last executing test programs: 5m36.231997653s ago: executing program 1 (id=282): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x102) 5m35.875552571s ago: executing program 1 (id=287): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x3}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x20) 5m35.640869265s ago: executing program 1 (id=289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x6145) 5m34.56242555s ago: executing program 1 (id=299): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1006019, &(0x7f0000000100)={[{@noblock_validity}, {@commit={'commit', 0x3d, 0x1}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x63e, &(0x7f00000003c0)="$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") syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) 5m33.874849354s ago: executing program 1 (id=306): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380)) 5m33.043952563s ago: executing program 1 (id=310): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) 5m32.34048394s ago: executing program 32 (id=310): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) 2m49.110587697s ago: executing program 2 (id=1825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000183000/0x3000)=nil], &(0x7f0000000040)=[0x1], &(0x7f0000000080), 0x0) 2m47.843812286s ago: executing program 2 (id=1848): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2m47.39978601s ago: executing program 2 (id=1856): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10001}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 2m47.280945271s ago: executing program 2 (id=1858): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000003c0), 0x0, 0x5ee, &(0x7f0000000600)="$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") chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') 2m46.949435689s ago: executing program 2 (id=1865): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c75737271756f74612c626172726965723d30303030303030303000303030303030303030372c6865617274626561743d6e6f6e652c6e6f696e74722c0090df6b00dc5c949becf8b614a04b49110b905f436a45d3ff87af5987253b707f006cf11d449e89dbcff710a5693dbfed612db795268ff5cb88f405ac68466f8c692890cc0ba6e9981ea7d08b2cb34b16705b3635c71a3a46d12301991b2fb7d8"], 0x41, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/179, 0xb3) 2m46.625949217s ago: executing program 2 (id=1871): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m46.180477191s ago: executing program 33 (id=1871): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m41.220141202s ago: executing program 5 (id=2576): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.733856758s ago: executing program 5 (id=2583): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x7f, 0x3) 1m40.617522746s ago: executing program 5 (id=2587): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 1m40.457693903s ago: executing program 5 (id=2592): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000006540)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="665134ecfac9621bdd9f0d3c85f7f044fb9b61056494501f1b9bd08326df69b6a59a873a932b5d62e563eea7457b7248182065bc8be2d7f948c4d9e8f1987f25db9566bffd50774befc6477fe948ca12322ebcdce621fdae6f9756938d7902eabe21deaddc305bbb7dc3f32fd8447fe99f8481e34816ff645bc5771882f2471af71e3d105a5c2996145e072ea884d2e6d412b6d934a94f5aa6c585b6364339229b75eae2f6515fd05c57d692ec19558a83b1276fd9f666cf8bd8cf5b2239989248e3d6dfbab467b7c0fc8421dbf4", @ANYRES32, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0x620d, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15) 1m39.563717346s ago: executing program 5 (id=2607): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) dup2(r0, r1) 1m39.000640778s ago: executing program 5 (id=2615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m38.610420867s ago: executing program 34 (id=2615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m25.868158375s ago: executing program 3 (id=2753): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) 1m25.77117166s ago: executing program 3 (id=2754): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) r1 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r1, 0x0, 0x40) 1m25.638964124s ago: executing program 3 (id=2757): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 1m25.42808426s ago: executing program 3 (id=2758): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x800009, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m25.037914575s ago: executing program 3 (id=2762): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x97a15000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r0}, &(0x7f0000001380)=""/4093, 0xffd, 0x0) 1m24.589600306s ago: executing program 3 (id=2763): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 1m24.084525748s ago: executing program 35 (id=2763): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 11.118604164s ago: executing program 0 (id=3486): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 9.909856104s ago: executing program 0 (id=3498): unshare(0x2a020400) open$dir(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x202000, 0x82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 8.544034953s ago: executing program 0 (id=3510): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 8.363693294s ago: executing program 0 (id=3512): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8.174803898s ago: executing program 0 (id=3515): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="400b080000000f"], 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.878588387s ago: executing program 0 (id=3530): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000000c0)) 2.929444248s ago: executing program 8 (id=3566): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2.812133473s ago: executing program 8 (id=3569): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x40000001, 0x4, 0x0, 0x2, "0062ba7d8207000000ecf5000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) 2.573520767s ago: executing program 8 (id=3572): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.514872488s ago: executing program 8 (id=3573): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2.446286347s ago: executing program 9 (id=3575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x22000900) 2.3078345s ago: executing program 7 (id=3578): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1004006, &(0x7f0000000740)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@grpid}, {@noquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 2.049702132s ago: executing program 9 (id=3581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.032309245s ago: executing program 8 (id=3582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00') 1.897407532s ago: executing program 6 (id=3583): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) creat(&(0x7f0000000240)='./bus\x00', 0xbb) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x3000010, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.858105962s ago: executing program 9 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, r1, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PBSS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5c8c8}, 0x4) 1.78448822s ago: executing program 7 (id=3586): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/42, 0x2a) getdents64(r1, 0xfffffffffffffffe, 0x29) 1.714114183s ago: executing program 8 (id=3587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.639324785s ago: executing program 9 (id=3588): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) 1.583272908s ago: executing program 7 (id=3589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.493695213s ago: executing program 7 (id=3591): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 1.28416505s ago: executing program 9 (id=3593): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x2a04000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2294], 0x1, 0x5e89, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 1.262866861s ago: executing program 4 (id=3594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0) 932.915511ms ago: executing program 4 (id=3595): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x118) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x0, 0x9}}, 0x28) sendfile(r2, r1, 0x0, 0x4000000053d2) 870.6924ms ago: executing program 6 (id=3596): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) 869.384452ms ago: executing program 4 (id=3597): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c010000160001000000000000000000ac1414bb000000000000000000000000ff0100000000000000000000000000010000000000000000000000003c00", @ANYRES32=0x0, @ANYBLOB="e0000001"], 0x10c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211"], 0x6f4}}, 0x0) 821.948712ms ago: executing program 7 (id=3598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 710.970245ms ago: executing program 4 (id=3599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, 0x0, 0x0, 0x189, 0x0) sendmmsg$unix(r0, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) 709.609981ms ago: executing program 6 (id=3600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 598.782054ms ago: executing program 4 (id=3601): r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x3000000000000, 0x0) 454.968658ms ago: executing program 4 (id=3602): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7f) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 454.12392ms ago: executing program 6 (id=3603): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000080)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) fdatasync(r1) 159.397703ms ago: executing program 7 (id=3604): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 98.001967ms ago: executing program 6 (id=3605): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000010000006500000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.169911ms ago: executing program 6 (id=3606): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x9, 0x0, {{0x6, 0x4, 0x1, 0xb, 0x18, 0x64, 0x0, 0xde, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000871006001c001a80180004801400098008000200000000000800"], 0x3c}}, 0x0) 0s ago: executing program 9 (id=3607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) kernel console output (not intermixed with test programs): 0x1003 length: 249 > 9 [ 393.972491][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.983337][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.991084][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.003379][T13770] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 394.118412][T13770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.557726][T13761] loop4: detected capacity change from 0 to 32768 [ 394.739481][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.763539][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.765614][T13781] loop0: detected capacity change from 0 to 256 [ 394.787308][ T12] bond0 (unregistering): Released all slaves [ 394.792098][T13781] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 395.545833][ T12] hsr_slave_0: left promiscuous mode [ 395.568230][ T12] hsr_slave_1: left promiscuous mode [ 395.577756][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.587378][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.597317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.605596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.671673][ T12] veth1_macvtap: left promiscuous mode [ 395.677326][ T12] veth0_macvtap: left promiscuous mode [ 395.683207][ T12] veth1_vlan: left promiscuous mode [ 395.688631][ T12] veth0_vlan: left promiscuous mode [ 396.031154][ T5839] Bluetooth: hci4: command tx timeout [ 396.924406][ T12] team0 (unregistering): Port device team_slave_1 removed [ 397.031625][ T12] team0 (unregistering): Port device team_slave_0 removed [ 397.068056][T13833] loop6: detected capacity change from 0 to 1024 [ 397.075459][T13833] EXT4-fs: Ignoring removed nobh option [ 397.081259][T13833] EXT4-fs: Ignoring removed orlov option [ 397.088262][T13836] netlink: 'syz.7.2801': attribute type 10 has an invalid length. [ 397.128211][T13833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.221149][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.574760][T13808] syzkaller1: entered promiscuous mode [ 397.580262][T13808] syzkaller1: entered allmulticast mode [ 397.589429][T13819] tipc: Started in network mode [ 397.596319][T13819] tipc: Node identity 7f000001, cluster identity 4711 [ 397.603782][T13819] tipc: Enabled bearer , priority 10 [ 397.667303][T13836] syz_tun: entered promiscuous mode [ 397.693572][T13836] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 398.085150][T13771] chnl_net:caif_netlink_parms(): no params data found [ 398.111019][ T5839] Bluetooth: hci4: command tx timeout [ 398.299734][T13864] pim6reg1: entered promiscuous mode [ 398.307541][T13864] pim6reg1: entered allmulticast mode [ 398.313405][T13866] loop7: detected capacity change from 0 to 512 [ 398.320615][T13866] EXT4-fs: inline encryption not supported [ 398.367460][T13873] Dead loop on virtual device ip6_vti0, fix it urgently! [ 398.401318][T13873] Dead loop on virtual device ip6_vti0, fix it urgently! [ 398.409903][T13873] Dead loop on virtual device ip6_vti0, fix it urgently! [ 398.412830][T13866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.431720][T13873] Dead loop on virtual device ip6_vti0, fix it urgently! [ 398.459971][T13873] Dead loop on virtual device ip6_vti0, fix it urgently! [ 398.467534][T13873] Dead loop on virtual device ip6_vti0, fix it urgently! [ 398.484210][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 398.484230][ T31] audit: type=1800 audit(1765383166.208:257): pid=13866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2813" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 398.722682][ T5922] tipc: Node number set to 2130706433 [ 398.728644][ T12] IPVS: stop unused estimator thread 0... [ 398.889345][T13771] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.924324][T13771] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.931728][T13771] bridge_slave_0: entered allmulticast mode [ 398.942612][T13771] bridge_slave_0: entered promiscuous mode [ 398.951891][T13771] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.959066][T13771] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.979545][T13771] bridge_slave_1: entered allmulticast mode [ 398.993053][T13771] bridge_slave_1: entered promiscuous mode [ 399.070366][T11322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.153730][T13771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.177849][T13771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.194508][T13894] sp0: Synchronizing with TNC [ 399.211983][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 399.313259][T13771] team0: Port device team_slave_0 added [ 399.353234][T13771] team0: Port device team_slave_1 added [ 399.371057][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 399.387145][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.413468][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.441696][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.465974][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.478170][ T10] usb 9-1: config 0 descriptor?? [ 399.488184][ T10] hub 9-1:0.0: USB hub found [ 399.535319][T13771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.559396][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.593860][T13771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.671250][T13771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.700290][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.733155][T13888] loop8: detected capacity change from 0 to 764 [ 399.767192][T13771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.779928][ T10] hub 9-1:0.0: 1 port detected [ 399.953256][T13771] hsr_slave_0: entered promiscuous mode [ 399.960339][T13771] hsr_slave_1: entered promiscuous mode [ 399.982028][T13771] debugfs: 'hsr0' already exists in 'hsr' [ 399.988050][T13771] Cannot create hsr debugfs directory [ 399.994341][ T10] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 400.021117][ T10] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 400.031013][ T30] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 400.052566][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 400.058635][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 400.124133][ T10] usb 9-1: USB disconnect, device number 2 [ 400.181250][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 400.186524][ T5839] Bluetooth: hci4: command tx timeout [ 400.200469][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.230489][ T30] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 400.246246][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.272895][ T30] usb 5-1: config 0 descriptor?? [ 400.406178][T13914] loop7: detected capacity change from 0 to 32768 [ 400.432811][T13914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2831 (13914) [ 400.478137][T13914] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.501630][T13914] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 400.546235][T13771] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 400.593245][T13771] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 400.618675][T13771] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 400.636107][T13771] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 400.668779][T13920] loop6: detected capacity change from 0 to 32768 [ 400.690247][ T30] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 400.694260][T13914] BTRFS info (device loop7): enabling ssd optimizations [ 400.709920][T13920] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 2d5e378a-6c13-425a-b2b7-2a614665908f [ 400.720373][T13920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2834 (13920) [ 400.738161][T13920] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.749026][T13920] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 400.754630][T13914] BTRFS info (device loop7): turning on async discard [ 400.794346][T13914] BTRFS info (device loop7): enabling free space tree [ 400.967433][T13920] BTRFS info (device loop6): turning off barriers [ 400.974216][T13920] BTRFS info (device loop6): enabling free space tree [ 400.983740][T11322] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.995555][T13920] BTRFS info (device loop6): use zstd compression, level 3 [ 401.031600][T13771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.079275][T13771] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.102596][ T2118] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.109798][ T2118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.128424][ T5947] usb 5-1: USB disconnect, device number 23 [ 401.139410][ T2118] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.146572][ T2118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.241618][T13963] loop8: detected capacity change from 0 to 1024 [ 401.344714][ T6977] BTRFS info (device loop6): last unmount of filesystem 2d5e378a-6c13-425a-b2b7-2a614665908f [ 401.423672][ T37] hfsplus: b-tree write err: -5, ino 4 [ 401.778332][T13973] netlink: 'syz.8.2842': attribute type 17 has an invalid length. [ 401.816594][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2842'. [ 401.837815][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2842'. [ 401.920111][T13979] loop4: detected capacity change from 0 to 256 [ 401.968744][T13973] gretap0: entered promiscuous mode [ 401.976625][T13979] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 401.989281][T13973] gretap0: left promiscuous mode [ 402.026576][T13979] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 402.101132][ T31] audit: type=1800 audit(1765383169.808:258): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2843" name="file1" dev="loop4" ino=1048747 res=0 errno=0 [ 402.211934][T13771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.265791][ T5839] Bluetooth: hci4: command tx timeout [ 402.268323][T13981] loop6: detected capacity change from 0 to 4096 [ 402.341795][T13981] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 402.394102][T13981] ntfs3(loop6): ino=1a, mi_enum_attr [ 402.399545][T13981] ntfs3(loop6): ino=1a, mi_enum_attr [ 402.422977][T13981] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 402.449253][T13991] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 402.536732][T13994] loop4: detected capacity change from 0 to 1024 [ 402.557970][T13994] EXT4-fs: inline encryption not supported [ 402.568166][T13996] loop0: detected capacity change from 0 to 256 [ 402.597793][T13996] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 402.615844][T13994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.633940][T13991] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 402.654275][T13991] overlayfs: failed to look up (tracing) for ino (-66) [ 402.769564][T13994] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 402.858538][T13994] EXT4-fs (loop4): Remounting filesystem read-only [ 402.973006][T13771] veth0_vlan: entered promiscuous mode [ 402.997555][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.021756][T13771] veth1_vlan: entered promiscuous mode [ 403.117960][T13771] veth0_macvtap: entered promiscuous mode [ 403.145934][T13771] veth1_macvtap: entered promiscuous mode [ 403.206429][T13771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.253336][T14023] sctp: [Deprecated]: syz.6.2859 (pid 14023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.253336][T14023] Use struct sctp_sack_info instead [ 403.264535][T13771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.329340][ T60] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.394357][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.410676][T14027] pimreg: tun_chr_ioctl cmd 1074025677 [ 403.419220][T14027] pimreg: linktype set to 825 [ 403.428953][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.442531][T14027] pimreg: tun_chr_ioctl cmd 1074025673 [ 403.473974][T14031] loop6: detected capacity change from 0 to 1024 [ 403.489907][T14031] EXT4-fs: Ignoring removed orlov option [ 403.497641][T14031] EXT4-fs: inline encryption not supported [ 403.527265][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.529061][T14031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.704360][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.739445][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.762190][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.866767][ T7731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.888766][ T7731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.313402][T14058] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2871'. [ 404.526913][T14033] loop0: detected capacity change from 0 to 32768 [ 404.609951][T14033] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 404.641073][T14033] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 404.679123][T14033] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 404.748247][T11768] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 404.755241][T11768] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 404.881573][T11768] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 404.889217][T11768] gfs2: fsid=syz:syz.0: jid=0: Done [ 404.914304][T14033] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 405.014190][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2877'. [ 405.219973][T14033] gfs2: fsid=syz:syz.0: found 1 quota changes [ 405.232492][T14051] loop6: detected capacity change from 0 to 32768 [ 405.241493][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2879'. [ 405.276219][T14051] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 405.362845][T14051] JBD2: Ignoring recovery information on journal [ 405.553745][T14051] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 405.599243][T14089] loop4: detected capacity change from 0 to 512 [ 405.676236][T14089] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2882: inode has both inline data and extents flags [ 405.751932][ T5831] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 405.771360][ T5831] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 405.780743][ T5831] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5831 [syz-executor] gfs2_quota_sync+0x359/0x460 [ 405.791727][ T5947] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 405.801308][ T5831] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 405.837943][T14089] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2882: couldn't read orphan inode 15 (err -117) [ 405.847819][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 405.847856][ T5831] Tainted: [L]=SOFTLOCKUP [ 405.847867][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.847882][ T5831] Call Trace: [ 405.847893][ T5831] [ 405.847904][ T5831] dump_stack_lvl+0x189/0x250 [ 405.847945][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.847978][ T5831] ? queue_delayed_work_on+0x11a/0x280 [ 405.848007][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848036][ T5831] ? lockdep_hardirqs_on+0x98/0x140 [ 405.848074][ T5831] ? preempt_schedule+0xae/0xc0 [ 405.848119][ T5831] gfs2_withdraw+0xc3/0x1b0 [ 405.848148][ T5831] inode_go_instantiate+0xdd0/0x1210 [ 405.848200][ T5831] ? __pfx_inode_go_instantiate+0x10/0x10 [ 405.848241][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848271][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848299][ T5831] ? gfs2_glock_nq+0xedd/0x15f0 [ 405.848334][ T5831] gfs2_instantiate+0x168/0x220 [ 405.848364][ T5831] gfs2_glock_wait+0x1d4/0x2a0 [ 405.848396][ T5831] do_sync+0x46f/0xc60 [ 405.848428][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848456][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 405.848487][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848515][ T5831] ? gfs2_quota_sync+0x359/0x460 [ 405.848561][ T5831] ? __pfx_do_sync+0x10/0x10 [ 405.848623][ T5831] ? gfs2_quota_sync+0x359/0x460 [ 405.848660][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848693][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.848721][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 405.848764][ T5831] gfs2_quota_sync+0x359/0x460 [ 405.848812][ T5831] gfs2_sync_fs+0x4c/0xb0 [ 405.848844][ T5831] sync_filesystem+0xee/0x230 [ 405.848886][ T5831] generic_shutdown_super+0x6f/0x2c0 [ 405.848928][ T5831] kill_block_super+0x44/0x90 [ 405.848956][ T5831] deactivate_locked_super+0xbc/0x130 [ 405.848996][ T5831] cleanup_mnt+0x425/0x4c0 [ 405.849034][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.849061][ T5831] ? lockdep_hardirqs_on+0x98/0x140 [ 405.849102][ T5831] task_work_run+0x1d4/0x260 [ 405.849143][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 405.849186][ T5831] ? exit_to_user_mode_loop+0x55/0x4f0 [ 405.849218][ T5831] exit_to_user_mode_loop+0xff/0x4f0 [ 405.849243][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.849272][ T5831] ? rcu_is_watching+0x15/0xb0 [ 405.849310][ T5831] do_syscall_64+0x2e3/0xf80 [ 405.849349][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.849373][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.849401][ T5831] ? exc_page_fault+0xab/0x100 [ 405.849440][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.849465][ T5831] RIP: 0033:0x7f8219790a77 [ 405.849488][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 405.849509][ T5831] RSP: 002b:00007ffc585b2118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 405.849535][ T5831] RAX: 0000000000000000 RBX: 00007f8219813d7d RCX: 00007f8219790a77 [ 405.849553][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc585b21d0 [ 405.849570][ T5831] RBP: 00007ffc585b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 405.849586][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc585b3260 [ 405.849604][ T5831] R13: 00007f8219813d7d R14: 0000000000062fac R15: 00007ffc585b32a0 [ 405.849650][ T5831] [ 405.849661][ T5831] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 405.946920][T14089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.024403][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 406.024459][ T5947] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 406.024488][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.032170][ T5947] usb 10-1: config 0 descriptor?? [ 406.170298][T14089] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #2: comm syz.4.2882: directory missing '.' [ 406.183448][T14087] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 406.296177][ T6977] ocfs2: Unmounting device (7,6) on (node local) [ 406.354875][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.519901][T14098] syzkaller1: entered promiscuous mode [ 406.531141][T14098] syzkaller1: entered allmulticast mode [ 406.625414][T14100] loop7: detected capacity change from 0 to 164 [ 406.723882][T14104] loop8: detected capacity change from 0 to 512 [ 406.735753][T14104] EXT4-fs: inline encryption not supported [ 406.775799][ T5947] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 406.799977][T14104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.928441][ T31] audit: type=1800 audit(1765383174.648:259): pid=14104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2890" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 406.980555][ T5947] usb 10-1: USB disconnect, device number 2 [ 407.295851][T13315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.003787][T14138] netlink: 360 bytes leftover after parsing attributes in process `syz.7.2905'. [ 408.010998][T14135] loop8: detected capacity change from 0 to 256 [ 408.033258][T14135] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.158252][T14144] loop4: detected capacity change from 0 to 64 [ 408.788794][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2919'. [ 408.854770][T14174] loop9: detected capacity change from 0 to 128 [ 409.043238][T14176] loop9: detected capacity change from 0 to 4096 [ 409.050785][T14176] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 409.799434][T14192] loop8: detected capacity change from 0 to 256 [ 410.139399][T14194] loop8: detected capacity change from 0 to 512 [ 410.161763][T14194] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 410.319129][T14187] loop4: detected capacity change from 0 to 131072 [ 410.328081][T14187] F2FS-fs (loop4): invalid crc value [ 410.354621][T14188] loop9: detected capacity change from 0 to 32768 [ 410.382432][T14188] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.419664][T14187] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 410.422778][T14188] XFS (loop9): Ending clean mount [ 410.435387][T14187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 410.493053][T14210] loop8: detected capacity change from 0 to 128 [ 410.505708][T14210] EXT4-fs (loop8): Test dummy encryption mode enabled [ 410.529694][T13771] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.549912][T14210] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.567138][T14210] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.652853][T14210] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 410.853225][T13315] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.075100][ T5831] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 564 [ 411.110243][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 411.110286][ T5831] Tainted: [L]=SOFTLOCKUP [ 411.110296][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.110312][ T5831] Call Trace: [ 411.110323][ T5831] [ 411.110333][ T5831] dump_stack_lvl+0x189/0x250 [ 411.110375][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.110408][ T5831] ? __pfx__printk+0x10/0x10 [ 411.110448][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.110483][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.110513][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 411.110557][ T5831] gfs2_assert_warn_i+0x194/0x2c0 [ 411.110595][ T5831] gfs2_make_fs_ro+0x2f5/0x300 [ 411.110638][ T5831] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 411.110667][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 411.110703][ T5831] ? __pfx_autoremove_wake_function+0x10/0x10 [ 411.110744][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.110779][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.110807][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 411.110850][ T5831] gfs2_put_super+0x220/0x860 [ 411.110893][ T5831] ? __pfx_gfs2_put_super+0x10/0x10 [ 411.110925][ T5831] generic_shutdown_super+0x135/0x2c0 [ 411.110969][ T5831] kill_block_super+0x44/0x90 [ 411.110997][ T5831] deactivate_locked_super+0xbc/0x130 [ 411.111038][ T5831] cleanup_mnt+0x425/0x4c0 [ 411.111076][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.111106][ T5831] ? lockdep_hardirqs_on+0x98/0x140 [ 411.111148][ T5831] task_work_run+0x1d4/0x260 [ 411.111189][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 411.111232][ T5831] ? exit_to_user_mode_loop+0x55/0x4f0 [ 411.111267][ T5831] exit_to_user_mode_loop+0xff/0x4f0 [ 411.111292][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.111320][ T5831] ? rcu_is_watching+0x15/0xb0 [ 411.111361][ T5831] do_syscall_64+0x2e3/0xf80 [ 411.111402][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.111427][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.111456][ T5831] ? exc_page_fault+0xab/0x100 [ 411.111496][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.111521][ T5831] RIP: 0033:0x7f8219790a77 [ 411.111544][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 411.111566][ T5831] RSP: 002b:00007ffc585b2118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 411.111592][ T5831] RAX: 0000000000000000 RBX: 00007f8219813d7d RCX: 00007f8219790a77 [ 411.111611][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc585b21d0 [ 411.111628][ T5831] RBP: 00007ffc585b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 411.111652][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc585b3260 [ 411.111670][ T5831] R13: 00007f8219813d7d R14: 0000000000062fac R15: 00007ffc585b32a0 [ 411.111710][ T5831] [ 412.066040][T14220] loop9: detected capacity change from 0 to 32768 [ 412.107109][T14220] JBD2: Ignoring recovery information on journal [ 412.173743][T14220] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 412.489466][T13771] ocfs2: Unmounting device (7,9) on (node local) [ 413.410422][ T31] audit: type=1326 audit(1765383181.128:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.0.2961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f821978f749 code=0x0 [ 413.876511][T14308] loop7: detected capacity change from 0 to 512 [ 413.904806][T14308] EXT4-fs (loop7): Test dummy encryption mode enabled [ 413.927141][T14308] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 413.972329][T14308] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2971: bad orphan inode 131083 [ 413.985608][T14308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.098517][T11322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.418481][T14326] loop4: detected capacity change from 0 to 64 [ 414.687592][T14332] loop0: detected capacity change from 0 to 736 [ 415.059286][T14310] loop6: detected capacity change from 0 to 32768 [ 415.078570][T14347] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 415.113988][T14352] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2989'. [ 415.126817][T14310] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 415.142105][T14352] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2989'. [ 415.164058][T14352] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2989'. [ 415.184654][T14352] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2989'. [ 415.212300][T14310] XFS (loop6): Ending clean mount [ 415.243811][T14310] XFS (loop6): Quotacheck needed: Please wait. [ 415.281527][ T774] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 415.328096][T14310] XFS (loop6): Quotacheck: Done. [ 415.485363][ T774] usb 1-1: config 0 has no interfaces? [ 415.492345][ T774] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 415.501711][ T774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 415.509775][ T774] usb 1-1: SerialNumber: syz [ 415.524266][ T774] usb 1-1: config 0 descriptor?? [ 415.609907][ T6977] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 415.764519][ T30] usb 1-1: USB disconnect, device number 20 [ 416.105525][T14380] loop8: detected capacity change from 0 to 2048 [ 416.114871][T14380] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.139421][T14380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.219531][ T31] audit: type=1800 audit(1765383183.938:261): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3001" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 416.270442][T14380] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3001: bg 0: block 234: padding at end of block bitmap is not set [ 416.323626][ T31] audit: type=1800 audit(1765383183.968:262): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3001" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 416.346321][T14380] EXT4-fs (loop8): Remounting filesystem read-only [ 416.401495][T14380] EXT4-fs (loop8): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 416.559943][T13315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.763568][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 416.929236][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 416.940115][T14410] hsr_slave_0: left promiscuous mode [ 416.960722][ T9] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 416.989893][ T9] usb 7-1: config 1 has no interface number 0 [ 416.998394][T14410] hsr_slave_1: left promiscuous mode [ 417.014340][ T9] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 417.039126][ T9] usb 7-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 417.083533][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 417.106002][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.131980][ T9] usb 7-1: Product: syz [ 417.145009][ T9] usb 7-1: Manufacturer: syz [ 417.161144][ T9] usb 7-1: SerialNumber: syz [ 417.193267][T14401] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 417.208523][T14401] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 417.254909][ T9] usb 7-1: Expected 3 endpoints, found: 2 [ 417.385630][T14399] loop4: detected capacity change from 0 to 32768 [ 417.409619][T14399] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 417.487800][T14399] XFS (loop4): Ending clean mount [ 417.502664][T11768] usb 7-1: USB disconnect, device number 15 [ 417.514333][T14399] XFS (loop4): Quotacheck needed: Please wait. [ 417.541392][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 417.648219][T14399] XFS (loop4): Quotacheck: Done. [ 417.716355][ T9] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 417.740274][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 417.786315][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 417.816177][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 417.850359][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 417.899342][ T9] usb 9-1: Product: syz [ 417.922603][ T9] usb 9-1: Manufacturer: syz [ 417.960262][ T9] usb 9-1: SerialNumber: syz [ 417.969482][ T5835] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 417.982423][ T9] usb 9-1: config 0 descriptor?? [ 418.002686][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 418.008760][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 418.030450][ T9] usb 9-1: selecting invalid altsetting 0 [ 418.386503][T14442] bridge0: entered promiscuous mode [ 418.393743][T14442] macsec1: entered promiscuous mode [ 418.404262][T14442] bridge0: port 1(macsec1) entered blocking state [ 418.411520][T14442] bridge0: port 1(macsec1) entered disabled state [ 418.429033][T14442] macsec1: entered allmulticast mode [ 418.438694][T14442] bridge0: entered allmulticast mode [ 418.464530][T14442] macsec1: left allmulticast mode [ 418.476100][T14442] bridge0: left allmulticast mode [ 418.488286][T14442] bridge0: left promiscuous mode [ 418.756130][ T9] usb 9-1: USB disconnect, device number 3 [ 418.849297][T14457] input: syz1 as /devices/virtual/input/input28 [ 418.852704][T14455] loop0: detected capacity change from 0 to 512 [ 418.931634][T14455] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 418.981099][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 419.016580][T14455] EXT4-fs (loop0): 1 truncate cleaned up [ 419.034770][T14455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.089884][T14455] EXT4-fs (loop0): shut down requested (1) [ 419.163187][ T9] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 419.182133][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.216246][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 419.244371][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.256174][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.275554][ T9] usb 9-1: Product: syz [ 419.294655][ T9] usb 9-1: Manufacturer: syz [ 419.309433][ T9] usb 9-1: SerialNumber: syz [ 419.339152][ T9] usb 9-1: config 0 descriptor?? [ 419.367671][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 419.382669][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 419.393562][ T9] usb 9-1: selecting invalid altsetting 0 [ 419.581029][ T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 419.667319][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.753219][ T30] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 419.782148][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.801190][ T5902] usb 9-1: USB disconnect, device number 4 [ 419.810292][ T30] usb 5-1: config 0 descriptor?? [ 419.837876][ T30] cp210x 5-1:0.0: cp210x converter detected [ 420.067884][T14483] loop6: detected capacity change from 0 to 512 [ 420.102421][T14483] EXT4-fs (loop6): Test dummy encryption mode enabled [ 420.109231][T14483] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 420.175092][T14483] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3040: bad orphan inode 131083 [ 420.192517][T14483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.257876][ T30] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 420.268142][T14490] loop0: detected capacity change from 0 to 64 [ 420.367799][T14490] minix_free_block (loop0:2): bit already cleared [ 420.386370][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.397225][T14490] minix_free_block (loop0:3): bit already cleared [ 420.405694][T14490] minix_free_block (loop0:4): bit already cleared [ 420.482197][ T30] usb 5-1: cp210x converter now attached to ttyUSB0 [ 420.505022][T14497] loop6: detected capacity change from 0 to 256 [ 420.542110][T14497] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 420.566119][T14495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 420.620401][T14497] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 420.683501][ T9] usb 5-1: USB disconnect, device number 24 [ 420.698284][T14497] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 420.738450][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 420.767577][ T9] cp210x 5-1:0.0: device disconnected [ 420.818707][T14504] loop8: detected capacity change from 0 to 512 [ 420.897265][T14504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.911781][T14504] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.934050][T14504] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3049: corrupted inode contents [ 420.948763][T14504] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.3049: mark_inode_dirty error [ 420.968240][T14504] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3049: corrupted inode contents [ 420.991318][T14504] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3049: corrupted inode contents [ 421.006416][T14504] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.3049: mark_inode_dirty error [ 421.018892][T14504] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3049: corrupted inode contents [ 421.031402][T14504] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.3049: mark_inode_dirty error [ 421.044628][T14504] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3049: corrupted inode contents [ 421.058608][T14504] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.3049: mark_inode_dirty error [ 421.082978][T14504] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3049: corrupted inode contents [ 421.135853][T13315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.359001][T14517] loop8: detected capacity change from 0 to 4096 [ 421.437563][T14517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.538842][T14528] sctp: [Deprecated]: syz.4.3059 (pid 14528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.538842][T14528] Use struct sctp_sack_info instead [ 421.645984][T14517] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3054: corrupted inode contents [ 421.720090][T14517] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.3054: mark_inode_dirty error [ 421.756206][T14526] loop6: detected capacity change from 0 to 32768 [ 421.764499][T14526] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3057 (14526) [ 421.780337][T14533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3060'. [ 421.790452][T14526] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.801535][T14526] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 421.812239][T14517] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3054: corrupted inode contents [ 421.831874][T14517] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3054: mark_inode_dirty error [ 421.859162][T14517] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3054: corrupted inode contents [ 421.880083][T14517] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3054: mark_inode_dirty error [ 421.893187][T14517] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3054: corrupted inode contents [ 421.923371][T14517] EXT4-fs error (device loop8): ext4_truncate:4635: inode #15: comm syz.8.3054: mark_inode_dirty error [ 421.935501][T14517] EXT4-fs error (device loop8) in ext4_setattr:6035: Corrupt filesystem [ 421.963736][T14517] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3054: corrupted inode contents [ 422.013959][T14517] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 422.066224][T14526] BTRFS info (device loop6): rebuilding free space tree [ 422.087149][T14526] BTRFS info (device loop6): enabling ssd optimizations [ 422.094264][T14526] BTRFS info (device loop6): turning on sync discard [ 422.101144][T14526] BTRFS info (device loop6): enabling free space tree [ 422.107910][T14526] BTRFS info (device loop6): force clearing of disk cache [ 422.115083][T14526] BTRFS info (device loop6): enabling auto defrag [ 422.121532][T14526] BTRFS info (device loop6): max_inline set to 0 [ 422.130720][T14552] loop0: detected capacity change from 0 to 1024 [ 422.199296][ T31] audit: type=1800 audit(1765383189.918:263): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3057" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 422.203413][T14552] hfsplus: xattr searching failed [ 422.276967][T13315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.342901][ T6977] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.353421][T14552] hfsplus: xattr searching failed [ 422.405384][T14552] hfsplus: xattr searching failed [ 422.907921][T14576] netlink: 'syz.6.3069': attribute type 10 has an invalid length. [ 422.964792][T14576] team0: Port device netdevsim0 added [ 423.197092][T14580] sctp: [Deprecated]: syz.6.3076 (pid 14580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.197092][T14580] Use struct sctp_sack_info instead [ 423.392283][T14572] loop8: detected capacity change from 0 to 32768 [ 423.479680][T14586] loop7: detected capacity change from 0 to 1024 [ 423.521763][T14574] loop4: detected capacity change from 0 to 32768 [ 423.587977][T14574] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.635382][T14574] XFS (loop4): Ending clean mount [ 424.100323][ T5835] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.997985][ T31] audit: type=1326 audit(1765383192.718:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.4.3104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f180ef8f749 code=0x0 [ 425.525034][T14660] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 425.580331][T14644] loop9: detected capacity change from 0 to 32768 [ 425.599274][T14644] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3101 (14644) [ 425.625619][T14644] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 425.636381][T14644] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 425.647692][T14663] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 425.706269][T14639] loop6: detected capacity change from 0 to 40427 [ 425.745485][T14639] F2FS-fs (loop6): Image doesn't support compression [ 425.752398][T14639] F2FS-fs (loop6): build fault injection rate: 690 [ 425.769302][T14639] F2FS-fs (loop6): build fault injection type: 0x35f7 [ 425.789450][T14639] F2FS-fs (loop6): invalid crc value [ 425.834260][T14651] loop7: detected capacity change from 0 to 32768 [ 425.846392][T14644] BTRFS info (device loop9): rebuilding free space tree [ 425.871098][T14644] BTRFS info (device loop9): disabling free space tree [ 425.888430][T14644] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 425.927058][T14644] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 425.939820][T14651] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.957752][T14644] BTRFS info (device loop9): setting nodatasum [ 425.991846][T14644] BTRFS info (device loop9): setting nodatacow [ 425.998065][T14644] BTRFS info (device loop9): turning off barriers [ 426.034453][T14644] BTRFS info (device loop9): force clearing of disk cache [ 426.093869][T14639] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 426.111968][T14651] XFS (loop7): Ending clean mount [ 426.128194][T14639] F2FS-fs (loop6): Start checkpoint disabled! [ 426.142905][T14651] XFS (loop7): Quotacheck needed: Please wait. [ 426.145941][T14639] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 426.174011][T14639] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 426.244966][T13771] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 426.297372][T14651] XFS (loop7): Quotacheck: Done. [ 426.367898][T14697] loop8: detected capacity change from 0 to 256 [ 426.383753][ T2118] kworker/u8:11: attempt to access beyond end of device [ 426.383753][ T2118] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.407652][T14697] exfat: Deprecated parameter 'utf8' [ 426.431302][ T2118] CPU: 1 UID: 0 PID: 2118 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.431350][ T2118] Tainted: [L]=SOFTLOCKUP [ 426.431361][ T2118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.431379][ T2118] Workqueue: writeback wb_workfn (flush-7:6) [ 426.431430][ T2118] Call Trace: [ 426.431441][ T2118] [ 426.431453][ T2118] dump_stack_lvl+0x189/0x250 [ 426.431494][ T2118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.431527][ T2118] ? __pfx_queue_work_on+0x10/0x10 [ 426.431556][ T2118] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 426.431595][ T2118] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.431651][ T2118] f2fs_handle_critical_error+0x37c/0x540 [ 426.431693][ T2118] f2fs_write_end_io+0x886/0xb60 [ 426.431753][ T2118] __submit_merged_bio+0x256/0x660 [ 426.431792][ T2118] __submit_merged_write_cond+0x269/0x530 [ 426.431831][ T2118] f2fs_write_data_pages+0x2756/0x3290 [ 426.431922][ T2118] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 426.431977][ T2118] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 426.432079][ T2118] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 426.432140][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432180][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432209][ T2118] ? __lock_acquire+0x6b6/0x2cf0 [ 426.432244][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432274][ T2118] ? __lock_acquire+0x6b6/0x2cf0 [ 426.432306][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432338][ T2118] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 426.432374][ T2118] do_writepages+0x32e/0x550 [ 426.432417][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432446][ T2118] ? reacquire_held_locks+0x121/0x1c0 [ 426.432477][ T2118] ? writeback_sb_inodes+0x3bd/0x1870 [ 426.432521][ T2118] __writeback_single_inode+0x133/0x1240 [ 426.432555][ T2118] ? do_raw_spin_unlock+0x122/0x240 [ 426.432601][ T2118] writeback_sb_inodes+0x93a/0x1870 [ 426.432645][ T2118] ? rcu_is_watching+0x15/0xb0 [ 426.432703][ T2118] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 426.432795][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432825][ T2118] ? rcu_is_watching+0x15/0xb0 [ 426.432858][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.432906][ T2118] wb_writeback+0x42b/0xaa0 [ 426.432950][ T2118] ? queue_io+0x2c1/0x450 [ 426.432986][ T2118] ? __pfx_wb_writeback+0x10/0x10 [ 426.433030][ T2118] ? _raw_spin_unlock_irq+0x23/0x50 [ 426.433075][ T2118] wb_workfn+0x3f9/0xed0 [ 426.433141][ T2118] ? __pfx_wb_workfn+0x10/0x10 [ 426.433195][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.433240][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.433275][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.433311][ T2118] ? _raw_spin_unlock_irq+0x23/0x50 [ 426.433345][ T2118] ? process_scheduled_works+0x9ef/0x1770 [ 426.433372][ T2118] ? process_scheduled_works+0x9ef/0x1770 [ 426.433403][ T2118] process_scheduled_works+0xad1/0x1770 [ 426.433477][ T2118] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.433518][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.433562][ T2118] worker_thread+0x8a0/0xda0 [ 426.433596][ T2118] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.433669][ T2118] ? __kthread_parkme+0x7b/0x200 [ 426.433719][ T2118] kthread+0x711/0x8a0 [ 426.433761][ T2118] ? __pfx_worker_thread+0x10/0x10 [ 426.433790][ T2118] ? __pfx_kthread+0x10/0x10 [ 426.433822][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.433857][ T2118] ? _raw_spin_unlock_irq+0x23/0x50 [ 426.433898][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.433928][ T2118] ? lockdep_hardirqs_on+0x98/0x140 [ 426.433965][ T2118] ? __pfx_kthread+0x10/0x10 [ 426.434002][ T2118] ret_from_fork+0x599/0xb30 [ 426.434033][ T2118] ? __pfx_ret_from_fork+0x10/0x10 [ 426.434077][ T2118] ? __switch_to_asm+0x39/0x70 [ 426.434111][ T2118] ? __switch_to_asm+0x33/0x70 [ 426.434143][ T2118] ? __pfx_kthread+0x10/0x10 [ 426.434181][ T2118] ret_from_fork_asm+0x1a/0x30 [ 426.434244][ T2118] [ 426.434255][ T2118] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 426.461664][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3115'. [ 426.564804][T14697] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 426.666111][T14665] loop0: detected capacity change from 0 to 32768 [ 426.681464][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3115'. [ 426.763211][T14701] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 426.973185][T14665] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.189495][T14665] XFS (loop0): Ending clean mount [ 427.234205][T14665] XFS (loop0): Quotacheck needed: Please wait. [ 427.288790][T11322] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.315571][T14665] XFS (loop0): Quotacheck: Done. [ 427.359589][T14713] loop9: detected capacity change from 0 to 512 [ 427.366800][T14713] EXT4-fs: Ignoring removed nobh option [ 427.384409][T14713] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3116: iget: bad i_size value: 38620345925642 [ 427.402187][T14713] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3116: couldn't read orphan inode 15 (err -117) [ 427.493287][T14713] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.630342][T13771] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.665773][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.751300][ T774] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 427.911392][ T774] usb 7-1: Using ep0 maxpacket: 8 [ 427.925596][ T774] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 427.951015][ T774] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.959088][ T774] usb 7-1: Product: syz [ 427.967020][ T774] usb 7-1: Manufacturer: syz [ 427.977969][ T774] usb 7-1: SerialNumber: syz [ 428.002304][ T774] usb 7-1: config 0 descriptor?? [ 428.223827][ T774] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 428.286997][T11768] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 428.471306][T11768] usb 1-1: Using ep0 maxpacket: 16 [ 428.479254][T11768] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 428.499130][T11768] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.531167][T11768] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.546354][T11768] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.555623][T11768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.564581][T11768] usb 1-1: Product: syz [ 428.569166][T11768] usb 1-1: Manufacturer: syz [ 428.573872][T11768] usb 1-1: SerialNumber: syz [ 428.585195][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3135'. [ 428.782154][T14760] netlink: 400 bytes leftover after parsing attributes in process `syz.7.3137'. [ 429.003814][T14750] loop4: detected capacity change from 0 to 32768 [ 429.026968][T11768] usb 1-1: 0:2 : does not exist [ 429.032618][ T774] usb write operation failed. (-71) [ 429.076000][ T774] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 429.127295][ T774] dvbdev: DVB: registering new adapter (Terratec H7) [ 429.153152][T14750] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 429.176606][ T774] usb 7-1: media controller created [ 429.182431][ T774] usb read operation failed. (-71) [ 429.202108][ T774] usb write operation failed. (-71) [ 429.214171][T14750] XFS (loop4): Ending clean mount [ 429.230417][T14750] XFS (loop4): Quotacheck needed: Please wait. [ 429.242618][ T774] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 429.281738][T14779] netlink: 212324 bytes leftover after parsing attributes in process `syz.8.3143'. [ 429.299219][ T774] usb 7-1: USB disconnect, device number 16 [ 429.330744][T14750] XFS (loop4): Quotacheck: Done. [ 429.418221][T14784] sock: sock_set_timeout: `syz.8.3145' (pid 14784) tries to set negative timeout [ 429.450991][ T10] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 429.519252][ T5835] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 429.613749][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 429.637129][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 429.669769][T11768] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 429.685435][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.715176][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.752333][ T10] usb 10-1: string descriptor 0 read error: -22 [ 429.764617][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.774027][T11768] usb 1-1: USB disconnect, device number 21 [ 429.794254][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.827105][ T10] usb 10-1: 0:2 : does not exist [ 430.041383][ T6883] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 430.081530][T14786] loop8: detected capacity change from 0 to 32768 [ 430.139345][T14786] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 430.149098][T14786] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.189030][T14786] XFS (loop8): Ending clean mount [ 430.198051][ T6883] usb 7-1: Using ep0 maxpacket: 8 [ 430.200749][T14786] XFS (loop8): Quotacheck needed: Please wait. [ 430.221109][ T6883] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.249903][T14786] XFS (loop8): Quotacheck: Done. [ 430.265845][ T6883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.302520][ T6883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.318504][ T6883] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.364566][ T6883] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.382179][ T6883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.399929][T13315] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.607057][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.626520][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.633607][T14808] loop0: detected capacity change from 0 to 512 [ 430.656410][ T10] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 430.669361][ T6883] usb 7-1: usb_control_msg returned -32 [ 430.675864][ T6883] usbtmc 7-1:16.0: can't read capabilities [ 430.679850][ T10] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 430.701433][ T10] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 430.709273][ T6883] usb 7-1: USB disconnect, device number 17 [ 430.721101][T14808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 430.784395][T14808] EXT4-fs (loop0): 1 truncate cleaned up [ 430.799441][T14808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.839599][ T10] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 430.884144][ T10] usb 10-1: USB disconnect, device number 3 [ 430.928117][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.039186][T11768] kernel write not supported for file /register (pid: 11768 comm: kworker/0:11) [ 431.083055][T14823] netlink: 'syz.8.3157': attribute type 4 has an invalid length. [ 431.336213][ T774] kernel write not supported for file bpf-map (pid: 774 comm: kworker/1:2) [ 431.623354][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3169'. [ 431.737173][T14856] loop4: detected capacity change from 0 to 256 [ 431.790218][T14856] FAT-fs (loop4): Directory bread(block 64) failed [ 431.813037][T14856] FAT-fs (loop4): Directory bread(block 65) failed [ 431.831102][T14856] FAT-fs (loop4): Directory bread(block 66) failed [ 431.854131][T14856] FAT-fs (loop4): Directory bread(block 67) failed [ 431.871071][T14856] FAT-fs (loop4): Directory bread(block 68) failed [ 431.894425][T14856] FAT-fs (loop4): Directory bread(block 69) failed [ 431.923227][T14856] FAT-fs (loop4): Directory bread(block 70) failed [ 431.951363][T14856] FAT-fs (loop4): Directory bread(block 71) failed [ 431.977467][T14856] FAT-fs (loop4): Directory bread(block 72) failed [ 431.991246][T14856] FAT-fs (loop4): Directory bread(block 73) failed [ 432.080734][T14865] sctp: [Deprecated]: syz.7.3176 (pid 14865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.080734][T14865] Use struct sctp_sack_info instead [ 432.198926][T14867] sctp: [Deprecated]: syz.6.3177 (pid 14867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.198926][T14867] Use struct sctp_sack_info instead [ 432.350094][ T50] kworker/u8:3: attempt to access beyond end of device [ 432.350094][ T50] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 432.685516][T14881] syzkaller1: entered allmulticast mode [ 432.763261][T14883] evm: overlay not supported [ 433.283660][T14876] loop6: detected capacity change from 0 to 32768 [ 433.378210][T14876] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.431213][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 433.506049][T14876] XFS (loop6): Ending clean mount [ 433.632909][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.690423][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.723559][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.725848][ T6977] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.737643][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 433.753369][ T9] usb 5-1: SerialNumber: syz [ 433.987956][ T9] usb 5-1: 0:2 : does not exist [ 434.033801][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3192'. [ 434.046877][ T9] usb 5-1: USB disconnect, device number 25 [ 434.132303][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3193'. [ 434.379913][T14917] loop6: detected capacity change from 0 to 1024 [ 434.403793][T14917] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 434.469937][T14917] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3191: Invalid block bitmap block 0 in block_group 0 [ 434.489976][T14917] EXT4-fs (loop6): Remounting filesystem read-only [ 434.496840][T14917] Quota error (device loop6): write_blk: dquota write failed [ 434.505230][T14917] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 434.515438][T14917] EXT4-fs (loop6): 1 orphan inode deleted [ 434.524291][T14917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.579275][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.896634][T14932] loop7: detected capacity change from 0 to 1024 [ 434.957401][T14932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.024771][T11322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.050348][T14915] loop8: detected capacity change from 0 to 32768 [ 435.084770][T14944] loop9: detected capacity change from 0 to 1024 [ 435.093305][T14944] EXT4-fs: Ignoring removed orlov option [ 435.105776][T14915] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 435.149059][T14944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.171979][ T5997] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 435.180702][T14915] XFS (loop8): Ending clean mount [ 435.204883][T14915] XFS (loop8): Quotacheck needed: Please wait. [ 435.269818][T14915] XFS (loop8): Quotacheck: Done. [ 435.301833][T13771] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.343642][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 435.380974][ T5997] usb 7-1: Using ep0 maxpacket: 32 [ 435.388382][ T5997] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 435.422056][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.443856][ T5997] usb 7-1: config 0 descriptor?? [ 435.459172][T13315] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 436.403342][T14979] nbd: nbd0 already in use [ 436.413318][ T5997] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 436.415906][T14979] block nbd0: NBD_DISCONNECT [ 436.432734][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.443700][ T5997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.453012][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.464647][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.467283][T14979] block nbd0: Send disconnect failed -32 [ 436.642538][T14962] loop9: detected capacity change from 0 to 131072 [ 436.651279][T14962] F2FS-fs (loop9): invalid crc value [ 436.657375][ T5997] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 436.665285][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.678670][ T5997] usb 7-1: media controller created [ 436.753848][T14962] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 436.765943][T14962] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 436.785668][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.795136][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.803670][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.821071][ T9] usb 5-1: Product: syz [ 436.825240][ T9] usb 5-1: Manufacturer: syz [ 436.830692][ T9] usb 5-1: SerialNumber: syz [ 436.940823][ T5997] DVB: Unable to find symbol dib7000p_attach() [ 436.947592][ T5997] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 437.101025][ T5997] rc_core: IR keymap rc-dib0700-rc5 not found [ 437.113988][ T5997] Registered IR keymap rc-empty [ 437.126984][ T5997] dvb-usb: could not initialize remote control. [ 437.142996][ T5997] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 437.166901][ T5997] usb 7-1: USB disconnect, device number 18 [ 437.261867][ T5997] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 437.640458][T14994] loop0: detected capacity change from 0 to 40427 [ 437.661572][T14994] F2FS-fs (loop0): invalid crc value [ 437.800338][T14994] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 437.825206][T14994] F2FS-fs (loop0): Start checkpoint disabled! [ 437.840633][T14994] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 437.862273][T14994] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 437.868879][T15000] loop6: detected capacity change from 0 to 2048 [ 437.876771][ T9] cdc_ncm 5-1:1.0: bind() failure [ 437.932963][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 437.943993][T15000] loop6: p1 < > p4 [ 437.946541][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 437.967938][ T31] audit: type=1800 audit(1765383205.678:265): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3219" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 437.977678][T15000] loop6: p4 size 8388608 extends beyond EOD, [ 437.997032][T14994] syz.0.3219: attempt to access beyond end of device [ 437.997032][T14994] loop0: rw=2049, sector=45096, nr_sectors = 976 limit=40427 [ 438.020554][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 438.040441][ T9] usb 5-1: USB disconnect, device number 26 [ 438.057251][ T31] audit: type=1800 audit(1765383205.778:266): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3219" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 438.100676][T15000] truncated [ 438.125895][T14994] syz.0.3219: attempt to access beyond end of device [ 438.125895][T14994] loop0: rw=2049, sector=46072, nr_sectors = 968 limit=40427 [ 438.292352][ T2118] kworker/u8:11: attempt to access beyond end of device [ 438.292352][ T2118] loop0: rw=2049, sector=47040, nr_sectors = 8 limit=40427 [ 438.341449][ T2118] CPU: 1 UID: 0 PID: 2118 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.341490][ T2118] Tainted: [L]=SOFTLOCKUP [ 438.341500][ T2118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.341518][ T2118] Workqueue: writeback wb_workfn (flush-7:0) [ 438.341569][ T2118] Call Trace: [ 438.341580][ T2118] [ 438.341592][ T2118] dump_stack_lvl+0x189/0x250 [ 438.341632][ T2118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.341672][ T2118] ? __pfx_queue_work_on+0x10/0x10 [ 438.341701][ T2118] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 438.341739][ T2118] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.341794][ T2118] f2fs_handle_critical_error+0x37c/0x540 [ 438.341836][ T2118] f2fs_write_end_io+0x886/0xb60 [ 438.341897][ T2118] __submit_merged_bio+0x256/0x660 [ 438.341936][ T2118] __submit_merged_write_cond+0x269/0x530 [ 438.341976][ T2118] f2fs_write_data_pages+0x2756/0x3290 [ 438.342059][ T2118] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 438.342114][ T2118] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 438.342203][ T2118] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 438.342262][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.342292][ T2118] ? __lock_acquire+0x6b6/0x2cf0 [ 438.342327][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.342356][ T2118] ? __lock_acquire+0x6b6/0x2cf0 [ 438.342394][ T2118] ? f2fs_write_inode+0x3fb/0x5f0 [ 438.342423][ T2118] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 438.342454][ T2118] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 438.342490][ T2118] do_writepages+0x32e/0x550 [ 438.342536][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.342566][ T2118] ? reacquire_held_locks+0x121/0x1c0 [ 438.342597][ T2118] ? writeback_sb_inodes+0x3bd/0x1870 [ 438.342640][ T2118] __writeback_single_inode+0x133/0x1240 [ 438.342687][ T2118] ? do_raw_spin_unlock+0x122/0x240 [ 438.342734][ T2118] writeback_sb_inodes+0x93a/0x1870 [ 438.342805][ T2118] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 438.342898][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.342927][ T2118] ? rcu_is_watching+0x15/0xb0 [ 438.342960][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343003][ T2118] wb_writeback+0x42b/0xaa0 [ 438.343047][ T2118] ? queue_io+0x2c1/0x450 [ 438.343083][ T2118] ? __pfx_wb_writeback+0x10/0x10 [ 438.343127][ T2118] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.343173][ T2118] wb_workfn+0x3f9/0xed0 [ 438.343239][ T2118] ? __pfx_wb_workfn+0x10/0x10 [ 438.343293][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343337][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343371][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343406][ T2118] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.343441][ T2118] ? process_scheduled_works+0x9ef/0x1770 [ 438.343468][ T2118] ? process_scheduled_works+0x9ef/0x1770 [ 438.343499][ T2118] process_scheduled_works+0xad1/0x1770 [ 438.343572][ T2118] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.343612][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343663][ T2118] worker_thread+0x8a0/0xda0 [ 438.343693][ T2118] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.343748][ T2118] ? __kthread_parkme+0x7b/0x200 [ 438.343795][ T2118] kthread+0x711/0x8a0 [ 438.343836][ T2118] ? __pfx_worker_thread+0x10/0x10 [ 438.343864][ T2118] ? __pfx_kthread+0x10/0x10 [ 438.343895][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343931][ T2118] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.343965][ T2118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.343994][ T2118] ? lockdep_hardirqs_on+0x98/0x140 [ 438.344030][ T2118] ? __pfx_kthread+0x10/0x10 [ 438.344068][ T2118] ret_from_fork+0x599/0xb30 [ 438.344100][ T2118] ? __pfx_ret_from_fork+0x10/0x10 [ 438.344144][ T2118] ? __switch_to_asm+0x39/0x70 [ 438.344177][ T2118] ? __switch_to_asm+0x33/0x70 [ 438.344210][ T2118] ? __pfx_kthread+0x10/0x10 [ 438.344248][ T2118] ret_from_fork_asm+0x1a/0x30 [ 438.344311][ T2118] [ 438.344323][ T2118] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 438.967271][T15024] loop9: detected capacity change from 0 to 512 [ 438.980295][T15019] loop7: detected capacity change from 0 to 4096 [ 439.041524][T15024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.115356][T15024] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 439.254601][T15024] EXT4-fs (loop9): shut down requested (2) [ 439.383275][T13771] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.554749][T15043] loop7: detected capacity change from 0 to 2048 [ 439.561498][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 439.579726][T15043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.589163][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 439.767692][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.781472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 439.789734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 439.805368][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.819206][ T10] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 439.828668][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.837436][ T9] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.852886][ T10] usb 9-1: Product: syz [ 439.871440][ T10] usb 9-1: Manufacturer: syz [ 439.876056][ T10] usb 9-1: SerialNumber: syz [ 439.901261][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 439.918052][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.943379][ T10] usb 9-1: config 0 descriptor?? [ 439.971835][ T9] usb 7-1: Product: syz [ 439.978306][ T10] ch341 9-1:0.0: ch341-uart converter detected [ 440.002958][ T9] usb 7-1: Manufacturer: syz [ 440.048268][ T9] usb 7-1: SerialNumber: syz [ 440.206573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 440.320091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 440.368944][T15054] loop9: detected capacity change from 0 to 2048 [ 440.384550][T15054] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 440.399990][T15054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.470178][T15062] loop8: detected capacity change from 0 to 8 [ 440.477637][T15062] Dev loop8: unable to read RDB block 8 [ 440.483441][T15062] loop8: unable to read partition table [ 440.489493][T15062] loop8: partition table beyond EOD, truncated [ 440.495798][T15062] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 440.635504][ T5947] kernel write not supported for file bpf-prog (pid: 5947 comm: kworker/0:5) [ 440.899419][T15061] loop4: detected capacity change from 0 to 32768 [ 440.918349][T15061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3245 (15061) [ 440.938440][T15061] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.949292][T15061] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 440.971067][ T5947] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 440.999052][ T10] usb 9-1: failed to send control message: -71 [ 441.008146][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 441.021167][ T10] usb 9-1: USB disconnect, device number 5 [ 441.030156][ T10] ch341 9-1:0.0: device disconnected [ 441.047137][T15061] BTRFS info (device loop4): enabling ssd optimizations [ 441.057798][T15061] BTRFS info (device loop4): turning on async discard [ 441.065310][T15061] BTRFS info (device loop4): enabling free space tree [ 441.120155][ T9] cdc_ncm 7-1:1.0: bind() failure [ 441.134242][ T9] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 441.142904][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 441.153066][ T5947] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 441.161786][ T5947] usb 1-1: config 0 has no interface number 0 [ 441.167888][ T5947] usb 1-1: config 0 interface 63 has no altsetting 0 [ 441.177673][ T9] usb 7-1: USB disconnect, device number 19 [ 441.191749][ T5947] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a [ 441.210277][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.225651][ T5835] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.255034][ T5947] usb 1-1: config 0 descriptor?? [ 441.611372][T15089] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3252'. [ 441.720132][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.739210][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.776988][ T5947] usb 1-1: string descriptor 0 read error: -71 [ 441.852928][ T5947] gspca_main: t613-2.14.0 probing 17a1:0128 [ 441.878188][ T5947] gspca_t613: unknown sensor 0000 [ 441.895912][ T5947] t613 1-1:0.63: probe with driver t613 failed with error -22 [ 441.921007][ T6883] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 441.933254][ T5947] usb 1-1: USB disconnect, device number 22 [ 442.081403][ T6883] usb 10-1: Using ep0 maxpacket: 32 [ 442.089621][ T6883] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 442.098998][ T6883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.121364][T15105] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 442.167554][ T6883] usb 10-1: config 0 descriptor?? [ 442.401289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 442.440910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 442.506487][ T6883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 442.548963][ T6883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.573137][ T6883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 442.590562][ T6883] usb 10-1: media controller created [ 442.697197][ T6883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.161263][T15110] loop6: detected capacity change from 0 to 32768 [ 443.180705][T15110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 443.182762][T15114] loop4: detected capacity change from 0 to 2048 [ 443.188945][T15110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 443.219791][ T6883] az6027: usb out operation failed. (-71) [ 443.226022][ T6883] az6027: usb out operation failed. (-71) [ 443.232518][ T6883] stb0899_attach: Driver disabled by Kconfig [ 443.239342][ T6883] az6027: no front-end attached [ 443.239342][ T6883] [ 443.248579][ T6883] az6027: usb out operation failed. (-71) [ 443.254506][ T6883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 443.265316][ T6883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input30 [ 443.284083][ T6883] dvb-usb: schedule remote query interval to 400 msecs. [ 443.291897][ T6883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 443.302133][ T6883] usb 10-1: USB disconnect, device number 4 [ 443.337702][T15110] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 443.350310][ T774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 443.364732][T15114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.377824][ T774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 443.431600][T15114] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3263: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 443.511909][ T6883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 443.561327][T15114] EXT4-fs (loop4): Remounting filesystem read-only [ 443.716455][ T774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 338ms [ 443.720195][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.735742][ T774] gfs2: fsid=syz:syz.0: jid=0: Done [ 443.758091][T15110] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 444.110814][T15140] loop7: detected capacity change from 0 to 2048 [ 444.133159][T15144] loop0: detected capacity change from 0 to 128 [ 444.163686][T15144] EXT4-fs: Ignoring removed i_version option [ 444.211777][T15140] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 444.215620][T15144] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.235958][T15144] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.278603][T15150] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.300763][T15144] EXT4-fs error (device loop0): ext4_check_dx_root:2201: inode #2: comm syz.0.3272: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 444.432158][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.438509][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.556693][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.607573][T15150] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 444.631509][ T774] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 444.644135][T15150] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 444.674679][T15150] Remounting filesystem read-only [ 444.694232][T11322] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 444.811199][ T774] usb 10-1: Using ep0 maxpacket: 32 [ 444.842316][ T774] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 444.870978][ T774] usb 10-1: config 0 has no interface number 0 [ 444.915814][ T774] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 444.958389][ T774] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.012087][ T774] usb 10-1: Product: syz [ 445.016476][ T774] usb 10-1: Manufacturer: syz [ 445.030809][T15162] loop4: detected capacity change from 0 to 4096 [ 445.052725][ T774] usb 10-1: SerialNumber: syz [ 445.085537][ T774] usb 10-1: config 0 descriptor?? [ 445.119098][ T774] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 445.339107][ T774] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 445.348948][ T6883] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 445.366083][ T774] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 445.514889][ T6883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.533429][ T6883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 445.548638][ T6883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.568239][ T6883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.588436][ T6883] usb 1-1: Product: syz [ 445.598502][ T6883] usb 1-1: Manufacturer: syz [ 445.608576][ T6883] usb 1-1: SerialNumber: syz [ 445.631376][ T6883] cdc_mbim 1-1:1.0: skipping garbage [ 445.733763][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 445.743712][ T774] usb 10-1: USB disconnect, device number 5 [ 445.757786][ T774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 445.800380][ T774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 445.821788][ T774] quatech2 10-1:0.51: device disconnected [ 445.829333][T15173] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 445.856986][T15187] binder: 15186:15187 ioctl c0306201 200000001a80 returned -14 [ 445.885128][T15179] loop8: detected capacity change from 0 to 32768 [ 445.912485][T15179] JBD2: Ignoring recovery information on journal [ 446.052649][T15179] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 446.076652][T15203] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3293'. [ 446.091223][T15203] nbd: must specify at least one socket [ 446.443912][T15179] syz.8.3285 (15179) used greatest stack depth: 17952 bytes left [ 446.466167][T15173] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 446.521821][ T6883] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 446.590453][T13315] ocfs2: Unmounting device (7,8) on (node local) [ 446.716437][ T6883] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 446.740156][ T6883] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 446.781410][ T6883] wwan wwan0: port wwan0mbim0 attached [ 446.852147][ T6883] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, da:e8:64:89:67:92 [ 446.907148][T15219] loop4: detected capacity change from 0 to 8192 [ 446.916190][ T6883] usb 1-1: USB disconnect, device number 23 [ 446.942692][ T6883] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 446.958090][T15219] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.063914][ T6883] wwan wwan0: port wwan0mbim0 disconnected [ 447.135561][T15221] loop8: detected capacity change from 0 to 128 [ 447.147298][T15221] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.181651][T15221] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 447.225798][ T1155] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 447.325147][T15223] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[15223] [ 447.390677][T15225] loop9: detected capacity change from 0 to 512 [ 447.432191][T15215] loop7: detected capacity change from 0 to 32768 [ 447.449440][T15225] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 447.476004][T15215] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3297 (15215) [ 447.501261][T15225] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 447.543539][T15225] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 447.566596][T15215] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 447.600024][T15225] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 447.605249][T15234] input: syz1 as /devices/virtual/input/input31 [ 447.608750][T15229] syz.0.3304: attempt to access beyond end of device [ 447.608750][T15229] loop0: rw=2049, sector=145, nr_sectors = 77 limit=128 [ 447.628720][T15215] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 447.638445][T15225] System zones: 0-2, 18-18, 34-35 [ 447.680208][T15225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.780382][T15215] BTRFS info (device loop7): rebuilding free space tree [ 447.852328][T15225] EXT4-fs (loop9): shut down requested (0) [ 447.986437][T15215] BTRFS info (device loop7): disabling free space tree [ 448.014900][T15215] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 448.060959][T15215] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 448.152893][T15215] BTRFS info (device loop7): enabling ssd optimizations [ 448.195044][T15215] BTRFS info (device loop7): turning on async discard [ 448.221090][T15215] BTRFS info (device loop7): force clearing of disk cache [ 448.270497][T15215] BTRFS info (device loop7): enabling auto defrag [ 448.318487][T15215] BTRFS info (device loop7): max_inline set to 4096 [ 448.340828][T13771] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.504368][T15272] netlink: 'syz.9.3313': attribute type 1 has an invalid length. [ 448.532927][T15272] netlink: 'syz.9.3313': attribute type 2 has an invalid length. [ 448.571937][T15272] netlink: 'syz.9.3313': attribute type 1 has an invalid length. [ 448.601015][T15272] netlink: 'syz.9.3313': attribute type 2 has an invalid length. [ 448.804471][T15277] set_capacity_and_notify: 1 callbacks suppressed [ 448.804493][T15277] loop0: detected capacity change from 0 to 256 [ 449.084969][T15264] loop4: detected capacity change from 0 to 32768 [ 449.135350][T15264] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 449.264512][T15264] XFS (loop4): Ending clean mount [ 449.462045][T11322] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 449.528622][T15300] loop0: detected capacity change from 0 to 2048 [ 449.538066][T15300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 449.572300][T15300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.607414][ T5835] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 450.416867][T15308] loop8: detected capacity change from 0 to 65536 [ 450.467740][T15314] input: syz1 as /devices/virtual/input/input32 [ 450.515054][T15308] XFS (loop8): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 450.563281][T15308] XFS (loop8): Ending clean mount [ 450.579062][T15308] XFS (loop8): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 450.590892][T15308] XFS (loop8): Unmount and run xfs_repair [ 450.596613][T15308] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 450.604028][T15308] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 450.612914][T15308] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 450.621819][T15308] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 450.630668][T15308] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 450.639622][T15308] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 450.648725][T15308] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 450.658910][T15308] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 450.667826][T15308] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 450.676717][T15308] XFS (loop8): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 450.688025][T15308] XFS (loop8): page discard on page ffffea00011212c0, inode 0x46, pos 32768. [ 450.751928][T15282] loop9: detected capacity change from 0 to 40427 [ 450.792329][T15282] F2FS-fs (loop9): build fault injection rate: 14 [ 450.840295][T13315] XFS (loop8): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 450.849772][T15282] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 450.865333][T15282] F2FS-fs (loop9): invalid crc value [ 450.909978][T13315] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair. [ 450.984312][ C0] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 451.031722][ C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 451.034578][T15334] syzkaller1: entered promiscuous mode [ 451.061757][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3337'. [ 451.081104][T15334] syzkaller1: entered allmulticast mode [ 451.119989][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.129268][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.238716][T15282] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 451.288683][T15282] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 451.311134][T15282] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 451.327483][T15338] loop6: detected capacity change from 0 to 4096 [ 451.370852][T15282] F2FS-fs (loop9): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40 [ 451.416943][T15282] F2FS-fs (loop9): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0 [ 451.537446][T15338] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 451.579950][T15338] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 451.704731][T13771] F2FS-fs (loop9): inject discard error in __submit_discard_cmd of __issue_discard_cmd+0x83d/0x16a0 [ 452.059495][T15359] loop6: detected capacity change from 0 to 1024 [ 452.165900][T15359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.338578][T15374] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 452.388194][T15359] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 452.717769][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.013100][T15384] loop8: detected capacity change from 0 to 4096 [ 453.181218][T11768] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 453.364157][T11768] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 453.374745][T11768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.402202][T11768] usb 5-1: config 0 descriptor?? [ 453.418396][T11768] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 453.546965][T15379] loop9: detected capacity change from 0 to 131072 [ 453.555624][T15379] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 453.563817][T15379] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 453.583025][T15379] F2FS-fs (loop9): invalid crc value [ 453.732129][T15379] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 453.751754][T15379] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 453.758814][T15379] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 454.011106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 454.015891][T15411] loop0: detected capacity change from 0 to 4096 [ 454.429639][T11768] gspca_cpia1: usb_control_msg 05, error -71 [ 454.449415][T11768] gspca_cpia1: usb_control_msg 04, error -71 [ 454.479151][T11768] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 454.517626][T11768] usb 5-1: USB disconnect, device number 27 [ 454.653229][T15425] input: syz0 as /devices/virtual/input/input33 [ 455.035399][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3377'. [ 455.824603][T15439] loop0: detected capacity change from 0 to 32768 [ 455.857299][T15439] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 455.914291][T15443] loop4: detected capacity change from 0 to 32768 [ 455.928551][T15443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3380 (15443) [ 455.977811][T15443] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.008178][T15443] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 456.008750][T15439] XFS (loop0): Ending clean mount [ 456.069534][T15439] XFS (loop0): Quotacheck needed: Please wait. [ 456.169224][T15439] XFS (loop0): Quotacheck: Done. [ 456.212762][T15443] BTRFS info (device loop4): enabling ssd optimizations [ 456.219815][T15443] BTRFS info (device loop4): turning on async discard [ 456.226766][T15443] BTRFS info (device loop4): enabling free space tree [ 456.315313][ T5841] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 456.315371][ T5841] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 456.322779][ T5841] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 456.329802][ T5841] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 456.337591][ T5841] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 456.344694][ T5841] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 456.446582][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.485338][ T31] audit: type=1326 audit(1765383224.208:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.7.3391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fd578f749 code=0x0 [ 456.485403][ T5835] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.798312][T15499] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 457.005719][T15479] loop6: detected capacity change from 0 to 32768 [ 457.065704][T15479] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.194326][T15479] XFS (loop6): Ending clean mount [ 457.215278][T15479] XFS (loop6): Quotacheck needed: Please wait. [ 457.245327][T15479] XFS (loop6): Quotacheck: Done. [ 457.337579][ T6977] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.852199][T15533] loop0: detected capacity change from 0 to 128 [ 457.898563][T15534] loop8: detected capacity change from 0 to 1024 [ 457.916576][T15534] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 458.088016][T15539] loop4: detected capacity change from 0 to 512 [ 458.221689][T15539] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3408: corrupted in-inode xattr: e_value size too large [ 458.262249][T15539] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3408: couldn't read orphan inode 15 (err -117) [ 458.360561][T15539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.753048][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.862005][T15560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 459.756247][T15564] loop6: detected capacity change from 0 to 32768 [ 459.817278][T15564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3417 (15564) [ 459.860524][T15564] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 459.901791][T15564] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 460.048758][T15564] BTRFS info (device loop6): setting nodatasum [ 460.055183][T15564] BTRFS info (device loop6): setting nodatacow [ 460.061799][T15564] BTRFS info (device loop6): turning on sync discard [ 460.068585][T15564] BTRFS info (device loop6): enabling free space tree [ 460.077358][T15564] BTRFS info (device loop6): enabling auto defrag [ 460.270807][ T6977] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.744602][T15623] loop6: detected capacity change from 0 to 2048 [ 460.784674][T15625] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.847823][ T31] audit: type=1800 audit(1765383228.568:268): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3431" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 460.946721][T15623] NILFS (loop6): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4) [ 461.007234][T15623] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 461.086177][T15623] Remounting filesystem read-only [ 461.149474][T15606] loop8: detected capacity change from 0 to 40427 [ 461.176645][T15606] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 461.187709][ T6977] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 461.203473][T15606] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 461.411433][ T5841] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 461.433717][T15606] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 461.451590][T15606] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 461.461739][T15606] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 461.561046][ T31] audit: type=1800 audit(1765383229.278:269): pid=15606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3429" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 461.684986][T15650] loop4: detected capacity change from 0 to 64 [ 461.918019][T15656] sctp: [Deprecated]: syz.9.3451 (pid 15656) Use of int in max_burst socket option deprecated. [ 461.918019][T15656] Use struct sctp_assoc_value instead [ 462.029256][T15620] loop0: detected capacity change from 0 to 65536 [ 462.125449][T15620] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 462.142146][T15620] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 462.206112][T15620] XFS (loop0): Ending clean mount [ 462.429582][ T5831] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 463.359950][T15681] loop8: detected capacity change from 0 to 32768 [ 463.379081][T15681] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 463.406953][T15681] JBD2: Ignoring recovery information on journal [ 463.545577][T15681] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 463.677417][ T31] audit: type=1800 audit(1765383231.398:270): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3461" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 463.755066][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.771879][T15715] loop0: detected capacity change from 0 to 256 [ 463.791006][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.798400][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.815137][T15715] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.820916][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.845866][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.862104][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.870020][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.880400][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.902561][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.910204][T11768] hid-generic 0003:0003:0000.0016: unknown main item tag 0x0 [ 463.999145][T11768] hid-generic 0003:0003:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 464.009570][T13315] ocfs2: Unmounting device (7,8) on (node local) [ 464.390101][T15732] sctp: [Deprecated]: syz.8.3471 (pid 15732) Use of int in max_burst socket option deprecated. [ 464.390101][T15732] Use struct sctp_assoc_value instead [ 464.698572][T15747] loop0: detected capacity change from 0 to 128 [ 465.181653][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3488'. [ 465.203137][T15759] loop0: detected capacity change from 0 to 2048 [ 465.209548][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3488'. [ 465.242763][T15759] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 465.257946][T15759] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 465.290948][T15759] UDF-fs: Scanning with blocksize 512 failed [ 465.313793][T15759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.461658][ T5841] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 465.472461][ T5841] Bluetooth: hci5: Injecting HCI hardware error event [ 465.481950][ T5839] Bluetooth: hci5: hardware error 0x00 [ 465.707447][T15770] loop7: detected capacity change from 0 to 2048 [ 465.769501][T15770] NILFS (loop7): invalid segment: Inconsistency found [ 465.791755][T15770] NILFS (loop7): trying rollback from an earlier position [ 465.832973][T15770] NILFS (loop7): recovery complete [ 465.872565][ T5909] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 466.062609][ T5909] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 466.089609][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.119325][ T5909] usb 9-1: Product: syz [ 466.130948][ T5909] usb 9-1: Manufacturer: syz [ 466.135544][ T5909] usb 9-1: SerialNumber: syz [ 466.153174][ T5909] usb 9-1: config 0 descriptor?? [ 466.180269][ T31] audit: type=1800 audit(1765383233.908:271): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3486" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 466.247215][T15758] loop9: detected capacity change from 0 to 40427 [ 466.260255][T15758] F2FS-fs (loop9): invalid crc value [ 466.331023][T11768] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 466.427817][T15758] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 466.438179][T15758] F2FS-fs (loop9): Start checkpoint disabled! [ 466.446898][T15758] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 466.456401][T15758] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 466.524528][T11768] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.539496][T11768] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 466.559896][T11768] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.572981][T11768] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 466.582995][ T5909] usb 9-1: Firmware version (0.0) predates our first public release. [ 466.603424][T11768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.611002][ T5909] usb 9-1: Please update to version 0.2 or newer [ 466.626755][ T5909] usb 9-1: Firmware: build [ 466.628879][T15779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 466.844063][ T5909] usb 9-1: USB disconnect, device number 6 [ 466.870313][ T1110] kworker/u8:9: attempt to access beyond end of device [ 466.870313][ T1110] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.921573][ T1110] CPU: 1 UID: 0 PID: 1110 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.921614][ T1110] Tainted: [L]=SOFTLOCKUP [ 466.921624][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.921642][ T1110] Workqueue: writeback wb_workfn (flush-7:9) [ 466.921691][ T1110] Call Trace: [ 466.921701][ T1110] [ 466.921712][ T1110] dump_stack_lvl+0x189/0x250 [ 466.921751][ T1110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.921784][ T1110] ? __pfx_queue_work_on+0x10/0x10 [ 466.921813][ T1110] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 466.921850][ T1110] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 466.921901][ T1110] f2fs_handle_critical_error+0x37c/0x540 [ 466.921946][ T1110] f2fs_write_end_io+0x886/0xb60 [ 466.922001][ T1110] __submit_merged_bio+0x256/0x660 [ 466.922037][ T1110] __submit_merged_write_cond+0x269/0x530 [ 466.922074][ T1110] f2fs_write_data_pages+0x2756/0x3290 [ 466.922148][ T1110] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 466.922198][ T1110] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 466.922277][ T1110] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 466.922329][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.922360][ T1110] ? __lock_acquire+0x6b6/0x2cf0 [ 466.922393][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.922422][ T1110] ? __lock_acquire+0x6b6/0x2cf0 [ 466.922458][ T1110] ? f2fs_write_inode+0x3fb/0x5f0 [ 466.922488][ T1110] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 466.922519][ T1110] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 466.922554][ T1110] do_writepages+0x32e/0x550 [ 466.922597][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.922627][ T1110] ? reacquire_held_locks+0x121/0x1c0 [ 466.922659][ T1110] ? writeback_sb_inodes+0x3bd/0x1870 [ 466.922699][ T1110] __writeback_single_inode+0x133/0x1240 [ 466.922732][ T1110] ? do_raw_spin_unlock+0x122/0x240 [ 466.922776][ T1110] writeback_sb_inodes+0x93a/0x1870 [ 466.922838][ T1110] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 466.922919][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.922956][ T1110] ? rcu_is_watching+0x15/0xb0 [ 466.922988][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923030][ T1110] wb_writeback+0x42b/0xaa0 [ 466.923071][ T1110] ? queue_io+0x2c1/0x450 [ 466.923105][ T1110] ? __pfx_wb_writeback+0x10/0x10 [ 466.923146][ T1110] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.923188][ T1110] wb_workfn+0x3f9/0xed0 [ 466.923246][ T1110] ? __pfx_wb_workfn+0x10/0x10 [ 466.923296][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923338][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923371][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923401][ T1110] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.923433][ T1110] ? process_scheduled_works+0x9ef/0x1770 [ 466.923459][ T1110] ? process_scheduled_works+0x9ef/0x1770 [ 466.923489][ T1110] process_scheduled_works+0xad1/0x1770 [ 466.923550][ T1110] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.923585][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923627][ T1110] worker_thread+0x8a0/0xda0 [ 466.923686][ T1110] kthread+0x711/0x8a0 [ 466.923723][ T1110] ? __pfx_worker_thread+0x10/0x10 [ 466.923748][ T1110] ? __pfx_kthread+0x10/0x10 [ 466.923779][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923811][ T1110] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.923842][ T1110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.923869][ T1110] ? lockdep_hardirqs_on+0x98/0x140 [ 466.923904][ T1110] ? __pfx_kthread+0x10/0x10 [ 466.923948][ T1110] ret_from_fork+0x599/0xb30 [ 466.923978][ T1110] ? __pfx_ret_from_fork+0x10/0x10 [ 466.924015][ T1110] ? __switch_to_asm+0x39/0x70 [ 466.924047][ T1110] ? __switch_to_asm+0x33/0x70 [ 466.924080][ T1110] ? __pfx_kthread+0x10/0x10 [ 466.924114][ T1110] ret_from_fork_asm+0x1a/0x30 [ 466.924168][ T1110] [ 466.924178][ T1110] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 467.552498][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 467.715422][T15814] loop0: detected capacity change from 0 to 64 [ 467.802041][T15816] loop6: detected capacity change from 0 to 512 [ 467.857787][T15816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 467.876611][T15816] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.881265][ T5909] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 467.971363][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 468.043325][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.051485][T11768] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 468.065686][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.067441][T11768] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input34 [ 468.076071][ T5909] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 468.094777][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.109493][ T5909] usb 9-1: config 0 descriptor?? [ 468.128537][T11768] usb 5-1: USB disconnect, device number 28 [ 468.134516][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 468.271039][ T6883] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 468.311207][T15399] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 468.433380][ T6883] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 468.442965][ T6883] usb 1-1: config 1 has no interface number 0 [ 468.450111][ T6883] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 468.462676][T15399] usb 7-1: Using ep0 maxpacket: 32 [ 468.470050][ T6883] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 468.480560][ T6883] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.492698][T15399] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.501129][T15399] usb 7-1: config 0 has no interface number 0 [ 468.509118][ T6883] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 468.518501][ T6883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.526682][ T6883] usb 1-1: Product: syz [ 468.532587][T15399] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.546476][ T5909] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0017/input/input35 [ 468.559117][ T6883] usb 1-1: Manufacturer: syz [ 468.563784][ T6883] usb 1-1: SerialNumber: syz [ 468.570297][T15399] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.581659][T15399] usb 7-1: Product: syz [ 468.582222][T15828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.585846][T15399] usb 7-1: Manufacturer: syz [ 468.608622][ T5909] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 468.622214][T15399] usb 7-1: SerialNumber: syz [ 468.629560][T15399] usb 7-1: config 0 descriptor?? [ 468.639980][T15399] smsc95xx v2.0.0 [ 468.721007][ T774] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 468.742915][ T5909] usb 9-1: USB disconnect, device number 7 [ 468.806225][T15828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.871234][ T774] usb 5-1: Using ep0 maxpacket: 32 [ 468.882506][ T774] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.891085][ T774] usb 5-1: config 0 has no interface number 0 [ 468.900034][ T774] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.911057][ T774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.919112][ T774] usb 5-1: Product: syz [ 468.923877][ T774] usb 5-1: Manufacturer: syz [ 468.928518][ T774] usb 5-1: SerialNumber: syz [ 468.943895][ T774] usb 5-1: config 0 descriptor?? [ 468.954207][ T774] smsc95xx v2.0.0 [ 469.029593][ T6883] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 469.060656][T15399] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 469.075422][T15399] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.166867][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3520'. [ 469.495632][T15399] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 469.517550][T15399] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 469.548210][T15399] usb 7-1: USB disconnect, device number 20 [ 469.661680][ T5909] usb 1-1: USB disconnect, device number 24 [ 469.682327][ T5909] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 469.732022][T15849] syzkaller1: entered promiscuous mode [ 469.737745][T15849] syzkaller1: entered allmulticast mode [ 469.745417][ T5909] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 469.760598][ T774] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 469.972222][ T774] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 470.006034][ T774] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 470.018493][ T774] usb 5-1: USB disconnect, device number 29 [ 470.154995][T15857] loop6: detected capacity change from 0 to 256 [ 470.237971][T15857] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 470.337786][ T31] audit: type=1800 audit(1765383238.058:272): pid=15857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3528" name="file1" dev="loop6" ino=1048777 res=0 errno=0 [ 470.710575][T15873] ALSA: mixer_oss: invalid OSS volume 'f_total_size:' [ 470.731662][T15875] loop8: detected capacity change from 0 to 128 [ 470.745352][T15873] ALSA: mixer_oss: invalid OSS volume 'No' [ 470.755085][T15875] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.767885][T15875] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 471.000298][T15869] loop9: detected capacity change from 0 to 32768 [ 471.014857][T15869] JBD2: Ignoring recovery information on journal [ 471.066816][T13315] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.088335][T15869] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 471.134743][T15869] OCFS2: ERROR (device loop9): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 471.134881][T15869] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 471.185002][T15869] OCFS2: File system is now read-only. [ 471.191194][T15885] OCFS2: ERROR (device loop9): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 471.193301][T15885] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 471.246454][T15885] (syz.9.3534,15885,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 471.250086][ T31] audit: type=1326 audit(1765383238.968:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.262886][T15885] (syz.9.3534,15885,1):ocfs2_mknod:337 ERROR: status = -117 [ 471.295333][T15885] (syz.9.3534,15885,1):ocfs2_mknod:505 ERROR: status = -117 [ 471.314077][ T31] audit: type=1326 audit(1765383239.008:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.341391][T15885] (syz.9.3534,15885,0):ocfs2_mkdir:661 ERROR: status = -117 [ 471.361045][T15889] loop7: detected capacity change from 0 to 1024 [ 471.374233][T15889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.380782][ T31] audit: type=1326 audit(1765383239.008:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.506390][ T31] audit: type=1326 audit(1765383239.008:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.576233][ T31] audit: type=1326 audit(1765383239.008:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.627447][ T31] audit: type=1326 audit(1765383239.078:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.685534][ T31] audit: type=1326 audit(1765383239.078:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.722035][T13771] ocfs2: Unmounting device (7,9) on (node local) [ 471.731261][T15896] loop6: detected capacity change from 0 to 1024 [ 471.748422][ T31] audit: type=1326 audit(1765383239.078:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.773181][ T31] audit: type=1326 audit(1765383239.078:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.8.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dd38f749 code=0x7ffc0000 [ 471.815139][T15896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 471.823755][T15898] loop7: detected capacity change from 0 to 2048 [ 471.827345][T15896] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.863690][T15896] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.3542: lblock 0 mapped to illegal pblock 0 (length 1) [ 471.910335][T15896] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 471.923462][T15896] EXT4-fs (loop6): This should not happen!! Data will be lost [ 471.923462][T15896] [ 471.933324][T15898] loop7: p2 < > p4 [ 471.985273][T15898] loop7: p4 size 262144 extends beyond EOD, truncated [ 471.993641][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 472.340496][T15912] loop6: detected capacity change from 0 to 2048 [ 472.447119][T15912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 472.543976][T15912] EXT4-fs: Ignoring removed orlov option [ 472.559953][T15912] EXT4-fs: Ignoring removed orlov option [ 472.579158][T15912] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 472.604810][T15912] EXT4-fs (loop6): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 472.622158][T15912] EXT4-fs (loop6): can't enable nombcache during remount [ 472.686037][T15928] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3556'. [ 472.724555][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 473.064717][T15947] loop7: detected capacity change from 0 to 64 [ 473.083442][T15941] loop4: detected capacity change from 0 to 4096 [ 473.084598][T15947] minix: block size(59136) > page size(4096) not supported by filesystem [ 473.101183][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3560'. [ 473.101352][T15941] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 473.329246][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 473.969658][T15979] loop7: detected capacity change from 0 to 512 [ 474.010958][T15979] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 474.051921][T15979] EXT4-fs (loop7): 1 truncate cleaned up [ 474.132028][T15979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.385297][T11322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.741144][ T5909] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 474.916464][ T5909] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.943898][ T5909] usb 9-1: config 0 has no interface number 0 [ 474.968721][T16012] loop7: detected capacity change from 0 to 32768 [ 474.973833][ T5909] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 474.985776][T16012] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3591 (16012) [ 474.986203][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.007588][ T5909] usb 9-1: Product: syz [ 475.012017][ T5909] usb 9-1: Manufacturer: syz [ 475.016760][T16012] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 475.027040][ T5909] usb 9-1: SerialNumber: syz [ 475.033552][T16012] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 475.046781][ T5909] usb 9-1: config 0 descriptor?? [ 475.197335][T16012] BTRFS info (device loop7): enabling ssd optimizations [ 475.204424][T16012] BTRFS info (device loop7): turning on async discard [ 475.211298][T16012] BTRFS info (device loop7): enabling free space tree [ 475.281484][ T5909] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 475.338594][ T5909] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 475.352477][T11322] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 475.376193][ T5909] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 475.427011][ T5909] usb 9-1: media controller created [ 475.479813][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.745819][ T5909] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 475.770595][T16016] loop9: detected capacity change from 0 to 32768 [ 475.838234][T16048] loop6: detected capacity change from 0 to 256 [ 475.867440][ T5909] usb 9-1: USB disconnect, device number 8 [ 475.874307][ T31] kauditd_printk_skb: 81 callbacks suppressed [ 475.874327][ T31] audit: type=1800 audit(1765383243.598:363): pid=16016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3593" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 475.923225][T16048] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 476.080974][ T5947] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 476.183442][ T113] ================================================================== [ 476.191550][ T113] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x74b/0xa90 [ 476.199202][ T113] Read of size 4 at addr ffff888027ba0894 by task jfsCommit/113 [ 476.206833][ T113] [ 476.209162][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 476.209200][ T113] Tainted: [L]=SOFTLOCKUP [ 476.209211][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.209227][ T113] Call Trace: [ 476.209237][ T113] [ 476.209249][ T113] dump_stack_lvl+0x189/0x250 [ 476.209283][ T113] ? __kasan_check_byte+0x12/0x40 [ 476.209316][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.209347][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.209377][ T113] ? lock_release+0x4b/0x3b0 [ 476.209408][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.209438][ T113] ? __virt_addr_valid+0x4a5/0x5c0 [ 476.209477][ T113] print_report+0xca/0x240 [ 476.209505][ T113] ? jfs_lazycommit+0x74b/0xa90 [ 476.209538][ T113] kasan_report+0x118/0x150 [ 476.209568][ T113] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 476.209605][ T113] ? jfs_lazycommit+0x74b/0xa90 [ 476.209645][ T113] jfs_lazycommit+0x74b/0xa90 [ 476.209683][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 476.209718][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 476.209745][ T113] ? __kthread_parkme+0x7b/0x200 [ 476.209774][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.209804][ T113] ? __kthread_parkme+0x1a1/0x200 [ 476.209837][ T113] kthread+0x711/0x8a0 [ 476.209874][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 476.209907][ T113] ? __pfx_kthread+0x10/0x10 [ 476.209943][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.209975][ T113] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.210010][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.210039][ T113] ? lockdep_hardirqs_on+0x98/0x140 [ 476.210077][ T113] ? __pfx_kthread+0x10/0x10 [ 476.210111][ T113] ret_from_fork+0x599/0xb30 [ 476.210139][ T113] ? __pfx_ret_from_fork+0x10/0x10 [ 476.210171][ T113] ? __switch_to_asm+0x39/0x70 [ 476.210206][ T113] ? __switch_to_asm+0x33/0x70 [ 476.210240][ T113] ? __pfx_kthread+0x10/0x10 [ 476.210274][ T113] ret_from_fork_asm+0x1a/0x30 [ 476.210322][ T113] [ 476.210332][ T113] [ 476.291196][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 476.296327][ T113] Allocated by task 16016: [ 476.296345][ T113] kasan_save_track+0x3e/0x80 [ 476.296374][ T113] __kasan_kmalloc+0x93/0xb0 [ 476.296401][ T113] __kmalloc_cache_noprof+0x3e2/0x700 [ 476.313641][ T5947] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 476.316915][ T113] jfs_fill_super+0xc2/0xd80 [ 476.331141][ T5947] usb 5-1: config 0 has no interface number 0 [ 476.332452][ T113] get_tree_bdev_flags+0x40e/0x4d0 [ 476.332482][ T113] vfs_get_tree+0x92/0x2a0 [ 476.336662][ T5947] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.341704][ T113] do_new_mount+0x302/0xa10 [ 476.341739][ T113] __se_sys_mount+0x313/0x410 [ 476.341770][ T113] do_syscall_64+0xfa/0xf80 [ 476.341807][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.341831][ T113] [ 476.341840][ T113] Freed by task 13771: [ 476.341853][ T113] kasan_save_track+0x3e/0x80 [ 476.341877][ T113] kasan_save_free_info+0x46/0x50 [ 476.341911][ T113] __kasan_slab_free+0x5c/0x80 [ 476.350893][ T5947] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 476.352263][ T113] kfree+0x1c0/0x660 [ 476.370688][ T5947] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 476.372769][ T113] generic_shutdown_super+0x135/0x2c0 [ 476.372813][ T113] kill_block_super+0x44/0x90 [ 476.377557][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 476.382461][ T113] deactivate_locked_super+0xbc/0x130 [ 476.382501][ T113] cleanup_mnt+0x425/0x4c0 [ 476.391311][ T5947] usb 5-1: Product: syz [ 476.391984][ T113] task_work_run+0x1d4/0x260 [ 476.396551][ T5947] usb 5-1: SerialNumber: syz [ 476.401278][ T113] exit_to_user_mode_loop+0xff/0x4f0 [ 476.401306][ T113] do_syscall_64+0x2e3/0xf80 [ 476.401348][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.401374][ T113] [ 476.413866][ T5947] usb 5-1: config 0 descriptor?? [ 476.416136][ T113] The buggy address belongs to the object at ffff888027ba0800 [ 476.416136][ T113] which belongs to the cache kmalloc-256 of size 256 [ 476.610097][ T113] The buggy address is located 148 bytes inside of [ 476.610097][ T113] freed 256-byte region [ffff888027ba0800, ffff888027ba0900) [ 476.623914][ T113] [ 476.626228][ T113] The buggy address belongs to the physical page: [ 476.632707][ T113] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27ba0 [ 476.641539][ T113] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 476.650021][ T113] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 476.657983][ T113] page_type: f5(slab) [ 476.661953][ T113] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 476.670523][ T113] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 476.679093][ T113] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 476.687748][ T113] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 476.696409][ T113] head: 00fff00000000001 ffffea00009ee801 00000000ffffffff 00000000ffffffff [ 476.705067][ T113] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 476.713720][ T113] page dumped because: kasan: bad access detected [ 476.720120][ T113] page_owner tracks the page as allocated [ 476.725819][ T113] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 97159763490, free_ts 97069448283 [ 476.747176][ T113] post_alloc_hook+0x234/0x290 [ 476.751936][ T113] get_page_from_freelist+0x2365/0x2440 [ 476.757477][ T113] __alloc_frozen_pages_noprof+0x181/0x370 [ 476.763273][ T113] alloc_pages_mpol+0x232/0x4a0 [ 476.768123][ T113] allocate_slab+0x86/0x3b0 [ 476.772625][ T113] ___slab_alloc+0xf2b/0x1960 [ 476.777295][ T113] __slab_alloc+0x65/0x100 [ 476.781702][ T113] __kmalloc_noprof+0x47d/0x800 [ 476.786539][ T113] fib_create_info+0x171d/0x31f0 [ 476.791471][ T113] fib_table_insert+0xca/0x1b80 [ 476.796318][ T113] fib_magic+0x2c4/0x390 [ 476.800549][ T113] fib_add_ifaddr+0x3fb/0x5f0 [ 476.805215][ T113] fib_netdev_event+0x382/0x490 [ 476.810055][ T113] notifier_call_chain+0x19d/0x3a0 [ 476.815159][ T113] __dev_notify_flags+0x18d/0x2e0 [ 476.820430][ T113] netif_change_flags+0xe8/0x1a0 [ 476.825354][ T113] page last free pid 5932 tgid 5932 stack trace: [ 476.831669][ T113] __free_frozen_pages+0xbc8/0xd30 [ 476.836864][ T113] __slab_free+0x21b/0x2a0 [ 476.841276][ T113] qlist_free_all+0x97/0x100 [ 476.845856][ T113] kasan_quarantine_reduce+0x148/0x160 [ 476.851303][ T113] __kasan_slab_alloc+0x22/0x80 [ 476.856150][ T113] kmem_cache_alloc_noprof+0x37d/0x710 [ 476.861606][ T113] getname_flags+0xb8/0x540 [ 476.866102][ T113] vfs_fstatat+0x43/0x170 [ 476.870424][ T113] __x64_sys_newfstatat+0x116/0x190 [ 476.875617][ T113] do_syscall_64+0xfa/0xf80 [ 476.880123][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.886001][ T113] [ 476.888398][ T113] Memory state around the buggy address: [ 476.894041][ T113] ffff888027ba0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 476.902088][ T113] ffff888027ba0800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.910136][ T113] >ffff888027ba0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.918182][ T113] ^ [ 476.922750][ T113] ffff888027ba0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 476.930798][ T113] ffff888027ba0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 476.938841][ T113] ================================================================== [ 476.946885][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 476.954069][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 476.964736][ T113] Tainted: [L]=SOFTLOCKUP [ 476.969043][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.979090][ T113] Call Trace: [ 476.982356][ T113] [ 476.985274][ T113] dump_stack_lvl+0x99/0x250 [ 476.989865][ T113] ? __asan_memcpy+0x40/0x70 [ 476.994457][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.999654][ T113] ? __pfx__printk+0x10/0x10 [ 477.004253][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.009968][ T113] vpanic+0x237/0x6d0 [ 477.013953][ T113] ? __pfx_vpanic+0x10/0x10 [ 477.018457][ T113] panic+0xb9/0xc0 [ 477.022174][ T113] ? __pfx_panic+0x10/0x10 [ 477.026590][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.032217][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.037847][ T113] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 477.043745][ T113] ? jfs_lazycommit+0x74b/0xa90 [ 477.048594][ T113] check_panic_on_warn+0x89/0xb0 [ 477.053719][ T113] ? jfs_lazycommit+0x74b/0xa90 [ 477.058564][ T113] end_report+0x6f/0x140 [ 477.062800][ T113] kasan_report+0x129/0x150 [ 477.067294][ T113] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 477.072668][ T113] ? jfs_lazycommit+0x74b/0xa90 [ 477.077527][ T113] jfs_lazycommit+0x74b/0xa90 [ 477.082291][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 477.087660][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 477.093459][ T113] ? __kthread_parkme+0x7b/0x200 [ 477.098392][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.104016][ T113] ? __kthread_parkme+0x1a1/0x200 [ 477.109037][ T113] kthread+0x711/0x8a0 [ 477.113105][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 477.118303][ T113] ? __pfx_kthread+0x10/0x10 [ 477.122888][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.128514][ T113] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.133760][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.139392][ T113] ? lockdep_hardirqs_on+0x98/0x140 [ 477.144593][ T113] ? __pfx_kthread+0x10/0x10 [ 477.149186][ T113] ret_from_fork+0x599/0xb30 [ 477.153767][ T113] ? __pfx_ret_from_fork+0x10/0x10 [ 477.158874][ T113] ? __switch_to_asm+0x39/0x70 [ 477.163634][ T113] ? __switch_to_asm+0x33/0x70 [ 477.168398][ T113] ? __pfx_kthread+0x10/0x10 [ 477.172992][ T113] ret_from_fork_asm+0x1a/0x30 [ 477.177781][ T113] [ 477.181044][ T113] Kernel Offset: disabled [ 477.185356][ T113] Rebooting in 86400 seconds..