last executing test programs: 6m30.809252798s ago: executing program 0 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 4', 0x1b) 6m30.616037843s ago: executing program 0 (id=603): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m30.462896006s ago: executing program 0 (id=605): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) 6m30.267533411s ago: executing program 0 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 6m30.115320085s ago: executing program 0 (id=610): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6m29.526317889s ago: executing program 0 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m29.05318897s ago: executing program 32 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5m3.018741415s ago: executing program 1 (id=1267): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000000200)=ANY=[], 0x2, 0xf27, &(0x7f0000001e80)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 5m2.469672848s ago: executing program 1 (id=1274): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x5c, 0xa, 0x3, 0x8, 0x4, {0x40, 0x7, 0x1, 0x66}, 0x0, 0x0}}) 4m59.263990825s ago: executing program 1 (id=1309): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61f0, 0x0) 4m59.05980714s ago: executing program 1 (id=1311): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 4m58.531511183s ago: executing program 1 (id=1313): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2e, 0x3fe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) 4m57.389097221s ago: executing program 1 (id=1319): syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m56.838721034s ago: executing program 33 (id=1319): syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m34.402445072s ago: executing program 5 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x52}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 4m33.980471023s ago: executing program 5 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 4m33.483501144s ago: executing program 5 (id=1467): mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r0, &(0x7f0000000800)='file ?evio.* +', 0xe) pipe2(0x0, 0x4800) 4m31.373400165s ago: executing program 5 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x33e7cc3, 0x0) 4m31.249251698s ago: executing program 5 (id=1471): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) 4m30.643700942s ago: executing program 5 (id=1474): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) 4m30.154796914s ago: executing program 34 (id=1474): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) 2m17.30299245s ago: executing program 4 (id=2284): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) close(r0) 2m17.036526487s ago: executing program 4 (id=2286): close(0x3) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r0, @ANYRES8=r0], 0x0) 2m15.355017877s ago: executing program 4 (id=2294): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) shmctl$IPC_INFO(0x0, 0x3, 0xfffffffffffffffe) 2m14.771758611s ago: executing program 4 (id=2296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@sysvgroups}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m13.734878096s ago: executing program 4 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) 2m13.011762333s ago: executing program 4 (id=2303): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2m12.241649862s ago: executing program 35 (id=2303): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m23.695721365s ago: executing program 7 (id=2568): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) 1m23.05728543s ago: executing program 7 (id=2573): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x3, 0x40000cca8, 0x10000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) 1m22.609769621s ago: executing program 7 (id=2577): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000d80)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 1m21.939613597s ago: executing program 7 (id=2581): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f0000005800)={[{@noheap}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@gc_merge}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x553a, &(0x7f000000ae00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0xa, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m20.875193253s ago: executing program 7 (id=2586): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x1, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1m19.30721986s ago: executing program 7 (id=2597): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1m18.867572601s ago: executing program 36 (id=2597): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 11.667371511s ago: executing program 2 (id=2974): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x409d132, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) getgroups(0x4, 0x0) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) 11.540396534s ago: executing program 2 (id=2967): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000050025bf7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000033f2000034001a00200002800c0001"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20048080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 10.993642987s ago: executing program 2 (id=2969): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0xfffffffe, 0x1e0def}) 10.417792481s ago: executing program 2 (id=2980): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 9.817238215s ago: executing program 2 (id=2975): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@sysvgroups}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 9.146585741s ago: executing program 2 (id=2981): syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000cc0)={[{@shortname_winnt}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_mixed}, {@shortname_winnt}, {@numtail}, {@shortname_lower}, {@fat=@gid}, {@rodir}, {@rodir}, {@utf8no}, {@fat=@flush}]}, 0x2d, 0x33e, &(0x7f0000000480)="$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") timer_create(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000071000/0x2000)=nil, 0x2000, 0x3000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 5.4325511s ago: executing program 8 (id=2999): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0xf0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) 4.424030874s ago: executing program 3 (id=3005): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000140)={0x6, 0x3, 0x4, 0x6}) 4.415045845s ago: executing program 8 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 4.20933965s ago: executing program 8 (id=3006): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 4.093313932s ago: executing program 6 (id=3007): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.049262027s ago: executing program 8 (id=3008): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f000000f080)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101142, 0xeaff) r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000000)={0x50d000, 0x0, '\x00', 0x1, 0x0}) 3.048457127s ago: executing program 6 (id=3009): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.231939647s ago: executing program 3 (id=3010): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18000, &(0x7f0000000280)={[{@barrier}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@norecovery}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) 2.225292247s ago: executing program 6 (id=3018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x800000080000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.807961007s ago: executing program 6 (id=3012): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x10, 0x1237, 0x7, 0x6, 0xb, "67d45605ec13922b"}) 1.222410561s ago: executing program 3 (id=3013): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x8) 1.215471691s ago: executing program 6 (id=3021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) 834.20326ms ago: executing program 3 (id=3014): r0 = epoll_create1(0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, r1, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0xa000201f}) 829.31868ms ago: executing program 8 (id=3015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0xffff}]}) 709.474123ms ago: executing program 6 (id=3016): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 564.939567ms ago: executing program 3 (id=3017): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@generic={0x1e, "5494d1bec2517fc3cdc4c7716eba63da18957a992bb7b28be7c38081013483c3fc9942edf9c16cd4450445067f6ea6dec989dc4322fd860feb0c41032c06cd4e75302f6b2fa56af011fc47e13e88d015ac52e46c56e480e1f53c7013d866f858c0459552e9ee12aa0f6038844ed10ad4a80a8c0f027b63c2279e8754d615"}, 0x80, 0x0, 0x0, &(0x7f0000007680)=ANY=[], 0x14f8}}], 0x2, 0x9200000000000000) 188.294056ms ago: executing program 3 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) 0s ago: executing program 8 (id=3020): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) kernel console output (not intermixed with test programs): 21366][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 452.133731][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 452.169069][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.197272][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 452.237458][ T23] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 452.271470][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.279568][ T23] usb 7-1: Product: syz [ 452.311534][ T23] usb 7-1: Manufacturer: syz [ 452.316332][ T23] usb 7-1: SerialNumber: syz [ 452.327447][T13472] loop7: detected capacity change from 0 to 512 [ 452.358149][ T23] usb 7-1: config 0 descriptor?? [ 452.437985][T13472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.482195][T13472] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.543065][T13472] EXT4-fs warning (device loop7): verify_group_input:169: Last group not full [ 452.635832][ T23] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 452.768204][T12801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.873651][T13460] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 452.944785][ T23] usb 7-1: USB disconnect, device number 10 [ 453.212215][T13489] loop2: detected capacity change from 0 to 128 [ 453.263734][T13489] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 453.383921][T13496] loop3: detected capacity change from 0 to 128 [ 453.503950][T13498] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 453.654710][T13496] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 453.685170][T13496] FAT-fs (loop3): Filesystem has been set read-only [ 453.711501][T13496] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 453.733089][ T5792] Bluetooth: hci2: command tx timeout [ 454.390453][T13523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 455.183989][ T5855] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 455.241624][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 455.392377][ T5855] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 455.411973][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.425907][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.441216][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.461097][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.472958][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.489433][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.505186][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.521228][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.532958][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.560413][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.568656][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.582936][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.602950][ T9] usb 7-1: config 0 descriptor?? [ 455.611313][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.651697][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.682349][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.692246][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.720149][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.729701][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.761406][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.811371][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.833001][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.861316][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.901209][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.922911][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.951327][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.992732][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 456.001823][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.031286][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.071286][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 456.105306][ T9] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 456.121779][ T5855] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 456.141703][ T5855] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 456.167678][ T5855] usb 4-1: Product: syz [ 456.174968][ T9] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 456.201578][ T5855] usb 4-1: Manufacturer: syz [ 456.207900][ T5855] usb 4-1: SerialNumber: syz [ 456.237749][ T5855] usb 4-1: config 0 descriptor?? [ 456.290363][ T5855] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 456.541731][ T28] usb 4-1: USB disconnect, device number 21 [ 457.421822][ C1] plantronics 0003:047F:FFFF.0019: usb_submit_urb(ctrl) failed: -1 [ 457.448071][ T28] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 457.646999][T13598] macvlan0: entered promiscuous mode [ 457.982317][T13607] ªªªªªª: renamed from vlan0 (while UP) [ 458.451400][T13623] loop3: detected capacity change from 0 to 128 [ 458.531590][ T5766] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 458.566961][T13623] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.581072][ T5766] usb 7-1: device reset changed ep0 maxpacket size! [ 458.605499][ T23] usb 7-1: USB disconnect, device number 11 [ 458.612311][T13623] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.837989][ T9862] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.842930][ T23] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 458.997279][T13641] FAULT_INJECTION: forcing a failure. [ 458.997279][T13641] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 459.011100][T13641] CPU: 0 PID: 13641 Comm: syz.3.2504 Not tainted syzkaller #0 [ 459.018654][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.028890][T13641] Call Trace: [ 459.032227][T13641] [ 459.035208][T13641] dump_stack_lvl+0x18c/0x250 [ 459.039980][T13641] ? show_regs_print_info+0x20/0x20 [ 459.045271][T13641] ? load_image+0x420/0x420 [ 459.049865][T13641] ? __lock_acquire+0x7d80/0x7d80 [ 459.054971][T13641] should_fail_ex+0x394/0x4c0 [ 459.059722][T13641] prepare_alloc_pages+0x1e1/0x5b0 [ 459.064910][T13641] __alloc_pages+0x134/0x460 [ 459.069576][T13641] ? zone_statistics+0x170/0x170 [ 459.074600][T13641] ? alloc_pages+0x4e1/0x740 [ 459.079292][T13641] ? do_raw_spin_unlock+0x121/0x230 [ 459.084572][T13641] __get_free_pages+0xc/0x30 [ 459.089224][T13641] kasan_populate_vmalloc_pte+0x35/0x100 [ 459.094936][T13641] __apply_to_page_range+0x860/0xdd0 [ 459.100309][T13641] ? kasan_populate_vmalloc+0x70/0x70 [ 459.101790][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 459.105738][T13641] ? apply_to_page_range+0x50/0x50 [ 459.105771][T13641] ? do_raw_spin_unlock+0x121/0x230 [ 459.121383][T13641] alloc_vmap_area+0x1d26/0x1e50 [ 459.126429][T13641] ? vm_map_ram+0xcf0/0xcf0 [ 459.131014][T13641] ? rcu_is_watching+0x15/0xb0 [ 459.135857][T13641] __get_vm_area_node+0x162/0x370 [ 459.141053][T13641] __vmalloc_node_range+0x36f/0x1320 [ 459.146414][T13641] ? htab_map_alloc+0x3d7/0xeb0 [ 459.151373][T13641] ? _raw_spin_unlock+0x40/0x40 [ 459.156349][T13641] ? pcpu_alloc+0x11e7/0x1880 [ 459.161194][T13641] ? free_vm_area+0x50/0x50 [ 459.165799][T13641] bpf_map_area_alloc+0xf1/0x110 [ 459.170831][T13641] ? htab_map_alloc+0x3d7/0xeb0 [ 459.175841][T13641] htab_map_alloc+0x3d7/0xeb0 [ 459.180596][T13641] ? htab_map_alloc_check+0x350/0x440 [ 459.186085][T13641] map_create+0x877/0x12f0 [ 459.190665][T13641] __sys_bpf+0x651/0x890 [ 459.195080][T13641] ? bpf_link_show_fdinfo+0x390/0x390 [ 459.200662][T13641] ? lock_chain_count+0x20/0x20 [ 459.205631][T13641] __x64_sys_bpf+0x7c/0x90 [ 459.210479][T13641] do_syscall_64+0x55/0xb0 [ 459.214985][T13641] ? clear_bhb_loop+0x40/0x90 [ 459.219739][T13641] ? clear_bhb_loop+0x40/0x90 [ 459.224507][T13641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.230476][T13641] RIP: 0033:0x7f26f479e159 [ 459.234969][T13641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.255400][T13641] RSP: 002b:00007f26f5649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.263887][T13641] RAX: ffffffffffffffda RBX: 00007f26f4a25fa0 RCX: 00007f26f479e159 [ 459.272110][T13641] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 459.280344][T13641] RBP: 00007f26f4835024 R08: 0000000000000000 R09: 0000000000000000 [ 459.288379][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.296432][T13641] R13: 00007f26f4a26038 R14: 00007f26f4a25fa0 R15: 00007ffda61058c8 [ 459.304508][T13641] [ 459.340419][ T23] usb 7-1: config 0 has no interfaces? [ 459.378626][ T23] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 459.398105][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.429777][ T23] usb 7-1: Product: syz [ 459.434378][ T23] usb 7-1: Manufacturer: syz [ 459.439140][ T23] usb 7-1: SerialNumber: syz [ 459.464104][ T23] usb 7-1: config 0 descriptor?? [ 459.733261][ T5855] usb 7-1: USB disconnect, device number 12 [ 459.934256][T13615] binder: 13613:13615 ioctl 4018620d 0 returned -22 [ 459.950263][T13636] loop2: detected capacity change from 0 to 40427 [ 459.961101][T13615] binder: 13613:13615 ioctl 80085502 7f232c9f4fe0 returned -22 [ 459.971043][T13636] F2FS-fs (loop2): invalid crc value [ 460.016425][T13636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 460.187489][T13636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 460.249200][T10488] kworker/u4:26: attempt to access beyond end of device [ 460.249200][T10488] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 460.279067][T10488] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 461.042945][T13661] futex_wake_op: syz.6.2511 tries to shift op by -1; fix this program [ 461.192660][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 461.234677][T13659] loop7: detected capacity change from 0 to 65536 [ 461.290221][T13659] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 461.327205][T13659] XFS (loop7): Ending clean mount [ 461.339829][T13659] XFS (loop7): Quotacheck needed: Please wait. [ 461.481746][T13659] XFS (loop7): Quotacheck: Done. [ 461.616763][T13676] loop3: detected capacity change from 0 to 256 [ 461.713214][T13676] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 461.949003][T12801] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 462.288045][T13686] loop6: detected capacity change from 0 to 512 [ 462.351374][T13686] EXT4-fs (loop6): Test dummy encryption mode enabled [ 462.446696][T13686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.847579][ T9957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.518152][T13710] loop3: detected capacity change from 0 to 8192 [ 463.579090][T13710] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 463.611796][T13710] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 463.665290][T13710] REISERFS (device loop3): using ordered data mode [ 463.716758][T13710] reiserfs: using flush barriers [ 463.752205][T13710] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 463.803960][T13710] REISERFS (device loop3): checking transaction log (loop3) [ 464.088872][T13710] REISERFS (device loop3): Using tea hash to sort names [ 464.110683][T13710] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 464.345527][T13738] loop7: detected capacity change from 0 to 2048 [ 464.376171][T13738] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 464.431722][T13738] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 464.464727][T13738] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 464.500940][T13738] UDF-fs: Scanning with blocksize 512 failed [ 464.528598][T13740] binder: 13739:13740 ioctl 4018620d 0 returned -22 [ 464.564812][T13738] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 464.674639][T13738] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 464.755148][T13738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.033538][T13751] FAULT_INJECTION: forcing a failure. [ 465.033538][T13751] name failslab, interval 1, probability 1, space 0, times 0 [ 465.047961][T13751] CPU: 1 PID: 13751 Comm: syz.6.2544 Not tainted syzkaller #0 [ 465.055507][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.066581][T13751] Call Trace: [ 465.070023][T13751] [ 465.073013][T13751] dump_stack_lvl+0x18c/0x250 [ 465.077769][T13751] ? show_regs_print_info+0x20/0x20 [ 465.083039][T13751] ? load_image+0x420/0x420 [ 465.087719][T13751] ? __lock_acquire+0x7d80/0x7d80 [ 465.092827][T13751] should_fail_ex+0x394/0x4c0 [ 465.097589][T13751] should_failslab+0x9/0x20 [ 465.102170][T13751] slab_pre_alloc_hook+0x59/0x300 [ 465.107268][T13751] ? __vmalloc_node_range+0x598/0x1320 [ 465.112806][T13751] ? __vmalloc_node_range+0x598/0x1320 [ 465.118346][T13751] __kmem_cache_alloc_node+0x53/0x250 [ 465.123812][T13751] ? __vmalloc_node_range+0x598/0x1320 [ 465.129461][T13751] __kmalloc_node+0xa6/0x240 [ 465.134148][T13751] __vmalloc_node_range+0x598/0x1320 [ 465.139545][T13751] ? free_vm_area+0x50/0x50 [ 465.144133][T13751] ? arch_dup_task_struct+0x57/0xd0 [ 465.149398][T13751] ? __asan_memcpy+0x40/0x70 [ 465.154064][T13751] dup_task_struct+0x3c8/0x800 [ 465.158899][T13751] ? copy_process+0x5a6/0x3da0 [ 465.163742][T13751] ? lockdep_hardirqs_on+0x98/0x150 [ 465.169079][T13751] copy_process+0x5a6/0x3da0 [ 465.173747][T13751] ? preempt_schedule+0xc0/0xd0 [ 465.178715][T13751] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 465.184672][T13751] ? _raw_spin_unlock+0x40/0x40 [ 465.189578][T13751] ? preempt_schedule_thunk+0x1a/0x30 [ 465.195031][T13751] ? try_to_wake_up+0x6f5/0x10e0 [ 465.200034][T13751] ? __pidfd_prepare+0x140/0x140 [ 465.205067][T13751] ? wake_up_q+0xca/0x100 [ 465.209588][T13751] kernel_clone+0x24b/0x8a0 [ 465.214193][T13751] ? futex_wake_mark+0x150/0x150 [ 465.219213][T13751] ? create_io_thread+0x190/0x190 [ 465.224320][T13751] ? do_futex+0x35d/0x3e0 [ 465.228708][T13751] __x64_sys_clone+0x1b7/0x230 [ 465.233541][T13751] ? __ia32_sys_vfork+0x140/0x140 [ 465.239092][T13751] ? lock_chain_count+0x20/0x20 [ 465.244015][T13751] ? lockdep_hardirqs_on+0x98/0x150 [ 465.249281][T13751] do_syscall_64+0x55/0xb0 [ 465.253784][T13751] ? clear_bhb_loop+0x40/0x90 [ 465.258523][T13751] ? clear_bhb_loop+0x40/0x90 [ 465.263260][T13751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.269208][T13751] RIP: 0033:0x7f232e79e159 [ 465.273677][T13751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.293613][T13751] RSP: 002b:00007f232c9f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 465.302271][T13751] RAX: ffffffffffffffda RBX: 00007f232ea25fa0 RCX: 00007f232e79e159 [ 465.310316][T13751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 465.318359][T13751] RBP: 00007f232e835024 R08: 0000000000000000 R09: 0000000000000000 [ 465.326453][T13751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 465.334483][T13751] R13: 00007f232ea26038 R14: 00007f232ea25fa0 R15: 00007ffe764d60c8 [ 465.342536][T13751] [ 465.377225][T13755] loop2: detected capacity change from 0 to 1024 [ 465.392012][T13751] syz.6.2544: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 465.410658][T13751] CPU: 1 PID: 13751 Comm: syz.6.2544 Not tainted syzkaller #0 [ 465.418246][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.428831][T13751] Call Trace: [ 465.432166][T13751] [ 465.435154][T13751] dump_stack_lvl+0x18c/0x250 [ 465.439992][T13751] ? show_regs_print_info+0x20/0x20 [ 465.445284][T13751] ? load_image+0x420/0x420 [ 465.449911][T13751] ? __rcu_read_unlock+0x7c/0xd0 [ 465.454917][T13751] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 465.461409][T13751] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 465.467989][T13751] warn_alloc+0x246/0x340 [ 465.472436][T13751] ? zone_watermark_ok_safe+0x230/0x230 [ 465.478082][T13751] ? __vmalloc_node_range+0x598/0x1320 [ 465.483616][T13751] ? __vmalloc_node_range+0x598/0x1320 [ 465.489141][T13751] ? rcu_is_watching+0x15/0xb0 [ 465.493948][T13751] ? __vmalloc_node_range+0x598/0x1320 [ 465.499445][T13751] ? __kmalloc_node+0xe4/0x240 [ 465.504252][T13751] __vmalloc_node_range+0x661/0x1320 [ 465.509594][T13751] ? free_vm_area+0x50/0x50 [ 465.514135][T13751] ? arch_dup_task_struct+0x57/0xd0 [ 465.519461][T13751] ? __asan_memcpy+0x40/0x70 [ 465.524118][T13751] dup_task_struct+0x3c8/0x800 [ 465.528916][T13751] ? copy_process+0x5a6/0x3da0 [ 465.533707][T13751] ? lockdep_hardirqs_on+0x98/0x150 [ 465.538976][T13751] copy_process+0x5a6/0x3da0 [ 465.543624][T13751] ? preempt_schedule+0xc0/0xd0 [ 465.548543][T13751] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 465.554473][T13751] ? _raw_spin_unlock+0x40/0x40 [ 465.559360][T13751] ? preempt_schedule_thunk+0x1a/0x30 [ 465.564769][T13751] ? try_to_wake_up+0x6f5/0x10e0 [ 465.569744][T13751] ? __pidfd_prepare+0x140/0x140 [ 465.574717][T13751] ? wake_up_q+0xca/0x100 [ 465.579089][T13751] kernel_clone+0x24b/0x8a0 [ 465.583627][T13751] ? futex_wake_mark+0x150/0x150 [ 465.588600][T13751] ? create_io_thread+0x190/0x190 [ 465.593668][T13751] ? do_futex+0x35d/0x3e0 [ 465.598199][T13751] __x64_sys_clone+0x1b7/0x230 [ 465.603050][T13751] ? __ia32_sys_vfork+0x140/0x140 [ 465.608148][T13751] ? lock_chain_count+0x20/0x20 [ 465.613054][T13751] ? lockdep_hardirqs_on+0x98/0x150 [ 465.618303][T13751] do_syscall_64+0x55/0xb0 [ 465.622771][T13751] ? clear_bhb_loop+0x40/0x90 [ 465.627515][T13751] ? clear_bhb_loop+0x40/0x90 [ 465.632230][T13751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.638157][T13751] RIP: 0033:0x7f232e79e159 [ 465.642606][T13751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.662339][T13751] RSP: 002b:00007f232c9f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 465.670880][T13751] RAX: ffffffffffffffda RBX: 00007f232ea25fa0 RCX: 00007f232e79e159 [ 465.678965][T13751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 465.687138][T13751] RBP: 00007f232e835024 R08: 0000000000000000 R09: 0000000000000000 [ 465.695139][T13751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 465.703134][T13751] R13: 00007f232ea26038 R14: 00007f232ea25fa0 R15: 00007ffe764d60c8 [ 465.711157][T13751] [ 465.721401][T13751] Mem-Info: [ 465.725088][T13751] active_anon:12962 inactive_anon:0 isolated_anon:0 [ 465.725088][T13751] active_file:2094 inactive_file:4848 isolated_file:0 [ 465.725088][T13751] unevictable:0 dirty:122 writeback:0 [ 465.725088][T13751] slab_reclaimable:11176 slab_unreclaimable:99946 [ 465.725088][T13751] mapped:25293 shmem:1777 pagetables:993 [ 465.725088][T13751] sec_pagetables:0 bounce:0 [ 465.725088][T13751] kernel_misc_reclaimable:0 [ 465.725088][T13751] free:1373267 free_pcp:14891 free_cma:0 [ 465.782699][T13755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.809935][T13751] Node 0 active_anon:50312kB inactive_anon:0kB active_file:8376kB inactive_file:19256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101172kB dirty:484kB writeback:0kB shmem:5572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:16384kB writeback_tmp:0kB kernel_stack:12416kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no [ 465.844180][T13751] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 465.916826][T13751] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.005699][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.022497][T13751] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 466.028549][T13751] Node 0 DMA32 free:1602836kB boost:0kB min:34684kB low:43352kB high:52020kB reserved_highatomic:0KB active_anon:45764kB inactive_anon:0kB active_file:8352kB inactive_file:18644kB unevictable:0kB writepending:484kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:25908kB local_pcp:20240kB free_cma:0kB [ 466.062779][T13751] lowmem_reserve[]: 0 0 0 0 0 [ 466.092773][T13751] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:212kB inactive_anon:0kB active_file:24kB inactive_file:612kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 466.151283][T13751] lowmem_reserve[]: 0 0 0 0 0 [ 466.156218][T13751] Node 1 Normal free:3876016kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:36864kB local_pcp:23296kB free_cma:0kB [ 466.243898][T13751] lowmem_reserve[]: 0 0 0 0 0 [ 466.248790][T13751] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 466.322646][T13751] Node 0 DMA32: 1421*4kB (UM) 1106*8kB (UME) 695*16kB (UME) 483*32kB (UME) 164*64kB (UME) 19*128kB (UME) 78*256kB (UME) 62*512kB (UME) 42*1024kB (UME) 8*2048kB (UM) 351*4096kB (UME) = 1602836kB [ 466.392347][T13751] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 466.451508][T13751] Node 1 Normal: 236*4kB (UME) 44*8kB (UME) 26*16kB (UME) 174*32kB (UME) 51*64kB (UME) 11*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 2*2048kB (UE) 942*4096kB (M) = 3876016kB [ 466.486453][T13751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.517908][T13751] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 466.543143][T13751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.558093][T13751] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 466.568762][T13751] 8281 total pagecache pages [ 466.574501][T13751] 4 pages in swap cache [ 466.578999][T13751] Free swap = 124388kB [ 466.587142][T13751] Total swap = 124996kB [ 466.608102][T13751] 2097051 pages RAM [ 466.633832][T13751] 0 pages HighMem/MovableOnly [ 466.638616][T13751] 416960 pages reserved [ 466.648621][T13751] 0 pages cma reserved [ 467.263148][T13783] loop6: detected capacity change from 0 to 256 [ 467.832739][T13793] af_packet: tpacket_rcv: packet too big, clamped from 2496 to 1904. macoff=96 [ 467.950115][T13796] loop7: detected capacity change from 0 to 4096 [ 469.044014][T13798] loop6: detected capacity change from 0 to 40427 [ 469.061634][T13798] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 469.069679][T13798] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 469.087461][T13798] F2FS-fs (loop6): Wrong SIT boundary, start(1536) end(2560) blocks(2560) [ 469.112646][T13798] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 469.150950][T13798] overlayfs: invalid origin (0000) [ 469.269534][T13820] loop7: detected capacity change from 0 to 512 [ 469.280795][T13820] EXT4-fs: Ignoring removed nobh option [ 469.368127][T13820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.386468][T13820] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.409497][T13824] tipc: Started in network mode [ 469.419502][T13824] tipc: Node identity 323a302020333a30002e, cluster identity 4711 [ 469.613329][T12801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.800567][T13830] loop7: detected capacity change from 0 to 512 [ 469.849424][T13830] EXT4-fs: Ignoring removed oldalloc option [ 469.878168][T13830] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 469.977776][T13830] EXT4-fs (loop7): 1 orphan inode deleted [ 469.997723][T13830] EXT4-fs (loop7): 1 truncate cleaned up [ 470.005101][T13830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.081792][T13830] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.7.2577: path /58/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 470.132899][T13830] EXT4-fs (loop7): Remounting filesystem read-only [ 470.226479][T12801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.333873][T13839] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 470.405289][T13842] loop6: detected capacity change from 0 to 128 [ 470.443144][T13842] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.460490][T13842] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 470.674818][ T9957] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.936739][T13843] loop7: detected capacity change from 0 to 40427 [ 470.946756][T13843] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 470.954494][T13843] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 470.967119][T13843] F2FS-fs (loop7): heap/no_heap options were deprecated [ 470.975684][T13843] F2FS-fs (loop7): build fault injection attr: rate: 64, type: 0x7ffff [ 470.987104][T13843] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x5 [ 470.998202][T13843] F2FS-fs (loop7): invalid crc value [ 471.015971][T13843] F2FS-fs (loop7): Found nat_bits in checkpoint [ 471.134283][T13843] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 471.146315][T13843] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 471.227913][T13843] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910 [ 471.253744][T13843] overlayfs: upper fs does not support tmpfile. [ 471.333075][T12801] syz-executor: attempt to access beyond end of device [ 471.333075][T12801] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 471.349498][T12801] syz-executor: attempt to access beyond end of device [ 471.349498][T12801] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 471.466798][T10491] kworker/u4:28: attempt to access beyond end of device [ 471.466798][T10491] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 471.481225][T10491] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 471.489837][T10491] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 471.500458][T10491] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 472.179404][T10414] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.386108][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 472.398722][T13875] FAULT_INJECTION: forcing a failure. [ 472.398722][T13875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 472.431715][T13875] CPU: 0 PID: 13875 Comm: syz.3.2594 Not tainted syzkaller #0 [ 472.439562][T13875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.449712][T13875] Call Trace: [ 472.453072][T13875] [ 472.456243][T13875] dump_stack_lvl+0x18c/0x250 [ 472.461423][T13875] ? show_regs_print_info+0x20/0x20 [ 472.466820][T13875] ? load_image+0x420/0x420 [ 472.471508][T13875] ? __lock_acquire+0x7d80/0x7d80 [ 472.476656][T13875] should_fail_ex+0x394/0x4c0 [ 472.481600][T13875] prepare_alloc_pages+0x1e1/0x5b0 [ 472.486806][T13875] __alloc_pages+0x134/0x460 [ 472.491464][T13875] ? zone_statistics+0x170/0x170 [ 472.496524][T13875] ? alloc_pages+0x4e1/0x740 [ 472.501188][T13875] __get_free_pages+0xc/0x30 [ 472.505843][T13875] kasan_populate_vmalloc_pte+0x35/0x100 [ 472.511734][T13875] __apply_to_page_range+0x860/0xdd0 [ 472.517174][T13875] ? kasan_populate_vmalloc+0x70/0x70 [ 472.522980][T13875] ? apply_to_page_range+0x50/0x50 [ 472.528312][T13875] ? do_raw_spin_unlock+0x121/0x230 [ 472.533598][T13875] alloc_vmap_area+0x1d26/0x1e50 [ 472.538745][T13875] ? vm_map_ram+0xcf0/0xcf0 [ 472.543339][T13875] ? rcu_is_watching+0x15/0xb0 [ 472.548163][T13875] __get_vm_area_node+0x162/0x370 [ 472.553260][T13875] __vmalloc_node_range+0x36f/0x1320 [ 472.558796][T13875] ? prealloc_init+0x153/0x9f0 [ 472.563624][T13875] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 472.569656][T13875] ? free_vm_area+0x50/0x50 [ 472.574744][T13875] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 472.581042][T13875] ? lockdep_hardirqs_on+0x98/0x150 [ 472.586298][T13875] bpf_map_area_alloc+0xf1/0x110 [ 472.591290][T13875] ? prealloc_init+0x153/0x9f0 [ 472.596100][T13875] prealloc_init+0x153/0x9f0 [ 472.600741][T13875] ? __percpu_counter_init_many+0x345/0x360 [ 472.606687][T13875] htab_map_alloc+0xa6e/0xeb0 [ 472.611433][T13875] map_create+0x877/0x12f0 [ 472.615968][T13875] __sys_bpf+0x651/0x890 [ 472.620265][T13875] ? bpf_link_show_fdinfo+0x390/0x390 [ 472.625695][T13875] ? lock_chain_count+0x20/0x20 [ 472.630597][T13875] __x64_sys_bpf+0x7c/0x90 [ 472.635058][T13875] do_syscall_64+0x55/0xb0 [ 472.639525][T13875] ? clear_bhb_loop+0x40/0x90 [ 472.644246][T13875] ? clear_bhb_loop+0x40/0x90 [ 472.649417][T13875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.655448][T13875] RIP: 0033:0x7f26f479e159 [ 472.659936][T13875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.679683][T13875] RSP: 002b:00007f26f5649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.688149][T13875] RAX: ffffffffffffffda RBX: 00007f26f4a25fa0 RCX: 00007f26f479e159 [ 472.696345][T13875] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 472.704453][T13875] RBP: 00007f26f4835024 R08: 0000000000000000 R09: 0000000000000000 [ 472.712461][T13875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.720673][T13875] R13: 00007f26f4a26038 R14: 00007f26f4a25fa0 R15: 00007ffda61058c8 [ 472.728716][T13875] [ 473.211486][ T5766] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 473.247232][T10414] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.433711][ T5766] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 473.456013][T10414] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.475803][ T5766] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 473.497928][ T5766] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 473.508968][ T5766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.524813][ T5766] usb 7-1: Product: syz [ 473.529570][ T5766] usb 7-1: Manufacturer: syz [ 473.536313][ T5766] usb 7-1: SerialNumber: syz [ 473.673982][T10414] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.765265][T13891] Invalid argument reading file caps for ./file0 [ 473.773811][ T5766] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 474.033079][T13898] loop2: detected capacity change from 0 to 16 [ 474.074481][T13898] erofs: (device loop2): mounted with root inode @ nid 36. [ 474.245612][ T5822] usb 7-1: USB disconnect, device number 13 [ 474.332637][ T5822] usblp0: removed [ 474.496861][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.525306][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.538948][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.567138][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.577496][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 474.586317][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.745802][T13906] loop2: detected capacity change from 0 to 1024 [ 474.995338][T13908] hfsplus: xattr searching failed [ 475.421562][ T23] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 475.633705][ T23] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.662558][ T23] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 475.686591][ T23] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.707859][ T23] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 475.717938][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 475.760222][ T23] usb 7-1: Product: syz [ 475.766234][ T23] usb 7-1: Manufacturer: syz [ 475.788726][T13914] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 475.826752][ T23] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 475.864032][ T23] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 476.114209][ T23] usb 7-1: USB disconnect, device number 14 [ 476.169640][ T23] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 476.185562][ T23] garmin_gps 7-1:1.0: device disconnected [ 476.591970][T13902] chnl_net:caif_netlink_parms(): no params data found [ 476.691536][ T5791] Bluetooth: hci2: command tx timeout [ 476.707126][T13932] loop2: detected capacity change from 0 to 32768 [ 476.750348][T13932] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2613 (13932) [ 476.804708][T13932] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 476.823565][T13932] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 476.845420][T13932] BTRFS info (device loop2): using free space tree [ 476.927672][T13942] input: syz0 as /devices/virtual/input/input32 [ 477.041099][T13932] BTRFS info (device loop2): enabling ssd optimizations [ 477.048647][T13932] BTRFS info (device loop2): auto enabling async discard [ 477.195956][T10414] hsr_slave_0: left promiscuous mode [ 477.245603][T10414] hsr_slave_1: left promiscuous mode [ 477.318179][T13936] loop3: detected capacity change from 0 to 32768 [ 477.325425][T10414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.351875][T10414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.385613][T10414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.404517][T13963] loop6: detected capacity change from 0 to 2048 [ 477.422036][T10414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.438442][T10414] bridge_slave_1: left promiscuous mode [ 477.479993][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.513947][T13963] loop6: p1 p4 [ 477.513947][T13963] p1: [ 477.524768][T10414] bridge_slave_0: left allmulticast mode [ 477.530604][T10414] bridge_slave_0: left promiscuous mode [ 477.538162][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.545472][ T27] audit: type=1800 audit(1788476738.339:85): pid=13936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2614" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 477.582259][T13963] loop6: partition table partially beyond EOD, truncated [ 477.640976][T13963] loop6: p4 start 184549376 is beyond EOD, truncated [ 477.746729][T13961] overlayfs: conflicting lowerdir path [ 477.854675][T10414] veth1_macvtap: left promiscuous mode [ 477.860421][T10414] veth0_macvtap: left promiscuous mode [ 477.921720][T10414] veth1_vlan: left promiscuous mode [ 477.927169][T10414] veth0_vlan: left promiscuous mode [ 477.992339][ T5776] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 478.227415][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 478.242664][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 478.428218][T13968] loop6: detected capacity change from 0 to 64 [ 478.531929][T13970] clocksource: Switched to clocksource acpi_pm [ 478.582116][ T27] audit: type=1800 audit(1788476739.365:86): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2620" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 478.603444][T13970] clocksource: Switched to clocksource tsc [ 478.771968][ T5791] Bluetooth: hci2: command tx timeout [ 479.623282][ T27] audit: type=1326 audit(1788476740.421:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.3.2628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26f479e159 code=0x0 [ 480.607832][T14000] loop3: detected capacity change from 0 to 2048 [ 480.663143][T14000] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 480.689838][T14000] UDF-fs: Scanning with blocksize 512 failed [ 480.727058][T14000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.862498][ T5791] Bluetooth: hci2: command tx timeout [ 481.076123][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.076123][T10491] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 481.090082][T10491] buffer_io_error: 49 callbacks suppressed [ 481.090096][T10491] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 481.109527][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.109527][T10491] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 481.123407][T10491] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 481.136409][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.136409][T10491] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 481.150759][T10491] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 481.159982][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.159982][T10491] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 481.174245][T10491] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 481.183371][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.183371][T10491] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 481.197668][T10491] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 481.230500][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.230500][T10491] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 481.249688][T10491] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 481.263984][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.263984][T10491] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 481.280447][T10491] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 481.289431][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.289431][T10491] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 481.303289][T10491] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 481.312195][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.312195][T10491] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 481.335489][T10491] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 481.345015][T10491] kworker/u4:28: attempt to access beyond end of device [ 481.345015][T10491] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 481.358885][T10491] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 481.392355][T10414] team0 (unregistering): Port device team_slave_1 removed [ 481.516636][T10414] team0 (unregistering): Port device team_slave_0 removed [ 481.671098][T10414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.873417][T10414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.217893][ T28] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 482.479633][ T28] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 482.490878][ T28] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 482.507814][ T28] usb 4-1: config 220 has no interface number 2 [ 482.516499][ T28] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 482.542035][ T28] usb 4-1: config 220 interface 0 has no altsetting 0 [ 482.548950][ T28] usb 4-1: config 220 interface 76 has no altsetting 0 [ 482.562340][ T28] usb 4-1: config 220 interface 1 has no altsetting 0 [ 482.581041][ T28] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 482.598709][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.607070][ T28] usb 4-1: Product: syz [ 482.619308][ T28] usb 4-1: Manufacturer: syz [ 482.640303][ T28] usb 4-1: SerialNumber: syz [ 482.767822][T10414] bond0 (unregistering): Released all slaves [ 482.877790][ T28] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 482.886529][ T28] usb 4-1: No valid video chain found. [ 482.892897][ T28] usb 4-1: selecting invalid altsetting 0 [ 482.906982][ T28] usb 4-1: selecting invalid altsetting 0 [ 482.912964][ T28] usbtest: probe of 4-1:220.1 failed with error -22 [ 482.927912][ T28] usb 4-1: USB disconnect, device number 22 [ 482.952028][ T5791] Bluetooth: hci2: command tx timeout [ 483.129410][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.138292][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.171908][T13902] bridge_slave_0: entered allmulticast mode [ 483.192906][T13902] bridge_slave_0: entered promiscuous mode [ 483.226114][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.260922][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.279265][T13902] bridge_slave_1: entered allmulticast mode [ 483.287184][T13902] bridge_slave_1: entered promiscuous mode [ 483.358297][T13902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.397419][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.529854][T13902] team0: Port device team_slave_0 added [ 483.541328][ T5855] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 483.586309][T13902] team0: Port device team_slave_1 added [ 483.632193][T14028] loop3: detected capacity change from 0 to 128 [ 483.690877][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.712014][T14028] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.725307][T14028] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 483.730393][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.771137][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.783368][ T5855] usb 7-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.795321][ T5855] usb 7-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 483.812344][ T5855] usb 7-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.826445][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.833583][ T5855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.840397][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.866568][ T5855] usb 7-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 483.878595][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.887502][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.919980][ T5855] usb 7-1: config 0 descriptor?? [ 484.019671][ T9862] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.038617][T13902] hsr_slave_0: entered promiscuous mode [ 484.090660][T13902] hsr_slave_1: entered promiscuous mode [ 484.121458][T13902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.152299][T13902] Cannot create hsr debugfs directory [ 484.370984][ T5855] wacom 0003:056A:0065.001A: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 484.430048][ T5855] wacom 0003:056A:0065.001A: hidraw0: USB HID v10.01 Device [HID 056a:0065] on usb-dummy_hcd.6-1/input0 [ 484.462441][ T5855] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0065.001A/input/input33 [ 484.597322][ T5855] usb 7-1: USB disconnect, device number 15 [ 484.705265][T14043] fido_id[14043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 484.992977][T13902] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 485.006544][T13902] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 485.046249][T13902] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 485.080767][T13902] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 485.402853][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.495664][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.543328][T10491] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.550666][T10491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.607159][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.614454][T10059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.002465][T14067] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 486.166859][T14071] Invalid argument reading file caps for ./file0 [ 486.722145][T13902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.330261][T14104] loop2: detected capacity change from 0 to 128 [ 487.403206][T14104] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 487.444776][T14104] ext4 filesystem being mounted at /697/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 487.567080][T13902] veth0_vlan: entered promiscuous mode [ 487.599103][T14114] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 487.599103][T14114] [ 487.640225][T13902] veth1_vlan: entered promiscuous mode [ 487.640238][T14114] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 487.640867][T14114] CIFS: Attempting to mount //127.0.0.1/share [ 487.718604][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.797960][T13902] veth0_macvtap: entered promiscuous mode [ 487.826289][T13902] veth1_macvtap: entered promiscuous mode [ 487.858367][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.879632][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.921381][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.942951][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.974165][T14121] loop9: detected capacity change from 0 to 7 [ 487.980793][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.019155][T14121] Dev loop9: unable to read RDB block 7 [ 488.034095][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.044178][T14121] loop9: unable to read partition table [ 488.050143][T14121] loop9: partition table beyond EOD, truncated [ 488.057663][T14121] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 488.067099][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.079772][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.139004][T13902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.186107][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.233594][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.276174][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.297915][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.309448][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.326260][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.342863][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.378496][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.412433][T14114] CIFS: VFS: cifs_mount failed w/return code = -512 [ 488.457347][T13902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.508183][T13902] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.541845][T13902] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.550655][T13902] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.577460][T13902] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.592940][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 488.890870][T10414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.940600][T10414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.002185][T10484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.010174][T10484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.741511][ T5766] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 489.943510][ T5766] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.972893][ T5766] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.014742][ T5766] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 490.070998][ T5766] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.112590][ T5766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.120957][ T5766] usb 7-1: Product: syz [ 490.155351][ T5766] usb 7-1: Manufacturer: syz [ 490.160109][ T5766] usb 7-1: SerialNumber: syz [ 490.209667][ T5766] cdc_mbim 7-1:1.0: skipping garbage [ 490.416432][T14158] loop8: detected capacity change from 0 to 32768 [ 490.458871][T14158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2599 (14158) [ 490.580644][T14158] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 490.624704][T14158] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 490.649076][T14154] loop3: detected capacity change from 0 to 40427 [ 490.661364][T14158] BTRFS info (device loop8): setting nodatasum [ 490.667635][T14158] BTRFS info (device loop8): force zlib compression, level 3 [ 490.711829][T14154] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 490.719168][T14154] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 490.727614][T14158] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 490.769086][T14158] BTRFS info (device loop8): use lzo compression, level 0 [ 490.791826][T14154] F2FS-fs (loop3): heap/no_heap options were deprecated [ 490.799269][T14154] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 490.816115][ T5766] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 490.833410][ T5766] cdc_mbim 7-1:1.0: bind() failure [ 490.840181][T14158] BTRFS info (device loop8): turning on flush-on-commit [ 490.857565][T14158] BTRFS info (device loop8): enabling auto defrag [ 490.882260][T14158] BTRFS info (device loop8): max_inline at 4096 [ 490.888645][T14158] BTRFS info (device loop8): using free space tree [ 490.897013][ T5766] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 490.921773][ T5766] cdc_ncm 7-1:1.1: bind() failure [ 491.177098][T14158] BTRFS info (device loop8): enabling ssd optimizations [ 491.291366][ T27] audit: type=1800 audit(1788476752.081:88): pid=14158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2599" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 491.333400][ T9] usb 7-1: USB disconnect, device number 16 [ 491.658808][T13902] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 491.722363][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 491.912009][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 491.919600][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.961430][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 491.993816][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.034172][ T23] usb 4-1: config 0 descriptor?? [ 492.280786][ T23] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 492.629593][ T970] usb 4-1: USB disconnect, device number 23 [ 492.637675][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2685'. [ 492.825423][T14232] loop8: detected capacity change from 0 to 256 [ 492.855156][T14232] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 493.109527][T14238] loop6: detected capacity change from 0 to 256 [ 493.182546][ T27] audit: type=1800 audit(1788476753.981:89): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2688" name="file2" dev="loop6" ino=1048700 res=0 errno=0 [ 493.519231][ T970] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 493.538829][T14246] loop8: detected capacity change from 0 to 1024 [ 493.569095][ T970] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 494.305483][T14264] macsec2: entered allmulticast mode [ 494.311055][T14264] veth1_macvtap: entered allmulticast mode [ 494.380387][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 494.649508][T14268] veth1_macvtap (unregistering): left allmulticast mode [ 495.199958][T14286] loop6: detected capacity change from 0 to 512 [ 495.749551][T14296] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 495.749551][T14296] [ 495.785456][T14300] loop6: detected capacity change from 0 to 512 [ 496.084784][T14305] loop2: detected capacity change from 0 to 2048 [ 496.111848][T14305] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 496.312675][T14315] loop6: detected capacity change from 0 to 128 [ 496.347059][T14315] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 496.414525][T14315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.907409][T14329] tipc: Started in network mode [ 496.933158][T14329] tipc: Node identity 1000001, cluster identity 4369 [ 496.959601][T14329] tipc: Node number set to 16777217 [ 496.965358][ T5846] kernel read not supported for file /kmsg (pid: 5846 comm: kworker/0:4) [ 497.002119][T14329] tipc: Cannot configure node identity twice [ 497.018970][T14332] loop8: detected capacity change from 0 to 512 [ 497.064796][T14333] loop6: detected capacity change from 0 to 2048 [ 497.118423][T14333] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 497.152432][T14332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.247738][T14332] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.269261][T14340] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 497.353443][T14329] tipc: New replicast peer: 127.0.0.1 [ 497.368388][T14329] tipc: Enabled bearer , priority 10 [ 497.720156][T13902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.200196][T14362] loop8: detected capacity change from 0 to 4096 [ 498.248418][T14362] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.287834][T14362] EXT4-fs: Ignoring removed bh option [ 498.331398][T14362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 498.364248][T14362] EXT4-fs (loop8): Test dummy encryption mode enabled [ 498.453393][T14362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.735644][T13902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.749129][T14357] loop2: detected capacity change from 0 to 32768 [ 498.792184][T14357] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 498.863873][ T9610] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 498.887693][ T9751] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.074805][ T9610] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 499.103923][ T9610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.119302][ T9610] usb 7-1: Product: syz [ 499.129216][ T9610] usb 7-1: Manufacturer: syz [ 499.139076][ T9610] usb 7-1: SerialNumber: syz [ 499.191182][ T9610] usb 7-1: config 0 descriptor?? [ 499.429544][ T9610] usb 7-1: USB disconnect, device number 17 [ 499.590128][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.924084][T14399] loop3: detected capacity change from 0 to 256 [ 499.967619][T14399] exfat: Bad value for 'uid' [ 500.168759][T14403] loop3: detected capacity change from 0 to 1764 [ 500.252177][T14394] loop2: detected capacity change from 0 to 32768 [ 500.294357][T14394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2733 (14394) [ 500.353734][T14394] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 500.396149][T14394] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 500.431649][T14408] loop6: detected capacity change from 0 to 512 [ 500.441499][T14394] BTRFS info (device loop2): turning on sync discard [ 500.448381][T14394] BTRFS info (device loop2): max_inline at 79 [ 500.482731][T14408] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 500.500954][T14394] BTRFS info (device loop2): disabling tree log [ 500.508306][T14394] BTRFS info (device loop2): max_inline at 0 [ 500.518151][T14394] BTRFS info (device loop2): using free space tree [ 500.595300][T14408] EXT4-fs (loop6): 1 truncate cleaned up [ 500.659565][T14408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.890321][ T9957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.218469][T14394] BTRFS info (device loop2): disk added /dev/nullb0 [ 501.319861][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 501.359205][T14406] loop8: detected capacity change from 0 to 32768 [ 501.842140][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.849346][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.120527][T14444] loop8: detected capacity change from 0 to 8 [ 502.160298][T14443] loop2: detected capacity change from 0 to 256 [ 502.186921][T14444] SQUASHFS error: lzo decompression failed, data probably corrupt [ 502.211482][T14444] SQUASHFS error: Failed to read block 0x91: -5 [ 502.265561][T14443] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 502.278063][T14444] SQUASHFS error: Unable to read metadata cache entry [8f] [ 502.298608][T14444] SQUASHFS error: Unable to read inode 0x11f [ 502.654269][T14447] netlink: 428 bytes leftover after parsing attributes in process `syz.8.2746'. [ 502.675917][T14447] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2746'. [ 504.706685][T14482] loop8: detected capacity change from 0 to 131072 [ 504.769159][T14482] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0) [ 504.778822][T14482] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 504.788707][T14485] bond0: (slave ip6tnl1): refused to change device type [ 504.800070][T14482] F2FS-fs (loop8): invalid crc value [ 504.865933][T14482] F2FS-fs (loop8): Found nat_bits in checkpoint [ 504.944632][T14482] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 504.951979][T14482] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 504.981838][T14487] loop2: detected capacity change from 0 to 131072 [ 504.990523][T14487] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 504.997741][T14487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 505.017243][T14487] F2FS-fs (loop2): invalid crc value [ 505.081560][T14487] F2FS-fs (loop2): Found nat_bits in checkpoint [ 505.180766][T14487] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 505.188067][T14487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 505.553518][T14507] loop6: detected capacity change from 0 to 64 [ 506.346530][T14518] loop3: detected capacity change from 0 to 8192 [ 506.515121][T14518] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 506.596909][T14518] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 506.621430][T14518] REISERFS (device loop3): using ordered data mode [ 506.628032][T14518] reiserfs: using flush barriers [ 506.670330][T14518] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 506.757570][T14518] REISERFS (device loop3): checking transaction log (loop3) [ 506.823087][T14518] REISERFS (device loop3): Using r5 hash to sort names [ 506.830569][T14518] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 507.213065][T14526] gadgetfs: bound to dummy_udc driver [ 507.835275][T14534] FAULT_INJECTION: forcing a failure. [ 507.835275][T14534] name failslab, interval 1, probability 1, space 0, times 0 [ 507.881300][T14534] CPU: 1 PID: 14534 Comm: syz.2.2775 Not tainted syzkaller #0 [ 507.888873][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.898981][T14534] Call Trace: [ 507.902293][T14534] [ 507.905250][T14534] dump_stack_lvl+0x18c/0x250 [ 507.909972][T14534] ? show_regs_print_info+0x20/0x20 [ 507.915212][T14534] ? load_image+0x420/0x420 [ 507.919792][T14534] ? __might_sleep+0xe0/0xe0 [ 507.924691][T14534] ? __lock_acquire+0x7d80/0x7d80 [ 507.929835][T14534] should_fail_ex+0x394/0x4c0 [ 507.934646][T14534] should_failslab+0x9/0x20 [ 507.939394][T14534] slab_pre_alloc_hook+0x59/0x300 [ 507.944534][T14534] kmem_cache_alloc+0x5a/0x2c0 [ 507.949362][T14534] ? getname_flags+0xbb/0x500 [ 507.954194][T14534] getname_flags+0xbb/0x500 [ 507.958763][T14534] __x64_sys_mkdirat+0x7c/0xa0 [ 507.963589][T14534] do_syscall_64+0x55/0xb0 [ 507.968093][T14534] ? clear_bhb_loop+0x40/0x90 [ 507.972827][T14534] ? clear_bhb_loop+0x40/0x90 [ 507.978074][T14534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.984102][T14534] RIP: 0033:0x7fa4f699e159 [ 507.988558][T14534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.008216][T14534] RSP: 002b:00007fa4f7845028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 508.016691][T14534] RAX: ffffffffffffffda RBX: 00007fa4f6c25fa0 RCX: 00007fa4f699e159 [ 508.024730][T14534] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 508.032766][T14534] RBP: 00007fa4f6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 508.040820][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.048869][T14534] R13: 00007fa4f6c26038 R14: 00007fa4f6c25fa0 R15: 00007ffe428f42d8 [ 508.056908][T14534] [ 508.245255][T14539] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 508.427947][T14544] input: syz0 as /devices/virtual/input/input38 [ 508.751134][T14551] loop8: detected capacity change from 0 to 512 [ 508.862761][T14551] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.2780: inode has both inline data and extents flags [ 508.942121][T14551] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.2780: couldn't read orphan inode 15 (err -117) [ 509.031921][T14551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.216598][T13902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.508570][T14523] loop6: detected capacity change from 0 to 131072 [ 509.518262][T14548] loop2: detected capacity change from 0 to 32768 [ 509.580594][T14523] F2FS-fs (loop6): invalid crc value [ 509.620534][T14548] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 509.640638][T14523] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 509.762472][T14553] loop3: detected capacity change from 0 to 32768 [ 509.786050][T14553] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 509.837564][T14548] XFS (loop2): Ending clean mount [ 509.945469][T14548] XFS (loop2): Quotacheck needed: Please wait. [ 510.017224][T14582] tun0: tun_chr_ioctl cmd 2147767511 [ 510.041798][T14582] tun0: tun_chr_ioctl cmd 35108 [ 510.087474][T10414] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x1144 dinode [ 510.135784][T10414] XFS (loop2): Unmount and run xfs_repair [ 510.169683][T10414] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 510.195455][ T6241] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 510.203908][T10414] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 510.251642][T10414] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 510.289921][T10414] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 510.327208][T10414] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 510.381336][T10414] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 510.413445][T10414] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 a2 ce e4 0c ................ [ 510.450963][T10414] 00000060: ff ff ff ff a6 fb 00 84 00 00 00 00 00 00 00 05 ................ [ 510.481401][T10414] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 510.722093][T14548] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 511.022749][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 511.365940][T14580] loop8: detected capacity change from 0 to 40427 [ 511.415564][T14580] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 511.441872][T14580] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 511.513165][T14580] F2FS-fs (loop8): invalid crc value [ 511.576682][T14580] F2FS-fs (loop8): Found nat_bits in checkpoint [ 511.872026][T14580] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 511.893488][T14580] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 512.004505][T14580] bio_check_eod: 12 callbacks suppressed [ 512.004527][T14580] syz.8.2784: attempt to access beyond end of device [ 512.004527][T14580] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 512.120155][T14580] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 512.131493][T14580] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 512.595971][T14627] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2795'. [ 513.982909][T14666] loop2: detected capacity change from 0 to 1024 [ 514.022697][T14666] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 514.183287][T14666] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.2805: lblock 2 mapped to illegal pblock 2 (length 1) [ 514.234516][T14666] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 514.245354][T14666] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.2805: lblock 0 mapped to illegal pblock 48 (length 1) [ 514.273302][T14666] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 514.289770][T14666] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2805: Failed to acquire dquot type 0 [ 514.304126][T14679] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2807'. [ 514.322104][T14666] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 514.372038][T14666] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2805: mark_inode_dirty error [ 514.383934][T14666] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 514.431492][T14666] EXT4-fs (loop2): 1 orphan inode deleted [ 514.438986][T14666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.489361][T10414] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 514.585028][T10414] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 514.610670][T10414] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:20: Failed to release dquot type 0 [ 514.618087][T14666] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm syz.2.2805: lblock 1 mapped to illegal pblock 1 (length 1) [ 514.787140][T14666] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 514.800957][T14666] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 980643439 [ 514.819492][T14666] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2805: Failed to acquire dquot type 0 [ 514.943069][ T5822] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 514.955809][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.976363][T10491] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 515.009493][T10491] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 515.030140][T10491] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:28: Failed to release dquot type 0 [ 515.062734][ T5776] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 515.085282][T14696] FAULT_INJECTION: forcing a failure. [ 515.085282][T14696] name failslab, interval 1, probability 1, space 0, times 0 [ 515.101532][ T5776] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 515.116780][T14696] CPU: 0 PID: 14696 Comm: syz.6.2811 Not tainted syzkaller #0 [ 515.124375][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.131085][ T5776] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 515.134675][T14696] Call Trace: [ 515.134704][T14696] [ 515.134715][T14696] dump_stack_lvl+0x18c/0x250 [ 515.134757][T14696] ? show_regs_print_info+0x20/0x20 [ 515.134787][T14696] ? load_image+0x420/0x420 [ 515.134815][T14696] ? __might_sleep+0xe0/0xe0 [ 515.134848][T14696] ? __lock_acquire+0x7d80/0x7d80 [ 515.134882][T14696] should_fail_ex+0x394/0x4c0 [ 515.159633][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.162655][T14696] should_failslab+0x9/0x20 [ 515.162698][T14696] slab_pre_alloc_hook+0x59/0x300 [ 515.162737][T14696] ? __kasan_slab_alloc+0x6c/0x80 [ 515.162770][T14696] kmem_cache_alloc_node+0x5e/0x310 [ 515.162807][T14696] ? __alloc_skb+0x103/0x2c0 [ 515.167455][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.172065][T14696] __alloc_skb+0x103/0x2c0 [ 515.172105][T14696] audit_log_start+0x15e/0x890 [ 515.172144][T14696] ? audit_serial+0x30/0x30 [ 515.172173][T14696] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 515.172207][T14696] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 515.172248][T14696] audit_seccomp+0x63/0x180 [ 515.192754][ T5822] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.193359][T14696] __secure_computing+0x22c/0x2f0 [ 515.207282][ T5822] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.213315][T14696] syscall_trace_enter+0xa7/0x150 [ 515.213359][T14696] do_syscall_64+0x28/0xb0 [ 515.213386][T14696] ? clear_bhb_loop+0x40/0x90 [ 515.213413][T14696] ? clear_bhb_loop+0x40/0x90 [ 515.213440][T14696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.232872][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.237206][T14696] RIP: 0033:0x7f232e79e159 [ 515.237235][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.285006][ T5822] usb 9-1: config 0 descriptor?? [ 515.285333][T14696] RSP: 002b:00007f232c9f59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 515.355956][T14696] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f232e79e159 [ 515.364004][T14696] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 515.372037][T14696] RBP: 00007f232c9f6030 R08: 0000000000000000 R09: 000000000000000b [ 515.380167][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 515.388202][T14696] R13: 00007f232ea26038 R14: 00007ffe7654f080 R15: 0000000000017eb2 [ 515.396256][T14696] [ 515.454853][T14696] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 515.492025][T14696] audit: out of memory in audit_log_start [ 515.689937][T14683] loop3: detected capacity change from 0 to 32768 [ 515.738231][ T5822] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 515.789144][T14683] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 515.809638][ T5822] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 515.954142][T14683] XFS (loop3): Ending clean mount [ 516.074978][ T28] usb 9-1: USB disconnect, device number 2 [ 516.234144][T14712] fido_id[14712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 516.325240][ T9862] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 516.818656][T14725] loop6: detected capacity change from 0 to 512 [ 516.876777][T14725] EXT4-fs: Ignoring removed bh option [ 516.951947][T14719] loop2: detected capacity change from 0 to 32768 [ 516.979047][T14725] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 517.021070][T14719] JBD2: Ignoring recovery information on journal [ 517.029873][T14725] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 517.235085][T14719] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 517.471384][T14719] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 517.471426][T14719] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 517.561383][T14719] OCFS2: File system is now read-only. [ 517.854652][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 518.366142][T14754] loop6: detected capacity change from 0 to 128 [ 519.045173][T14773] loop3: detected capacity change from 0 to 512 [ 519.071485][ T5855] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 519.102829][T14773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.147423][T14773] EXT4-fs (loop3): 1 truncate cleaned up [ 519.170381][T14773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.293543][ T5855] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.303408][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.324317][ T5855] usb 9-1: config 0 descriptor?? [ 519.332835][ T5855] cp210x 9-1:0.0: cp210x converter detected [ 519.350279][T14773] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.2830: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 519.434529][T14773] EXT4-fs (loop3): Remounting filesystem read-only [ 519.571582][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.688414][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'. [ 519.744721][ T5855] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 519.952097][T14778] loop6: detected capacity change from 0 to 32768 [ 519.992089][ T5855] usb 9-1: cp210x converter now attached to ttyUSB0 [ 520.049824][T14778] JBD2: Ignoring recovery information on journal [ 520.141559][T14796] loop3: detected capacity change from 0 to 16 [ 520.199524][ T5855] usb 9-1: USB disconnect, device number 3 [ 520.208026][T14796] erofs: (device loop3): mounted with root inode @ nid 36. [ 520.233283][ T5855] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 520.239413][T14778] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 520.267334][T14796] syz.3.2835: attempt to access beyond end of device [ 520.267334][T14796] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 520.294420][ T5855] cp210x 9-1:0.0: device disconnected [ 520.342515][T14796] syz.3.2835: attempt to access beyond end of device [ 520.342515][T14796] loop3: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 520.392890][T14796] syz.3.2835: attempt to access beyond end of device [ 520.392890][T14796] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 520.440245][T14778] OCFS2: ERROR (device loop6): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 520.440287][T14778] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 520.471691][T14796] syz.3.2835: attempt to access beyond end of device [ 520.471691][T14796] loop3: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 520.492769][T14796] syz.3.2835: attempt to access beyond end of device [ 520.492769][T14796] loop3: rw=0, sector=41, nr_sectors = 1 limit=16 [ 520.514098][T14778] OCFS2: File system is now read-only. [ 520.520176][T14796] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 520.546170][T14800] syz.3.2835: attempt to access beyond end of device [ 520.546170][T14800] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 520.580862][T14800] syz.3.2835: attempt to access beyond end of device [ 520.580862][T14800] loop3: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 520.640450][T14800] syz.3.2835: attempt to access beyond end of device [ 520.640450][T14800] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 520.694557][T14800] syz.3.2835: attempt to access beyond end of device [ 520.694557][T14800] loop3: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 520.712405][T14800] syz.3.2835: attempt to access beyond end of device [ 520.712405][T14800] loop3: rw=0, sector=41, nr_sectors = 1 limit=16 [ 520.727602][T14800] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 520.743829][ T9957] ocfs2: Unmounting device (7,6) on (node local) [ 521.054967][T14810] loop8: detected capacity change from 0 to 1024 [ 521.104451][T14812] loop3: detected capacity change from 0 to 256 [ 521.129268][T14810] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 521.178396][T14810] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 2: comm syz.8.2838: lblock 2 mapped to illegal pblock 2 (length 1) [ 521.207843][T14812] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 521.306355][T14810] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 521.327022][T14810] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 48: comm syz.8.2838: lblock 0 mapped to illegal pblock 48 (length 1) [ 521.355268][T14810] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 521.366286][T14810] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.2838: Failed to acquire dquot type 0 [ 521.390693][T14810] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 521.448236][T14810] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2838: mark_inode_dirty error [ 521.495957][T14810] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 521.528766][T14810] EXT4-fs (loop8): 1 orphan inode deleted [ 521.548144][T14810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.568379][T10488] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 521.589972][T10488] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 521.606470][T10488] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:26: Failed to release dquot type 0 [ 521.723104][T14810] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm syz.8.2838: lblock 1 mapped to illegal pblock 1 (length 1) [ 521.791037][T14810] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 1 [ 521.845133][T14810] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 980643439 [ 521.857789][T14810] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.2838: Failed to acquire dquot type 0 [ 521.910023][T14826] loop2: detected capacity change from 0 to 512 [ 521.934468][T14826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 521.982823][T13902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.048699][T14826] EXT4-fs (loop2): 1 truncate cleaned up [ 522.087180][T14826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.103830][ T3445] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 522.121422][ T5851] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 522.215123][ T3445] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 522.234273][T14826] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.2841: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 522.254643][ T3445] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 522.256966][T13902] EXT4-fs error (device loop8): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 522.300237][T13902] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 522.319043][T13902] EXT4-fs error (device loop8): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 522.394012][T14826] EXT4-fs (loop2): Remounting filesystem read-only [ 522.401551][ T5851] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 522.411152][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.613627][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.702376][ T5851] dln2 4-1:1.0: USB write failed: -110 [ 522.741474][ T5851] dln2 4-1:1.0: failed to initialize hardware [ 522.768759][ T5851] dln2: probe of 4-1:1.0 failed with error -110 [ 523.539078][T14876] loop6: detected capacity change from 0 to 128 [ 523.555055][T14875] loop5: detected capacity change from 0 to 7 [ 523.605573][T14875] Dev loop5: unable to read RDB block 7 [ 523.634796][T14875] loop5: AHDI p1 p3 p4 [ 523.639095][T14875] loop5: partition table partially beyond EOD, truncated [ 523.681976][T14875] loop5: p1 size 100663296 extends beyond EOD, truncated [ 523.712675][T14875] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 523.858009][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 523.875333][ T6016] udevd[6016]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 524.088094][T14885] loop2: detected capacity change from 0 to 1024 [ 524.222748][ T5822] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 524.414734][ T5822] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 524.440059][ T5822] usb 7-1: config 0 has no interface number 0 [ 524.470507][ T5822] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 524.508219][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.537729][ T5822] usb 7-1: config 0 descriptor?? [ 524.564010][ T5822] ums-realtek 7-1:0.3: USB Mass Storage device detected [ 524.750839][T14909] loop8: detected capacity change from 0 to 128 [ 524.784017][T14909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 524.798842][T14909] System zones: 1-3, 19-19, 35-36 [ 524.813260][T14909] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 524.826533][T14909] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 524.877534][ T5822] usb 7-1: USB disconnect, device number 18 [ 524.912776][ T28] usb 4-1: USB disconnect, device number 24 [ 525.049392][T13902] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 525.186586][T14917] syzkaller1: entered promiscuous mode [ 525.192471][T14917] syzkaller1: entered allmulticast mode [ 525.470033][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2870'. [ 525.671789][ T5822] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 525.729945][T14932] loop6: detected capacity change from 0 to 1024 [ 525.752159][T14932] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 525.784523][T14932] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.2874: lblock 2 mapped to illegal pblock 2 (length 1) [ 525.805834][T14932] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 525.814574][T14932] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.2874: lblock 0 mapped to illegal pblock 48 (length 1) [ 525.829922][T14932] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 525.840180][T14932] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2874: Failed to acquire dquot type 0 [ 525.853461][T14932] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 525.866093][T14932] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2874: mark_inode_dirty error [ 525.892623][ T5822] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 525.901111][ T5822] usb 9-1: config 0 has no interface number 0 [ 525.903261][T14932] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 525.909899][ T5822] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 525.942827][T14932] EXT4-fs (loop6): 1 orphan inode deleted [ 525.950457][T14932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.975714][T10488] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 525.993998][ T5822] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 526.006999][T10488] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 526.021305][ T5822] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 526.032741][T10488] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:26: Failed to release dquot type 0 [ 526.061321][ T5822] usb 9-1: config 0 interface 2 has no altsetting 0 [ 526.088544][ T5822] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 526.112562][ T5822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.120717][T14932] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm syz.6.2874: lblock 1 mapped to illegal pblock 1 (length 1) [ 526.120742][ T5822] usb 9-1: Product: syz [ 526.120762][ T5822] usb 9-1: Manufacturer: syz [ 526.159622][ T5822] usb 9-1: SerialNumber: syz [ 526.177183][ T5822] usb 9-1: config 0 descriptor?? [ 526.181350][T14932] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1 [ 526.190144][T14921] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 526.200664][T14921] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 526.216045][T14932] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2874: Failed to acquire dquot type 0 [ 526.289696][ T9957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.332617][ T143] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 526.356933][ T143] __quota_error: 1 callbacks suppressed [ 526.356952][ T143] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 526.373821][ T143] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 526.387103][ T9957] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 526.415935][ T9957] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 526.428997][ T9957] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 526.434268][ T5822] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 526.723488][ T5855] usb 9-1: USB disconnect, device number 4 [ 527.031515][ T5822] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 527.213917][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.225582][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.236014][ T5822] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.251146][ T5822] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.271489][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.293127][ T5822] usb 7-1: config 0 descriptor?? [ 527.565773][T14951] ip_tables: iptables: counters copy to user failed while replacing table [ 527.579347][T14952] loop3: detected capacity change from 0 to 512 [ 527.599663][T14952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 527.627607][T14952] EXT4-fs (loop3): 1 truncate cleaned up [ 527.639833][T14952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.691867][ T5855] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 527.756174][ T5822] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 527.766422][T14954] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 527.803614][ T5822] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 527.921377][ T5855] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.930523][ T5855] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.974320][ T5855] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 528.005963][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.057133][ T5855] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 528.066593][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 528.075832][ T5855] usb 9-1: Product: syz [ 528.080076][ T5855] usb 9-1: Manufacturer: syz [ 528.105492][ T5855] cdc_wdm 9-1:1.0: skipping garbage [ 528.113349][ T5855] cdc_wdm 9-1:1.0: skipping garbage [ 528.123661][ T5846] usb 7-1: USB disconnect, device number 19 [ 528.164748][ T5855] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 528.172510][ T5855] cdc_wdm 9-1:1.0: Unknown control protocol [ 528.381727][ T5855] usb 9-1: USB disconnect, device number 5 [ 528.553573][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.261191][T14963] loop3: detected capacity change from 0 to 256 [ 529.360679][T14963] FAT-fs (loop3): Directory bread(block 64) failed [ 529.385331][T14963] FAT-fs (loop3): Directory bread(block 65) failed [ 529.401938][T14963] FAT-fs (loop3): Directory bread(block 66) failed [ 529.408610][T14963] FAT-fs (loop3): Directory bread(block 67) failed [ 529.424416][T14963] FAT-fs (loop3): Directory bread(block 68) failed [ 529.431064][T14963] FAT-fs (loop3): Directory bread(block 69) failed [ 529.438252][T14963] FAT-fs (loop3): Directory bread(block 70) failed [ 529.446396][T14963] FAT-fs (loop3): Directory bread(block 71) failed [ 529.453788][T14963] FAT-fs (loop3): Directory bread(block 72) failed [ 529.460576][T14963] FAT-fs (loop3): Directory bread(block 73) failed [ 530.104855][T14985] loop3: detected capacity change from 0 to 1024 [ 530.172358][T14985] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 530.305142][T14985] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.2891: lblock 2 mapped to illegal pblock 2 (length 1) [ 530.379140][T14985] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 530.419487][T14985] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.2891: lblock 0 mapped to illegal pblock 48 (length 1) [ 530.423968][T14994] loop2: detected capacity change from 0 to 512 [ 530.461938][T14994] EXT4-fs: Ignoring removed bh option [ 530.472075][T14985] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 530.480948][T14985] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2891: Failed to acquire dquot type 0 [ 530.494994][T14994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 530.514248][T14994] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 530.548167][T14985] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 530.583049][T14985] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2891: mark_inode_dirty error [ 530.621560][T14996] FAULT_INJECTION: forcing a failure. [ 530.621560][T14996] name failslab, interval 1, probability 1, space 0, times 0 [ 530.637925][T14985] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 530.648283][T14996] CPU: 1 PID: 14996 Comm: syz.8.2895 Not tainted syzkaller #0 [ 530.648316][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.648331][T14996] Call Trace: [ 530.648341][T14996] [ 530.648351][T14996] dump_stack_lvl+0x18c/0x250 [ 530.648393][T14996] ? show_regs_print_info+0x20/0x20 [ 530.648424][T14996] ? load_image+0x420/0x420 [ 530.648452][T14996] ? __might_sleep+0xe0/0xe0 [ 530.648486][T14996] ? __lock_acquire+0x7d80/0x7d80 [ 530.648524][T14996] should_fail_ex+0x394/0x4c0 [ 530.648564][T14996] should_failslab+0x9/0x20 [ 530.648600][T14996] slab_pre_alloc_hook+0x59/0x300 [ 530.648637][T14996] ? __kasan_slab_alloc+0x6c/0x80 [ 530.648672][T14996] kmem_cache_alloc_node+0x5e/0x310 [ 530.648709][T14996] ? __alloc_skb+0x103/0x2c0 [ 530.648741][T14996] __alloc_skb+0x103/0x2c0 [ 530.648773][T14996] audit_log_start+0x15e/0x890 [ 530.736091][T14996] ? audit_serial+0x30/0x30 [ 530.740643][T14996] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 530.746671][T14996] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 530.752788][T14996] audit_seccomp+0x63/0x180 [ 530.757335][T14996] __secure_computing+0x22c/0x2f0 [ 530.762406][T14996] syscall_trace_enter+0xa7/0x150 [ 530.767478][T14996] do_syscall_64+0x28/0xb0 [ 530.771949][T14996] ? clear_bhb_loop+0x40/0x90 [ 530.776705][T14996] ? clear_bhb_loop+0x40/0x90 [ 530.781455][T14996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.787409][T14996] RIP: 0033:0x7f221a59e159 [ 530.791871][T14996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.811537][T14996] RSP: 002b:00007f221b4d99f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 530.819998][T14996] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f221a59e159 [ 530.828099][T14996] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 530.836117][T14996] RBP: 00007f221b4da030 R08: 0000000000000000 R09: 000000000000000b [ 530.844129][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 530.852143][T14996] R13: 00007f221a826038 R14: 00007fff6f768080 R15: 0000000000018a34 [ 530.860185][T14996] [ 530.885515][T14985] EXT4-fs (loop3): 1 orphan inode deleted [ 530.900747][T14985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.962078][T14996] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 531.020459][T14996] audit: out of memory in audit_log_start [ 531.031542][T10488] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.066753][T10488] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 531.097113][T10488] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:26: Failed to release dquot type 0 [ 531.097460][T14985] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm syz.3.2891: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.133772][T14985] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1 [ 531.143034][T14985] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 980643439 [ 531.191407][T14985] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2891: Failed to acquire dquot type 0 [ 531.266657][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.321667][T10488] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.368368][T10488] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 531.377306][T10488] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:26: Failed to release dquot type 0 [ 531.462625][ T9862] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 531.491724][ T9862] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 531.511816][ T9862] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 531.730334][T14998] loop2: detected capacity change from 0 to 32768 [ 531.824515][T14998] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 531.864563][T14998] XFS (loop2): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 532.029523][ T5776] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 532.431562][T15021] loop6: detected capacity change from 0 to 32768 [ 532.474333][T15021] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2905 (15021) [ 532.507931][T15021] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 532.519344][T15021] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 532.529503][T15021] BTRFS info (device loop6): using free space tree [ 532.713225][T15021] BTRFS info (device loop6): enabling ssd optimizations [ 532.740743][T15021] BTRFS info (device loop6): auto enabling async discard [ 532.967457][T15052] loop8: detected capacity change from 0 to 128 [ 533.208491][ T9957] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 535.156164][T15097] loop2: detected capacity change from 0 to 128 [ 535.651406][ T28] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 535.854118][T15122] loop2: detected capacity change from 0 to 16 [ 535.867057][ T28] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.889213][ T28] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 535.911122][T15122] erofs: (device loop2): mounted with root inode @ nid 36. [ 535.919122][ T28] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.951392][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.995654][T15122] syz.2.2933: attempt to access beyond end of device [ 535.995654][T15122] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 536.022114][T15104] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 536.037805][T15122] syz.2.2933: attempt to access beyond end of device [ 536.037805][T15122] loop2: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 536.054283][ T28] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 536.089139][T15122] syz.2.2933: attempt to access beyond end of device [ 536.089139][T15122] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 536.169518][T15122] syz.2.2933: attempt to access beyond end of device [ 536.169518][T15122] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 536.231629][T15122] syz.2.2933: attempt to access beyond end of device [ 536.231629][T15122] loop2: rw=0, sector=41, nr_sectors = 1 limit=16 [ 536.266209][T15122] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 536.321935][T15129] syz.2.2933: attempt to access beyond end of device [ 536.321935][T15129] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 536.336889][T15129] syz.2.2933: attempt to access beyond end of device [ 536.336889][T15129] loop2: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 536.359734][T15129] syz.2.2933: attempt to access beyond end of device [ 536.359734][T15129] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 536.381489][T15129] syz.2.2933: attempt to access beyond end of device [ 536.381489][T15129] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 536.396355][T15129] syz.2.2933: attempt to access beyond end of device [ 536.396355][T15129] loop2: rw=0, sector=41, nr_sectors = 1 limit=16 [ 536.443177][T15129] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 536.507415][ T28] usb 7-1: USB disconnect, device number 20 [ 537.117849][T15145] FAULT_INJECTION: forcing a failure. [ 537.117849][T15145] name failslab, interval 1, probability 1, space 0, times 0 [ 537.141091][T15145] CPU: 0 PID: 15145 Comm: syz.8.2941 Not tainted syzkaller #0 [ 537.148665][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.158913][T15145] Call Trace: [ 537.162265][T15145] [ 537.165263][T15145] dump_stack_lvl+0x18c/0x250 [ 537.170118][T15145] ? show_regs_print_info+0x20/0x20 [ 537.175494][T15145] ? load_image+0x420/0x420 [ 537.180073][T15145] ? __might_sleep+0xe0/0xe0 [ 537.184923][T15145] ? __lock_acquire+0x7d80/0x7d80 [ 537.190027][T15145] should_fail_ex+0x394/0x4c0 [ 537.194801][T15145] should_failslab+0x9/0x20 [ 537.199393][T15145] slab_pre_alloc_hook+0x59/0x300 [ 537.204508][T15145] ? d_instantiate+0x6f/0x90 [ 537.209186][T15145] kmem_cache_alloc+0x5a/0x2c0 [ 537.214143][T15145] ? alloc_empty_file+0x9e/0x1d0 [ 537.219167][T15145] alloc_empty_file+0x9e/0x1d0 [ 537.224016][T15145] alloc_file+0x5b/0x600 [ 537.228326][T15145] alloc_file_pseudo+0x184/0x210 [ 537.233331][T15145] ? fput+0x1a0/0x1a0 [ 537.237388][T15145] ? alloc_fd+0x590/0x640 [ 537.241799][T15145] sock_alloc_file+0xb7/0x280 [ 537.246541][T15145] __sys_socket+0x140/0x1b0 [ 537.251110][T15145] __x64_sys_socket+0x7a/0x90 [ 537.255851][T15145] do_syscall_64+0x55/0xb0 [ 537.260328][T15145] ? clear_bhb_loop+0x40/0x90 [ 537.265072][T15145] ? clear_bhb_loop+0x40/0x90 [ 537.269912][T15145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.275913][T15145] RIP: 0033:0x7f221a59e159 [ 537.280398][T15145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.300162][T15145] RSP: 002b:00007f221b4da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 537.308700][T15145] RAX: ffffffffffffffda RBX: 00007f221a825fa0 RCX: 00007f221a59e159 [ 537.316703][T15145] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 537.324726][T15145] RBP: 00007f221a635024 R08: 0000000000000000 R09: 0000000000000000 [ 537.332762][T15145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.340797][T15145] R13: 00007f221a826038 R14: 00007f221a825fa0 R15: 00007fff6f744768 [ 537.348829][T15145] [ 537.661803][T15156] loop8: detected capacity change from 0 to 16 [ 537.672133][T15156] erofs: (device loop8): mounted with root inode @ nid 36. [ 537.706569][T15156] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 537.752127][T15156] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 538.084068][T15166] loop3: detected capacity change from 0 to 1024 [ 538.355860][T15174] loop5: detected capacity change from 0 to 7 [ 538.386090][T15174] Dev loop5: unable to read RDB block 7 [ 538.394494][T15174] loop5: AHDI p1 p3 p4 [ 538.398821][T15174] loop5: partition table partially beyond EOD, truncated [ 538.422285][T15174] loop5: p1 size 100663296 extends beyond EOD, truncated [ 538.436132][T15174] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 538.813505][ T6016] udevd[6016]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 538.832041][ T9751] udevd[9751]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 539.493981][T15177] loop6: detected capacity change from 0 to 131072 [ 539.534331][T15177] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 539.543150][T15177] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 539.584259][T15177] F2FS-fs (loop6): invalid crc value [ 539.599545][T15177] F2FS-fs (loop6): Found nat_bits in checkpoint [ 539.611670][T15179] loop8: detected capacity change from 0 to 32768 [ 539.673233][T15177] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 539.681431][T15177] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 539.743129][T15179] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 539.805628][T15179] XFS (loop8): Ending clean mount [ 539.837883][T15179] XFS (loop8): Quotacheck needed: Please wait. [ 540.076273][T15179] XFS (loop8): Quotacheck: Done. [ 540.136964][T15203] loop3: detected capacity change from 0 to 128 [ 540.226359][T15203] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 540.274649][T15203] System zones: 1-3, 19-19, 35-36 [ 540.298356][T15203] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 540.312280][T15203] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 540.429267][T13902] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 540.559662][ T9862] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.246524][T15218] syzkaller1: entered promiscuous mode [ 541.261452][T15218] syzkaller1: entered allmulticast mode [ 541.477791][T15222] FAULT_INJECTION: forcing a failure. [ 541.477791][T15222] name fail_futex, interval 1, probability 0, space 0, times 1 [ 541.491071][T15222] CPU: 1 PID: 15222 Comm: syz.3.2970 Not tainted syzkaller #0 [ 541.498714][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.508856][T15222] Call Trace: [ 541.512204][T15222] [ 541.515627][T15222] dump_stack_lvl+0x18c/0x250 [ 541.520384][T15222] ? show_regs_print_info+0x20/0x20 [ 541.525893][T15222] ? load_image+0x420/0x420 [ 541.530491][T15222] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 541.536567][T15222] ? verify_lock_unused+0x140/0x140 [ 541.541855][T15222] ? preempt_schedule_common+0x82/0xc0 [ 541.547424][T15222] should_fail_ex+0x394/0x4c0 [ 541.552195][T15222] get_futex_key+0x136/0x1030 [ 541.556963][T15222] ? futex_setup_timer+0xc0/0xc0 [ 541.562459][T15222] futex_wake+0x127/0x4f0 [ 541.566871][T15222] ? __might_fault+0xaa/0x120 [ 541.571623][T15222] ? futex_wake_mark+0x150/0x150 [ 541.576627][T15222] ? __might_fault+0xaa/0x120 [ 541.581373][T15222] ? __might_fault+0xc6/0x120 [ 541.586106][T15222] ? __might_fault+0xaa/0x120 [ 541.590858][T15222] ? _copy_to_user+0x9b/0xa0 [ 541.595516][T15222] do_futex+0x35d/0x3e0 [ 541.599724][T15222] ? __x64_sys_shmctl+0x80/0x80 [ 541.604635][T15222] ? __ia32_sys_get_robust_list+0x110/0x110 [ 541.610798][T15222] __se_sys_futex+0x3a9/0x440 [ 541.615569][T15222] ? __x64_sys_futex+0xf0/0xf0 [ 541.620430][T15222] ? __x64_sys_futex+0x21/0xf0 [ 541.625303][T15222] do_syscall_64+0x55/0xb0 [ 541.629858][T15222] ? clear_bhb_loop+0x40/0x90 [ 541.634622][T15222] ? clear_bhb_loop+0x40/0x90 [ 541.639423][T15222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.645404][T15222] RIP: 0033:0x7f26f479e159 [ 541.649881][T15222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.669646][T15222] RSP: 002b:00007f26f56490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 541.678170][T15222] RAX: ffffffffffffffda RBX: 00007f26f4a25fa8 RCX: 00007f26f479e159 [ 541.686300][T15222] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f26f4a25fac [ 541.694438][T15222] RBP: 00007f26f4a25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 541.702567][T15222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 541.710773][T15222] R13: 00007f26f4a26038 R14: 00007ffda61057e0 R15: 00007ffda61058c8 [ 541.718916][T15222] [ 542.097914][T15228] loop8: detected capacity change from 0 to 4096 [ 542.122182][T15228] ntfs3: loop8: Failed to load $AttrDef (-2) [ 542.572980][T15239] loop2: detected capacity change from 0 to 512 [ 542.600663][T15239] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 542.712590][T15239] EXT4-fs (loop2): 1 truncate cleaned up [ 542.720186][T15239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.011847][ T28] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 543.060555][ T5776] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /769/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 543.115122][ T5776] EXT4-fs (loop2): Remounting filesystem read-only [ 543.193436][ T28] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.211457][ T28] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 543.241548][ T28] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.261407][ T28] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.287848][T15247] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 543.315498][ T28] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 543.381629][ T5855] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 543.603904][ T5855] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.621518][ T5855] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.638686][ T5855] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.642348][ T28] usb 9-1: USB disconnect, device number 6 [ 543.662732][ T5855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.690118][ T5855] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.719189][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.738948][ T5855] usb 7-1: Product: syz [ 543.747739][ T5855] usb 7-1: Manufacturer: syz [ 543.787620][ T5855] cdc_wdm 7-1:1.0: skipping garbage [ 543.801842][ T5855] cdc_wdm 7-1:1.0: skipping garbage [ 543.820048][T11378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.840650][ T5855] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 543.891384][ T5855] cdc_wdm 7-1:1.0: Unknown control protocol [ 544.063771][ T5846] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 544.132535][ T5846] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 544.140729][T10491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.155192][ C0] wdm_int_callback: 131 callbacks suppressed [ 544.155220][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.168092][ C0] wdm_int_callback: 131 callbacks suppressed [ 544.168111][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.180614][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.187304][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.196606][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.203335][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.209847][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.216638][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.223739][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.230457][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.239158][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.245831][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.252237][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.258897][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.265324][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.271982][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.278298][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 544.285089][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 544.291222][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 544.301969][ T5855] usb 7-1: USB disconnect, device number 21 [ 544.558654][T10491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.756756][T10491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.943088][T10491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.366380][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.385596][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.407178][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.420811][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 545.430089][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 545.440881][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 545.622660][T10491] tipc: Disabling bearer [ 545.671871][T10491] tipc: Left network mode [ 546.067808][T15281] loop3: detected capacity change from 0 to 1024 [ 546.082622][T15281] EXT4-fs: Ignoring removed orlov option [ 546.102085][T15281] EXT4-fs: test_dummy_encryption requires encrypt feature [ 546.980515][T15309] loop6: detected capacity change from 0 to 1024 [ 547.064037][T15309] hfsplus: invalid length 32517 has been corrected to 255 [ 547.167311][ T27] audit: type=1800 audit(1788476807.961:90): pid=15309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3000" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 547.422598][ T143] hfsplus: b-tree write err: -5, ino 20 [ 547.492721][T15266] chnl_net:caif_netlink_parms(): no params data found [ 547.571397][ T5791] Bluetooth: hci1: command tx timeout [ 548.141565][ T28] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 548.381458][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 548.406045][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.441452][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.471422][ T28] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 548.497475][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.534246][ T28] usb 4-1: config 0 descriptor?? [ 549.028475][ T28] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 549.341428][T15266] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.351696][ T9] usb 4-1: USB disconnect, device number 25 [ 549.362680][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.370020][T15266] bridge_slave_0: entered allmulticast mode [ 549.399856][T15266] bridge_slave_0: entered promiscuous mode [ 549.509861][T10491] hsr_slave_0: left promiscuous mode [ 549.517895][T10491] hsr_slave_1: left promiscuous mode [ 549.526556][T10491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.536070][T10491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.552416][T10491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.560179][T10491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.580330][T10491] bridge_slave_1: left allmulticast mode [ 549.588598][T10491] bridge_slave_1: left promiscuous mode [ 549.595092][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.606856][T10491] bridge_slave_0: left allmulticast mode [ 549.614989][T10491] bridge_slave_0: left promiscuous mode [ 549.623118][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.653944][ T5791] Bluetooth: hci1: command tx timeout [ 549.681495][T10491] veth0_to_bond: left allmulticast mode [ 549.705722][T10491] veth0_to_bond: left promiscuous mode [ 549.716513][T10491] veth1_vlan: left promiscuous mode [ 549.727013][T10491] veth0_vlan: left promiscuous mode [ 549.882796][T15356] loop8: detected capacity change from 0 to 32768 [ 549.914006][T15356] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 scanned by syz.8.3008 (15356) [ 549.997486][T15356] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 550.012856][T15356] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 550.056667][T15356] BTRFS info (device loop8): using free space tree [ 550.141311][T15360] loop3: detected capacity change from 0 to 512 [ 550.186089][T15360] EXT4-fs: Ignoring removed nobh option [ 550.209637][T15360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 550.351123][T15360] EXT4-fs (loop3): 1 truncate cleaned up [ 550.420642][T15360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.516213][T15356] BTRFS info (device loop8): enabling ssd optimizations [ 550.530423][T15356] BTRFS info (device loop8): auto enabling async discard [ 550.544747][ T27] audit: type=1800 audit(1788476811.341:91): pid=15360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3010" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 550.994996][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.197564][T13902] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 551.742410][ T5791] Bluetooth: hci1: command tx timeout [ 552.548807][T10491] team0 (unregistering): Port device team_slave_1 removed [ 552.561494][ T5851] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 552.649584][T10491] team0 (unregistering): Port device team_slave_0 removed [ 552.757670][T10491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.768787][ T5851] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.780068][ T5851] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 552.809183][ T5851] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 552.819377][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.858998][ T5851] idmouse 9-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 552.918094][T10491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.024405][ T29] INFO: task kworker/0:3:5785 blocked for more than 143 seconds. [ 553.036525][ T29] Not tainted syzkaller #0 [ 553.043118][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.064676][ T29] task:kworker/0:3 state:D stack:22600 pid:5785 ppid:2 flags:0x00004000 [ 553.074800][ T29] Workqueue: usb_hub_wq hub_event [ 553.080334][ T29] Call Trace: [ 553.091147][ T29] [ 553.094411][ T29] __schedule+0x15ae/0x4660 [ 553.099515][ T29] ? preempt_schedule_common+0x82/0xc0 [ 553.105203][ T29] ? asan.module_dtor+0x20/0x20 [ 553.110155][ T29] ? preempt_schedule+0xc0/0xd0 [ 553.115390][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 553.120888][ T29] ? kick_pool+0x320/0x420 [ 553.125567][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 553.131055][ T29] schedule+0xbd/0x170 [ 553.135255][ T29] schedule_timeout+0xc1/0x2d0 [ 553.140187][ T29] ? console_conditional_schedule+0x40/0x40 [ 553.146235][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 553.152449][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 553.157558][ T29] ? lock_chain_count+0x20/0x20 [ 553.162680][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 553.167799][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 553.173565][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.178845][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 553.184280][ T29] ? wait_for_completion+0x273/0x5a0 [ 553.189662][ T29] wait_for_completion+0x2c6/0x5a0 [ 553.194990][ T29] ? io_schedule+0xd0/0xd0 [ 553.200032][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.205612][ T29] ? __flush_work+0x120/0xac0 [ 553.210464][ T29] __flush_work+0x92f/0xac0 [ 553.216428][ T29] ? __flush_work+0x120/0xac0 [ 553.221273][ T29] ? flush_work+0x20/0x20 [ 553.226583][ T29] ? move_linked_works+0x230/0x230 [ 553.231851][ T29] ? mod_delayed_work_on+0x1c0/0x1c0 [ 553.237348][ T29] ? lock_chain_count+0x20/0x20 [ 553.243981][ T29] ? __cancel_work_timer+0x36e/0x560 [ 553.249459][ T29] __cancel_work_timer+0x3f8/0x560 [ 553.263624][ T29] ? cancel_work_sync+0x20/0x20 [ 553.268582][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.275301][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 553.280602][ T29] ? _raw_spin_unlock_irq+0x2e/0x50 [ 553.289263][ T29] ? usb_hcd_flush_endpoint+0x3e5/0x400 [ 553.295145][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 553.300952][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 553.307389][ T29] mmc_stop_host+0xd9/0x460 [ 553.312503][ T29] mmc_remove_host+0x15/0x60 [ 553.317278][ T29] vub300_disconnect+0x14f/0x2e0 [ 553.323314][ T29] usb_unbind_interface+0x207/0x870 [ 553.329067][ T29] ? kernfs_remove_by_name_ns+0x117/0x150 [ 553.335233][ T29] ? usb_driver_release_interface+0x1c0/0x1c0 [ 553.341889][ T29] device_release_driver_internal+0x458/0x6f0 [ 553.348141][ T29] bus_remove_device+0x43b/0x520 [ 553.353513][ T29] ? bus_probe_device+0x260/0x260 [ 553.361071][ T29] ? up_write+0x1be/0x410 [ 553.366521][ T29] ? kernfs_remove_by_name_ns+0x117/0x150 [ 553.372678][ T29] device_del+0x51f/0x910 [ 553.377137][ T29] ? device_release+0xbc/0x1e0 [ 553.382336][ T29] ? kill_device+0x160/0x160 [ 553.387001][ T29] ? kobject_put+0x421/0x450 [ 553.392004][ T29] usb_disable_device+0x3ee/0x8a0 [ 553.397177][ T29] usb_disconnect+0x340/0x8a0 [ 553.402676][ T29] hub_event+0x1d69/0x4a80 [ 553.407289][ T29] ? hub_post_resume+0x120/0x120 [ 553.412609][ T29] ? read_lock_is_recursive+0x20/0x20 [ 553.418154][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.428343][ T29] ? process_scheduled_works+0x975/0x1600 [ 553.434528][ T29] ? process_scheduled_works+0x975/0x1600 [ 553.440340][ T29] process_scheduled_works+0xa60/0x1600 [ 553.449744][ T29] ? worker_attach_to_pool+0x370/0x370 [ 553.456721][ T29] ? assign_work+0x3cc/0x5d0 [ 553.462771][ T29] worker_thread+0xa5e/0xfe0 [ 553.467476][ T29] kthread+0x2fa/0x390 [ 553.472438][ T29] ? pr_cont_work+0x550/0x550 [ 553.477189][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.481972][ T29] ret_from_fork+0x48/0x80 [ 553.486448][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.491110][ T29] ret_from_fork_asm+0x11/0x20 [ 553.499803][ T29] [ 553.505556][ T29] INFO: task kworker/0:5:5853 blocked for more than 143 seconds. [ 553.516889][ T29] Not tainted syzkaller #0 [ 553.522194][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.531713][ T29] task:kworker/0:5 state:D stack:15176 pid:5853 ppid:2 flags:0x00004000 [ 553.541014][ T29] Workqueue: events_freezable mmc_rescan [ 553.547028][ T29] Call Trace: [ 553.550496][ T29] [ 553.553783][ T29] __schedule+0x15ae/0x4660 [ 553.558567][ T29] ? mark_lock+0x94/0x320 [ 553.563315][ T29] ? asan.module_dtor+0x20/0x20 [ 553.568254][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 553.575295][ T29] ? kick_pool+0x106/0x420 [ 553.582145][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.587420][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 553.593116][ T29] schedule+0xbd/0x170 [ 553.597271][ T29] schedule_timeout+0xc1/0x2d0 [ 553.603782][ T29] ? console_conditional_schedule+0x40/0x40 [ 553.610807][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 553.617665][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 553.623727][ T29] ? lock_chain_count+0x20/0x20 [ 553.628844][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 553.634917][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 553.640713][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.646556][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 553.652457][ T29] ? wait_for_completion+0x273/0x5a0 [ 553.658035][ T29] wait_for_completion+0x2c6/0x5a0 [ 553.663495][ T29] ? io_schedule+0xd0/0xd0 [ 553.668006][ T29] ? vub300_mmc_request+0xffd/0x1900 [ 553.673708][ T29] mmc_wait_for_req_done+0x37/0x460 [ 553.679212][ T29] ? mmc_start_request+0x15d/0x1d0 [ 553.685386][ T29] ? mmc_wait_for_req+0x1b0/0x230 [ 553.690501][ T29] mmc_wait_for_cmd+0x178/0x280 [ 553.696737][ T29] ? mmc_cqe_post_req+0x90/0x90 [ 553.701773][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 553.708107][ T29] ? trace_raw_output_mmc_request_done+0xcf0/0xcf0 [ 553.716479][ T29] ? _raw_spin_unlock+0x40/0x40 [ 553.722999][ T29] sdio_reset+0xf8/0x3c0 [ 553.727374][ T29] ? mmc_io_rw_extended+0x9d0/0x9d0 [ 553.734833][ T29] ? __mmc_claim_host+0x163/0x620 [ 553.739963][ T29] ? mmc_set_data_timeout+0x8a0/0x8a0 [ 553.746017][ T29] ? mmc_power_up+0x5d/0x610 [ 553.750781][ T29] mmc_rescan+0x69b/0xfb0 [ 553.755764][ T29] ? process_scheduled_works+0x975/0x1600 [ 553.761908][ T29] process_scheduled_works+0xa60/0x1600 [ 553.767962][ T29] ? worker_attach_to_pool+0x370/0x370 [ 553.773979][ T29] ? assign_work+0x3cc/0x5d0 [ 553.778878][ T29] worker_thread+0xa5e/0xfe0 [ 553.784057][ T29] ? _raw_spin_unlock+0x40/0x40 [ 553.789065][ T29] ? __kthread_parkme+0x71/0x1c0 [ 553.796911][ T29] kthread+0x2fa/0x390 [ 553.801160][ T29] ? pr_cont_work+0x550/0x550 [ 553.808844][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.813586][ T5791] Bluetooth: hci1: command tx timeout [ 553.820159][ T29] ret_from_fork+0x48/0x80 [ 553.824923][ T29] ? kthread_blkcg+0xd0/0xd0 [ 553.833836][ T29] ret_from_fork_asm+0x11/0x20 [ 553.839000][ T29] [ 553.858629][ T29] [ 553.858629][ T29] Showing all locks held in the system: [ 553.866947][ T29] 3 locks held by kworker/0:1/9: [ 553.872186][ T29] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 553.885240][ T29] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 553.897055][ T29] #2: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 553.907009][ T29] 1 lock held by khungtaskd/29: [ 553.915866][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 553.926946][ T29] 3 locks held by kworker/u4:5/143: [ 553.935103][ T29] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 553.947816][ T29] #1: ffffc90002e0fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 553.960367][ T29] #2: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 553.969666][ T29] 2 locks held by dhcpcd/5436: [ 553.974665][ T29] #0: ffff888077d42690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 553.985217][ T29] #1: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x77c/0xec0 [ 553.994499][ T29] 2 locks held by getty/5532: [ 553.999229][ T29] #0: ffff88802d79e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 554.009172][ T29] #1: ffffc900032662f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 554.020404][ T29] 5 locks held by kworker/0:3/5785: [ 554.028592][ T29] #0: ffff888146e58138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.047138][ T29] #1: ffffc90004627d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.066938][ T29] #2: ffff888143f221d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80 [ 554.075986][ T29] #3: ffff888059eaf1d8 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xfc/0x8a0 [ 554.085585][ T29] #4: ffff888026bfa1a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 554.096366][ T29] 2 locks held by kworker/0:5/5853: [ 554.101754][ T29] #0: ffff888017c72138 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.113798][ T29] #1: ffffc90004897d00 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.126762][ T29] 3 locks held by kworker/0:6/5855: [ 554.132180][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.144494][ T29] #1: ffffc90004927d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.155870][ T29] #2: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 554.177346][ T29] 2 locks held by kworker/0:7/9610: [ 554.182771][ T29] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.194196][ T29] #1: ffffc900033e7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.207011][ T29] 2 locks held by kworker/u4:16/10059: [ 554.213768][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 554.224388][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 554.233678][ T29] 5 locks held by kworker/u4:28/10491: [ 554.239867][ T29] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.252102][ T29] #1: ffffc900032bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 554.263068][ T29] #2: ffffffff8e3ca510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 554.273151][ T29] #3: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa00 [ 554.285165][ T29] #4: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 554.298794][ T29] 1 lock held by syz-executor/15266: [ 554.307488][ T29] #0: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 554.321341][ T29] 1 lock held by syz.6.3016/15393: [ 554.327350][ T29] #0: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 554.337479][ T29] 2 locks held by syz.3.3019/15401: [ 554.343352][ T29] #0: ffffffff8e43c9b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 554.352534][ T29] #1: ffffffff8e3d7548 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5e/0x890 [ 554.362497][ T29] 2 locks held by syz.8.3020/15406: [ 554.367875][ T29] #0: ffffffff8dce8ef0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x300 [ 554.377534][ T29] #1: ffff888074a366a8 (&dev->lock#4){+.+.}-{3:3}, at: idmouse_open+0xf4/0xeb0 [ 554.391726][ T29] [ 554.394227][ T29] ============================================= [ 554.394227][ T29] [ 554.406403][ T29] NMI backtrace for cpu 0 [ 554.410815][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 554.418085][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.428193][ T29] Call Trace: [ 554.431521][ T29] [ 554.434598][ T29] dump_stack_lvl+0x18c/0x250 [ 554.439763][ T29] ? __wake_up_klogd+0xd9/0x100 [ 554.444775][ T29] ? show_regs_print_info+0x20/0x20 [ 554.450079][ T29] ? load_image+0x420/0x420 [ 554.454685][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 554.459690][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 554.465916][ T29] ? load_image+0x420/0x420 [ 554.470478][ T29] ? wq_watchdog_touch+0xef/0x170 [ 554.475678][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 554.481852][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 554.487912][ T29] watchdog+0xf59/0xfa0 [ 554.492141][ T29] ? watchdog+0x1e1/0xfa0 [ 554.496548][ T29] kthread+0x2fa/0x390 [ 554.500684][ T29] ? hungtask_pm_notify+0x50/0x50 [ 554.505950][ T29] ? kthread_blkcg+0xd0/0xd0 [ 554.510615][ T29] ret_from_fork+0x48/0x80 [ 554.515103][ T29] ? kthread_blkcg+0xd0/0xd0 [ 554.519841][ T29] ret_from_fork_asm+0x11/0x20 [ 554.524696][ T29] [ 554.528847][ T29] Sending NMI from CPU 0 to CPUs 1: [ 554.534822][ C1] NMI backtrace for cpu 1 [ 554.534834][ C1] CPU: 1 PID: 3445 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 554.534852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.534864][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 554.534889][ C1] RIP: 0010:mark_lock+0x5/0x320 [ 554.534916][ C1] Code: c7 c7 70 c2 8c 8e e8 4a b0 76 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 41 57 41 56 <41> 55 41 54 53 50 89 d5 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc [ 554.534931][ C1] RSP: 0018:ffffc9000c7cf880 EFLAGS: 00000006 [ 554.534945][ C1] RAX: 0000000000000000 RBX: ffff88802db8bc00 RCX: ffffffff81695434 [ 554.534958][ C1] RDX: 0000000000000006 RSI: ffff88802db8c6e8 RDI: ffff88802db8bc00 [ 554.534970][ C1] RBP: ffffc9000c7cf960 R08: ffffffff911ef5ef R09: 1ffffffff223debd [ 554.534983][ C1] R10: dffffc0000000000 R11: fffffbfff223debe R12: ffff88802db8c708 [ 554.534996][ C1] R13: 0000000000000000 R14: 1ffff11005b718dc R15: ffff88802db8c6e8 [ 554.535009][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 554.535023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.535035][ C1] CR2: 0000001b30f1bff8 CR3: 000000006507e000 CR4: 00000000003506e0 [ 554.535051][ C1] Call Trace: [ 554.535057][ C1] [ 554.535072][ C1] lockdep_hardirqs_on_prepare+0x384/0x7d0 [ 554.535095][ C1] ? lock_chain_count+0x20/0x20 [ 554.535116][ C1] ? rcu_is_watching+0x15/0xb0 [ 554.535141][ C1] trace_hardirqs_on+0x28/0x40 [ 554.535165][ C1] kasan_quarantine_put+0xd8/0x220 [ 554.535194][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 554.535214][ C1] ? skb_release_data+0x609/0x7f0 [ 554.535232][ C1] __kmem_cache_free+0xba/0x1f0 [ 554.535261][ C1] skb_release_data+0x609/0x7f0 [ 554.535284][ C1] consume_skb+0xb2/0x110 [ 554.535302][ C1] nsim_dev_trap_report_work+0x723/0xa90 [ 554.535326][ C1] ? process_scheduled_works+0x975/0x1600 [ 554.535350][ C1] process_scheduled_works+0xa60/0x1600 [ 554.535384][ C1] ? worker_attach_to_pool+0x370/0x370 [ 554.535408][ C1] ? assign_work+0x3cc/0x5d0 [ 554.535431][ C1] worker_thread+0xa5e/0xfe0 [ 554.535464][ C1] kthread+0x2fa/0x390 [ 554.535480][ C1] ? pr_cont_work+0x550/0x550 [ 554.535501][ C1] ? kthread_blkcg+0xd0/0xd0 [ 554.535518][ C1] ret_from_fork+0x48/0x80 [ 554.535539][ C1] ? kthread_blkcg+0xd0/0xd0 [ 554.535555][ C1] ret_from_fork_asm+0x11/0x20 [ 554.535587][ C1] [ 554.601586][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 554.601645][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 554.601699][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.601733][ T29] Call Trace: [ 554.601762][ T29] [ 554.601785][ T29] dump_stack_lvl+0x18c/0x250 [ 554.601887][ T29] ? show_regs_print_info+0x20/0x20 [ 554.601952][ T29] ? load_image+0x420/0x420 [ 554.602044][ T29] panic+0x2ca/0x720 [ 554.602146][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 554.602230][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 554.602303][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 554.602389][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 554.602513][ T29] watchdog+0xf98/0xfa0 [ 554.602576][ T29] ? watchdog+0x1e1/0xfa0 [ 554.602642][ T29] kthread+0x2fa/0x390 [ 554.602695][ T29] ? hungtask_pm_notify+0x50/0x50 [ 554.602771][ T29] ? kthread_blkcg+0xd0/0xd0 [ 554.602832][ T29] ret_from_fork+0x48/0x80 [ 554.602905][ T29] ? kthread_blkcg+0xd0/0xd0 [ 554.602982][ T29] ret_from_fork_asm+0x11/0x20 [ 554.603102][ T29] [ 554.609202][ T29] Kernel Offset: disabled [ 554.898359][ T29] Rebooting in 86400 seconds..