5: invalid block bitmap [ 241.992559][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 242.019751][ T7299] loop2: detected capacity change from 0 to 512 [ 242.120223][ T7299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.349887][ T7308] FAULT_INJECTION: forcing a failure. [ 242.349887][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 242.366447][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 242.375637][ T7308] CPU: 0 PID: 7308 Comm: syz.0.833 Not tainted syzkaller #0 [ 242.383375][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.394343][ T7308] Call Trace: [ 242.397816][ T7308] [ 242.400954][ T7308] dump_stack_lvl+0x188/0x24e [ 242.406314][ T7308] ? show_regs_print_info+0x12/0x12 [ 242.412198][ T7308] ? load_image+0x410/0x410 [ 242.416879][ T7308] ? __might_sleep+0xd0/0xd0 [ 242.421736][ T7308] ? __lock_acquire+0x7ea0/0x7ea0 [ 242.427286][ T7308] should_fail_ex+0x390/0x4c0 [ 242.432749][ T7308] should_failslab+0x5/0x20 [ 242.438291][ T7308] slab_pre_alloc_hook+0x59/0x300 [ 242.443533][ T7308] ? vfs_write+0x777/0x9a0 [ 242.447998][ T7308] kmem_cache_alloc+0x56/0x2f0 [ 242.453248][ T7308] ? getname_flags+0xb7/0x500 [ 242.458100][ T7308] getname_flags+0xb7/0x500 [ 242.463192][ T7308] do_sys_openat2+0xdd/0x4f0 [ 242.468064][ T7308] ? do_sys_open+0xe0/0xe0 [ 242.472675][ T7308] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 242.479178][ T7308] ? lock_chain_count+0x20/0x20 [ 242.484482][ T7308] __x64_sys_openat+0x135/0x160 [ 242.489761][ T7308] do_syscall_64+0x4c/0xa0 [ 242.494504][ T7308] ? clear_bhb_loop+0x60/0xb0 [ 242.500407][ T7308] ? clear_bhb_loop+0x60/0xb0 [ 242.505245][ T7308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.511234][ T7308] RIP: 0033:0x7fd3b8b5e9ce [ 242.515684][ T7308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.537472][ T7308] RSP: 002b:00007fd3b9a54ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.546184][ T7308] RAX: ffffffffffffffda RBX: 00007fd3b9a556c0 RCX: 00007fd3b8b5e9ce [ 242.554615][ T7308] RDX: 0000000000000002 RSI: 00007fd3b9a54f90 RDI: ffffffffffffff9c [ 242.563273][ T7308] RBP: 00007fd3b8c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 242.572002][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.581342][ T7308] R13: 00007fd3b8e26038 R14: 00007fd3b8e25fa0 R15: 00007fffca151168 [ 242.589830][ T7308] [ 242.727612][ T7312] loop2: detected capacity change from 0 to 256 [ 243.822259][ T7335] netlink: 'syz.2.828': attribute type 21 has an invalid length. [ 243.830800][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 243.869937][ T7335] netlink: 'syz.2.828': attribute type 21 has an invalid length. [ 243.889184][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 244.386890][ T7350] loop0: detected capacity change from 0 to 2048 [ 244.413370][ T6597] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 244.502072][ T7350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.611948][ T6597] usb 3-1: Using ep0 maxpacket: 8 [ 244.620922][ T6597] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 244.660793][ T6597] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.722805][ T6597] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.753844][ T6597] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.785039][ T6597] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.859871][ T6597] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.890272][ T6597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.916508][ T2973] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 245.000467][ T2973] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 245.034244][ T2973] EXT4-fs (loop0): This should not happen!! Data will be lost [ 245.034244][ T2973] [ 245.062026][ T2973] EXT4-fs (loop0): Total free blocks count 0 [ 245.080662][ T2973] EXT4-fs (loop0): Free/Dirty block details [ 245.098838][ T2973] EXT4-fs (loop0): free_blocks=4096 [ 245.112147][ T2973] EXT4-fs (loop0): dirty_blocks=512 [ 245.137532][ T6597] usb 3-1: usb_control_msg returned -32 [ 245.143697][ T6597] usbtmc 3-1:16.0: can't read capabilities [ 245.170134][ T2973] EXT4-fs (loop0): Block reservation details [ 245.195260][ T2973] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 245.255195][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 245.272954][ T27] audit: type=1326 audit(1791253919.676:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.4.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe66559e199 code=0x0 [ 245.812019][ T6597] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.881651][ T7386] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 246.003979][ T6597] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.017497][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.845'. [ 246.027529][ T6597] usb 1-1: config 1 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 246.051380][ T6597] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 246.135977][ T6597] usb 1-1: config 1 interface 0 has no altsetting 1 [ 246.154518][ T126] usb 3-1: USB disconnect, device number 12 [ 246.164110][ T6597] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 246.194031][ T6597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.212316][ T6597] usb 1-1: Product: syz [ 246.222250][ T6597] usb 1-1: Manufacturer: syz [ 246.229768][ T6597] usb 1-1: SerialNumber: syz [ 246.274787][ T7399] loop7: detected capacity change from 0 to 2048 [ 246.390960][ T7399] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 246.473448][ T6597] dvbdev: DVB: registering new adapter (DEC3000-s) [ 246.512310][ T6597] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 246.580817][ T4826] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 246.628553][ T4826] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 246.670315][ T4826] EXT4-fs (loop7): This should not happen!! Data will be lost [ 246.670315][ T4826] [ 246.709445][ T4826] EXT4-fs (loop7): Total free blocks count 0 [ 246.732108][ T4826] EXT4-fs (loop7): Free/Dirty block details [ 246.739441][ T4826] EXT4-fs (loop7): free_blocks=4096 [ 246.786887][ T4826] EXT4-fs (loop7): dirty_blocks=512 [ 246.811970][ T4826] EXT4-fs (loop7): Block reservation details [ 246.818142][ T4826] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 246.879768][ T6597] usb 1-1: USB disconnect, device number 17 [ 246.903088][ T6081] EXT4-fs (loop7): unmounting filesystem. [ 248.044168][ T7421] loop7: detected capacity change from 0 to 32768 [ 248.084247][ T7421] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 248.479459][ T4523] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 248.572775][ T7463] loop0: detected capacity change from 0 to 512 [ 248.616121][ T7463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.709591][ T7463] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.866: bad orphan inode 131083 [ 248.829116][ T6597] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 248.838013][ T7463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 248.903523][ T7463] EXT4-fs (loop0): shut down requested (1) [ 249.043776][ T6597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.062524][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 249.077881][ T6597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.119034][ T6597] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.204011][ T6597] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.232054][ T6597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.273999][ T6597] usb 3-1: config 0 descriptor?? [ 249.699706][ T6597] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 249.738367][ T6597] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 250.026203][ T27] audit: type=1326 audit(1791253924.426:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.7.872" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dfc19e199 code=0x0 [ 251.091681][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 251.960554][ T126] usb 3-1: USB disconnect, device number 13 [ 252.220780][ T7552] loop0: detected capacity change from 0 to 1024 [ 252.272251][ T7552] EXT4-fs: Ignoring removed orlov option [ 252.418954][ T7552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.705993][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 252.863844][ T7573] loop7: detected capacity change from 0 to 512 [ 252.896842][ T7573] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.962888][ T7573] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.889: corrupted in-inode xattr [ 252.976350][ T7573] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.889: couldn't read orphan inode 15 (err -117) [ 252.991670][ T7573] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 253.180536][ T7545] loop2: detected capacity change from 0 to 32768 [ 253.240086][ T7573] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 12: comm syz.7.889: lblock 3 mapped to illegal pblock 12 (length 1) [ 253.293829][ T7545] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 253.579789][ T6081] EXT4-fs (loop7): unmounting filesystem. [ 253.779637][ T4524] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 253.787666][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 254.082220][ T6597] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 254.284592][ T6597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.316171][ T7605] loop2: detected capacity change from 0 to 512 [ 254.331997][ T6597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.383292][ T6597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.396861][ T7605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.438146][ T6597] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.449280][ T7605] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.898: bad orphan inode 131083 [ 254.477705][ T7605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.497014][ T6597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.548638][ T6597] usb 1-1: config 0 descriptor?? [ 254.561646][ T7605] EXT4-fs (loop2): shut down requested (1) [ 254.685011][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 254.992599][ T6597] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 255.024487][ T6597] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 255.360587][ T7629] gadgetfs: bound to dummy_udc driver [ 255.666662][ T27] audit: type=1326 audit(1791253930.066:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.2.904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f936319e199 code=0x0 [ 256.342241][ C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 256.645323][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.653568][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.962168][ T4291] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.151889][ T4291] usb 3-1: Using ep0 maxpacket: 16 [ 257.159669][ T4291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.187710][ T6597] usb 1-1: USB disconnect, device number 18 [ 257.233540][ T4291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.281219][ T4291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.304104][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 257.321975][ T4291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.342340][ T4291] usb 3-1: Product: syz [ 257.346861][ T4291] usb 3-1: Manufacturer: syz [ 257.361836][ T4291] usb 3-1: SerialNumber: syz [ 257.514173][ T126] usb 4-1: config 0 has no interfaces? [ 257.524481][ T126] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 257.533833][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.920'. [ 257.560489][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.588473][ T4291] usb 3-1: 0:2 : does not exist [ 257.596828][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 257.607773][ T126] usb 4-1: Product: syz [ 257.615180][ T4291] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 257.631860][ T126] usb 4-1: Manufacturer: syz [ 257.651380][ T126] usb 4-1: SerialNumber: syz [ 257.680580][ T4291] usb 3-1: USB disconnect, device number 14 [ 257.688119][ T126] usb 4-1: config 0 descriptor?? [ 257.826846][ T7666] netlink: 'syz.0.922': attribute type 10 has an invalid length. [ 257.858813][ T7666] device syz_tun entered promiscuous mode [ 257.900177][ T7666] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 257.933438][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.991909][ T4835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 258.184036][ T126] usb 4-1: USB disconnect, device number 11 [ 258.184494][ T4835] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.221596][ T4835] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.247476][ T4835] usb 8-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 258.267952][ T4835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.735020][ T4835] rtsx_usb: probe of 8-1:1.0 failed with error -71 [ 258.766738][ T4835] usb 8-1: USB disconnect, device number 5 [ 259.412898][ T7679] ip_tables: iptables: counters copy to user failed while replacing table [ 259.906071][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.930'. [ 259.972206][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 260.180811][ T4291] smpboot: CPU 1 is now offline [ 260.321202][ T7708] x86: Booting SMP configuration: [ 260.339121][ T7708] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 261.301487][ T7732] loop7: detected capacity change from 0 to 1024 [ 261.338714][ T7732] EXT4-fs: Ignoring removed orlov option [ 261.456684][ T7732] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 261.697203][ T6081] EXT4-fs (loop7): unmounting filesystem. [ 261.862847][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.7.950'. [ 262.910138][ T7755] loop0: detected capacity change from 0 to 32768 [ 262.960013][ T7755] (syz.0.953,7755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 262.977063][ T7755] (syz.0.953,7755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 263.019324][ T7755] JBD2: Ignoring recovery information on journal [ 263.128640][ T7755] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 263.652341][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 263.991514][ T7768] loop3: detected capacity change from 0 to 1024 [ 264.053116][ T7768] EXT4-fs (loop3): filesystem is read-only [ 264.577865][ T7780] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 264.640373][ T7782] loop3: detected capacity change from 0 to 1024 [ 264.676659][ T7782] EXT4-fs: Ignoring removed orlov option [ 264.765582][ T7782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 265.073402][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 265.678570][ T7796] loop7: detected capacity change from 0 to 32768 [ 265.726291][ T7796] (syz.7.968,7796,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 265.746233][ T7796] (syz.7.968,7796,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 265.781023][ T7796] JBD2: Ignoring recovery information on journal [ 265.829053][ T7796] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 266.014701][ T7796] [ 266.017349][ T7796] ====================================================== [ 266.024710][ T7796] WARNING: possible circular locking dependency detected [ 266.032048][ T7796] syzkaller #0 Not tainted [ 266.037301][ T7796] ------------------------------------------------------ [ 266.045324][ T7796] syz.7.968/7796 is trying to acquire lock: [ 266.051519][ T7796] ffff88807a12a990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270 [ 266.061381][ T7796] [ 266.061381][ T7796] but task is already holding lock: [ 266.069771][ T7796] ffff88807b8698e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 266.082863][ T7796] [ 266.082863][ T7796] which lock already depends on the new lock. [ 266.082863][ T7796] [ 266.093553][ T7796] [ 266.093553][ T7796] the existing dependency chain (in reverse order) is: [ 266.103994][ T7796] [ 266.103994][ T7796] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 266.113610][ T7796] down_read+0x42/0x2d0 [ 266.119017][ T7796] ocfs2_start_trans+0x3a4/0x6f0 [ 266.124788][ T7796] ocfs2_mknod+0x1266/0x2500 [ 266.130738][ T7796] ocfs2_create+0x1b6/0x4b0 [ 266.136163][ T7796] path_openat+0x11b9/0x2f10 [ 266.141310][ T7796] do_filp_open+0x1ee/0x420 [ 266.146347][ T7796] do_sys_openat2+0x14b/0x4f0 [ 266.151593][ T7796] __x64_sys_openat+0x135/0x160 [ 266.157161][ T7796] do_syscall_64+0x4c/0xa0 [ 266.162916][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.170903][ T7796] [ 266.170903][ T7796] -> #4 (sb_internal#3){.+.+}-{0:0}: [ 266.179749][ T7796] ocfs2_start_trans+0x2a5/0x6f0 [ 266.185969][ T7796] ocfs2_acquire_dquot+0x69a/0xb80 [ 266.192138][ T7796] dqget+0x713/0xbb0 [ 266.196680][ T7796] __dquot_initialize+0x3a9/0xd00 [ 266.202371][ T7796] ocfs2_get_init_inode+0x144/0x1b0 [ 266.208608][ T7796] ocfs2_mknod+0xbdc/0x2500 [ 266.214112][ T7796] ocfs2_create+0x1b6/0x4b0 [ 266.219623][ T7796] path_openat+0x11b9/0x2f10 [ 266.224955][ T7796] do_filp_open+0x1ee/0x420 [ 266.230150][ T7796] do_sys_openat2+0x14b/0x4f0 [ 266.235580][ T7796] __x64_sys_open+0x11b/0x140 [ 266.241039][ T7796] do_syscall_64+0x4c/0xa0 [ 266.246195][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.253271][ T7796] [ 266.253271][ T7796] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 266.262267][ T7796] down_write+0x36/0x60 [ 266.267796][ T7796] ocfs2_create_local_dquot+0x19a/0x1900 [ 266.274172][ T7796] ocfs2_acquire_dquot+0x7e6/0xb80 [ 266.281778][ T7796] dqget+0x713/0xbb0 [ 266.286448][ T7796] __dquot_initialize+0x3a9/0xd00 [ 266.293087][ T7796] ocfs2_get_init_inode+0x144/0x1b0 [ 266.299059][ T7796] ocfs2_mknod+0xbdc/0x2500 [ 266.304121][ T7796] ocfs2_create+0x1b6/0x4b0 [ 266.309193][ T7796] path_openat+0x11b9/0x2f10 [ 266.314416][ T7796] do_filp_open+0x1ee/0x420 [ 266.319863][ T7796] do_sys_openat2+0x14b/0x4f0 [ 266.325537][ T7796] __x64_sys_open+0x11b/0x140 [ 266.331185][ T7796] do_syscall_64+0x4c/0xa0 [ 266.336365][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.343589][ T7796] [ 266.343589][ T7796] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 266.352297][ T7796] __mutex_lock+0x12d/0xae0 [ 266.357609][ T7796] dquot_commit+0x5a/0x410 [ 266.363296][ T7796] ext4_write_dquot+0x1f0/0x360 [ 266.370023][ T7796] mark_all_dquot_dirty+0xf9/0x400 [ 266.376466][ T7796] __dquot_alloc_space+0x5f6/0xe50 [ 266.382662][ T7796] ext4_mb_new_blocks+0xf55/0x44d0 [ 266.390701][ T7796] ext4_ext_map_blocks+0x18d1/0x6640 [ 266.398147][ T7796] ext4_map_blocks+0x9d7/0x1a90 [ 266.405066][ T7796] ext4_getblk+0x1c5/0x720 [ 266.410145][ T7796] ext4_bread+0x26/0x170 [ 266.417396][ T7796] ext4_append+0x2bb/0x560 [ 266.424225][ T7796] ext4_init_new_dir+0x2b8/0x550 [ 266.433511][ T7796] ext4_mkdir+0x4c3/0xc90 [ 266.439384][ T7796] vfs_mkdir+0x386/0x570 [ 266.445603][ T7796] do_mkdirat+0x1d8/0x440 [ 266.450828][ T7796] __x64_sys_mkdirat+0x85/0x90 [ 266.457011][ T7796] do_syscall_64+0x4c/0xa0 [ 266.463115][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.472305][ T7796] [ 266.472305][ T7796] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 266.483278][ T7796] down_read+0x42/0x2d0 [ 266.490550][ T7796] ext4_map_blocks+0x338/0x1a90 [ 266.496739][ T7796] ext4_append+0x22d/0x560 [ 266.501991][ T7796] ext4_init_new_dir+0x2b8/0x550 [ 266.507746][ T7796] ext4_mkdir+0x4c3/0xc90 [ 266.513269][ T7796] vfs_mkdir+0x386/0x570 [ 266.518962][ T7796] do_mkdirat+0x1d8/0x440 [ 266.524765][ T7796] __x64_sys_mkdir+0x6a/0x80 [ 266.529919][ T7796] do_syscall_64+0x4c/0xa0 [ 266.535059][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.542500][ T7796] [ 266.542500][ T7796] -> #0 (jbd2_handle){++++}-{0:0}: [ 266.550630][ T7796] __lock_acquire+0x3a03/0x7ea0 [ 266.557541][ T7796] lock_acquire+0x1bc/0x4a0 [ 266.563400][ T7796] wait_transaction_locked+0x1bf/0x270 [ 266.569788][ T7796] start_this_handle+0x7e7/0x2240 [ 266.576947][ T7796] jbd2__journal_start+0x2b7/0x5a0 [ 266.584028][ T7796] jbd2_journal_start+0x26/0x30 [ 266.590897][ T7796] ocfs2_start_trans+0x3b0/0x6f0 [ 266.596686][ T7796] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 266.603329][ T7796] ocfs2_dio_end_io+0x10ed/0x1400 [ 266.609016][ T7796] dio_complete+0x249/0x710 [ 266.615036][ T7796] __blockdev_direct_IO+0x2e15/0x34c0 [ 266.622828][ T7796] ocfs2_direct_IO+0x233/0x2a0 [ 266.630789][ T7796] generic_file_direct_write+0x112/0x330 [ 266.638665][ T7796] __generic_file_write_iter+0x15f/0x2a0 [ 266.646444][ T7796] ocfs2_file_write_iter+0x1731/0x1fc0 [ 266.653373][ T7796] do_iter_write+0x638/0xb10 [ 266.658863][ T7796] do_pwritev+0x23e/0x3a0 [ 266.664292][ T7796] do_syscall_64+0x4c/0xa0 [ 266.669820][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.676753][ T7796] [ 266.676753][ T7796] other info that might help us debug this: [ 266.676753][ T7796] [ 266.687559][ T7796] Chain exists of: [ 266.687559][ T7796] jbd2_handle --> sb_internal#3 --> &journal->j_trans_barrier [ 266.687559][ T7796] [ 266.701584][ T7796] Possible unsafe locking scenario: [ 266.701584][ T7796] [ 266.709248][ T7796] CPU0 CPU1 [ 266.714648][ T7796] ---- ---- [ 266.721106][ T7796] rlock(&journal->j_trans_barrier); [ 266.726702][ T7796] lock(sb_internal#3); [ 266.735079][ T7796] lock(&journal->j_trans_barrier); [ 266.743275][ T7796] lock(jbd2_handle); [ 266.747434][ T7796] [ 266.747434][ T7796] *** DEADLOCK *** [ 266.747434][ T7796] [ 266.756056][ T7796] 5 locks held by syz.7.968/7796: [ 266.761460][ T7796] #0: ffff88807a12e460 (sb_writers#22){.+.+}-{0:0}, at: do_pwritev+0x227/0x3a0 [ 266.770717][ T7796] #1: ffff8880530009c8 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x45a/0x1fc0 [ 266.782796][ T7796] #2: ffff888055bfdf48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12b/0x7b0 [ 266.798916][ T7796] #3: ffff88807a12e650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 266.810364][ T7796] #4: ffff88807b8698e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 266.821983][ T7796] [ 266.821983][ T7796] stack backtrace: [ 266.827987][ T7796] CPU: 0 PID: 7796 Comm: syz.7.968 Not tainted syzkaller #0 [ 266.835296][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.845365][ T7796] Call Trace: [ 266.848715][ T7796] [ 266.851891][ T7796] dump_stack_lvl+0x188/0x24e [ 266.856660][ T7796] ? load_image+0x410/0x410 [ 266.861310][ T7796] ? show_regs_print_info+0x12/0x12 [ 266.866542][ T7796] ? print_circular_bug+0x12b/0x1a0 [ 266.871978][ T7796] check_noncircular+0x2f8/0x400 [ 266.877044][ T7796] ? print_deadlock_bug+0x5d0/0x5d0 [ 266.882397][ T7796] ? lockdep_lock+0xf1/0x1f0 [ 266.887234][ T7796] ? _find_first_zero_bit+0xd2/0x100 [ 266.892981][ T7796] __lock_acquire+0x3a03/0x7ea0 [ 266.897878][ T7796] ? verify_lock_unused+0x140/0x140 [ 266.903378][ T7796] ? mark_lock+0x94/0x320 [ 266.907739][ T7796] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 266.913792][ T7796] lock_acquire+0x1bc/0x4a0 [ 266.918318][ T7796] ? wait_transaction_locked+0x1a6/0x270 [ 266.924086][ T7796] ? __lock_acquire+0x7ea0/0x7ea0 [ 266.929255][ T7796] ? read_lock_is_recursive+0x10/0x10 [ 266.934919][ T7796] ? prepare_to_wait_exclusive+0x7d/0x210 [ 266.940832][ T7796] ? wait_transaction_locked+0x1a6/0x270 [ 266.946510][ T7796] wait_transaction_locked+0x1bf/0x270 [ 266.952177][ T7796] ? wait_transaction_locked+0x1a6/0x270 [ 266.958902][ T7796] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 266.965970][ T7796] ? stack_trace_save+0xa6/0xf0 [ 266.970861][ T7796] ? wake_bit_function+0x200/0x200 [ 266.976083][ T7796] ? __lock_acquire+0x142d/0x7ea0 [ 266.981134][ T7796] start_this_handle+0x7e7/0x2240 [ 266.986276][ T7796] ? slab_post_alloc_hook+0x4b/0x490 [ 266.991662][ T7796] ? kmem_cache_alloc+0x18b/0x2f0 [ 266.997075][ T7796] ? jbd2__journal_start+0x13c/0x5a0 [ 267.002473][ T7796] ? jbd2__journal_start+0x5a0/0x5a0 [ 267.007862][ T7796] ? __kasan_slab_alloc+0x6b/0x80 [ 267.013023][ T7796] ? slab_post_alloc_hook+0x67/0x490 [ 267.018414][ T7796] ? slab_pre_alloc_hook+0x59/0x300 [ 267.023889][ T7796] ? rcu_is_watching+0x11/0xa0 [ 267.028760][ T7796] ? kmem_cache_alloc+0x1b2/0x2f0 [ 267.034095][ T7796] ? jbd2__journal_start+0x13c/0x5a0 [ 267.039609][ T7796] jbd2__journal_start+0x2b7/0x5a0 [ 267.045100][ T7796] jbd2_journal_start+0x26/0x30 [ 267.050315][ T7796] ocfs2_start_trans+0x3b0/0x6f0 [ 267.055658][ T7796] ? ocfs2_recovery_exit+0x50/0x50 [ 267.061350][ T7796] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 267.067760][ T7796] ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0 [ 267.073916][ T7796] ? lockdep_hardirqs_on+0x94/0x140 [ 267.079493][ T7796] ? slab_free_freelist_hook+0x133/0x1b0 [ 267.085589][ T7796] ? ocfs2_dio_end_io+0xfd5/0x1400 [ 267.092052][ T7796] ? __kmem_cache_free+0xb6/0x200 [ 267.097098][ T7796] ocfs2_dio_end_io+0x10ed/0x1400 [ 267.102816][ T7796] ? ocfs2_dio_wr_get_block+0x1810/0x1810 [ 267.109396][ T7796] ? mark_lock+0x94/0x320 [ 267.114030][ T7796] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 267.120127][ T7796] ? __lock_acquire+0x7ea0/0x7ea0 [ 267.125490][ T7796] ? lock_chain_count+0x20/0x20 [ 267.130419][ T7796] ? mark_lock+0x94/0x320 [ 267.134778][ T7796] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 267.140788][ T7796] ? __lock_acquire+0x7ea0/0x7ea0 [ 267.146123][ T7796] ? lock_chain_count+0x20/0x20 [ 267.151026][ T7796] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 267.157228][ T7796] ? lockdep_hardirqs_on+0x94/0x140 [ 267.162489][ T7796] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 267.168633][ T7796] ? ocfs2_dio_wr_get_block+0x1810/0x1810 [ 267.175006][ T7796] dio_complete+0x249/0x710 [ 267.179803][ T7796] __blockdev_direct_IO+0x2e15/0x34c0 [ 267.185498][ T7796] ? sb_init_dio_done_wq+0x80/0x80 [ 267.191097][ T7796] ? ocfs2_lock_get_block+0x50/0x50 [ 267.197035][ T7796] ? filemap_read+0x3150/0x3150 [ 267.202380][ T7796] ? __mnt_drop_write_file+0xbc/0xf0 [ 267.208172][ T7796] ? ocfs2_lock_get_block+0x50/0x50 [ 267.213759][ T7796] ocfs2_direct_IO+0x233/0x2a0 [ 267.218896][ T7796] generic_file_direct_write+0x112/0x330 [ 267.224749][ T7796] ? do_raw_spin_unlock+0x11d/0x230 [ 267.230354][ T7796] __generic_file_write_iter+0x15f/0x2a0 [ 267.236007][ T7796] ocfs2_file_write_iter+0x1731/0x1fc0 [ 267.241664][ T7796] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 267.247104][ T7796] ? aa_file_perm+0x3ea/0xf00 [ 267.251974][ T7796] ? aa_file_perm+0x112/0xf00 [ 267.256948][ T7796] ? verify_lock_unused+0x140/0x140 [ 267.262269][ T7796] ? aa_path_link+0x8a0/0x8a0 [ 267.267056][ T7796] ? __might_fault+0xa6/0x120 [ 267.272268][ T7796] ? end_current_label_crit_section+0x14b/0x170 [ 267.278631][ T7796] ? common_file_perm+0x171/0x1c0 [ 267.283759][ T7796] do_iter_write+0x638/0xb10 [ 267.288708][ T7796] ? vfs_iter_write+0xa0/0xa0 [ 267.293530][ T7796] ? rcu_read_lock_any_held+0xb0/0x130 [ 267.299230][ T7796] do_pwritev+0x23e/0x3a0 [ 267.303707][ T7796] ? do_preadv+0x390/0x390 [ 267.308503][ T7796] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 267.314520][ T7796] ? lock_chain_count+0x20/0x20 [ 267.319480][ T7796] ? lockdep_hardirqs_on+0x94/0x140 [ 267.324724][ T7796] ? __x64_sys_pwritev2+0xba/0x100 [ 267.330060][ T7796] do_syscall_64+0x4c/0xa0 [ 267.334589][ T7796] ? clear_bhb_loop+0x60/0xb0 [ 267.339625][ T7796] ? clear_bhb_loop+0x60/0xb0 [ 267.344574][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.350699][ T7796] RIP: 0033:0x7f0dfc19e199 [ 267.355445][ T7796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.376467][ T7796] RSP: 002b:00007f0dfcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 267.385262][ T7796] RAX: ffffffffffffffda RBX: 00007f0dfc425fa0 RCX: 00007f0dfc19e199 [ 267.394703][ T7796] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 267.403088][ T7796] RBP: 00007f0dfc2358e0 R08: 0000000000000000 R09: 0000000000000003 [ 267.411724][ T7796] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000000 [ 267.420776][ T7796] R13: 00007f0dfc426038 R14: 00007f0dfc425fa0 R15: 00007ffe27410c38 [ 267.429078][ T7796] [ 267.647413][ T6081] ocfs2: Unmounting device (7,7) on (node local)