last executing test programs: 4m47.402560471s ago: executing program 3 (id=38): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) pipe2(&(0x7f0000000000), 0x80000) r0 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r0], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) 4m46.97038235s ago: executing program 3 (id=41): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mlock(&(0x7f0000320000/0x3000)=nil, 0x3000) write$sysctl(r0, &(0x7f0000000140)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 4m44.674396891s ago: executing program 3 (id=50): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x2000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) 4m43.129778189s ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 4m42.436384541s ago: executing program 3 (id=62): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setreuid(0xee01, 0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 4m40.182963823s ago: executing program 3 (id=70): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) read(r0, 0x0, 0x0) 4m38.803402631s ago: executing program 32 (id=70): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) read(r0, 0x0, 0x0) 1m28.646987999s ago: executing program 4 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffbf000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x0, 0x9, 0xe, 0xd, 0x58, 0x3}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x18014045}, 0x800) 1m28.235154046s ago: executing program 4 (id=1143): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x62000, 0xc1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000000)) 1m27.772196213s ago: executing program 4 (id=1149): r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 1m27.357694137s ago: executing program 4 (id=1154): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$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") mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m25.515935347s ago: executing program 4 (id=1163): timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x22, 0x0, 0x0) 1m24.61691212s ago: executing program 4 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) 1m23.749545131s ago: executing program 33 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) 32.693099739s ago: executing program 0 (id=1461): r0 = io_uring_setup(0x6ed6, &(0x7f0000000000)={0x0, 0xbf54, 0x1, 0x400000, 0x103}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.772397705s ago: executing program 0 (id=1467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000a00)=ANY=[@ANYRES8, @ANYRES8], 0x32600) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 31.212536395s ago: executing program 0 (id=1473): io_setup(0xa, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 30.577673943s ago: executing program 0 (id=1478): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 30.099956614s ago: executing program 0 (id=1484): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) 29.457788415s ago: executing program 0 (id=1492): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 29.150206564s ago: executing program 34 (id=1492): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 25.424433726s ago: executing program 1 (id=1523): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc92612d4c77c48430ccac04143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a4610bd7813544e1e4bf994e14a519c2654ff20b42bdb69c26d9dd5d5eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b08686a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d9083323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c262197925ecbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547cd9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c91fc76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff0000000000000004d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c838073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc505f19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857c4504000000000000f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb5457fa10410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc329874af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8631ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d9801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d3ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b59047ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe1fe92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed681413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d5201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca0000000000000000000000000000000000000000000000000000004744095900", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x7, 0x0, 0x6, 0x8, 0x4, {0x6, 0x8000, 0x100000000, 0x0, 0x203, 0x55d, 0xfffffffa, 0x0, 0x80010000, 0x2000, 0x1002, 0x0, r2, 0xb4f3, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x2d, 0x3, 0x400, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x101040, 0x32) 24.872317389s ago: executing program 1 (id=1527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 23.752183971s ago: executing program 7 (id=1540): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./bus\x00') truncate(&(0x7f0000000440)='./bus\x00', 0xff) 23.592495683s ago: executing program 1 (id=1541): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x10) getdents64(r0, &(0x7f0000000280)=""/213, 0xd5) 23.475310525s ago: executing program 5 (id=1543): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 23.104050098s ago: executing program 2 (id=1545): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000040)={[{@errors_continue}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x189541, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x7fffffff}}, 0x18) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2400) 23.004224276s ago: executing program 5 (id=1546): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 22.956193154s ago: executing program 7 (id=1547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 22.954511791s ago: executing program 6 (id=1548): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 22.788767636s ago: executing program 2 (id=1549): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 22.648236389s ago: executing program 1 (id=1550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x1) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 22.57562164s ago: executing program 6 (id=1551): r0 = eventfd2(0x6, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) dup3(r0, r3, 0x0) 22.515067253s ago: executing program 7 (id=1552): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x801) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 22.311567493s ago: executing program 6 (id=1553): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f00000005c0)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x0, 0x3, 0x800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x4c) fallocate(r1, 0x0, 0x37e9, 0x2f92) 22.15662928s ago: executing program 7 (id=1554): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xd, 0x3, "c6a41d106c72000000"}]}}}]}]}], {0x14}}, 0x6c}}, 0x4048010) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 22.088665175s ago: executing program 2 (id=1555): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) 22.028713512s ago: executing program 5 (id=1556): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019", 0x21}], 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 21.671645773s ago: executing program 7 (id=1557): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 21.635736336s ago: executing program 2 (id=1558): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 21.490954403s ago: executing program 5 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) close(r0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010102, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) 21.406897234s ago: executing program 1 (id=1560): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 21.167376387s ago: executing program 6 (id=1561): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 21.077677631s ago: executing program 5 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 21.0756145s ago: executing program 2 (id=1563): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @empty}}}}}}, 0x0) 20.780478825s ago: executing program 6 (id=1564): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 20.767816016s ago: executing program 2 (id=1565): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20.604979787s ago: executing program 7 (id=1566): open(&(0x7f00000001c0)='.\x00', 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 20.433178715s ago: executing program 5 (id=1567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="1c", 0x1, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendto$inet6(r0, &(0x7f0000000180)='9', 0x1, 0x0, 0x0, 0x0) 20.431726399s ago: executing program 6 (id=1568): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 0s ago: executing program 1 (id=1569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): 619d30d) [ 172.474365][ T5914] Bluetooth: hci6: Frame reassembly failed (-84) [ 172.520211][ T7275] loop2: detected capacity change from 0 to 2048 [ 172.553157][ T7278] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 172.805139][ T7284] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.165406][ T7284] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 174.210803][ T7323] TCP: TCP_TX_DELAY enabled [ 174.240393][ T7284] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 174.357726][ T7284] Remounting filesystem read-only [ 174.409619][ T7327] loop4: detected capacity change from 0 to 128 [ 174.433666][ T5642] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 174.503086][ T5633] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 175.039295][ T7335] Bluetooth: MGMT ver 1.23 [ 175.114056][ T7335] Bluetooth: hci0: unsupported parameter 39401 [ 175.194853][ T7335] Bluetooth: hci0: unsupported parameter 512 [ 175.251849][ T7335] Bluetooth: hci0: unsupported parameter 39401 [ 175.311557][ T7335] Bluetooth: hci0: unsupported parameter 512 [ 175.462992][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.684422][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 175.729513][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 175.794713][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 175.879008][ T7345] loop6: detected capacity change from 0 to 4096 [ 175.899078][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.966409][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 176.007400][ T7345] EXT4-fs: inline encryption not supported [ 176.065887][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 176.076254][ T5960] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.165932][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.252376][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.269576][ T7345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.304419][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.329424][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.374535][ T5960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.410457][ T7345] EXT4-fs (loop6): Test dummy encryption mode enabled [ 176.481298][ T5960] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.541401][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.576455][ T7365] netlink: 'syz.0.445': attribute type 4 has an invalid length. [ 176.596639][ T5960] usb 3-1: Product: syz [ 176.605851][ T7345] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 176.624542][ T5960] usb 3-1: Manufacturer: syz [ 176.640664][ T7367] netlink: 'syz.0.445': attribute type 4 has an invalid length. [ 176.648421][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 176.656804][ T5960] usb 3-1: SerialNumber: syz [ 176.677998][ T9] usbtmc 2-1:16.0: can't read capabilities [ 176.699432][ T7345] System zones: 0-5 [ 176.711235][ T5960] cdc_mbim 3-1:1.0: skipping garbage [ 176.781260][ T7345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.853722][ T9] usb 2-1: USB disconnect, device number 5 [ 177.052510][ T7345] EXT4-fs (loop6): shut down requested (2) [ 177.332735][ T7356] loop5: detected capacity change from 0 to 32768 [ 177.397463][ T31] audit: type=1800 audit(1785440125.697:8): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.442" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 177.779860][ T5960] cdc_mbim 3-1:1.0: bind() failure [ 177.794515][ T6134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.840810][ T5960] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 177.900702][ T5960] cdc_ncm 3-1:1.1: bind() failure [ 178.076375][ T9] usb 3-1: USB disconnect, device number 3 [ 178.853853][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 178.869036][ T7397] loop4: detected capacity change from 0 to 4096 [ 178.961959][ T7397] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 179.072687][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 179.090133][ T7408] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 179.120065][ T5769] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 179.139006][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.170664][ T7397] ntfs3(loop4): ino=19, mi_enum_attr [ 179.206041][ T7397] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 179.220783][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.239340][ T5769] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 179.308979][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.349694][ T7397] ntfs3(loop4): ino=1a, mi_enum_attr [ 179.398143][ T7397] ntfs3(loop4): ino=1a, mi_enum_attr [ 179.438014][ T9] usb 7-1: config 0 descriptor?? [ 179.455970][ T7397] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 179.608231][ T5769] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 179.733531][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.056294][ T5761] usb 7-1: USB disconnect, device number 4 [ 180.205942][ T7424] syz.1.466: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.220680][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.1.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.220704][ T7424] Tainted: [L]=SOFTLOCKUP [ 180.220711][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.220721][ T7424] Call Trace: [ 180.220728][ T7424] [ 180.220735][ T7424] dump_stack_lvl+0xe8/0x150 [ 180.220767][ T7424] warn_alloc+0x24c/0x270 [ 180.220799][ T7424] ? __pfx_warn_alloc+0x10/0x10 [ 180.220838][ T7424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.220860][ T7424] ? __mutex_trylock_common+0x15f/0x270 [ 180.220884][ T7424] __vmalloc_node_range_noprof+0x12c/0x1730 [ 180.220911][ T7424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.220932][ T7424] ? rcu_is_watching+0x15/0xb0 [ 180.220950][ T7424] ? trace_contention_end+0x3d/0x140 [ 180.220972][ T7424] ? __mutex_lock+0x30d/0x1550 [ 180.220997][ T7424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.221021][ T7424] ? tomoyo_path_number_perm+0x219/0x5f0 [ 180.221053][ T7424] ? tomoyo_path_number_perm+0x219/0x5f0 [ 180.221081][ T7424] ? dvb_dvr_do_ioctl+0x76/0x220 [ 180.221109][ T7424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.221132][ T7424] ? do_vfs_ioctl+0x116f/0x1530 [ 180.221161][ T7424] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 180.221187][ T7424] vmalloc_noprof+0xb2/0xe0 [ 180.221216][ T7424] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 180.221243][ T7424] dvb_dvr_do_ioctl+0x12b/0x220 [ 180.221274][ T7424] dvb_usercopy+0x199/0x2e0 [ 180.221296][ T7424] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 180.221321][ T7424] ? __pfx_dvb_usercopy+0x10/0x10 [ 180.221353][ T7424] ? __fget_files+0x3a2/0x420 [ 180.221378][ T7424] ? __fget_files+0x2a/0x420 [ 180.221407][ T7424] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 180.221432][ T7424] dvb_dvr_ioctl+0x29/0x40 [ 180.221457][ T7424] __se_sys_ioctl+0xfc/0x170 [ 180.221476][ T7424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.221497][ T7424] do_syscall_64+0x174/0x580 [ 180.221518][ T7424] ? trace_irq_disable+0x3b/0x140 [ 180.221548][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.221566][ T7424] RIP: 0033:0x7f6d2579e019 [ 180.221582][ T7424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.221597][ T7424] RSP: 002b:00007f6d265bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.221615][ T7424] RAX: ffffffffffffffda RBX: 00007f6d25a25fa0 RCX: 00007f6d2579e019 [ 180.221628][ T7424] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 180.221640][ T7424] RBP: 00007f6d2583500c R08: 0000000000000000 R09: 0000000000000000 [ 180.221651][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.221661][ T7424] R13: 00007f6d25a26038 R14: 00007f6d25a25fa0 R15: 00007ffef7333bc8 [ 180.221690][ T7424] [ 180.221697][ T7424] Mem-Info: [ 180.505702][ T7424] active_anon:16550 inactive_anon:0 isolated_anon:0 [ 180.505702][ T7424] active_file:512 inactive_file:57888 isolated_file:0 [ 180.505702][ T7424] unevictable:768 dirty:384 writeback:0 [ 180.505702][ T7424] slab_reclaimable:10745 slab_unreclaimable:99632 [ 180.505702][ T7424] mapped:44079 shmem:10260 pagetables:1513 [ 180.505702][ T7424] sec_pagetables:0 bounce:0 [ 180.505702][ T7424] kernel_misc_reclaimable:0 [ 180.505702][ T7424] free:1285264 free_pcp:10587 free_cma:0 [ 180.551175][ T7424] Node 0 active_anon:66200kB inactive_anon:0kB active_file:2048kB inactive_file:231284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176256kB dirty:1532kB writeback:0kB shmem:39504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13440kB pagetables:5924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.588758][ T7424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.621535][ T7424] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.651447][ T7424] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 180.659768][ T7424] Node 0 DMA32 free:1185668kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:66200kB inactive_anon:0kB active_file:2048kB inactive_file:231284kB unevictable:1536kB writepending:1532kB zspages:0kB present:3129332kB managed:2548580kB mlocked:0kB bounce:0kB free_pcp:42300kB local_pcp:42300kB free_cma:0kB [ 180.693996][ T7424] lowmem_reserve[]: 0 0 0 0 0 [ 180.698730][ T7424] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.727996][ T7424] lowmem_reserve[]: 0 0 0 0 0 [ 180.732750][ T7424] Node 1 Normal free:3940028kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.767714][ T7424] lowmem_reserve[]: 0 0 0 0 0 [ 180.772429][ T7424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.785224][ T7424] Node 0 DMA32: 2731*4kB (UME) 1101*8kB (UME) 357*16kB (UM) 211*32kB (UME) 247*64kB (UME) 88*128kB (UME) 24*256kB (UME) 10*512kB (UM) 1*1024kB (M) 2*2048kB (U) 271*4096kB (UM) = 1185668kB [ 180.803915][ T7424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.815741][ T7424] Node 1 Normal: 1*4kB (U) 3*8kB (U) 6*16kB (U) 6*32kB (U) 8*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940028kB [ 180.831871][ T7424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.841434][ T7424] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.850863][ T7424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.860479][ T7424] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.872288][ T7424] 68139 total pagecache pages [ 180.877031][ T7424] 0 pages in swap cache [ 180.881160][ T7424] Free swap = 124996kB [ 180.885333][ T7424] Total swap = 124996kB [ 180.889464][ T7424] 2097051 pages RAM [ 180.893280][ T7424] 0 pages HighMem/MovableOnly [ 180.897928][ T7424] 428226 pages reserved [ 180.902092][ T7424] 0 pages cma reserved [ 180.909653][ T7402] ceph: No mds server is up or the cluster is laggy [ 180.928002][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 181.701248][ T7433] loop0: detected capacity change from 0 to 32768 [ 181.741349][ T7433] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.750459][ T7433] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.776431][ T7433] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 181.790950][ T5960] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 181.863818][ T5960] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 182.008740][ T7440] loop6: detected capacity change from 0 to 256 [ 182.236768][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 182.354384][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 182.435925][ T5960] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 572ms [ 182.477995][ T7443] netlink: 'syz.4.472': attribute type 6 has an invalid length. [ 182.535264][ T5960] gfs2: fsid=syz:syz.0: jid=0: Done [ 182.587469][ T7433] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 182.665433][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 182.676892][ T139] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.710683][ T7433] gfs2: fsid=syz:syz.0: found 1 quota changes [ 182.806479][ T139] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.831755][ T7450] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 182.846844][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 182.915308][ T139] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.932714][ T7443] netlink: 'syz.4.472': attribute type 6 has an invalid length. [ 182.996559][ T7450] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 183.009423][ T139] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.090844][ T7450] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7450 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 183.185091][ T7450] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 183.257002][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 183.257030][ T7450] Tainted: [L]=SOFTLOCKUP [ 183.257036][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 183.257046][ T7450] Call Trace: [ 183.257054][ T7450] [ 183.257061][ T7450] dump_stack_lvl+0xe8/0x150 [ 183.257094][ T7450] gfs2_withdraw+0xc3/0x1b0 [ 183.257115][ T7450] inode_go_instantiate+0xbc7/0x12c0 [ 183.257139][ T7450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.257164][ T7450] ? __pfx_inode_go_instantiate+0x10/0x10 [ 183.257186][ T7450] ? do_raw_spin_unlock+0xf5/0x210 [ 183.257211][ T7450] ? __pfx_wake_bit_function+0x10/0x10 [ 183.257238][ T7450] gfs2_instantiate+0x168/0x220 [ 183.257261][ T7450] gfs2_glock_wait+0x1d4/0x2a0 [ 183.257285][ T7450] do_sync+0x49c/0xbb0 [ 183.257310][ T7450] ? gfs2_quota_sync+0x353/0x450 [ 183.257344][ T7450] ? __pfx_do_sync+0x10/0x10 [ 183.257368][ T7450] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.257397][ T7450] ? gfs2_quota_sync+0x353/0x450 [ 183.257423][ T7450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.257447][ T7450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.257468][ T7450] ? do_raw_spin_unlock+0xf5/0x210 [ 183.257494][ T7450] gfs2_quota_sync+0x353/0x450 [ 183.257529][ T7450] gfs2_quotad+0x2ab/0x6f0 [ 183.257568][ T7450] ? __pfx_gfs2_quotad+0x10/0x10 [ 183.257593][ T7450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.257617][ T7450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 183.257636][ T7450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.257659][ T7450] ? __kthread_parkme+0x71/0x1f0 [ 183.257685][ T7450] ? __kthread_parkme+0x196/0x1f0 [ 183.257715][ T7450] kthread+0x388/0x470 [ 183.257743][ T7450] ? __pfx_gfs2_quotad+0x10/0x10 [ 183.257768][ T7450] ? __pfx_kthread+0x10/0x10 [ 183.257796][ T7450] ret_from_fork+0x514/0xb70 [ 183.257827][ T7450] ? __pfx_ret_from_fork+0x10/0x10 [ 183.257855][ T7450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.257875][ T7450] ? __switch_to+0xc89/0x1420 [ 183.257902][ T7450] ? __pfx_kthread+0x10/0x10 [ 183.257930][ T7450] ret_from_fork_asm+0x1a/0x30 [ 183.257963][ T7450] [ 183.257990][ T7450] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 184.057638][ T7472] capability: warning: `syz.5.484' uses 32-bit capabilities (legacy support in use) [ 184.165267][ T7468] input: syz0 as /devices/virtual/input/input8 [ 185.081830][ T5960] gfs2: fsid=syz:syz.0: file system withdrawn [ 185.096840][ T7433] gfs2: unable to remount read-write [ 185.389431][ T7495] loop4: detected capacity change from 0 to 64 [ 185.532852][ T7490] loop6: detected capacity change from 0 to 8192 [ 185.608423][ T7490] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.110609][ T7506] loop2: detected capacity change from 0 to 64 [ 186.252318][ T7510] loop5: detected capacity change from 0 to 512 [ 186.369491][ T7510] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.502512][ T7510] EXT4-fs (loop5): 1 truncate cleaned up [ 186.616402][ T7510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.374769][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.567595][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'. [ 188.985589][ T7548] syzkaller1: entered promiscuous mode [ 188.998661][ T7564] netlink: 'syz.4.520': attribute type 7 has an invalid length. [ 189.018325][ T7548] syzkaller1: entered allmulticast mode [ 189.218933][ T7564] netlink: 'syz.4.520': attribute type 7 has an invalid length. [ 189.506725][ T7571] loop2: detected capacity change from 0 to 256 [ 189.633965][ T7571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x59c3bfd0, utbl_chksum : 0xe619d30d) [ 190.893799][ T7598] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.571535][ T7617] netlink: 'syz.6.541': attribute type 3 has an invalid length. [ 192.288648][ T5960] IPVS: starting estimator thread 0... [ 192.454100][ T7635] IPVS: using max 35 ests per chain, 84000 per kthread [ 192.629288][ T7639] loop6: detected capacity change from 0 to 16 [ 192.731294][ T7639] erofs (device loop6): mounted with root inode @ nid 36. [ 193.083042][ T5960] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 193.313602][ T5761] kernel read not supported for file /input/event1 (pid: 5761 comm: kworker/0:5) [ 193.323255][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 193.359650][ T5960] usb 7-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.417417][ T7659] mmap: syz.2.557 (7659) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 193.482211][ T5960] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.547157][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.553774][ T5960] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 193.565580][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.647849][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.808272][ T5960] usb 7-1: config 0 descriptor?? [ 194.292515][ T5960] kovaplus 0003:1E7D:2D50.0003: global environment stack underflow [ 194.355996][ T5960] kovaplus 0003:1E7D:2D50.0003: item 0 0 1 11 parsing failed [ 194.424489][ T5960] kovaplus 0003:1E7D:2D50.0003: parse failed [ 194.464869][ T5960] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -22 [ 194.863076][ T7693] loop1: detected capacity change from 0 to 512 [ 194.900849][ T7693] EXT4-fs (loop1): Test dummy encryption mode enabled [ 194.947173][ T7693] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 195.004101][ T5960] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 195.022436][ T7693] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 195.071928][ T7693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.222806][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 195.248399][ T5960] usb 3-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 195.276230][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.307246][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.366425][ T5960] usb 3-1: Product: syz [ 195.394896][ T5960] usb 3-1: Manufacturer: syz [ 195.415350][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.434927][ T5960] usb 3-1: SerialNumber: syz [ 195.459403][ T5862] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 195.516023][ T5960] ums-datafab 3-1:1.0: USB Mass Storage device detected [ 195.528313][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.587894][ T5862] usb 5-1: Product: syz [ 195.601665][ T7703] input: syz1 as /devices/virtual/input/input9 [ 195.635113][ T5862] usb 5-1: Manufacturer: syz [ 195.650733][ T5960] ums-datafab 3-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 195.650733][ T5960] Please send a copy of this message to and [ 195.690209][ T5862] usb 5-1: SerialNumber: syz [ 195.877592][ T5960] scsi host1: usb-storage 3-1:1.0 [ 195.999648][ T9] usb 7-1: USB disconnect, device number 5 [ 196.008475][ T5862] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 196.146818][ T5862] usb 5-1: USB disconnect, device number 4 [ 196.397972][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 196.482497][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'. [ 196.640469][ T7721] loop1: detected capacity change from 0 to 256 [ 196.659460][ T7716] geneve2: entered promiscuous mode [ 196.717168][ T7716] geneve2: entered allmulticast mode [ 196.758576][ T7721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 197.027291][ T7727] loop0: detected capacity change from 0 to 2048 [ 197.074405][ T5918] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 197.157555][ T7727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.217434][ T5918] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 197.779750][ T5918] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 197.912093][ T5960] usb 3-1: USB disconnect, device number 4 [ 197.950418][ T5918] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 198.058540][ T87] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 198.090350][ T144] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 199.005314][ T144] sd 1:0:0:0: [sdb] Sense not available. [ 199.037101][ T87] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 199.090060][ T144] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 199.124163][ T7747] loop5: detected capacity change from 0 to 131072 [ 199.159004][ T7747] F2FS-fs (loop5): invalid crc value [ 199.231169][ T87] sd 1:0:0:1: [sdc] Sense not available. [ 199.238731][ T144] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 199.285516][ T7747] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 199.300604][ T7747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 199.316094][ T31] audit: type=1800 audit(1785440147.617:9): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.590" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 199.350925][ T87] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 199.359871][ T144] sd 1:0:0:0: [sdb] Write Protect is off [ 199.493993][ T87] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 199.528603][ T144] sd 1:0:0:0: [sdb] Asking for cache data failed [ 199.585248][ T87] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 199.612379][ T144] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 199.679012][ T87] sd 1:0:0:1: [sdc] Asking for cache data failed [ 199.748112][ T87] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 199.954632][ T7766] loop4: detected capacity change from 0 to 4096 [ 199.981392][ T7766] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 200.031718][ T7766] ntfs3(loop4): Failed to load $Extend (-22). [ 200.038328][ T7766] ntfs3(loop4): Failed to initialize $Extend. [ 200.071957][ T31] audit: type=1800 audit(1785440148.367:10): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.597" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 200.126535][ T144] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 200.155157][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 200.194524][ T87] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 200.536661][ T7771] ip6erspan0: entered promiscuous mode [ 201.070668][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 201.076837][ T4940] Bluetooth: hci3: command 0x0406 tx timeout [ 201.082900][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 201.088899][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 201.095047][ T5635] Bluetooth: hci0: command 0x0406 tx timeout [ 201.458489][ T7784] loop0: detected capacity change from 0 to 32768 [ 201.483573][ T7784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.605 (7784) [ 201.516306][ T7784] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.526480][ T7784] BTRFS info (device loop0): using sha256 checksum algorithm [ 201.615865][ T7790] netlink: 72 bytes leftover after parsing attributes in process `syz.4.606'. [ 201.698985][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.606'. [ 201.759061][ T7784] BTRFS info (device loop0): enabling ssd optimizations [ 201.766083][ T7784] BTRFS info (device loop0): turning on sync discard [ 201.772929][ T7784] BTRFS info (device loop0): enabling free space tree [ 201.779754][ T7784] BTRFS info (device loop0): use zlib compression, level 3 [ 201.823383][ T31] audit: type=1800 audit(1785440150.127:11): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.605" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 202.492190][ T5622] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.590434][ T6632] udevd[6632]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 203.664576][ T6666] udevd[6666]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 204.487770][ T5881] udevd[5881]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 204.565154][ T6628] udevd[6628]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 204.827776][ T7842] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.621'. [ 206.703752][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.633'. [ 206.903267][ T5761] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 207.092607][ T5761] usb 5-1: Using ep0 maxpacket: 8 [ 207.110837][ T5761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.155751][ T5761] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.195969][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.227454][ T5761] usb 5-1: config 0 descriptor?? [ 207.544328][ T5761] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 208.073692][ T5761] usb 5-1: USB disconnect, device number 5 [ 208.840417][ T7910] fuse: root generation should be zero [ 209.233002][ T5761] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.279525][ T7888] loop6: detected capacity change from 0 to 32768 [ 209.369851][ T7888] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.442935][ T5761] usb 6-1: Using ep0 maxpacket: 32 [ 209.482399][ T5761] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 209.559612][ T5761] usb 6-1: config 0 has no interface number 0 [ 209.566077][ T7888] XFS (loop6): Ending clean mount [ 209.628001][ T5761] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 209.681598][ T31] audit: type=1800 audit(1785440157.977:12): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.636" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 210.006115][ T7930] loop1: detected capacity change from 0 to 32768 [ 210.028870][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.117946][ T5761] usb 6-1: Product: syz [ 210.127099][ T7935] loop4: detected capacity change from 0 to 128 [ 210.151433][ T7930] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 210.160580][ T7930] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 210.191522][ T7930] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 210.202239][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 210.212200][ T5761] usb 6-1: Manufacturer: syz [ 210.257425][ T31] audit: type=1800 audit(1785440158.007:13): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.636" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 210.278455][ T5761] usb 6-1: SerialNumber: syz [ 210.286451][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 210.314793][ T7935] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.336696][ T6134] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.359470][ T5761] usb 6-1: config 0 descriptor?? [ 210.429861][ T5761] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 210.463219][ T7935] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.722411][ T5761] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 210.863739][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 577ms [ 210.896493][ T5761] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 210.979634][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done [ 210.988916][ T87] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.020087][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 211.075826][ T5761] usb 6-1: USB disconnect, device number 3 [ 211.081850][ T7930] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 211.193170][ T7930] gfs2: fsid=syz:syz.0: found 1 quota changes [ 211.317576][ T5761] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 211.499294][ T5761] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 211.648249][ T5628] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 211.677606][ T5761] quatech2 6-1:0.51: device disconnected [ 211.842819][ T5628] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 211.946127][ T5628] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5628 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 212.043567][ T5628] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 212.080994][ T7961] loop2: detected capacity change from 0 to 64 [ 212.102071][ T7960] loop4: detected capacity change from 0 to 512 [ 212.141626][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 212.141653][ T5628] Tainted: [L]=SOFTLOCKUP [ 212.141660][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.141671][ T5628] Call Trace: [ 212.141678][ T5628] [ 212.141686][ T5628] dump_stack_lvl+0xe8/0x150 [ 212.141719][ T5628] gfs2_withdraw+0xc3/0x1b0 [ 212.141742][ T5628] inode_go_instantiate+0xbc7/0x12c0 [ 212.141760][ T5628] ? preempt_schedule_thunk+0x16/0x40 [ 212.141787][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.141810][ T5628] ? __pfx_inode_go_instantiate+0x10/0x10 [ 212.141832][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.141861][ T5628] gfs2_instantiate+0x168/0x220 [ 212.141884][ T5628] gfs2_glock_wait+0x1d4/0x2a0 [ 212.141909][ T5628] do_sync+0x49c/0xbb0 [ 212.141934][ T5628] ? gfs2_quota_sync+0x353/0x450 [ 212.141968][ T5628] ? __pfx_do_sync+0x10/0x10 [ 212.142002][ T5628] ? gfs2_quota_sync+0x353/0x450 [ 212.142032][ T5628] ? do_raw_spin_unlock+0xf5/0x210 [ 212.142058][ T5628] gfs2_quota_sync+0x353/0x450 [ 212.142094][ T5628] gfs2_sync_fs+0x4c/0xb0 [ 212.142119][ T5628] sync_filesystem+0xee/0x230 [ 212.142142][ T5628] generic_shutdown_super+0x77/0x2d0 [ 212.142173][ T5628] kill_block_super+0x44/0x90 [ 212.142199][ T5628] deactivate_locked_super+0xbc/0x130 [ 212.142229][ T5628] cleanup_mnt+0x3d3/0x460 [ 212.142252][ T5628] task_work_run+0x1d9/0x270 [ 212.142273][ T5628] ? __pfx_task_work_run+0x10/0x10 [ 212.142300][ T5628] exit_to_user_mode_loop+0x1fa/0x730 [ 212.142326][ T5628] ? rcu_is_watching+0x15/0xb0 [ 212.142345][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.142366][ T5628] do_syscall_64+0x353/0x580 [ 212.142387][ T5628] ? trace_irq_disable+0x3b/0x140 [ 212.142418][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.142436][ T5628] RIP: 0033:0x7f6d2579f257 [ 212.142454][ T5628] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 212.142469][ T5628] RSP: 002b:00007ffef7332e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 212.142488][ T5628] RAX: 0000000000000000 RBX: 00007f6d2583445c RCX: 00007f6d2579f257 [ 212.142500][ T5628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef7332ef0 [ 212.142511][ T5628] RBP: 00007ffef7332ef0 R08: 00007ffef7333ef0 R09: 00000000ffffffff [ 212.142524][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef7333f80 [ 212.142539][ T5628] R13: 00007f6d2583445c R14: 0000000000033928 R15: 00007ffef7333fc0 [ 212.142567][ T5628] [ 212.649139][ T7960] EXT4-fs: inline encryption not supported [ 212.766770][ T7960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.791034][ T7961] hfs: unable to locate alternate MDB [ 212.866537][ T7961] hfs: continuing without an alternate MDB [ 213.162828][ T5769] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 213.355859][ T5769] usb 6-1: Using ep0 maxpacket: 8 [ 213.410254][ T7960] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 213.427636][ T5769] usb 6-1: config 1 has an invalid interface number: 17 but max is 0 [ 213.474848][ T5769] usb 6-1: config 1 has no interface number 0 [ 213.510538][ T7960] EXT4-fs (loop4): 1 truncate cleaned up [ 213.532633][ T5769] usb 6-1: config 1 interface 17 has no altsetting 0 [ 213.583097][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.619784][ T5769] usb 6-1: New USB device found, idVendor=1199, idProduct=0112, bcdDevice=76.a2 [ 213.662992][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.701101][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.673'. [ 213.717559][ T5769] usb 6-1: Product: syz [ 213.756233][ T5769] usb 6-1: Manufacturer: syz [ 213.791467][ T7985] netlink: 144 bytes leftover after parsing attributes in process `syz.2.673'. [ 213.802280][ T5769] usb 6-1: SerialNumber: syz [ 213.877480][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.054727][ T5769] sierra 6-1:1.17: Sierra USB modem converter detected [ 214.071509][ T5769] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 214.152261][ T5769] usb 6-1: USB disconnect, device number 4 [ 214.202332][ T5628] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 214.225257][ T5769] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 214.312106][ T5769] sierra 6-1:1.17: device disconnected [ 214.927274][ T8005] loop6: detected capacity change from 0 to 2048 [ 215.060264][ T8005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.430443][ T6134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.513999][ T5761] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 215.703442][ T5761] usb 6-1: Using ep0 maxpacket: 32 [ 215.739940][ T5761] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 215.798026][ T5761] usb 6-1: config 0 has no interface number 0 [ 215.849699][ T5761] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.942456][ T5761] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.020579][ T5761] usb 6-1: config 0 interface 85 has no altsetting 0 [ 216.069430][ T5761] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 216.123570][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.165960][ T5761] usb 6-1: Product: syz [ 216.187529][ T5761] usb 6-1: Manufacturer: syz [ 216.233252][ T5761] usb 6-1: SerialNumber: syz [ 216.276889][ T5761] usb 6-1: config 0 descriptor?? [ 216.760747][ T8035] loop1: detected capacity change from 0 to 40427 [ 216.773666][ T5761] appletouch 6-1:0.85: Failed to read mode from device. [ 216.800510][ T8035] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.810778][ T8035] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.878488][ T8035] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.896257][ T8035] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.903953][ T8035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.029900][ T5761] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 217.171847][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.267665][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.309174][ T5769] usb 6-1: USB disconnect, device number 5 [ 217.339478][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.409619][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.467399][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.510418][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.571096][ T5628] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 217.908652][ T8051] overlayfs: failed to clone lowerpath [ 218.019170][ T8024] loop6: detected capacity change from 0 to 32768 [ 218.145472][ T8024] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.301622][ T8024] XFS (loop6): Ending clean mount [ 218.469993][ T8031] loop0: detected capacity change from 0 to 32768 [ 218.638853][ T8031] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.847809][ T6134] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.889437][ T8031] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 219.128367][ T8031] XFS (loop0): Starting recovery (logdev: internal) [ 219.390247][ T8031] XFS (loop0): Ending recovery (logdev: internal) [ 219.666214][ T31] audit: type=1326 audit(1785440167.967:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f8b19e019 code=0x0 [ 219.719151][ T5622] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.353056][ T8097] loop5: detected capacity change from 0 to 128 [ 220.448899][ T8097] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.563947][ T8097] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.894230][ T8097] syz.5.708 (pid 8097) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 221.270123][ T5629] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.337674][ T31] audit: type=1800 audit(1785440169.627:15): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.715" name="scan_secs" dev="configfs" ino=16197 res=0 errno=0 [ 222.618240][ T8145] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 224.414081][ T8190] loop6: detected capacity change from 0 to 2048 [ 224.581773][ T8190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.612353][ T8185] loop5: detected capacity change from 0 to 8192 [ 225.196082][ T8208] Bluetooth: hci0: invalid len left 7, exp >= 13 [ 225.809929][ T8222] loop6: detected capacity change from 0 to 32768 [ 225.891521][ T8222] JBD2: Ignoring recovery information on journal [ 225.951887][ T8222] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 225.996131][ T8222] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 226.011331][ T8222] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 226.022673][ T8222] OCFS2: File system is now read-only. [ 226.028114][ T8222] (syz.6.756,8222,0):ocfs2_search_chain:1935 ERROR: status = -30 [ 226.037002][ T8222] (syz.6.756,8222,0):ocfs2_search_chain:2058 ERROR: status = -30 [ 226.044810][ T8222] (syz.6.756,8222,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30 [ 226.054498][ T8222] (syz.6.756,8222,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 226.062882][ T8222] (syz.6.756,8222,0):ocfs2_claim_metadata:2223 ERROR: status = -30 [ 226.070768][ T8222] (syz.6.756,8222,0):ocfs2_claim_metadata:2236 ERROR: status = -30 [ 226.078870][ T8222] (syz.6.756,8222,0):ocfs2_create_refcount_tree:595 ERROR: status = -30 [ 226.087423][ T8222] (syz.6.756,8222,0):ocfs2_reflink_remap_blocks:4653 ERROR: status = -30 [ 226.096063][ T8222] (syz.6.756,8222,0):ocfs2_remap_file_range:2759 ERROR: status = -30 [ 226.234597][ T8230] overlayfs: failed to resolve './file0': -2 [ 226.346316][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 226.549157][ T6134] ocfs2: Unmounting device (7,6) on (node local) [ 228.377300][ T5761] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 228.572619][ T5761] usb 2-1: Using ep0 maxpacket: 8 [ 228.614425][ T5761] usb 2-1: config 0 has no interfaces? [ 228.733340][ T5761] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 228.927666][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.116240][ T5761] usb 2-1: Product: syz [ 229.231628][ T5761] usb 2-1: Manufacturer: syz [ 229.350479][ T5761] usb 2-1: SerialNumber: syz [ 229.466106][ T5761] usb 2-1: config 0 descriptor?? [ 230.036462][ T8322] loop5: detected capacity change from 0 to 4096 [ 230.069526][ T8322] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 230.094010][ T8322] ntfs3(loop5): Failed to load $Extend (-22). [ 230.100874][ T8322] ntfs3(loop5): Failed to initialize $Extend. [ 230.145723][ T31] audit: type=1800 audit(1785440178.447:16): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.785" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 231.050650][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.6.789'. [ 231.368207][ T8331] bond1: option primary_reselect: invalid value (7) [ 231.398045][ T5769] usb 2-1: USB disconnect, device number 6 [ 231.477285][ T8331] bond1 (unregistering): Released all slaves [ 231.565881][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 231.621976][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 231.629215][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 231.682104][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 231.711983][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 231.766177][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 232.100239][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 232.150187][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 232.200668][ T8341] ceph: No mds server is up or the cluster is laggy [ 232.215417][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 232.274715][ T8337] ceph: No mds server is up or the cluster is laggy [ 232.285333][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 232.751586][ T8349] "syz.5.794" (8349) uses obsolete ecb(arc4) skcipher [ 233.002073][ T8367] loop1: detected capacity change from 0 to 32768 [ 233.023151][ T8367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.799 (8367) [ 233.046397][ T8368] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.800'. [ 233.108122][ T8367] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.118508][ T8367] BTRFS info (device loop1): using sha256 checksum algorithm [ 233.299691][ T8367] BTRFS info (device loop1): enabling ssd optimizations [ 233.308297][ T8367] BTRFS info (device loop1): turning on sync discard [ 233.315163][ T8367] BTRFS info (device loop1): enabling free space tree [ 233.321933][ T8367] BTRFS info (device loop1): use zlib compression, level 3 [ 233.577032][ T31] audit: type=1800 audit(1785440181.737:17): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.799" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 233.786113][ T8387] loop0: detected capacity change from 0 to 4096 [ 233.808358][ T8387] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 233.831676][ T8387] ntfs3(loop0): Failed to load $Extend (-22). [ 233.837911][ T8387] ntfs3(loop0): Failed to initialize $Extend. [ 233.917923][ T31] audit: type=1800 audit(1785440182.217:18): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 233.942611][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.804'. [ 234.582302][ T8395] ip6erspan0: entered promiscuous mode [ 234.832328][ T5628] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.372453][ T8405] fuse: Bad value for 'fd' [ 235.391533][ T8406] netlink: 'syz.4.809': attribute type 4 has an invalid length. [ 235.567841][ T8398] loop0: detected capacity change from 0 to 8192 [ 235.575031][ T8406] netlink: 'syz.4.809': attribute type 4 has an invalid length. [ 235.612236][ T8411] netlink: 'syz.5.812': attribute type 1 has an invalid length. [ 235.626608][ T8412] loop6: detected capacity change from 0 to 128 [ 235.661825][ T8398] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.711309][ T8412] EXT4-fs: Ignoring removed nobh option [ 235.875778][ T31] audit: type=1326 audit(1785440184.177:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe01b79e019 code=0x0 [ 235.921346][ T8412] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.017536][ T8411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.088785][ T8412] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.289659][ T8415] bond1: (slave geneve3): making interface the new active one [ 236.381593][ T8415] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 236.440010][ T8428] loop0: detected capacity change from 0 to 1024 [ 236.472774][ T5960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 236.517085][ T8428] EXT4-fs: Ignoring removed bh option [ 236.573985][ T6134] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.617175][ T8428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.695338][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 236.745384][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 236.882643][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.943739][ T8428] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 237.159469][ T8439] loop6: detected capacity change from 0 to 32768 [ 237.179652][ T8439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.819 (8439) [ 237.201659][ T8439] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.211812][ T8439] BTRFS info (device loop6): using sha256 checksum algorithm [ 237.253800][ T5960] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.375650][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.448627][ T8439] BTRFS info (device loop6): enabling ssd optimizations [ 237.455690][ T8439] BTRFS info (device loop6): turning on sync discard [ 237.462367][ T8439] BTRFS info (device loop6): enabling free space tree [ 237.469526][ T8439] BTRFS info (device loop6): use zlib compression, level 3 [ 237.490721][ T5960] usb 5-1: Product: syz [ 237.536792][ T5960] usb 5-1: Manufacturer: syz [ 237.574954][ T5960] usb 5-1: SerialNumber: syz [ 237.637187][ T5960] usb 5-1: config 0 descriptor?? [ 237.690173][ T5960] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 237.734084][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 237.766754][ T5960] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 238.203395][ T31] audit: type=1800 audit(1785440186.497:20): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.819" name="file0" dev="loop6" ino=258 res=0 errno=0 [ 238.389382][ T5960] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 238.419051][ T5960] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 238.667096][ T5960] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 238.675395][ T5960] em28xx 5-1:0.0: No AC97 audio processor [ 238.690434][ T5960] usb 5-1: USB disconnect, device number 6 [ 238.710996][ T5960] em28xx 5-1:0.0: Disconnecting em28xx [ 238.741002][ T5960] em28xx 5-1:0.0: Freeing device [ 238.778815][ T8464] ip6erspan0: entered promiscuous mode [ 238.790685][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.990873][ T6134] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.217993][ T8469] xt_hashlimit: size too large, truncated to 1048576 [ 241.450979][ T8510] loop4: detected capacity change from 0 to 32768 [ 241.476461][ T8510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.840 (8510) [ 241.500331][ T8510] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.510468][ T8510] BTRFS info (device loop4): using sha256 checksum algorithm [ 241.689971][ T8510] BTRFS info (device loop4): enabling ssd optimizations [ 241.699557][ T8510] BTRFS info (device loop4): turning on sync discard [ 241.706399][ T8510] BTRFS info (device loop4): enabling free space tree [ 241.713203][ T8510] BTRFS info (device loop4): use zlib compression, level 3 [ 241.811045][ T31] audit: type=1800 audit(1785440190.097:21): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.840" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 242.177852][ T31] audit: type=1326 audit(1785440190.367:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.2.842" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe01b79e019 code=0x0 [ 242.425315][ T5627] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.482824][ T5769] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 242.692298][ T5769] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.758301][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.841233][ T5769] usb 6-1: Product: syz [ 242.848058][ T8540] loop1: detected capacity change from 0 to 8 [ 242.872455][ T5769] usb 6-1: Manufacturer: syz [ 242.907769][ T5769] usb 6-1: SerialNumber: syz [ 242.972063][ T5769] usb 6-1: config 0 descriptor?? [ 243.298600][ T5769] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.903794][ T5769] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 243.993040][ T5769] usb 6-1: USB disconnect, device number 6 [ 245.326387][ T8592] loop6: detected capacity change from 0 to 1024 [ 245.394313][ T8592] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 245.649821][ T8594] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 246.052388][ T8597] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 246.947609][ T8613] loop4: detected capacity change from 0 to 7 [ 247.031443][ T8613] Dev loop4: unable to read RDB block 7 [ 247.075415][ T8613] loop4: AHDI p2 [ 247.101924][ T8613] loop4: partition table partially beyond EOD, truncated [ 247.685713][ T8625] loop4: detected capacity change from 0 to 256 [ 247.841013][ T8625] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 247.979272][ T8625] FAT-fs (loop4): Filesystem has been set read-only [ 248.634009][ T5624] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 248.832309][ T8608] loop0: detected capacity change from 0 to 32768 [ 248.864687][ T5624] usb 2-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 248.928434][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.954559][ T8608] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.995021][ T5624] usb 2-1: Product: syz [ 249.018674][ T5624] usb 2-1: Manufacturer: syz [ 249.052453][ T5624] usb 2-1: SerialNumber: syz [ 249.106606][ T8608] XFS (loop0): Ending clean mount [ 249.120047][ T5624] ums-datafab 2-1:1.0: USB Mass Storage device detected [ 249.453151][ T5624] ums-datafab 2-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 249.453151][ T5624] Please send a copy of this message to and [ 250.045802][ T5624] scsi host1: usb-storage 2-1:1.0 [ 250.340225][ T5622] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.455618][ T8678] loop4: detected capacity change from 0 to 4096 [ 250.901016][ T8678] ntfs3(loop4): failed to convert "0080" to macinuit [ 251.326535][ T139] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 251.445225][ T139] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 251.500456][ T9] usb 2-1: USB disconnect, device number 7 [ 251.783389][ T3289] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 251.851684][ T139] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 251.881630][ T8677] loop6: detected capacity change from 0 to 32768 [ 251.910031][ T3289] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 251.995466][ T8677] JBD2: Ignoring recovery information on journal [ 252.016961][ T3289] sd 1:0:0:0: [sdb] Sense not available. [ 252.045463][ T3309] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 252.112007][ T3289] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 252.205482][ T3309] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 252.226347][ T3289] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 252.294283][ T139] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 252.326435][ T3289] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 252.377378][ T3309] sd 1:0:0:1: [sdc] Sense not available. [ 252.423597][ T3289] sd 1:0:0:0: [sdb] Asking for cache data failed [ 252.470097][ T3309] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 252.493196][ T8677] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 252.533826][ T3289] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 252.571798][ T3309] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 252.638016][ T3309] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 252.739975][ T3309] sd 1:0:0:1: [sdc] Asking for cache data failed [ 252.797516][ T3309] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 252.890258][ T3289] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 252.904614][ T31] audit: type=1800 audit(1785440201.187:23): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.876" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 253.158940][ T3309] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 253.271442][ T7654] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 253.324709][ T8723] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 253.369744][ T6134] ocfs2: Unmounting device (7,6) on (node local) [ 253.775983][ T8723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.001093][ T8725] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.618653][ T5754] udevd[5754]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 254.998223][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.007172][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.179971][ T5754] udevd[5754]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 256.240464][ T8758] loop6: detected capacity change from 0 to 1024 [ 256.736158][ T31] audit: type=1804 audit(1785440205.037:24): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.910" name=2F6E6577726F6F742F39382F66696C65302F0A7E0C7DA330F643194C1893FCD6489FAC605EEAD61B53DFF18CAF526ECCCC9BBD9146BC3C3BB67677695E6FDDAAB081786E9084014E60F5C03AE5A9087726B05E17402CD2FBB80D773B8A41470B1F901A8C2B2D57450181F4FC5BC53C7CB3DC032B84567492607CB08832ECA9F79DA9210D197863E5DB5A74A9823DC0CC8BD9F3A9B6FF5A7D15D4747A9B26E088F4FAD96D81CD1214226B1C4585D418D593220FCBB9AD949266CC48163E3498B46EBCDF7B2B5ECFE67539A61ED9E39B02D5B35AC0D0E7FA83 dev="loop6" ino=25 res=1 errno=0 [ 257.376758][ T31] audit: type=1800 audit(1785440205.107:25): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.910" name=0A7E0C7DA330F643194C1893FCD6489FAC605EEAD61B53DFF18CAF526ECCCC9BBD9146BC3C3BB67677695E6FDDAAB081786E9084014E60F5C03AE5A9087726B05E17402CD2FBB80D773B8A41470B1F901A8C2B2D57450181F4FC5BC53C7CB3DC032B84567492607CB08832ECA9F79DA9210D197863E5DB5A74A9823DC0CC8BD9F3A9B6FF5A7D15D4747A9B26E088F4FAD96D81CD1214226B1C4585D418D593220FCBB9AD949266CC48163E3498B46EBCDF7B2B5ECFE67539A61ED9E39B02D5B35AC0D0E7FA83 dev="loop6" ino=25 res=0 errno=0 [ 257.620859][ T8780] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 257.829455][ T8786] loop5: detected capacity change from 0 to 16 [ 257.961975][ T8786] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 258.080685][ T8786] erofs (device loop5): mounted with root inode @ nid 36. [ 258.218820][ T8786] syz.5.935: attempt to access beyond end of device [ 258.218820][ T8786] loop5: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 258.352319][ T8786] syz.5.935: attempt to access beyond end of device [ 258.352319][ T8786] loop5: rw=0, sector=46, nr_sectors = 1 limit=16 [ 258.400778][ T8798] loop1: detected capacity change from 0 to 512 [ 258.439294][ T8786] erofs (device loop5): read error -5 @ 0 of nid 36 [ 258.463226][ T8798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.563049][ T8798] EXT4-fs (loop1): 1 truncate cleaned up [ 258.616654][ T8798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.036355][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.533806][ T8823] loop1: detected capacity change from 0 to 131072 [ 260.595197][ T8823] F2FS-fs (loop1): invalid crc value [ 260.660567][ T8823] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 260.688834][ T8823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 261.247546][ T8837] netlink: 'syz.6.940': attribute type 1 has an invalid length. [ 261.559006][ T8837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.796700][ T8838] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 262.369353][ T8847] loop6: detected capacity change from 0 to 64 [ 265.825082][ T8907] loop6: detected capacity change from 0 to 4096 [ 265.978311][ T8907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.639295][ T8930] loop4: detected capacity change from 0 to 16 [ 266.692624][ T6134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.758789][ T8930] erofs (device loop4): mounted with root inode @ nid 36. [ 266.789265][ T8892] loop0: detected capacity change from 0 to 32768 [ 267.007122][ T8892] JBD2: Ignoring recovery information on journal [ 267.222651][ T5769] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 267.382628][ T8892] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 267.483021][ T5769] usb 5-1: Using ep0 maxpacket: 16 [ 267.542259][ T5769] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.732264][ T5769] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.826012][ T5769] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 267.920901][ T8944] netlink: 'syz.6.979': attribute type 4 has an invalid length. [ 267.950120][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.086155][ T8949] netlink: 'syz.6.979': attribute type 4 has an invalid length. [ 268.098528][ T5769] usb 5-1: config 0 descriptor?? [ 268.609408][ T5769] kovaplus 0003:1E7D:2D50.0004: global environment stack underflow [ 268.639104][ T5622] ocfs2: Unmounting device (7,0) on (node local) [ 268.689289][ T5769] kovaplus 0003:1E7D:2D50.0004: item 0 0 1 11 parsing failed [ 268.728968][ T8954] netlink: 'syz.6.984': attribute type 12 has an invalid length. [ 268.770725][ T5769] kovaplus 0003:1E7D:2D50.0004: parse failed [ 268.796318][ T8954] netlink: 'syz.6.984': attribute type 29 has an invalid length. [ 268.834401][ T5769] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -22 [ 268.877324][ T8954] netlink: 148 bytes leftover after parsing attributes in process `syz.6.984'. [ 268.920634][ T8956] overlayfs: failed to resolve './file0': -2 [ 268.969312][ T8954] netlink: 'syz.6.984': attribute type 1 has an invalid length. [ 269.043779][ T8954] netlink: 'syz.6.984': attribute type 2 has an invalid length. [ 269.097556][ T8954] netlink: 11 bytes leftover after parsing attributes in process `syz.6.984'. [ 269.164010][ T8933] loop5: detected capacity change from 0 to 32768 [ 269.244219][ T8933] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.368664][ T8972] loop1: detected capacity change from 0 to 64 [ 269.503123][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 269.519420][ T8933] XFS (loop5): Ending clean mount [ 269.962566][ T5629] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.355031][ T9] usb 5-1: USB disconnect, device number 7 [ 270.569761][ T8992] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 270.660017][ T8994] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 270.671872][ T5624] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 270.901458][ T5624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.977493][ T5624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.040118][ T5624] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.117943][ T5624] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.174760][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.195004][ T9007] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 271.205968][ T5960] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 271.256355][ T5624] usb 1-1: config 0 descriptor?? [ 271.269882][ T9005] loop5: detected capacity change from 0 to 2048 [ 271.373582][ T9005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.408086][ T9010] 9pnet: p9_errstr2errno: server reported unknown error tun [ 271.438320][ T5960] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 271.465755][ T9016] loop4: detected capacity change from 0 to 512 [ 271.499695][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.574795][ T5960] usb 2-1: Product: syz [ 271.596545][ T9016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.629409][ T5960] usb 2-1: Manufacturer: syz [ 271.680415][ T5960] usb 2-1: SerialNumber: syz [ 271.728774][ T9016] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.743688][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.780681][ T5960] usb 2-1: config 0 descriptor?? [ 271.873950][ T5960] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 271.954081][ T5960] dvb-usb: bulk message failed: -22 (4/0) [ 272.045787][ T5960] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 272.094523][ T5624] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 272.155932][ T5960] dvb-usb: bulk message failed: -22 (5/0) [ 272.208362][ T5960] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 272.324389][ T5769] usb 1-1: USB disconnect, device number 5 [ 272.395344][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.461926][ T9028] fido_id[9028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 272.486451][ T9033] loop1: detected capacity change from 0 to 512 [ 272.521195][ T5960] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 272.619173][ T9033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.812526][ T5960] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 273.296226][ T9050] ALSA: mixer_oss: invalid OSS volume '' [ 273.367113][ T9050] ALSA: mixer_oss: invalid OSS volume '' [ 273.610703][ T5960] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 273.791493][ T9013] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 273.809837][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 273.833143][ T31] audit: type=1800 audit(1785440222.118:26): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1021" name="blkio.bfq.time_recursive" dev="tmpfs" ino=972 res=0 errno=0 [ 273.897728][ T5960] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 273.946847][ T5960] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 273.990471][ T5769] usb 2-1: USB disconnect, device number 8 [ 274.031234][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.065397][ T5960] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 274.174502][ T5960] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 274.277034][ T5960] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 274.392848][ T5960] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.524620][ T5960] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.537205][ T9076] overlayfs: failed to clone upperpath [ 274.607333][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.908923][ T5960] usb 7-1: GET_CAPABILITIES returned 0 [ 274.947359][ T5960] usbtmc 7-1:16.0: can't read capabilities [ 275.206495][ T5960] usb 7-1: USB disconnect, device number 6 [ 276.436291][ T9112] loop6: detected capacity change from 0 to 1764 [ 276.646352][ T9112] ISOFS: Logical zone size(512) < hardware blocksize(1024) [ 277.074434][ T9122] loop5: detected capacity change from 0 to 512 [ 277.134221][ T37] Bluetooth: hci6: Frame reassembly failed (-84) [ 277.186040][ T9124] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 277.218831][ T9122] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1051: bg 0: block 5: invalid block bitmap [ 277.330330][ T9122] loop5: lost filesystem error report for type 5 error -117 [ 277.337226][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 277.351016][ C0] EXT4-fs (loop5): initial error at time 1785440225: ext4_validate_block_bitmap:432 [ 277.360406][ C0] EXT4-fs (loop5): last error at time 1785440225: ext4_validate_block_bitmap:432 [ 277.434353][ T9122] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 277.515491][ T9122] loop5: lost filesystem error report for type 5 error -117 [ 277.515941][ T9122] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1051: invalid indirect mapped block 3 (level 2) [ 277.670658][ T9122] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 277.671389][ T9122] EXT4-fs (loop5): 1 orphan inode deleted [ 277.783794][ T9122] EXT4-fs (loop5): 1 truncate cleaned up [ 277.836906][ T9122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.002142][ T9143] syz.0.1059 uses obsolete (PF_INET,SOCK_PACKET) [ 278.050723][ T9143] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 278.071536][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.137346][ T5769] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.297113][ T5769] usb 5-1: Using ep0 maxpacket: 8 [ 278.326015][ T5769] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 278.372990][ T5769] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 278.453736][ T5769] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.540972][ T5769] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 278.574349][ T9154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.625041][ T5769] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 278.697847][ T5769] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.788380][ T5769] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.857923][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.136778][ T5626] Bluetooth: hci6: command 0x1003 tx timeout [ 279.148661][ T5634] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 279.175399][ T5769] usb 5-1: GET_CAPABILITIES returned 0 [ 279.219514][ T5769] usbtmc 5-1:16.0: can't read capabilities [ 279.459074][ T5769] usb 5-1: USB disconnect, device number 8 [ 279.856207][ T5862] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 280.046573][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 280.100368][ T5862] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.208361][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0 [ 280.252392][ T5862] usb 7-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 280.321606][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.413620][ T5862] usb 7-1: config 0 descriptor?? [ 280.937032][ T5862] wacom 0003:056A:00CC.0006: unknown main item tag 0x6 [ 280.973185][ T5862] wacom 0003:056A:00CC.0006: ignoring exceeding usage max [ 281.064061][ T5862] wacom 0003:056A:00CC.0006: hidraw0: USB HID v0.81 Device [HID 056a:00cc] on usb-dummy_hcd.6-1/input0 [ 281.159228][ T5862] usb 7-1: USB disconnect, device number 7 [ 281.384659][ T9199] fido_id[9199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 281.426342][ T9203] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 281.434834][ T5913] Bluetooth: hci6: Frame reassembly failed (-84) [ 283.454649][ T5626] Bluetooth: hci6: command 0x1003 tx timeout [ 283.465701][ T5634] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 284.259776][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1104'. [ 284.544257][ T5761] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 284.782361][ T5761] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.852772][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.001782][ T5761] usb 6-1: config 0 descriptor?? [ 285.085809][ T5761] cp210x 6-1:0.0: cp210x converter detected [ 286.497791][ T5761] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 286.643803][ T5761] usb 6-1: cp210x converter now attached to ttyUSB0 [ 286.795133][ T5761] usb 6-1: USB disconnect, device number 7 [ 286.960810][ T5761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 287.084883][ T5761] cp210x 6-1:0.0: device disconnected [ 287.827310][ T9293] netlink: 'syz.6.1120': attribute type 21 has an invalid length. [ 287.880629][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'. [ 288.016388][ T9293] netlink: 'syz.6.1120': attribute type 21 has an invalid length. [ 288.027608][ T3309] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.049088][ T9301] loop5: detected capacity change from 0 to 1024 [ 288.101165][ T3309] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.114630][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'. [ 288.199436][ T3309] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.214468][ T9301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.281411][ T3309] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.319815][ T9301] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.423197][ T9308] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 288.504742][ T9301] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1123: lblock 0 mapped to illegal pblock 0 (length 1) [ 288.555749][ T9308] EXT4-fs (loop5): Remounting filesystem read-only [ 289.159126][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.687296][ T9324] loop6: detected capacity change from 0 to 32768 [ 289.714035][ T9324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1133 (9324) [ 289.732823][ T9324] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.743051][ T9324] BTRFS info (device loop6): using crc32c checksum algorithm [ 289.924402][ T9324] BTRFS info (device loop6): enabling ssd optimizations [ 289.931455][ T9324] BTRFS info (device loop6): turning on flush-on-commit [ 289.938398][ T9324] BTRFS info (device loop6): turning on async discard [ 289.945265][ T9324] BTRFS info (device loop6): enabling free space tree [ 289.952064][ T9324] BTRFS info (device loop6): enabling auto defrag [ 289.958482][ T9324] BTRFS info (device loop6): use lzo compression, level 1 [ 289.965594][ T9324] BTRFS info (device loop6): max_inline set to 4096 [ 290.037963][ T31] audit: type=1800 audit(1785440238.356:27): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1133" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 290.465668][ T6134] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.998572][ T9385] loop1: detected capacity change from 0 to 512 [ 292.070891][ T9385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.102074][ T9387] loop4: detected capacity change from 0 to 512 [ 292.199129][ T9385] EXT4-fs (loop1): 1 truncate cleaned up [ 292.246672][ T9387] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.381811][ T9385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.448055][ T9387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1154: Allocating blocks 41-42 which overlap fs metadata [ 292.640524][ T9387] loop4: lost filesystem error report for type 5 error -117 [ 292.649567][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 292.663344][ C0] EXT4-fs (loop4): initial error at time 1785440240: ext4_mb_mark_diskspace_used:4222 [ 292.672912][ C0] EXT4-fs (loop4): last error at time 1785440240: ext4_mb_mark_diskspace_used:4222 [ 292.696242][ T9387] EXT4-fs (loop4): Remounting filesystem read-only [ 292.756009][ T9387] Quota error (device loop4): write_blk: dquota write failed [ 292.845081][ T9387] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 292.860407][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.961298][ T9387] Quota error (device loop4): write_blk: dquota write failed [ 293.002479][ T9397] loop0: detected capacity change from 0 to 1764 [ 293.076988][ T9387] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 293.186960][ T9387] EXT4-fs (loop4): 1 truncate cleaned up [ 293.238069][ T9397] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 293.248368][ T9400] pim6reg1: entered promiscuous mode [ 293.270100][ T9387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.308035][ T9400] pim6reg1: entered allmulticast mode [ 293.934376][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.297881][ T3309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.342768][ T3309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.593169][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1175'. [ 295.607559][ T9433] loop1: detected capacity change from 0 to 1024 [ 295.674451][ T9433] EXT4-fs: Ignoring removed orlov option [ 295.685950][ T3309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.801079][ T3309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.866047][ T9433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.341225][ T3309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.363055][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.386196][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.397525][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.407265][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.417398][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.539430][ T3309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.609512][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.136256][ T3309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.283918][ T3309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.435269][ T9466] loop5: detected capacity change from 0 to 512 [ 297.596350][ T9466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.761305][ T9466] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.974446][ T9475] vlan2: entered allmulticast mode [ 298.031686][ T9475] bond0: entered allmulticast mode [ 298.081342][ T9475] bond_slave_0: entered allmulticast mode [ 298.134055][ T9475] bond_slave_1: entered allmulticast mode [ 298.205627][ T9475] bridge0: port 3(vlan2) entered blocking state [ 298.254152][ T9475] bridge0: port 3(vlan2) entered disabled state [ 298.334418][ T9475] vlan2: entered promiscuous mode [ 298.349734][ T9484] xt_hashlimit: size too large, truncated to 1048576 [ 298.360324][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.381646][ T9475] bond0: entered promiscuous mode [ 298.420621][ T9475] bond_slave_0: entered promiscuous mode [ 298.470794][ T9475] bond_slave_1: entered promiscuous mode [ 298.488812][ T5626] Bluetooth: hci2: command tx timeout [ 298.521934][ T9475] bridge0: port 3(vlan2) entered blocking state [ 298.529059][ T9475] bridge0: port 3(vlan2) entered forwarding state [ 298.788258][ T9480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.871654][ T9480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.896651][ T9495] loop0: detected capacity change from 0 to 128 [ 298.999843][ T9485] –: renamed from vxcan1 (while UP) [ 299.231692][ T9486] vxcan2: entered promiscuous mode [ 299.231721][ T9486] vxcan2: entered allmulticast mode [ 299.630610][ T3309] bridge_slave_1: left allmulticast mode [ 299.684180][ T3309] bridge_slave_1: left promiscuous mode [ 299.742996][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.763447][ T9501] xt_hashlimit: size too large, truncated to 1048576 [ 299.865389][ T3309] bridge_slave_0: left allmulticast mode [ 299.954804][ T3309] bridge_slave_0: left promiscuous mode [ 300.035773][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.566451][ T5626] Bluetooth: hci2: command tx timeout [ 301.581169][ T9548] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 301.783032][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.870523][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.944072][ T3309] bond0 (unregistering): Released all slaves [ 302.004142][ T3309] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 302.048790][ T3309] bond1 (unregistering): Released all slaves [ 302.056251][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.230005][ T9548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.239589][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 302.295268][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.327058][ T9548] team0: Port device netdevsim1 added [ 302.381290][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.449824][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.530727][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.652050][ T5626] Bluetooth: hci2: command tx timeout [ 302.691632][ T5862] usb 6-1: config 0 descriptor?? [ 302.755708][ T5862] hub 6-1:0.0: USB hub found [ 302.787930][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 302.971653][ T5862] hub 6-1:0.0: 1 port detected [ 303.624172][ T5862] hub 6-1:0.0: activate --> -90 [ 303.743440][ T3309] hsr_slave_0: left promiscuous mode [ 303.802684][ T3309] hsr_slave_1: left promiscuous mode [ 303.856845][ T3309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.921719][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.982810][ T3309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.022907][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.034918][ T5960] usb 6-1: USB disconnect, device number 8 [ 304.129133][ T3309] veth1_macvtap: left promiscuous mode [ 304.160725][ T3309] veth0_macvtap: left promiscuous mode [ 304.186934][ T3309] veth1_vlan: left promiscuous mode [ 304.210003][ T3309] veth0_vlan: left promiscuous mode [ 304.725051][ T5626] Bluetooth: hci2: command tx timeout [ 304.893994][ T9602] input: syz0 as /devices/virtual/input/input15 [ 305.944930][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 306.055523][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 306.432108][ T9605] loop0: detected capacity change from 0 to 32768 [ 306.534297][ T9605] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 306.620454][ T9605] XFS (loop0): Ending clean mount [ 306.918980][ T5622] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 307.006745][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 307.506137][ T9657] netlink: 'syz.5.1240': attribute type 4 has an invalid length. [ 307.610204][ T9661] netlink: 'syz.5.1240': attribute type 4 has an invalid length. [ 307.982109][ T5862] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 308.207675][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 308.246710][ T5862] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 308.324059][ T5862] usb 2-1: config 0 has no interface number 0 [ 308.395396][ T5862] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 308.489876][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.580537][ T5862] usb 2-1: Product: syz [ 308.637420][ T5862] usb 2-1: Manufacturer: syz [ 308.683658][ T5862] usb 2-1: SerialNumber: syz [ 308.720853][ T5862] usb 2-1: config 0 descriptor?? [ 308.775393][ T5862] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 308.862752][ T5624] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 309.010407][ T5862] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 309.062421][ T5624] usb 1-1: Using ep0 maxpacket: 16 [ 309.125987][ T5624] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 309.167581][ T5862] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 309.195976][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.231194][ T5624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.267013][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.337820][ T9446] bridge_slave_0: entered allmulticast mode [ 309.356106][ T5624] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.446428][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.467926][ T9446] bridge_slave_0: entered promiscuous mode [ 309.474698][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 309.488619][ T5862] usb 2-1: USB disconnect, device number 9 [ 309.570260][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.581200][ T5624] usb 1-1: Product: syz [ 309.618357][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 309.635302][ T5624] usb 1-1: Manufacturer: syz [ 309.675552][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.693950][ T5624] usb 1-1: SerialNumber: syz [ 309.738795][ T9446] bridge_slave_1: entered allmulticast mode [ 309.786272][ T5624] usb 1-1: config 0 descriptor?? [ 309.808956][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 309.827638][ T9446] bridge_slave_1: entered promiscuous mode [ 309.868375][ T5624] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 309.917534][ T5862] quatech2 2-1:0.51: device disconnected [ 309.942451][ T5624] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 310.138760][ T9446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.275925][ T9446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.334636][ T31] audit: type=1800 audit(1785440258.666:28): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1259" name="compatible_id" dev="configfs" ino=20719 res=0 errno=0 [ 310.395094][ T9718] loop1: detected capacity change from 0 to 128 [ 310.473100][ T5624] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 310.524343][ T9718] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.554899][ T5624] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 310.613410][ T9722] fuse: Bad value for 'fd' [ 310.653718][ T9718] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.698885][ T9446] team0: Port device team_slave_0 added [ 310.756377][ T9446] team0: Port device team_slave_1 added [ 310.821878][ T5624] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 310.903562][ T5624] em28xx 1-1:0.0: No AC97 audio processor [ 311.005222][ T5624] usb 1-1: USB disconnect, device number 6 [ 311.089249][ T5624] em28xx 1-1:0.0: Disconnecting em28xx [ 311.131557][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7 [ 311.171957][ T9446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.189423][ T5624] em28xx 1-1:0.0: Freeing device [ 311.223781][ T9446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.354597][ T5628] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.472571][ T9446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.544657][ T9739] 9p: Bad value for 'rfdno' [ 311.609827][ T9446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.689591][ T9446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.889717][ T9446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.344578][ T9446] hsr_slave_0: entered promiscuous mode [ 312.387718][ T9446] hsr_slave_1: entered promiscuous mode [ 312.739116][ T9446] debugfs: 'hsr0' already exists in 'hsr' [ 312.795864][ T9446] Cannot create hsr debugfs directory [ 314.035945][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1280'. [ 314.225742][ T9795] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 314.292896][ T9446] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 314.493223][ T9446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.560683][ T9446] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 314.632725][ T9446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.689899][ T9446] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.753940][ T5761] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 314.790326][ T9446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.835129][ T9446] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 314.897598][ T9446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.929602][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 314.966702][ T5761] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.000789][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.045331][ T5761] usb 2-1: Product: syz [ 315.062935][ T5761] usb 2-1: Manufacturer: syz [ 315.087031][ T5761] usb 2-1: SerialNumber: syz [ 315.122523][ T5761] usb 2-1: config 0 descriptor?? [ 315.300435][ T9446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.369742][ T5761] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.415399][ T9446] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.470736][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.477887][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.546284][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.553531][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.981139][ T5761] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 316.024865][ T5761] usb 2-1: USB disconnect, device number 10 [ 316.407601][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.421311][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.692466][ T9830] overlayfs: failed to clone upperpath [ 317.128427][ T9446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.868028][ T9867] fuse: Bad value for 'fd' [ 318.621249][ T9446] veth0_vlan: entered promiscuous mode [ 318.696338][ T9446] veth1_vlan: entered promiscuous mode [ 318.930646][ T9446] veth0_macvtap: entered promiscuous mode [ 319.002541][ T9446] veth1_macvtap: entered promiscuous mode [ 319.030235][ T9863] loop0: detected capacity change from 0 to 32768 [ 319.144561][ T9446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.194287][ T9863] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 319.246982][ T9446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.325244][ T9863] VFS: Lookup of '' in ocfs2 loop0 would have caused loop [ 319.389658][ T5919] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.455918][ T5919] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.547273][ T5919] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.632155][ T5919] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.552522][ T5622] ocfs2: Unmounting device (7,0) on (node local) [ 320.781582][ T7309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.859334][ T7309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.471189][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.553847][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.269743][ T9932] fuse: Bad value for 'fd' [ 322.613680][ T9941] fuse: Bad value for 'fd' [ 322.698941][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1326'. [ 322.790471][ T9942] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1326'. [ 324.355744][ T9955] loop5: detected capacity change from 0 to 512 [ 324.451350][ T9955] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1333: bad orphan inode 11862016 [ 324.540534][ T9963] loop1: detected capacity change from 0 to 1024 [ 324.565279][ T9955] loop5: lost filesystem error report for type 5 error -117 [ 324.570539][ T9955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 324.624212][ T9963] EXT4-fs: Ignoring removed bh option [ 324.718172][ T9963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.771434][ T9955] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.952452][ T9963] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 325.169630][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 325.251401][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.065113][ T9994] FAULT_FLAG_ALLOW_RETRY missing 1 [ 326.123721][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.7.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.123750][ T9994] Tainted: [L]=SOFTLOCKUP [ 326.123757][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 326.123768][ T9994] Call Trace: [ 326.123776][ T9994] [ 326.123784][ T9994] dump_stack_lvl+0xe8/0x150 [ 326.123817][ T9994] handle_userfault+0x15ff/0x18c0 [ 326.123860][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.123893][ T9994] ? __pfx_handle_userfault+0x10/0x10 [ 326.123945][ T9994] handle_mm_fault+0x1b36/0x3080 [ 326.123967][ T9994] ? mt_find+0x186/0x630 [ 326.124001][ T9994] ? handle_mm_fault+0xec/0x3080 [ 326.124030][ T9994] ? __pfx_handle_mm_fault+0x10/0x10 [ 326.124064][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.124089][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.124118][ T9994] __get_user_pages+0x1678/0x2720 [ 326.124168][ T9994] populate_vma_page_range+0x2be/0x3c0 [ 326.124191][ T9994] ? __pfx_populate_vma_page_range+0x10/0x10 [ 326.124209][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.124230][ T9994] ? vma_wants_writenotify+0xb2/0x340 [ 326.124251][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.124273][ T9994] ? vma_set_page_prot+0xc3/0x100 [ 326.124296][ T9994] mprotect_fixup+0x9a3/0xb10 [ 326.124329][ T9994] ? __pfx_mprotect_fixup+0x10/0x10 [ 326.124355][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.124376][ T9994] ? mas_next_slot+0xc91/0xd70 [ 326.124411][ T9994] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.124432][ T9994] ? apparmor_file_mprotect+0x1d0/0x400 [ 326.124463][ T9994] ? security_file_mprotect+0x1a/0x290 [ 326.124498][ T9994] do_mprotect_pkey+0x9d3/0xcd0 [ 326.124540][ T9994] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 326.124594][ T9994] ? rcu_is_watching+0x15/0xb0 [ 326.124617][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.124638][ T9994] __x64_sys_mprotect+0x80/0x90 [ 326.124667][ T9994] do_syscall_64+0x174/0x580 [ 326.124688][ T9994] ? trace_irq_disable+0x3b/0x140 [ 326.124718][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.124736][ T9994] RIP: 0033:0x7f17ffd9e019 [ 326.124753][ T9994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.124769][ T9994] RSP: 002b:00007f1800b9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 326.124788][ T9994] RAX: ffffffffffffffda RBX: 00007f1800025fa0 RCX: 00007f17ffd9e019 [ 326.124801][ T9994] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 326.124813][ T9994] RBP: 00007f17ffe3500c R08: 0000000000000000 R09: 0000000000000000 [ 326.124824][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.124835][ T9994] R13: 00007f1800026038 R14: 00007f1800025fa0 R15: 00007ffd9dd251d8 [ 326.124870][ T9994] [ 326.412323][ T9996] loop5: detected capacity change from 0 to 64 [ 326.653016][T10000] loop7: detected capacity change from 0 to 512 [ 326.722666][ T9996] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 326.935371][ T5626] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 327.060600][T10000] EXT4-fs (loop7): 1 truncate cleaned up [ 327.103343][T10000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.122601][ T9446] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.072483][T10033] loop5: detected capacity change from 0 to 40427 [ 329.139218][T10033] F2FS-fs (loop5): invalid crc value [ 329.204697][T10033] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 329.220207][T10033] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 329.227818][T10033] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 329.238638][T10033] F2FS-fs (loop5): Start checkpoint disabled! [ 329.251125][T10033] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 329.258774][T10033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 329.379488][ T31] audit: type=1800 audit(1785440277.715:29): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1361" name=07 dev="loop5" ino=10 res=0 errno=0 [ 329.449407][T10012] loop1: detected capacity change from 0 to 32768 [ 329.615482][ T5919] kworker/u8:18: attempt to access beyond end of device [ 329.615482][ T5919] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.651788][T10012] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 329.842988][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.843017][ T5919] Tainted: [L]=SOFTLOCKUP [ 329.843024][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 329.843036][ T5919] Workqueue: writeback wb_workfn (flush-7:5) [ 329.843065][ T5919] Call Trace: [ 329.843072][ T5919] [ 329.843080][ T5919] dump_stack_lvl+0xe8/0x150 [ 329.843110][ T5919] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 329.843140][ T5919] f2fs_write_end_io+0x124b/0x1710 [ 329.843186][ T5919] __submit_merged_bio+0x258/0x6a0 [ 329.843209][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.843231][ T5919] ? rcu_is_watching+0x15/0xb0 [ 329.843254][ T5919] __submit_merged_write_cond+0x3c9/0x4e0 [ 329.843286][ T5919] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 329.843330][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.843359][ T5919] f2fs_write_data_pages+0x2a27/0x36f0 [ 329.843418][ T5919] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.843483][ T5919] ? ip6_output+0x337/0x540 [ 329.843509][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.843536][ T5919] ? ip6_finish_output2+0xb02/0x13c0 [ 329.843601][ T5919] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.843630][ T5919] do_writepages+0x338/0x560 [ 329.843663][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.843685][ T5919] ? reacquire_held_locks+0x104/0x190 [ 329.843703][ T5919] ? writeback_sb_inodes+0x450/0x1b00 [ 329.843735][ T5919] __writeback_single_inode+0x12e/0xf90 [ 329.843768][ T5919] writeback_sb_inodes+0x9de/0x1b00 [ 329.843792][ T5919] ? __lock_acquire+0x683/0x2cf0 [ 329.843824][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.843852][ T5919] ? do_raw_spin_unlock+0xf5/0x210 [ 329.843881][ T5919] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 329.843943][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.843964][ T5919] ? rcu_is_watching+0x15/0xb0 [ 329.843982][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844003][ T5919] ? queue_io+0x2d3/0x470 [ 329.844030][ T5919] wb_writeback+0x41c/0xad0 [ 329.844058][ T5919] ? queue_io+0x261/0x470 [ 329.844088][ T5919] ? __pfx_wb_writeback+0x10/0x10 [ 329.844111][ T5919] ? do_raw_spin_lock+0x12b/0x2f0 [ 329.844147][ T5919] wb_workfn+0x431/0x10f0 [ 329.844184][ T5919] ? __pfx_wb_workfn+0x10/0x10 [ 329.844204][ T5919] ? rcu_is_watching+0x15/0xb0 [ 329.844221][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844242][ T5919] ? trace_hrtimer_start+0x82/0x200 [ 329.844273][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844293][ T5919] ? do_raw_spin_lock+0x12b/0x2f0 [ 329.844321][ T5919] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.844346][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844370][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844398][ T5919] ? rcu_is_watching+0x15/0xb0 [ 329.844416][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844439][ T5919] ? process_scheduled_works+0xa20/0x14e0 [ 329.844462][ T5919] process_scheduled_works+0xa8e/0x14e0 [ 329.844509][ T5919] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.844537][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844558][ T5919] ? assign_work+0x3cf/0x5d0 [ 329.844585][ T5919] worker_thread+0xa47/0xfb0 [ 329.844610][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844640][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844662][ T5919] ? __kthread_parkme+0x71/0x1f0 [ 329.844696][ T5919] kthread+0x388/0x470 [ 329.844724][ T5919] ? __pfx_worker_thread+0x10/0x10 [ 329.844745][ T5919] ? __pfx_kthread+0x10/0x10 [ 329.844774][ T5919] ret_from_fork+0x514/0xb70 [ 329.844805][ T5919] ? __pfx_ret_from_fork+0x10/0x10 [ 329.844833][ T5919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.844854][ T5919] ? __switch_to+0xc89/0x1420 [ 329.844881][ T5919] ? __pfx_kthread+0x10/0x10 [ 329.844910][ T5919] ret_from_fork_asm+0x1a/0x30 [ 329.844943][ T5919] [ 330.608796][ T5919] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 330.638213][T10057] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 330.804291][T10012] XFS (loop1): Ending clean mount [ 331.170659][ T5628] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 331.684597][ T5769] loop5: lost filesystem error report for type 5 error -108 [ 331.765051][T10082] fuse: Bad value for 'fd' [ 333.278109][T10108] loop5: detected capacity change from 0 to 512 [ 333.473512][T10108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.613351][T10108] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.830042][T10108] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-8 [ 333.955765][T10108] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 334.042020][T10108] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1365: Failed to acquire dquot type 0 [ 334.426345][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.562710][T10164] loop0: detected capacity change from 0 to 1764 [ 335.614040][T10164] ISOFS: Logical zone size(512) < hardware blocksize(1024) [ 335.658528][ T5862] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 335.715207][ T31] audit: type=1326 audit(1785440284.049:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.2.1403" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe01b79e019 code=0x0 [ 335.898406][ T5862] usb 8-1: Using ep0 maxpacket: 32 [ 335.942839][ T5862] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 336.004694][ T5862] usb 8-1: config 0 has no interface number 0 [ 336.023169][T10175] netlink: 'syz.5.1406': attribute type 1 has an invalid length. [ 336.056850][ T5862] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.080582][T10175] netlink: 'syz.5.1406': attribute type 4 has an invalid length. [ 336.105207][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.124913][T10175] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1406'. [ 336.160301][ T5862] usb 8-1: Product: syz [ 336.182106][ T5862] usb 8-1: Manufacturer: syz [ 336.214276][ T5862] usb 8-1: SerialNumber: syz [ 336.282848][ T5862] usb 8-1: config 0 descriptor?? [ 336.710499][T10192] trusted_key: syz.2.1411 sent an empty control message without MSG_MORE. [ 337.561116][ T5862] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 337.650372][ T5862] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 337.713492][T10172] loop1: detected capacity change from 0 to 40427 [ 337.726822][ T5862] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 337.755301][ T5761] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 337.786001][T10208] netlink: 'syz.2.1416': attribute type 3 has an invalid length. [ 337.815318][ T5862] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 337.829326][T10172] F2FS-fs (loop1): invalid crc value [ 337.864434][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 337.924777][ T5862] usb 8-1: USB disconnect, device number 2 [ 337.992568][ T5761] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 338.078524][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.172309][ T5761] usb 1-1: Product: syz [ 338.203343][ T5761] usb 1-1: Manufacturer: syz [ 338.263487][ T5761] usb 1-1: SerialNumber: syz [ 338.313716][T10187] loop5: detected capacity change from 0 to 32768 [ 338.333280][ T5761] usb 1-1: config 0 descriptor?? [ 338.427307][ T5761] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 007 [ 338.436462][T10172] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 338.454344][T10187] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 338.631033][T10187] XFS (loop5): Ending clean mount [ 338.652858][T10172] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 338.743204][T10172] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 338.805537][ T5761] (null): failure reading functionality [ 338.867522][T10172] F2FS-fs (loop1): Start checkpoint disabled! [ 338.897624][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 338.972492][ T5761] i2c i2c-1: connected i2c-tiny-usb device [ 338.997939][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 339.070531][ T5761] usb 1-1: USB disconnect, device number 7 [ 339.090351][T10172] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 339.223871][ T5629] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 340.967473][T10252] loop7: detected capacity change from 0 to 131072 [ 341.014856][T10252] F2FS-fs (loop7): invalid crc value [ 341.072783][T10252] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 341.089907][T10252] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 341.483506][T10258] pim6reg1: entered promiscuous mode [ 341.549921][T10258] pim6reg1: entered allmulticast mode [ 341.919202][T10260] all: renamed from lo (while UP) [ 342.293212][T10268] netlink: 'syz.7.1432': attribute type 3 has an invalid length. [ 342.893241][T10286] ip6gretap1: entered allmulticast mode [ 343.685454][ T189] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 343.897341][ T189] usb 8-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice= 0.00 [ 343.962858][T10313] overlayfs: failed to clone upperpath [ 343.978347][ T189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.079356][ T189] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 344.224705][ T5761] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 344.682536][ T189] gspca_mr97310a: reg write [21] error -110 [ 344.707912][ T5761] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.738238][ T189] mr97310a 8-1:1.0: probe with driver mr97310a failed with error -110 [ 344.951661][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.003226][ T189] usb 8-1: USB disconnect, device number 3 [ 345.050013][ T5761] usb 1-1: config 0 descriptor?? [ 345.115559][ T5761] cp210x 1-1:0.0: cp210x converter detected [ 345.521219][ T5761] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 345.534188][T10325] xt_hashlimit: size too large, truncated to 1048576 [ 345.731013][ T5761] usb 1-1: cp210x converter now attached to ttyUSB0 [ 345.828343][ T5761] usb 1-1: USB disconnect, device number 8 [ 345.988243][ T5761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 346.124195][ T5761] cp210x 1-1:0.0: device disconnected [ 347.274122][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 348.454155][T10385] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 349.672262][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b23c400: rx timeout, send abort [ 349.680847][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b23c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 349.696969][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b23e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 349.971033][ T5761] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.130877][ T5761] usb 2-1: Using ep0 maxpacket: 8 [ 350.142951][ T5761] usb 2-1: config 0 has no interfaces? [ 350.155505][ T5761] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 350.173562][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.195399][ T5761] usb 2-1: Product: syz [ 350.205002][ T5761] usb 2-1: Manufacturer: syz [ 350.216592][ T5761] usb 2-1: SerialNumber: syz [ 350.232466][ T5761] usb 2-1: config 0 descriptor?? [ 350.279646][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.296943][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.311181][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.327438][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.335184][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.483471][ T5761] usb 2-1: USB disconnect, device number 11 [ 350.769267][T10439] overlayfs: failed to clone upperpath [ 350.978283][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ab25c00: rx timeout, send abort [ 350.986821][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ab25c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 351.001268][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c700400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 351.119538][ T5634] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 351.138652][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.138679][ T5634] Tainted: [L]=SOFTLOCKUP [ 351.138686][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 351.138699][ T5634] Workqueue: hci5 hci_rx_work [ 351.138724][ T5634] Call Trace: [ 351.138732][ T5634] [ 351.138740][ T5634] dump_stack_lvl+0xe8/0x150 [ 351.138770][ T5634] sysfs_create_dir_ns+0x271/0x2a0 [ 351.138800][ T5634] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 351.138830][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.138852][ T5634] ? do_raw_spin_unlock+0xf5/0x210 [ 351.138880][ T5634] kobject_add_internal+0x622/0xcd0 [ 351.138913][ T5634] kobject_add+0x163/0x240 [ 351.138940][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.138968][ T5634] ? __pfx_kobject_add+0x10/0x10 [ 351.138992][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139015][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139040][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139060][ T5634] ? get_device_parent+0x366/0x3a0 [ 351.139086][ T5634] device_add+0x3fa/0xb80 [ 351.139109][ T5634] hci_conn_add_sysfs+0xd5/0x210 [ 351.139134][ T5634] le_conn_complete_evt+0xfef/0x1580 [ 351.139171][ T5634] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 351.139199][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139220][ T5634] ? __mutex_unlock_slowpath+0x731/0x900 [ 351.139247][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139268][ T5634] ? skb_pull_data+0xf0/0x200 [ 351.139298][ T5634] hci_le_conn_complete_evt+0x187/0x470 [ 351.139338][ T5634] hci_event_packet+0x67a/0xf10 [ 351.139366][ T5634] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 351.139392][ T5634] ? __pfx_hci_event_packet+0x10/0x10 [ 351.139420][ T5634] ? replace_chunk+0x5c0/0xb80 [ 351.139443][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139464][ T5634] ? hci_send_to_monitor+0xe2/0x590 [ 351.139496][ T5634] hci_rx_work+0x3ee/0x1020 [ 351.139526][ T5634] ? process_scheduled_works+0xa20/0x14e0 [ 351.139549][ T5634] process_scheduled_works+0xa8e/0x14e0 [ 351.139597][ T5634] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.139625][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139646][ T5634] ? assign_work+0x3cf/0x5d0 [ 351.139676][ T5634] worker_thread+0xa47/0xfb0 [ 351.139724][ T5634] kthread+0x388/0x470 [ 351.139752][ T5634] ? __pfx_worker_thread+0x10/0x10 [ 351.139773][ T5634] ? __pfx_kthread+0x10/0x10 [ 351.139803][ T5634] ret_from_fork+0x514/0xb70 [ 351.139834][ T5634] ? __pfx_ret_from_fork+0x10/0x10 [ 351.139862][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.139883][ T5634] ? __switch_to+0xc89/0x1420 [ 351.139910][ T5634] ? __pfx_kthread+0x10/0x10 [ 351.139939][ T5634] ret_from_fork_asm+0x1a/0x30 [ 351.139972][ T5634] [ 351.712635][ T5634] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 351.739730][ T5634] Bluetooth: hci5: failed to register connection device [ 352.379921][ T5634] Bluetooth: hci0: command tx timeout [ 352.400854][ T5761] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 352.571807][T10479] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 352.649783][ T5761] usb 6-1: Using ep0 maxpacket: 16 [ 352.682993][ T5761] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 352.719334][ T5761] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 352.763849][T10479] CIFS: Attempting to mount //127.0.0.1/share [ 352.785842][ T5761] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 352.876993][ T5761] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 352.963548][ T5761] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.033376][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.081999][ T5761] usb 6-1: Product: syz [ 353.086978][T10489] loop7: detected capacity change from 0 to 128 [ 353.114258][ T5761] usb 6-1: Manufacturer: syz [ 353.147420][ T5761] usb 6-1: SerialNumber: syz [ 353.181765][T10489] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.255064][ T5761] usb 6-1: 0:2 : does not exist [ 353.279101][T10489] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.389979][T10479] CIFS: VFS: cifs_mount failed w/return code = -112 [ 353.455476][ T5761] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 353.613181][ T9446] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.885146][ T5761] usb 6-1: USB disconnect, device number 9 [ 353.957994][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1522'. [ 354.067246][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1522'. [ 354.335622][ T9272] udevd[9272]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.460563][ T5634] Bluetooth: hci0: command tx timeout [ 354.913942][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.960094][T10428] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.014327][T10428] bridge_slave_0: entered allmulticast mode [ 355.090146][T10428] bridge_slave_0: entered promiscuous mode [ 355.152779][T10428] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.207964][T10428] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.240944][T10428] bridge_slave_1: entered allmulticast mode [ 355.273437][T10428] bridge_slave_1: entered promiscuous mode [ 355.562219][T10428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.629531][T10547] loop7: detected capacity change from 0 to 16 [ 355.663224][T10428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.696385][T10547] erofs (device loop7): mounted with root inode @ nid 36. [ 355.768026][T10551] loop1: detected capacity change from 0 to 128 [ 355.845204][T10551] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.947000][T10551] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.052830][T10428] team0: Port device team_slave_0 added [ 356.110114][T10428] team0: Port device team_slave_1 added [ 356.333085][T10428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.401398][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.502241][ T5628] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.538617][ T5634] Bluetooth: hci0: command tx timeout [ 356.601294][T10428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.713806][T10428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.772585][T10428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.868406][T10428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.426705][T10428] hsr_slave_0: entered promiscuous mode [ 357.482060][T10428] hsr_slave_1: entered promiscuous mode [ 357.551982][T10428] debugfs: 'hsr0' already exists in 'hsr' [ 357.607871][T10428] Cannot create hsr debugfs directory [ 358.616742][ T5634] Bluetooth: hci0: command tx timeout [ 369.166122][ C0] sched: DL replenish lagged too much [ 377.919278][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.545285][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.012597][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 442.679574][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.230044][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 478.305485][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 511.102524][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.124700][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 522.131646][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10615/1:b..l [ 522.140161][ C0] rcu: (detected by 0, t=10502 jiffies, g=72621, q=1263 ncpus=1) [ 522.147958][ C0] task:syz.7.1566 state:R running task stack:26488 pid:10615 tgid:10614 ppid:9446 task_flags:0x400040 flags:0x00080002 [ 522.162189][ C0] Call Trace: [ 522.165447][ C0] [ 522.168363][ C0] __schedule+0x17d9/0x56c0 [ 522.172870][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.178507][ C0] ? __pfx___schedule+0x10/0x10 [ 522.183336][ C0] ? __lock_acquire+0x683/0x2cf0 [ 522.188281][ C0] preempt_schedule_irq+0x4d/0xa0 [ 522.193284][ C0] irqentry_exit+0x14f/0x8f0 [ 522.197854][ C0] ? trace_irq_disable+0x3b/0x140 [ 522.202867][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.208838][ C0] RIP: 0010:unwind_next_frame+0xb0/0x2550 [ 522.214539][ C0] Code: 35 00 4c 8d 2d 00 00 00 00 48 c7 c7 60 9c b5 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 24 31 2b 00 48 83 c4 08 eb 77 59 0a 85 c0 74 3a e8 62 5b 34 00 84 c0 75 31 e8 d9 77 59 [ 522.234221][ C0] RSP: 0018:ffffc90003d372c8 EFLAGS: 00000282 [ 522.240271][ C0] RAX: e285db8a95212200 RBX: ffffffff816e1b63 RCX: 0000000000000046 [ 522.248225][ C0] RDX: 00000000b058b254 RSI: ffffffff8e4b277d RDI: ffffffff8c4bdd80 [ 522.256174][ C0] RBP: 1ffff920007a6e80 R08: ffffffff8177927f R09: 0000000000000000 [ 522.264124][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 522.272076][ C0] R13: ffffffff8177927f R14: ffffc90003d373c8 R15: 1ffff920007a6e79 [ 522.280030][ C0] ? unwind_next_frame+0x8f/0x2550 [ 522.285125][ C0] ? arch_stack_walk+0xe3/0x150 [ 522.289965][ C0] ? unwind_next_frame+0x8f/0x2550 [ 522.295083][ C0] ? unwind_next_frame+0x8f/0x2550 [ 522.300200][ C0] ? __unwind_start+0xed/0x660 [ 522.304946][ C0] ? unwind_next_frame+0x8f/0x2550 [ 522.310059][ C0] __unwind_start+0x514/0x660 [ 522.314721][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 522.320860][ C0] arch_stack_walk+0xe3/0x150 [ 522.325523][ C0] ? arch_stack_walk+0xe3/0x150 [ 522.330359][ C0] stack_trace_save+0xa9/0x100 [ 522.335135][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 522.340494][ C0] ? __lock_acquire+0x683/0x2cf0 [ 522.345434][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.351060][ C0] save_stack+0x122/0x230 [ 522.355390][ C0] ? __pfx_save_stack+0x10/0x10 [ 522.360399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.366109][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.371727][ C0] ? page_ext_put+0x97/0xc0 [ 522.376224][ C0] __reset_page_owner+0x71/0x1f0 [ 522.381171][ C0] __free_frozen_pages+0xc1e/0xd10 [ 522.386285][ C0] ? __free_slab+0x172/0x280 [ 522.390871][ C0] __slab_free+0x274/0x2c0 [ 522.395293][ C0] ? qlist_free_all+0x8e/0x100 [ 522.400055][ C0] qlist_free_all+0x99/0x100 [ 522.404661][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 522.409699][ C0] kasan_quarantine_reduce+0x148/0x160 [ 522.415172][ C0] __kasan_kmalloc+0x22/0xb0 [ 522.419771][ C0] __kmalloc_noprof+0x375/0x720 [ 522.424611][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 522.429635][ C0] ? tomoyo_encode+0x2ad/0x570 [ 522.434385][ C0] ? tomoyo_encode+0x2ad/0x570 [ 522.439157][ C0] tomoyo_encode+0x2ad/0x570 [ 522.443737][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 522.449364][ C0] ? tomoyo_path2_perm+0x299/0x760 [ 522.454457][ C0] tomoyo_path2_perm+0x2c5/0x760 [ 522.459398][ C0] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 522.464847][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.470465][ C0] ? __asan_memset+0x22/0x50 [ 522.475039][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.480663][ C0] ? current_check_refer_path+0x402/0x11f0 [ 522.486459][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.492081][ C0] ? __lock_acquire+0x683/0x2cf0 [ 522.497039][ C0] tomoyo_path_rename+0x14e/0x1b0 [ 522.502080][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.507702][ C0] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 522.513238][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 522.518355][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.523988][ C0] ? _raw_spin_unlock+0x28/0x50 [ 522.528817][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.534437][ C0] security_path_rename+0x248/0x460 [ 522.539626][ C0] filename_renameat2+0x4ba/0x9a0 [ 522.544637][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.550263][ C0] ? __pfx_filename_renameat2+0x10/0x10 [ 522.555801][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.561438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.567054][ C0] ? do_getname+0x151/0x250 [ 522.571565][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.577631][ C0] __se_sys_rename+0x55/0x2c0 [ 522.582302][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.588361][ C0] do_syscall_64+0x174/0x580 [ 522.592942][ C0] ? trace_irq_disable+0x3b/0x140 [ 522.597960][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.603836][ C0] RIP: 0033:0x7f17ffd9e019 [ 522.608233][ C0] RSP: 002b:00007f1800b9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 522.616629][ C0] RAX: ffffffffffffffda RBX: 00007f1800025fa0 RCX: 00007f17ffd9e019 [ 522.624610][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000100 [ 522.632560][ C0] RBP: 00007f17ffe3500c R08: 0000000000000000 R09: 0000000000000000 [ 522.640531][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.648481][ C0] R13: 00007f1800026038 R14: 00007f1800025fa0 R15: 00007ffd9dd251d8 [ 522.656450][ C0] [ 522.659451][ C0] rcu: rcu_preempt kthread starved for 397 jiffies! g72621 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 522.670448][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 522.680394][ C0] rcu: RCU grace-period kthread stack dump: [ 522.686257][ C0] task:rcu_preempt state:R running task stack:28192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 522.699737][ C0] Call Trace: [ 522.702992][ C0] [ 522.705925][ C0] __schedule+0x17d9/0x56c0 [ 522.710415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.716031][ C0] ? __lock_acquire+0x683/0x2cf0 [ 522.720973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.726600][ C0] ? __pfx___schedule+0x10/0x10 [ 522.731437][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.737054][ C0] ? schedule+0x90/0x2b0 [ 522.741287][ C0] schedule+0x164/0x2b0 [ 522.745429][ C0] schedule_timeout+0x152/0x2c0 [ 522.750273][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 522.755643][ C0] ? __pfx_process_timeout+0x10/0x10 [ 522.760917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.766618][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 522.772426][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.778042][ C0] ? prepare_to_swait_event+0x322/0x350 [ 522.783585][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 522.788426][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.794058][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 522.799247][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 522.805036][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.810659][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.816277][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 522.822425][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 522.827695][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 522.832878][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 522.838668][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 522.843247][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 522.848434][ C0] ? __kthread_parkme+0x71/0x1f0 [ 522.853361][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.858975][ C0] ? __kthread_parkme+0x196/0x1f0 [ 522.863989][ C0] kthread+0x388/0x470 [ 522.868059][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 522.873252][ C0] ? __pfx_kthread+0x10/0x10 [ 522.878531][ C0] ret_from_fork+0x514/0xb70 [ 522.883115][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 522.888215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.893830][ C0] ? __switch_to+0xc89/0x1420 [ 522.898514][ C0] ? __pfx_kthread+0x10/0x10 [ 522.903095][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.907854][ C0] [ 522.910851][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 522.917171][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 522.928433][ C0] Tainted: [L]=SOFTLOCKUP [ 522.932732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.942765][ C0] Workqueue: bat_events batadv_tt_purge [ 522.948326][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 522.953679][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 fc bc 88 00 48 c7 c3 d8 58 6e 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d b9 31 c1 11 74 11 83 e0 04 c1 e8 02 5b [ 522.973264][ C0] RSP: 0018:ffffc90000006d38 EFLAGS: 00000216 [ 522.979311][ C0] RAX: 0000000000000000 RBX: ffff8880b86338d8 RCX: 0000000080000102 [ 522.987281][ C0] RDX: ffffc90000006e01 RSI: ffffffff8c4bdd60 RDI: ffffffff8c4bdd20 [ 522.995237][ C0] RBP: 1ffffffff22f9b01 R08: ffffc900000079b0 R09: ffffc90000006eb8 [ 523.003187][ C0] R10: dffffc0000000000 R11: fffff52000000dd9 R12: ffffc90000000000 [ 523.011140][ C0] R13: ffffffff8177927f R14: ffffffff8e4fb7d0 R15: dffffc0000000000 [ 523.019096][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 523.028001][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.034578][ C0] CR2: 00007f1dc0ff9d60 CR3: 00000000278e8000 CR4: 0000000000350ef0 [ 523.042547][ C0] Call Trace: [ 523.045807][ C0] [ 523.048635][ C0] lock_release+0x4b/0x3c0 [ 523.053064][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.058682][ C0] ? deref_stack_reg+0x18e/0x220 [ 523.063602][ C0] ? unwind_next_frame+0x8f/0x2550 [ 523.068698][ C0] unwind_next_frame+0x1baa/0x2550 [ 523.073797][ C0] ? nf_hook_slow+0xc5/0x220 [ 523.078374][ C0] ? unwind_next_frame+0x8f/0x2550 [ 523.083470][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 523.089611][ C0] arch_stack_walk+0x11b/0x150 [ 523.094364][ C0] ? NF_HOOK+0x21f/0x3c0 [ 523.098590][ C0] stack_trace_save+0xa9/0x100 [ 523.103340][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 523.108699][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.114331][ C0] ? stack_depot_save_flags+0x33/0x800 [ 523.119783][ C0] kasan_save_track+0x3e/0x80 [ 523.124446][ C0] ? kasan_save_track+0x3e/0x80 [ 523.129282][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 523.134292][ C0] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 523.140341][ C0] ? __alloc_skb+0x276/0x7a0 [ 523.144908][ C0] ? synproxy_send_client_synack_ipv6+0x16e/0xcd0 [ 523.151309][ C0] ? nft_synproxy_eval_v6+0x362/0x4e0 [ 523.156669][ C0] ? nft_synproxy_do_eval+0x3d1/0x550 [ 523.162047][ C0] ? nft_do_chain+0x48d/0x1b10 [ 523.166789][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 523.171892][ C0] ? nf_hook_slow+0xc5/0x220 [ 523.176509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.182137][ C0] __kasan_slab_alloc+0x6c/0x80 [ 523.186974][ C0] ? kmem_cache_alloc_node_noprof+0x131/0x610 [ 523.193033][ C0] kmem_cache_alloc_node_noprof+0x355/0x610 [ 523.198914][ C0] ? local_lock_release+0x9c/0x160 [ 523.204011][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 523.210079][ C0] ? __alloc_skb+0x276/0x7a0 [ 523.214648][ C0] ? __alloc_skb+0x276/0x7a0 [ 523.219240][ C0] __alloc_skb+0x276/0x7a0 [ 523.223642][ C0] synproxy_send_client_synack_ipv6+0x16e/0xcd0 [ 523.229875][ C0] ? lock_acquire+0x106/0x350 [ 523.234544][ C0] ? synproxy_pernet+0x45/0x270 [ 523.239384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.245002][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 523.251751][ C0] ? nft_xfrm_get_dump+0x140/0x2a0 [ 523.256851][ C0] ? synproxy_pernet+0x45/0x270 [ 523.261692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.267337][ C0] nft_synproxy_eval_v6+0x362/0x4e0 [ 523.272619][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 523.278356][ C0] ? nf_ip_checksum+0x13c/0x510 [ 523.283209][ C0] nft_synproxy_do_eval+0x3d1/0x550 [ 523.288404][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.294025][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 523.299747][ C0] ? nft_trace_init+0x280/0x4d0 [ 523.304671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.310307][ C0] ? __lock_acquire+0x683/0x2cf0 [ 523.315259][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.320881][ C0] nft_do_chain+0x48d/0x1b10 [ 523.325455][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.331078][ C0] ? lock_acquire+0x106/0x350 [ 523.335764][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.341398][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 523.346436][ C0] nft_do_chain_inet+0x360/0x4b0 [ 523.351367][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 523.356832][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 523.362195][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 523.367898][ C0] ? lock_acquire+0x106/0x350 [ 523.372581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.378204][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 523.383743][ C0] nf_hook_slow+0xc5/0x220 [ 523.388153][ C0] NF_HOOK+0x21f/0x3c0 [ 523.392212][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 523.397563][ C0] ? NF_HOOK+0x9e/0x3c0 [ 523.401701][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 523.406274][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 523.411632][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.417268][ C0] ip6_input+0x16a/0x270 [ 523.421490][ C0] ? ip6_input+0x23/0x270 [ 523.425801][ C0] NF_HOOK+0x336/0x3c0 [ 523.429854][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 523.435030][ C0] ? NF_HOOK+0x9e/0x3c0 [ 523.439179][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 523.443769][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 523.448952][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.454574][ C0] process_backlog+0x774/0x1860 [ 523.459420][ C0] ? process_backlog+0x3c3/0x1860 [ 523.464448][ C0] __napi_poll+0xaa/0x330 [ 523.468773][ C0] net_rx_action+0x61d/0xf50 [ 523.473355][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 523.478471][ C0] handle_softirqs+0x225/0x840 [ 523.483222][ C0] ? do_softirq+0x76/0xd0 [ 523.487539][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 523.493006][ C0] do_softirq+0x76/0xd0 [ 523.497164][ C0] [ 523.500073][ C0] [ 523.502981][ C0] __local_bh_enable_ip+0xf8/0x130 [ 523.508078][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 523.513380][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 523.519085][ C0] batadv_tt_purge+0x35/0xa10 [ 523.523754][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.529374][ C0] ? rcu_is_watching+0x15/0xb0 [ 523.534145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.539782][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 523.545488][ C0] process_scheduled_works+0xa8e/0x14e0 [ 523.551046][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 523.557011][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 523.562023][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.567643][ C0] ? assign_work+0x3af/0x5d0 [ 523.572226][ C0] rescuer_thread+0x7b6/0x10b0 [ 523.576987][ C0] ? rescuer_thread+0xb8/0x10b0 [ 523.581843][ C0] kthread+0x388/0x470 [ 523.585902][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 523.591085][ C0] ? __pfx_kthread+0x10/0x10 [ 523.595665][ C0] ret_from_fork+0x514/0xb70 [ 523.600249][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 523.605355][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.610968][ C0] ? __switch_to+0xc89/0x1420 [ 523.615634][ C0] ? __pfx_kthread+0x10/0x10 [ 523.620226][ C0] ret_from_fork_asm+0x1a/0x30 [ 523.624986][ C0]