last executing test programs: 19.235491263s ago: executing program 4 (id=1678): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x98, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xc, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$packet(r0, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14) 18.831517472s ago: executing program 4 (id=1680): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xdc, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa4", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xdc}], 0x1}, 0x0) 18.408329293s ago: executing program 4 (id=1684): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.658374168s ago: executing program 4 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, 0x0, 0x4044080) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x400182, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) 16.292077678s ago: executing program 4 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5aa6, &(0x7f00000028c0)="$eJzs3WuQXFd9IPBzu3s0Lz1GsomFjUdjYW0cE9DIr+KRCko2gZRNKFGkiOUV2GNr5AgkWaVHbAknlrM2i8qGghSpxCQfHMqwCyiUq2CDFReOjVfy8lJ5w7q2wLWQNXxgy/GiCrbWRbHMVnff09N9u+/cnp4eWZJ/v7Ln9j1z+n/PPff07fs/fTUdAAAAeFU4fu/eU+++8He/+WfTL931e/+w8+4wWq6VD8UKY+nyjleqhZxOg5XVtWV2XPzqh7/w44lbfvsbD4989uVjWy/Z9v3fOe+WRz947dEH/vqJF5d95ZfPFcWN4+ny2fXkhSSEoa+d/IuPHPvWBdWyZHn1Z+lQCCuTVU+sTEK4pznE5M9DCFvTldWZ+F9+6cptIYRydrsrMuvG+6tb9TgnIYSDp25/Q/jBb22+5ztrvvR3A0eePzRbJRmaHU8hhOU3NT9/IIQwnP5fNZgu43hM0uWmEMJI0/PeXNCu13fR7qr1mfK4flG6XJIuRwvixd+vzayXMvWy69FAZjlSsL2FymtHr/WKLM2sJ32KG+W1M5avTJdfTZeXzzN+Od2HchJKSag0mr8jmR0joem4JSGpHcuhxnqpcWxDuv+Z9SSzXsqslwcy+1XbbjrQyknSWh7rZcrj6biSll/SfK7u4L1Nj5vrvTaWpS/Ul7N1MkFH2x409qsmtuvkHG05HUpN56BO5Y0Dnx6M0bRsNGkf0TMdxN8d23z/uvKWrx8fy2lH8nCSxk/S+KvmFf/gt1cu/cAXD+/Pvq834t9USuOXeor/w+tO/PSGw5/5dG78T8T45Z7iX/HYyAvXPXnv2tz+ORn7p9JT/KnnnvrYmvNvPpLb/gdj/KGe4m88emJw2anHHs9t/2Tsn+Ge4j/7tnf86PPPPPJ8bvwQ44/0FH/L0d0fHxw/dVlu/Mdj/4z2Nn5+duSa742P/2QiL/7TMf6ynuJ/7tDgWx9acd+1ucd3U+yfsZ7iv+vSR+9ZeuqRi/POncmD/XrnBHh1Oi+9xvpout5rnrlQTfnCX01U6td8S9P/l/VzQ5mLz2yeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98Jo3/Nd3/q/3jb1QSdcH0wfPlurLWL4khGQ4hLB339Sefdt33Trxwdv279k1tWNiat/E9K59ew5MXPXrE3umd++YOlD97eQbr6w/b1VI6svk4rZtD87MzJTGWsvi9v7tpUd+sO7N//tfQph8zXfHK7ntX//AzofO7/AzI9k48/ad+9/93av/Nt2vsbRdYx3aNTMzMxNy2vV/rv/FQ39+8seXhTD5K3O166lnf/MfmxtUDtWC2Tip0mCoN2gwGenYjkar0/bE/qps275jenLu/q0+v5yzH//uw8//fNsdn/xFvX+Hcvejy/4d3jizo/SXm9/1//7yznpBUbteqeNe7e9yTsxqu+JexPbF/htK+3t5ul/Lc/arkrNf937n8We+duHhFw+FycrP1rQf66L9GkgHwEDy2q62G7cwkqxsKR9K68cjHp+3ft/O3ev3Hjj4xu07p26dvnV611s2XLXhmsmrr7l6fW3P1/d5/+P2/02X+396xtOKPz701fizu/HU2q4l8+6ParuK+6O5RXmvv5H3fuRTb3ngyXfXC4rOK7F243ySLkeqx3lDaBpv7X3Vab+Kjk8IYaJTP/z0xWvDBf9j+z1F56HmI9P8MyPZOPOttf/6t2/+m9W/US84Lef55gY91dt5vtHq2fbU+msoPR4zZ2j/DqZn08FktGO7NnzryYH7j//LnzTat2RJuGNq3749G+o/l6YtXZpc1LFd2dK4X2tqP8sh7ZbQGKYdxmvVQKi3L3v+jNUbvTrU+rvRZFXH/cqKvzu2+f515S1fP57X08nD9S0Oh2X1ZfK6nJo7Mk8sNxrVaftn6uuvaHyMv/NvvvK+r/z9VW3j44r6z6L9SnL260vPfO5Tn/3kf/j7/u3XO3/zxNi//s8/WlcvOA3nlbCg80q53pBGq9P2JM3nlStCKHr9rQmd9yP39VfqvD9Fr7/sdmbrd443kVkfDeWeXq9XPDbywnVP3rs29/V6cq7Xa/PO3tnyvHLB6/VMeV/Kvr6SSms7Fu/11TJQko0z3/joeYeeuGvThfWCovfLRu1O4/rKLvKPnP36xxu+N37bxL//7/07b3zh17984/enNv5pvaD34x7b0p/jPpT271BO/zZaHfPO5v590y237dhaLy/q51fu+jddFuQ/8VSy98DBD03t2DG9Z293+9Xt+2ncTraXe30/jWe3VQX7VWrbr8V70E1/dft6i+3f2nN/tb7eRkPS0/vCwW+vXPqBLx7eP9b2rHRDN5XS+KWe4v/wuhM/veHwZz6dG/8TMX6lp/hTzz31sTXn33wkN/6DSRp/qDj+8tAWf+PRE4PLTj32eG78ydj+4Z7a/+zb3vGjzz/zyPO58UOMP9pb///syDXfGx//SW78p5N0O9VrpBC+/NKV2+rrSRhoShOq7RhoaVfIrieZ9VJmvdy8XoqzCOkGyknSWh7rpeWXtKYsbf4wpzxehQ2tri9fjush+2Du8jNNqenc36m86DoVAOBcFz//j9eg8fP/6fRCKX+mAWYtNA9bnRM35mGz8zmtn7GuTuPH58d5wPE3hcnq8u6J+oX+fD9HiK+H7Dxn3M5lr2+N0XF+4mjzRmrbb5vnLJp/X5tZj+2qz5dXmvLQVHteUwldzL+3b2fu+ffM7hd/njXx0bZmTTTNW2WP30A6Y9bpfodMeyvVCHnjIzsvFu/nGF8eNtW21+X4yN5HE49D9j6auJ0LMyfOXu+jyRsfY+390NKuOD5ivTnGR63JxZ9Hth+/MEf/zh6/ztGyx28gbWEXx3uoWn90kT+f7cO8YcdT2umbN1zcz8POiHnJDvFP87zk0rb46QvsTJ83jOWxnypdzie+L6e8X/OJ8XQR23VyjracDuYTgXNVzP/je0Q1/69egP/fTL2iPCV71Rjj5d4nlHMTdlHekb06Hw0jPb2Pbzm6++OD46cuy73Oebzb+/R2t6yNFNz3U9SP6zLrhf2YM0FTlO9lt1PU79n7MkbDsp76/XOHHnjrQyvuuza33zfV30iL+/1TLWvLCvr9LMgXOseXL5xL+UJ7/D7dx1A0f5afj5Qb7ViUfCS98Wmx8pE/yCmfbz4y0vagsV81Z24+MvtG2pKPDJzedgEAZ4+Y/zc+P0vz/3+OFxbpdURR3np5Zj3Gy81bc65P8vLW30+Xd2Tqj6b/omK+183vuvTRe5aeeuTi3LzlwW7z0P/UsjZWmIcuLG/OzSM29ed+8dw8opFnLSxPzG1/I09cWJ6e8zFtU56+sDw6t38aeXTrPMCnTsxmGnPFj/MAufEb8wB9zHN/OVvp9OW5BfN1mY3F1W7n6053Hl0tGVjeup+tefFIf/Lo9J/PLlYe/d6c8vnm0aNtDxr7VXPm5tGt5fJoAOBcFfP/eBlXy/8HQ3gyVhiODxb2OXtuXtCn6/bs3wNpxH96UfLK2fh9+vy3OO9b7Lx1sfP6xZ6XONs//13seaGx2h/wXKx5slfsftdFyYv/ufGo67w43ai8GACAM1nM/2OaHz//fzJTb6H5SVv+NlC/hJzNT86+/Ly53lmcn18fTld+Png25+dn+/zX4t4nc27l/7N6/Fz85ZlzOP+vtVn+DwBwVor5f/xnj/Hv//2XdD37d+u7zNMfzN7O63N0n6MHeXoXeXqf59li/Ob7AM7ieYDywucBhk/7/fHDs/XPpXmAmoFgMgAA4CwwcN6KWm6f/Xf270+X2X9nn/fv8m/Iqd+tSnp5fPO+PdPTN+7fvXVq3/SNu27bOr33xtv3bN+3b7px7bywvDE3b0nzxoFQSfujc71s3rYi/XsIK+p/D6HtWdn6scJFtQftfw8hG2C44O8IDNQy3e7bm3f8SnPU7zQ+8o53Xvw/zKkfNY7/LX90xY3b9t64fdf2fdundmw/ON1ab6z2L6m7/97M+DnlvL4vNfOjTWn+398ZD8/C2lFqa8dA2h9538+eZNqxMm3JyrzvP8hp9zf/25//8aUzv/h8CJOvKb9uQf2XbJz5z9dP//6+49/dXW1/ac72N2qm7Sr6vtJs/bg/lR237d33hm237d+V/UbJ3sT5jFJjfZHua0hf/uUu5ye25JQXzE/clQ1abntwZup6fgIAgBbx8/94PRs/P/xkegEVywvz9F31egv9/Dg3T5/sLk/Pfi9ZJk8vrB/3t9s8fWiBeXp2+0V5eqf6nfL0vLw7L/4f5NSfr+7HSQ/3eVTSfvji4f254+Sm7sZJ9vsMisZJtv58x0mywHGS3X7ROOlUv9M4yTvuefHfk1M/T9F4qDTGw8Luy8kdD5/objz8Wma9aDxk6893PJQWOB6y2y8aD53qdxoPece3PX7rBEF/5n+rA6M2LqZvvP22PR9qqrfY338R2m/J6KZ9S2afu7jf/9Gr7vt3ce/7Wnj7Q9hYK8lrf/x8YMm82t/tfWULb39R/8/jvrLloe2+stz2P72wmbDu2z+v+xLvjr/r9vtdMvKqtz//dM3XpsOu6P6zonnczTnl8/07rEvaHpyZzOPCKyfm//FqLub/96XLfn8MdPZ/T1oP99/Hc7DvMcvv/y6vY1517+fZj9y9nwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcEwYrq2vL4/fuPfXuC3/3m382/dJdv/cPO+/+1Q9/4ccTt/z2Nx4e+ezLx7Zesu37v3PeLY9+8NqjD/z1Ey8u+8ovnysMPFb7Wbk8XR0KIXkhCWHoayf/4iPHvnVBtSwJIZSTsUMhrExWPbEyyUSY/HkIYWujna2//PJLV26rLu++b7ClfEUmSHa/wmg5tqe5nSHcUbhHnIWG0nF28NTtbwg/+K3N93xnzZf+buDI84dmqyRDTeMphOU3NT9/IIQwnP5fFUfb6vjkdLkphDDS9Lw3F7Tr9V22f33O+kXpckm6HC2IE3+/NrNeytTLrkcDmWXTvg4XbLonee3otV6RpZn17MloofLaGctXpsuvpsvL5xm/HP9PQikJlUbzdySzYyQ0HbckJLVjOdRYLzWObUj3P7OeZNZLmfXyQGa/attNB1o5SVrLY71MeTwdV9LyS5rP1R28N6f8telyKH2hvhzXQ/ZB3Wjbg8Z+1cR2nZyjLan/2Lm4UvzMLpSazkGdyhsHPj0Yo2nZaLKq7TkzHcTfHdt8/7rylq8fH8tpR/JwksZPeop/8Nsrl37gi4f3r86Lf1MpjV/qKf4Przvx0xsOf+bTufE/EeOXe4p/xWMjL1z35L1rc/vnZOyfSk/xp5576mNrzr/5SG77H4zxh3qKv/HoicFlpx57PLf9k7F/hnuK/+zb3vGjzz/zyPO58UOMP9JT/C1Hd398cPzUZbnxH4/9M9rb+PnZkWu+Nz7+k4m8+E/H+Mt6iv+5Qw+89aEV912be3w3xf4Z6yn+uy599J6lpx65OO/cmTzYr3dOgFen89JrrI+m673mmQvVlC/81USlfs23NP1/WT83lFHdzvJFjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLnpn+686v3Xv/09mytJCEmtZCbJ1pnpIP6uvGTjxoketjv13FMfW3P+zUeay1b3tgsAAABAgZiHlxolQ2F1uD0ZDhd1rB8nBy6Ka0lreXbyIMbJzhH0GqfUIU6phzjlPrWn0qc4A32Ks6RPcQb7FGeoIE7192/sIs7wHHEq1RHQZXtG5mxP93FG+xRnaZ/iLMuE6DXO8j61Z0Wf4ozNGaf7cbiyT3FW9SnOeX2Kc36f4rymT3F+pU9xLuhTnOyc8nzH4bK05oV5cWoPyoVxKkm58YtO8+kXpNu5eIHbGS3YzrKi9+MutzPc5XZen3leaZ7bGepyO1ctcDtJl9v5tQVup1SwnThu78i2L24nrnU5/g/0Kc7BPsX5cJ/i3NmnOH/Spzh/2qc4d4XWi9P5xgHoVsz/Z/O9sTBY+Y0wkp5xsrMAMd9dU/vZ/n6Xd0KK8V6XKV9SFC+bqGfirZlv+7ITCJl4azPlAy3xKo18ZI54Q83x1mV+Odf+vm1j57Y1x7s8Uz44R7yWHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0+Cf7rzq/de//T2bQxKq/3U000H8XXnJxo0TPWz32Ob715W3fP14c9lgpYdAAAAAQKGYhw80SobCYGVDGEyWtNQbSucBhtL18lh9Ob48bKouk4lSbX0kWTnn8yrp89bv27l7/d4DB9+4fefUrdO3Tu96y4arNlwzefU1V6/ftn3H9GT9ZwiDBfFCCLXph70HDn5oaseO6T1764XZ9q9On7c6XU/S542/KUxWl3en7V9VsL1S2/YODMcHB/v8oPjoAQAAAAAAAAAAAADA/2fXfkMkresAgH+fmdmZcfVyw3/j4Z3DeYqVlV5raIn7QJDhn8NFiFlrkyNPklbv0Dsxm/QgNaUIlIPjwhddmKRJb/yTEvmHA8Msob2OUClf1ItCy1DxRSgTuzvP/NsZZ5vs9rTP58U8z3x/39/v+/s9HAffZxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODQmq9PztampmfGk4hkQE6jj2wsX0zT6gh1v/z49u+X1r91emesVBhhIQAAAGCorA8fa0XKUSrkIx8nLn7bEB0D0e77AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/z/z9cnZ2tT0zJFJRDIgp9FHNpYvpml1hLovv/Hgp19Yv/6vnbHKCOsAAAAAw2V9eK4VKUclTomx5MSFzr8Vzd4NrO2Zv5TXlq2zboV5ve8OBuWdssK801aY95EheZub1xsDAAAA3v+y/r/QikxEqbBmWT+c9f/D+vos7+SevHzzWu1MelfFlSQBAAAAK5D1/6VWpBKlQqXVr6+039/QDi3+dJ7NH/a7fTb/1J68bP6w3/MvaV79Tg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7x/z9cnZ2tT0TD6JSAbkNPrIxvLFNK2OUHfTE+N/v2j/bRs6Y6XCCAsBAAAAQ2V9eLv1LkepMB5jceRi37/+gnse/uLDj05GxFKbXyzGjVt27Lhu08JnbMryznpu/9j3nnn1W8vyzlr6XLUDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA75n5+uRsbWp65ogkIhmQ0+gjG8sX07Q6Qt2XPvv5P99/8LFXOmOVEdYBAAAAhsv68HbvX45KFKMYxy9+6+z1F+R65g96ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cFz/jZu+vmVubut1blbnppGPOAy28V/eZP+cVnEbxeYWDoOn8V7clFd7G6v3fxIAAPC/cXIk0fgPnXDpau8aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HMzXJ2drU9Mz5SQiGZDTyJTagWwsX0zT6gh108efL61564mnOmOVEdYBAAAAhsv68HbvX45KjMVYHLf4rd87gcZC/z9xCDcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHFbm65OztanpmTVJRDIgp9FHNpYvpml1hLr37dr7mXuP/u6FnbFSYYSFAAAAgKGyPrzYipSjVPholOKk5ve57glJvnnt/16gPW9717TxFc+rd83Lv9u8pBDRmndHz8kKzdMszStn600sXVv1qu15uea8ase8SrTKV1vzFh/W7q5qa4acb/mTBwAAgEMn6/9LrchElAqljv7/J83rEc3roD43d2g3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcdubrk7O1qemZJIlIBuQ0+sjG8sU0rY5Q96bffPior/z0zp2dscoI6wAAAADDZX14u/cvRyXWxYdi3WLfHxPd+VneP2pv33v3P/9yesSZxx9Y/4XeZX+Y3fzqpfOf7P2IyHVn5yKObtZLBtT79e/uvmFj4+37I848Ln9SYeB5+tfrXjJtPFLbesmOZw5sH/JwAAAA4AMi6//HWpGJKBWuHdj/Z513d/8/pB8/+oZdPz+2+dnsyHtm5Caa9XID6n1u44N/OvWcv7260P8vr/fx1t0n915z77FdBZciPZK0MXXNzs0Hzt6Xy069VD/fUz97Ll/65iv/uurGu95eql+OcjO+tmcrS9WWf/aUj7Qxl9szc/E7e+rd9QsDzn/bb586+Mu1d765UP+Nk8db9U+LfvWXTl4YWD+OSBvjl92++9y9+zd314+Iar/6r715YZzwh6tv7T3/eBzsWrjzyXd+9j6AtPHchtf3nXNP5bzu+klP/ez5/+zgfbt/fNd3Hs3qZ38rcvopscL6uZ76z95xzK6nb7l0bXf93IDzP3n5C+u3Vb/9+97zX9m1amHgLpaf/4EzHrrixS3pzb1DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyzz9cnZ2tT0TC6JSAbkNPrIxvLFNK2OUPfli55/7fI7f/SDzlhlhHUAAACA4bI+vN37l6MSxSjG+GLf/0ht6yU7njmwPSaWRpPmtTC37fodH7tq285rr1ylnQMAAAAr9fJFyWL/X2hFJqJU2Bhjzf5/6pqdmw+cvS+X9f+5hWsSEVddPbf1zGjlPXvHMbuevuXSta33BBGLfxZQXsj7VDvvgvOfn3j9j187tW/epnbecxte33fOPZXzsrzozDsrWu8nHjjjoSte3JLe3NpfZ94nvrptrvl6Ilt3/LLbd5+7d//mXPYeo3kdb66b5c3l9sxc/M6eem4iSgvj+WZeuXluAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC5+frkbG1qeibyEcmAnEanZiAbyxfTtDpC3Ys3/uLWo956bF1nrFQYYSEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7NDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbrJjSuqo8D8DkzyZtpJmmT9gWjYppWRamLFgUR3aioSCtScFUpUm3tQhQEEaUuTKUVS1XcCFY3RVRQoxQq2FgsrZKKX8WNCxUUqguhFAOaobhQyeTcyeRmbiZO7EJ5HhjOnHPv/d3/vffMmRkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/lZ6uoXp7cu8jtTsvuvWzp+6fevL2Dx7afcUTb/00sv3mTw/1vn5uYseand/esmr70Qc2jh945cRv/e/9cbpt8OMzzbrUrYQQz8YQKh9Ovvj0xOcXTI/FEEI5DoyGMBhXnhiMuYQNv4cQdjTqnLvx8NQ1O6fb3ft75oyvyIXkrytUy1k9Mwbm1st/SyXNs121x64K39+0Zc+Xq999p3vszOjsLnF6n3KaTyEs39Z8fHcIYVl6Tctm21B2cGo3hxB6m467rk1dly6y/vUh1HL9uotT+7/UVtvkZNvX5vql3H75fqY71/a2Od9SFdXRdr9lnZ2vL9fPL0ZL1ahzfevxwdS+n9p1fzO/nL1iKMXQ1Sj/wTg7R0LTc4sh1p9lpdEvNZ5tSNef68dcv5Trl7tz11U/b5po5Rjnjmf75caz5bgrja9pXqtbuKtg/MLUVtIH9VzWD/k3M6rz3jSuqy6razJ3nq4FajsfSk1rUKvxxoNPD6Oaxqpx5bxj/mwh2zax5dnLy1s/OjlQUEc8FFN+7Ch/1xeDffe8ve/RoaL8baWUX+oo/4dNp365e9+rLxfmv5DllzvKv/pY79lNH+9dW3h/JmdXkMXkx9TPtt17+pPnVv//vrFWz7qeeTC7/5WO6r9x/FRPf+3Y8cL6N2T3Z1lH+d/dcNuPb3595ExhfsjyezvK3zr+8PM9w7UrC/OPz3wUqvUZ2sH8+XXs2m+Gh38eKcr/Krv//S3y40L59Z8Gb4weuP61Ffs3Fs7Pzdn9GUj587/YFqr/jsuO7umrHbmkaO2MBxf7DQtAK6vSb6xnUr/d/8zDU6WW/zOXqun/wksjXTPfQH3p1f9Pnihn+jzLz2M+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhyQAAAAAAj6/7odgQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATwUAAP//LaoJLw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 14.664608202s ago: executing program 4 (id=1700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 12.671109813s ago: executing program 0 (id=1708): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}]}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8917, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 8.256962327s ago: executing program 2 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) 8.16467641s ago: executing program 0 (id=1721): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) 8.075467101s ago: executing program 2 (id=1722): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) 7.793026408s ago: executing program 0 (id=1726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="260000000000000000000000d73d9c6a", 0x10}], 0x1}}], 0x1, 0x20000040) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 7.639444514s ago: executing program 3 (id=1728): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2000006) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000080)=0x6) 7.365654767s ago: executing program 3 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000cc0)=""/178, 0xb2}], 0x1}}], 0x1, 0x10000, 0x0) 7.364486219s ago: executing program 0 (id=1731): open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x9101) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40042, 0x1, 0x3}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 7.030485788s ago: executing program 1 (id=1733): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket(0x10, 0xa, 0x4) recvmsg(r1, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x6, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r4}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58}, 0x10) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) write$binfmt_aout(r0, 0x0, 0xff2e) syz_open_pts(r0, 0x0) 6.074178575s ago: executing program 3 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, 0x0, 0x4044080) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x400182, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) 5.752380035s ago: executing program 2 (id=1735): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x1, 0x9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffc, 0x0, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x6d94, &(0x7f00000000c0)={0x0, 0x7039, 0x4000, 0x10803, 0x245}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 5.751991291s ago: executing program 0 (id=1736): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 4.735004564s ago: executing program 1 (id=1738): setrlimit(0xb, &(0x7f0000000080)={0xe, 0x45}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='attr/prev\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x61, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x1d) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setgid(0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.733588816s ago: executing program 3 (id=1739): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x2, 0x380, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$inet(0x2b, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x5, 0x3, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@delchain={0x1d4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xac, 0x2, [@TCA_ROUTE4_ACT={0xa8, 0x6, [@m_vlan={0xa4, 0x6, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x5, 0x3d0d, 0x6}, 0x2}}]}, {0x51, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585ab10ae01a9ffc67e6ad19b4103524e4f4a3bf49582d994e907b0"}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x8c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x61, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b43636124ee3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa8839a02231378329689c84c729801c399b2e8e9d7612504fe105d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.647583593s ago: executing program 0 (id=1740): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r3 = io_uring_setup(0x5bde, &(0x7f0000000400)={0x0, 0x5f41, 0x80}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.514422807s ago: executing program 2 (id=1741): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$video4linux(0x0, 0xa4ca, 0x183801) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 4.382598806s ago: executing program 3 (id=1742): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x2, 0x0, [0x1, 0x5, 0xffffffff, 0xe76, 0xffff, 0x2, 0xc491, 0x9, 0x3, 0x9, 0x9, 0x4, 0x30000, 0x9, 0x7cb, 0x44]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 4.381481705s ago: executing program 1 (id=1743): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000080)=0x6) 3.828084002s ago: executing program 5 (id=1744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="260000000000000000000000d73d9c6a", 0x10}], 0x1}}], 0x1, 0x20000040) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 3.602657899s ago: executing program 1 (id=1745): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) readv(r0, &(0x7f0000001c40)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}], 0x2) 3.335737557s ago: executing program 5 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000cc0)=""/178, 0xb2}], 0x1}}], 0x1, 0x10000, 0x0) 2.216873226s ago: executing program 5 (id=1747): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='pmap_register\x00', r1, 0x0, 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.184846542s ago: executing program 1 (id=1748): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) 1.820638647s ago: executing program 5 (id=1749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x62881, 0x19d) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x3, "5806de", 0x0, 0xff}]}}}, 0x12) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.568546492s ago: executing program 1 (id=1750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) 1.408774997s ago: executing program 2 (id=1751): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x4, 0x1}, {0x40000000020, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x3, 0x0, 0x4d}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) 345.639505ms ago: executing program 5 (id=1752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, 0x0, 0x4044080) openat$autofs(0xffffffffffffff9c, 0x0, 0x400182, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) 112.568875ms ago: executing program 2 (id=1753): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 64.564687ms ago: executing program 5 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x1, 0x4, 0x0, 0x7, 0x1, 0x1, 0x9]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4) 0s ago: executing program 3 (id=1755): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0}}], 0x1, 0x24064040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x200001, &(0x7f0000000080)={[{@norecovery}, {@rgrplvb}, {@noloccookie}, {}, {@quota_off}, {@data_writeback}, {@norgrplvb}, {@upgrade}, {@loccookie}, {@nodebug}, {@acl}, {@quota_on}, {}, {@barrier}]}, 0x1, 0x125bb, &(0x7f0000037080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) kernel console output (not intermixed with test programs): interfaces, different from the descriptor's value: 1 [ 449.833947][ T5929] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 449.841601][ T5929] usb 3-1: can't read configurations, error -71 [ 450.153895][ T5937] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 450.313740][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 450.325457][ T5937] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 450.351240][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.372441][ T972] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 450.402636][ T5937] usb 5-1: config 0 has no interface number 0 [ 450.418578][ T5937] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.423611][ T5937] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 450.581574][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.581610][ T5937] usb 5-1: Product: syz [ 450.581631][ T5937] usb 5-1: Manufacturer: syz [ 450.581652][ T5937] usb 5-1: SerialNumber: syz [ 450.806972][ T5937] usb 5-1: config 0 descriptor?? [ 450.898196][ T972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.002075][ T972] usb 1-1: not running at top speed; connect to a high speed hub [ 451.005409][ T5937] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 451.005481][ T5937] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 451.005787][ T972] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 451.005808][ T972] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 451.005825][ T972] usb 1-1: config 3 has no interface number 0 [ 451.005860][ T972] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 451.005884][ T972] usb 1-1: config 3 interface 106 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.005908][ T972] usb 1-1: config 3 interface 106 has no altsetting 0 [ 451.013635][ T972] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 451.013660][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.013679][ T972] usb 1-1: Product: syz [ 451.013693][ T972] usb 1-1: Manufacturer: syz [ 451.013707][ T972] usb 1-1: SerialNumber: syz [ 451.017524][ T9487] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.110869][ T5937] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 451.111356][ T5937] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 451.333787][ T5937] usb 5-1: USB disconnect, device number 23 [ 451.382237][ T972] kobil_sct 1-1:3.106: KOBIL USB smart card terminal converter detected [ 451.395042][ T972] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 451.412042][ T972] usb 1-1: USB disconnect, device number 16 [ 451.424371][ T972] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 451.425039][ T972] kobil_sct 1-1:3.106: device disconnected [ 452.179263][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 452.179284][ T30] audit: type=1326 audit(1752519224.678:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 452.181162][ T30] audit: type=1326 audit(1752519224.678:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.143630][ T30] audit: type=1326 audit(1752519225.628:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.166647][ T30] audit: type=1326 audit(1752519225.648:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.166699][ T30] audit: type=1326 audit(1752519225.648:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.172105][ T30] audit: type=1326 audit(1752519225.668:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.172179][ T30] audit: type=1326 audit(1752519225.668:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.192696][ T30] audit: type=1326 audit(1752519225.668:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.192755][ T30] audit: type=1326 audit(1752519225.668:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f375878e929 code=0x7ffc0000 [ 453.450125][ T9521] syz.0.1107: attempt to access beyond end of device [ 453.450125][ T9521] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 453.450379][ T9521] hfsplus: unable to find HFS+ superblock [ 453.643506][ T6054] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 453.823480][ T6054] usb 6-1: Using ep0 maxpacket: 8 [ 453.825992][ T6054] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 453.826023][ T6054] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 453.826068][ T6054] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.826090][ T6054] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.826128][ T6054] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.826156][ T6054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.944024][ T5929] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 454.105856][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 454.155394][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.155457][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 454.155510][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 454.155630][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 454.155678][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.276528][ T5929] usb 5-1: config 0 descriptor?? [ 454.289776][ T9520] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 454.358187][ T5929] hub 5-1:0.0: USB hub found [ 454.511805][ T6054] usb 6-1: GET_CAPABILITIES returned 0 [ 454.511866][ T6054] usbtmc 6-1:16.0: can't read capabilities [ 454.567845][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.631749][ T5929] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 454.739498][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 454.743898][ T9518] usbtmc 6-1:16.0: Unable to send data, error -71 [ 454.880007][ T5929] usbhid 5-1:0.0: can't add hid device: -71 [ 454.880140][ T5929] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 454.917028][ T5929] usb 5-1: USB disconnect, device number 24 [ 456.443632][ T5937] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 456.595294][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 456.597892][ T5937] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 456.597918][ T5937] usb 2-1: config 16 has an invalid interface descriptor of length 8, skipping [ 456.597938][ T5937] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 456.597957][ T5937] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 456.597992][ T5937] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.598016][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.870886][ T972] usb 2-1: USB disconnect, device number 30 [ 456.959442][ T5929] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 457.147520][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 457.156985][ T5929] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 17 [ 457.162547][ T5929] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 457.162582][ T5929] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 457.162611][ T5929] usb 5-1: Product: syz [ 457.162632][ T5929] usb 5-1: Manufacturer: syz [ 457.162653][ T5929] usb 5-1: SerialNumber: syz [ 457.172937][ T5929] usb 5-1: config 0 descriptor?? [ 457.242528][ T972] usb 6-1: USB disconnect, device number 19 [ 459.960651][ T9367] usb 5-1: USB disconnect, device number 25 [ 460.383573][ T9367] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 460.583623][ T9367] usb 5-1: Using ep0 maxpacket: 32 [ 460.617887][ T9367] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 460.700249][ T9367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.045222][ T9367] usb 5-1: config 0 has no interface number 0 [ 461.051477][ T9367] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.271831][ T9367] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 461.297399][ T9367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.325827][ T9367] usb 5-1: Product: syz [ 461.345769][ T9367] usb 5-1: Manufacturer: syz [ 461.370121][ T9367] usb 5-1: SerialNumber: syz [ 461.406630][ T9367] usb 5-1: config 0 descriptor?? [ 461.428777][ T9367] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 461.451169][ T9367] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 461.467488][ T9603] gtp0: entered promiscuous mode [ 461.794584][ T9367] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 461.802184][ T9367] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 462.681560][ T9367] usb 5-1: USB disconnect, device number 26 [ 464.473523][ T972] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 465.002225][ T972] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 465.018246][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.128121][ T972] usb 5-1: Product: syz [ 465.141511][ T972] usb 5-1: Manufacturer: syz [ 465.162103][ T972] usb 5-1: SerialNumber: syz [ 465.423092][ T972] usb 5-1: config 0 descriptor?? [ 466.242177][ T9645] syz.0.1151: attempt to access beyond end of device [ 466.242177][ T9645] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 466.255928][ T9645] hfsplus: unable to find HFS+ superblock [ 466.388621][ T972] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 466.396978][ T972] usb 5-1: Firmware version (0.0) predates our first public release. [ 466.411617][ T972] usb 5-1: Please update to version 0.2 or newer [ 466.691865][ T9651] 9pnet_virtio: no channels available for device syz [ 466.978279][ T9652] gtp0: entered promiscuous mode [ 467.187752][ T972] usb 5-1: USB disconnect, device number 27 [ 467.733610][ T9367] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 467.946914][ T9367] usb 3-1: Using ep0 maxpacket: 16 [ 468.014591][ T9367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.048114][ T9367] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.073671][ T9367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.081655][ T9367] usb 3-1: Product: syz [ 468.100768][ T9367] usb 3-1: Manufacturer: syz [ 468.105825][ T9367] usb 3-1: SerialNumber: syz [ 468.126183][ T9367] usb 3-1: config 0 descriptor?? [ 468.468007][ T9367] usb 3-1: USB disconnect, device number 20 [ 468.564539][ T9682] syz.0.1165: attempt to access beyond end of device [ 468.564539][ T9682] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 468.577770][ T9682] hfsplus: unable to find HFS+ superblock [ 469.064110][ T9690] 9pnet_virtio: no channels available for device syz [ 470.254083][ T9367] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 470.435030][ T9367] usb 6-1: Using ep0 maxpacket: 16 [ 470.451858][ T9367] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 470.489685][ T9367] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.492592][ T9367] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.580742][ T9367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.639501][ T9367] usb 6-1: Product: syz [ 470.669241][ T9367] usb 6-1: Manufacturer: syz [ 470.705718][ T9367] usb 6-1: SerialNumber: syz [ 470.933592][ T5964] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 470.952868][ T9367] usb 6-1: 0:2 : does not exist [ 470.968651][ T9367] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 471.008373][ T9367] usb 6-1: USB disconnect, device number 20 [ 471.156181][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.217594][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 471.521684][ T5964] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 471.534439][ T5964] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 471.543841][ T5964] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 471.552307][ T5964] usb 3-1: Product: syz [ 471.564011][ T5964] usb 3-1: Manufacturer: syz [ 471.568858][ T5964] usb 3-1: SerialNumber: syz [ 471.611334][ T5964] usb 3-1: config 0 descriptor?? [ 471.875587][ T9719] syz.3.1178: attempt to access beyond end of device [ 471.875587][ T9719] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 471.889501][ T9719] hfsplus: unable to find HFS+ superblock [ 471.946195][ T5964] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 471.993321][ T5964] gspca_sunplus: reg_w_riv err -71 [ 472.019782][ T5964] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 472.061062][ T5964] usb 3-1: USB disconnect, device number 21 [ 472.270603][ T9731] loop3: detected capacity change from 0 to 2048 [ 472.501731][ T9734] 9pnet_virtio: no channels available for device syz [ 473.016060][ T9731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.035769][ T30] audit: type=1800 audit(1752519245.538:97): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1183" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 473.058709][ T30] audit: type=1800 audit(1752519245.558:98): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1183" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 473.063691][ T9731] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 473.756841][ T9731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.322408][ T9756] syz.0.1190: attempt to access beyond end of device [ 474.322408][ T9756] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 474.336188][ T9756] hfsplus: unable to find HFS+ superblock [ 475.712695][ T9766] syz.4.1195: attempt to access beyond end of device [ 475.712695][ T9766] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 475.725944][ T9766] hfsplus: unable to find HFS+ superblock [ 476.161006][ T9759] loop3: detected capacity change from 0 to 32768 [ 476.168760][ T9759] XFS: ikeep mount option is deprecated. [ 476.273269][ T9759] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 477.101051][ T9759] XFS (loop3): Ending clean mount [ 477.119256][ T9759] XFS (loop3): Quotacheck needed: Please wait. [ 477.203782][ T9759] XFS (loop3): Quotacheck: Done. [ 477.287855][ T9788] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 477.490397][ T9795] fuse: Unknown parameter 'fd0x0000000000000007' [ 477.788951][ T9804] syz.2.1206: attempt to access beyond end of device [ 477.788951][ T9804] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 477.802448][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 477.802490][ T9804] hfsplus: unable to find HFS+ superblock [ 478.967230][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 479.246362][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 479.254856][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.276623][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 479.292073][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 479.328234][ T9] usb 1-1: Manufacturer: syz [ 479.363581][ T9] usb 1-1: config 0 descriptor?? [ 479.793486][ T9] rc_core: IR keymap rc-hauppauge not found [ 479.799424][ T9] Registered IR keymap rc-empty [ 479.814454][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 479.839843][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 479.893138][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 479.901049][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.917021][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.246146][ T9] usb 1-1: USB disconnect, device number 17 [ 480.833789][ T972] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 481.048302][ T9829] syz.3.1208: attempt to access beyond end of device [ 481.048302][ T9829] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 481.061567][ T9829] hfsplus: unable to find HFS+ superblock [ 481.157001][ T972] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 481.369678][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.175403][ T972] usb 5-1: config 0 descriptor?? [ 482.183288][ T972] cp210x 5-1:0.0: cp210x converter detected [ 482.431565][ T9837] loop1: detected capacity change from 0 to 64 [ 482.469478][ T972] usb 5-1: cp210x converter now attached to ttyUSB0 [ 483.236707][ T30] audit: type=1800 audit(1752519255.728:99): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1215" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 483.533768][ T972] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 483.623657][ T9852] syz.1.1220: attempt to access beyond end of device [ 483.623657][ T9852] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 483.637157][ T9852] hfsplus: unable to find HFS+ superblock [ 484.118891][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 484.575348][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 484.596819][ T972] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 484.616602][ T972] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 484.633532][ T972] usb 4-1: Product: syz [ 484.637868][ T972] usb 4-1: Manufacturer: syz [ 484.645654][ T972] usb 4-1: SerialNumber: syz [ 484.653686][ T972] usb 4-1: config 0 descriptor?? [ 484.769877][ T3410] usb 5-1: USB disconnect, device number 28 [ 484.809986][ T3410] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 484.868311][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 484.878039][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 484.911605][ T3410] cp210x 5-1:0.0: device disconnected [ 484.931166][ T972] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 485.195578][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 485.303903][ T972] gspca_sunplus: reg_w_riv err -71 [ 485.304072][ T972] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 485.523588][ T972] usb 4-1: USB disconnect, device number 12 [ 485.559951][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 485.571973][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 485.572065][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 485.572104][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.572154][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 7 [ 485.572190][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8256, setting to 1024 [ 485.572224][ T9] usb 6-1: config 1 interface 1 has no altsetting 0 [ 485.589389][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.589435][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.589475][ T9] usb 6-1: Product: syz [ 485.589500][ T9] usb 6-1: Manufacturer: syz [ 485.589525][ T9] usb 6-1: SerialNumber: syz [ 485.949868][ T9] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 485.982813][ T9] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 486.203313][ T9] usb 6-1: USB disconnect, device number 21 [ 487.849701][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 488.248778][ T9897] syz.0.1235: attempt to access beyond end of device [ 488.248778][ T9897] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 488.262136][ T9897] hfsplus: unable to find HFS+ superblock [ 489.039770][ T9910] input: syz1 as /devices/virtual/input/input34 [ 489.088714][ T9912] loop5: detected capacity change from 0 to 128 [ 489.266567][ T9912] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.326254][ T9912] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 489.740460][ T9920] tipc: Enabling of bearer rejected, failed to enable media [ 490.646633][ T5843] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.153184][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 491.163004][ T9945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1251'. [ 491.404921][ T9955] sctp: [Deprecated]: syz.3.1252 (pid 9955) Use of int in maxseg socket option. [ 491.404921][ T9955] Use struct sctp_assoc_value instead [ 491.798240][ T9961] loop4: detected capacity change from 0 to 128 [ 491.916916][ T6054] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 492.010483][ T9961] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 492.084919][ T6054] usb 1-1: Using ep0 maxpacket: 32 [ 492.204671][ T9961] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 492.225021][ T6054] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.261736][ T6054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 492.369709][ T6054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.549950][ T6054] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 492.559946][ T6054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.597258][ T6054] usb 1-1: config 0 descriptor?? [ 493.371148][ T9972] loop2: detected capacity change from 0 to 1024 [ 493.378672][ T9972] EXT4-fs: Ignoring removed nobh option [ 493.433848][ T9956] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.441578][ T9972] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 493.479858][ T6054] hub 1-1:0.0: USB hub found [ 493.712528][ T5844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.726572][ T9972] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1260: lblock 2 mapped to illegal pblock 2 (length 1) [ 493.745844][ T6054] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 493.802800][ T6054] usbhid 1-1:0.0: can't add hid device: -71 [ 493.823600][ T9972] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 493.846901][ T9972] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.1260: lblock 0 mapped to illegal pblock 48 (length 1) [ 493.871871][ T6054] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 493.914445][ T9972] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 493.952637][ T9972] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1260: Failed to acquire dquot type 0 [ 493.987247][ T9979] loop4: detected capacity change from 0 to 256 [ 493.994999][ T6054] usb 1-1: USB disconnect, device number 18 [ 494.029382][ T9972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 494.142221][ T9972] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1260: mark_inode_dirty error [ 494.183993][ T9972] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 494.243991][ T9972] EXT4-fs (loop2): 1 orphan inode deleted [ 494.284267][ T6046] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 494.325728][ T9972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.363563][ T6046] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 494.399051][ T6046] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 494.413152][ T9979] FAT-fs (loop4): Directory bread(block 64) failed [ 494.451460][ T9979] FAT-fs (loop4): Directory bread(block 65) failed [ 494.507208][ T9979] FAT-fs (loop4): Directory bread(block 66) failed [ 494.543077][ T9979] FAT-fs (loop4): Directory bread(block 67) failed [ 494.568300][ T9972] netlink: 'syz.2.1260': attribute type 1 has an invalid length. [ 494.586746][ T9979] FAT-fs (loop4): Directory bread(block 68) failed [ 494.603970][ T9972] netlink: 'syz.2.1260': attribute type 2 has an invalid length. [ 494.642326][ T9979] FAT-fs (loop4): Directory bread(block 69) failed [ 494.643356][ T9983] syzkaller0: entered promiscuous mode [ 494.675485][ T9979] FAT-fs (loop4): Directory bread(block 70) failed [ 494.682526][ T9979] FAT-fs (loop4): Directory bread(block 71) failed [ 494.682699][ T9983] syzkaller0: entered allmulticast mode [ 494.743846][ T9979] FAT-fs (loop4): Directory bread(block 72) failed [ 494.783548][ T9979] FAT-fs (loop4): Directory bread(block 73) failed [ 494.824372][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.874685][ T5846] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 494.912536][ T5846] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 494.970058][ T5846] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 495.544196][ T972] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 495.636774][T10006] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1268'. [ 495.756861][ T972] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.766931][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.780764][ T972] usb 4-1: config 0 descriptor?? [ 495.869111][ T972] cp210x 4-1:0.0: cp210x converter detected [ 496.067357][ T972] usb 4-1: cp210x converter now attached to ttyUSB0 [ 496.075683][T10022] syz.5.1272: attempt to access beyond end of device [ 496.075683][T10022] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 496.093776][T10022] hfsplus: unable to find HFS+ superblock [ 496.879656][ T972] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 497.872272][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.929337][ T972] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 497.960220][ T972] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 497.999353][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.040581][ T972] usb 3-1: config 0 descriptor?? [ 498.067058][ T972] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 498.477682][ T972] dvb-usb: bulk message failed: -22 (3/0) [ 498.500384][ T972] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 498.530557][ T5964] usb 4-1: USB disconnect, device number 13 [ 498.542113][ T5964] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 498.570908][ T5964] cp210x 4-1:0.0: device disconnected [ 498.862829][ T972] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 498.892462][ T972] usb 3-1: media controller created [ 498.910529][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.943533][ T3410] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 498.959943][ T972] dvb-usb: bulk message failed: -22 (6/0) [ 499.007054][ T972] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 499.040023][ T972] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 499.078019][ T972] dvb-usb: schedule remote query interval to 150 msecs. [ 499.093468][ T972] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 499.124675][ T3410] usb 1-1: Using ep0 maxpacket: 8 [ 499.420445][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 499.436634][ T3410] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 499.481859][T10020] netlink: 'syz.2.1271': attribute type 13 has an invalid length. [ 499.532249][ T972] dvb-usb: error while querying for an remote control event. [ 499.564245][T10020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.579911][ T3410] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.609624][ T3410] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.713755][ T3410] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 499.743808][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 499.749622][ T972] dvb-usb: error while querying for an remote control event. [ 499.873240][ T3410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.924318][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 499.930229][ T9] dvb-usb: error while querying for an remote control event. [ 500.028050][T10052] sctp: [Deprecated]: syz.1.1279 (pid 10052) Use of int in maxseg socket option. [ 500.028050][T10052] Use struct sctp_assoc_value instead [ 500.313304][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 500.326678][ T9] dvb-usb: error while querying for an remote control event. [ 500.493663][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 500.499465][ T9] dvb-usb: error while querying for an remote control event. [ 500.669640][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 500.682484][ T9] dvb-usb: error while querying for an remote control event. [ 500.703499][ T3410] usb 1-1: Product: syz [ 500.721449][ T3410] usb 1-1: Manufacturer: syz [ 500.745245][ T3410] usb 1-1: SerialNumber: syz [ 500.819353][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.827021][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.839639][ T3410] usb 1-1: config 0 descriptor?? [ 500.903617][ T972] dvb-usb: bulk message failed: -22 (1/0) [ 500.909524][ T972] dvb-usb: error while querying for an remote control event. [ 501.130203][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 501.158250][ T9] dvb-usb: error while querying for an remote control event. [ 501.179776][ T3410] usb 1-1: USB disconnect, device number 19 [ 501.363877][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 501.384570][T10054] syzkaller0: entered promiscuous mode [ 501.411552][T10054] syzkaller0: entered allmulticast mode [ 501.426699][ T9] dvb-usb: error while querying for an remote control event. [ 501.449895][ T972] usb 3-1: USB disconnect, device number 22 [ 501.756604][ T972] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 501.868302][T10064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1284'. [ 502.471168][T10079] syz.3.1287: attempt to access beyond end of device [ 502.471168][T10079] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 502.484550][T10079] hfsplus: unable to find HFS+ superblock [ 504.963741][ T9367] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 505.114810][T10095] loop4: detected capacity change from 0 to 40427 [ 505.140282][T10095] F2FS-fs (loop4): invalid crc value [ 505.232725][T10095] F2FS-fs (loop4): Start checkpoint disabled! [ 505.275170][T10095] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 505.303857][ T9367] usb 4-1: device descriptor read/64, error -71 [ 505.477508][ T145] kworker/u8:5: attempt to access beyond end of device [ 505.477508][ T145] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.509391][ T145] CPU: 0 UID: 0 PID: 145 Comm: kworker/u8:5 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 505.509429][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.509446][ T145] Workqueue: writeback wb_workfn (flush-7:4) [ 505.509494][ T145] Call Trace: [ 505.509504][ T145] [ 505.509514][ T145] dump_stack_lvl+0x189/0x250 [ 505.509552][ T145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.509587][ T145] ? __pfx_queue_work_on+0x10/0x10 [ 505.509620][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.509651][ T145] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 505.509689][ T145] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 505.509728][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.509758][ T145] ? f2fs_hw_is_readonly+0x39b/0x470 [ 505.509803][ T145] f2fs_handle_critical_error+0x37c/0x540 [ 505.509852][ T145] f2fs_write_end_io+0x495/0x810 [ 505.509874][ T145] ? blkg_put+0x22/0x240 [ 505.509924][ T145] __submit_merged_bio+0x27a/0x6a0 [ 505.509969][ T145] __submit_merged_write_cond+0x255/0x530 [ 505.510015][ T145] f2fs_write_data_pages+0x261d/0x3000 [ 505.510101][ T145] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 505.510140][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510190][ T145] ? unwind_next_frame+0xa5/0x2390 [ 505.510256][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510333][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510394][ T145] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 505.510439][ T145] do_writepages+0x32e/0x550 [ 505.510474][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510504][ T145] ? reacquire_held_locks+0x127/0x1d0 [ 505.510537][ T145] ? writeback_sb_inodes+0x372/0x1000 [ 505.510579][ T145] __writeback_single_inode+0x145/0xff0 [ 505.510609][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510637][ T145] ? do_raw_spin_unlock+0x122/0x240 [ 505.510680][ T145] writeback_sb_inodes+0x6b5/0x1000 [ 505.510724][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510768][ T145] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 505.510847][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510876][ T145] ? rcu_is_watching+0x15/0xb0 [ 505.510909][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.510948][ T145] wb_writeback+0x43b/0xaf0 [ 505.510985][ T145] ? queue_io+0x3b1/0x590 [ 505.511014][ T145] ? __pfx_wb_writeback+0x10/0x10 [ 505.511054][ T145] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.511095][ T145] wb_workfn+0x409/0xef0 [ 505.511166][ T145] ? __pfx_wb_workfn+0x10/0x10 [ 505.511206][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.511232][ T145] ? __lock_acquire+0xab9/0xd20 [ 505.511268][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.511298][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.511328][ T145] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.511360][ T145] ? process_scheduled_works+0x9ef/0x17b0 [ 505.511393][ T145] ? process_scheduled_works+0x9ef/0x17b0 [ 505.511422][ T145] process_scheduled_works+0xae1/0x17b0 [ 505.511480][ T145] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.511515][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.511551][ T145] worker_thread+0x8a0/0xda0 [ 505.511607][ T145] kthread+0x711/0x8a0 [ 505.511644][ T145] ? __pfx_worker_thread+0x10/0x10 [ 505.511672][ T145] ? __pfx_kthread+0x10/0x10 [ 505.511701][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.511732][ T145] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.511764][ T145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.511789][ T145] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.511823][ T145] ? __pfx_kthread+0x10/0x10 [ 505.511858][ T145] ret_from_fork+0x3fc/0x770 [ 505.511886][ T145] ? __pfx_ret_from_fork+0x10/0x10 [ 505.511917][ T145] ? __switch_to_asm+0x39/0x70 [ 505.511948][ T145] ? __switch_to_asm+0x33/0x70 [ 505.511977][ T145] ? __pfx_kthread+0x10/0x10 [ 505.512011][ T145] ret_from_fork_asm+0x1a/0x30 [ 505.512060][ T145] [ 505.586311][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 505.592431][ T145] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 505.808191][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 505.876057][ T9367] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 506.017569][ T43] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 506.026104][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.045687][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.070897][ T43] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 506.088707][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.110366][ T43] usb 1-1: Product: syz [ 506.123654][ T43] usb 1-1: Manufacturer: syz [ 506.135668][ T43] usb 1-1: SerialNumber: syz [ 506.175115][ T43] usb 1-1: config 0 descriptor?? [ 506.281968][T10110] loop1: detected capacity change from 0 to 40427 [ 506.294196][T10110] F2FS-fs (loop1): Invalid segment/section count (24 != 1 * 1) [ 506.301785][T10110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 506.315178][T10110] F2FS-fs (loop1): invalid crc value [ 506.400067][ T9367] usb 4-1: device descriptor read/64, error -71 [ 506.448570][T10110] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 506.456639][T10110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 506.472865][ T43] usb 1-1: USB disconnect, device number 20 [ 506.523845][ T9367] usb usb4-port1: attempt power cycle [ 506.788374][T10120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1298'. [ 506.883826][ T9367] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 506.922127][ T9367] usb 4-1: device descriptor read/8, error -71 [ 507.177143][ T9367] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 507.177222][ T43] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 507.222707][ T9367] usb 4-1: device descriptor read/8, error -71 [ 507.334003][ T9367] usb usb4-port1: unable to enumerate USB device [ 507.368819][ T43] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 507.397001][ T43] usb 6-1: config 0 has no interface number 0 [ 507.535322][ T43] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 507.580205][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.679847][ T43] usb 6-1: Product: syz [ 507.766132][ T43] usb 6-1: Manufacturer: syz [ 507.829312][ T43] usb 6-1: SerialNumber: syz [ 507.974789][ T43] usb 6-1: config 0 descriptor?? [ 508.338256][T10145] syz.1.1301: attempt to access beyond end of device [ 508.338256][T10145] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 508.352287][T10145] hfsplus: unable to find HFS+ superblock [ 508.967379][T10149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1310'. [ 509.161057][ T43] usb 6-1: Firmware version (0.0) predates our first public release. [ 509.261933][ T43] usb 6-1: Please update to version 0.2 or newer [ 509.411284][ T43] usb 6-1: USB disconnect, device number 22 [ 509.786746][ T3410] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 510.066734][ T3410] usb 4-1: Using ep0 maxpacket: 8 [ 510.221912][ T3410] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 510.556687][ T3410] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 510.596982][ T3410] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 510.636847][T10170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1315'. [ 510.678622][ T3410] usb 4-1: Product: syz [ 510.682805][ T3410] usb 4-1: Manufacturer: syz [ 510.708152][ T3410] usb 4-1: SerialNumber: syz [ 510.749810][ T3410] usb 4-1: config 0 descriptor?? [ 511.052971][ T3410] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 511.066839][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 511.079714][ T3410] gspca_sunplus: reg_w_riv err -71 [ 511.094753][ T3410] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 511.141063][ T3410] usb 4-1: USB disconnect, device number 18 [ 511.236529][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 511.258860][ T43] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 511.273501][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.292731][ T43] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.308275][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 511.320094][ T43] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 511.328564][T10178] syz.2.1319 (10178) used greatest stack depth: 17992 bytes left [ 511.362255][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.401315][ T43] usb 6-1: Product: syz [ 511.405934][ T43] usb 6-1: Manufacturer: syz [ 511.411678][ T43] usb 6-1: SerialNumber: syz [ 511.534122][ T9] usb 1-1: device descriptor read/64, error -71 [ 511.782204][ T43] usb 6-1: config 0 descriptor?? [ 512.040897][T10189] input: syz1 as /devices/virtual/input/input36 [ 512.090047][ T43] usb 6-1: USB disconnect, device number 23 [ 512.104578][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 512.254126][ T9] usb 1-1: device descriptor read/64, error -71 [ 512.263950][ T9367] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 512.404338][ T9] usb usb1-port1: attempt power cycle [ 512.436277][T10194] syz.1.1326: attempt to access beyond end of device [ 512.436277][T10194] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 512.450040][T10194] hfsplus: unable to find HFS+ superblock [ 512.456020][ T9367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.463494][ T9367] usb 5-1: config 0 has no interfaces? [ 513.469185][ T9367] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 513.484164][ T9367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.495700][ T9367] usb 5-1: config 0 descriptor?? [ 513.734627][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 513.842150][ T9] usb 1-1: device descriptor read/8, error -71 [ 514.203895][ T5929] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 514.227501][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 514.648055][ T9] usb 1-1: device descriptor read/8, error -71 [ 514.653656][T10214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1331'. [ 514.713860][ T5929] usb 3-1: config 0 has no interfaces? [ 514.783758][ T9] usb usb1-port1: unable to enumerate USB device [ 514.836715][ T5929] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 514.860969][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.933572][ T3410] usb 5-1: USB disconnect, device number 29 [ 514.942497][ T5929] usb 3-1: Product: syz [ 514.955825][ T5929] usb 3-1: Manufacturer: syz [ 514.969418][ T5929] usb 3-1: SerialNumber: syz [ 515.045185][ T5929] usb 3-1: config 0 descriptor?? [ 516.132245][T10231] syzkaller0: entered promiscuous mode [ 516.147049][T10231] syzkaller0: entered allmulticast mode [ 516.162890][T10234] comedi comedi0: adq12b: I/O port conflict (0xfffffffffffffffe,16) [ 516.171255][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 516.830483][ T9] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 516.851014][ T9] usb 5-1: config 8 has no interface number 0 [ 516.897103][ T9] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 516.958315][ T9] usb 5-1: config 8 interface 177 has no altsetting 0 [ 516.985019][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 517.044069][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.085314][T10227] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.241030][ T972] usb 3-1: USB disconnect, device number 23 [ 517.314009][T10243] syz.1.1341: attempt to access beyond end of device [ 517.314009][T10243] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 517.327586][T10243] hfsplus: unable to find HFS+ superblock [ 518.456446][ T9] usb 5-1: string descriptor 0 read error: -71 [ 518.478053][ C0] ir_toy 5-1:8.177: out urb status: -71 [ 519.005333][ T9] ir_toy 5-1:8.177: could not write reset command: -110 [ 519.346206][ T9] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110 [ 519.755278][ T9] usb 5-1: USB disconnect, device number 30 [ 519.793053][T10257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1346'. [ 520.460448][ T3410] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 520.702469][ T3410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.773487][ T3410] usb 5-1: config 0 has no interfaces? [ 520.822806][ T3410] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 521.054232][ T3410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.617699][ T3410] usb 5-1: config 0 descriptor?? [ 521.880797][T10296] Bluetooth: MGMT ver 1.23 [ 521.913888][T10296] Bluetooth: hci0: service_discovery: too big uuid_count value 14336 [ 522.306131][ T5964] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 523.553497][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 523.941275][ T9] usb 5-1: USB disconnect, device number 31 [ 523.955201][ T5964] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.980661][ T5964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.014831][ T5964] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.052729][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.084035][ T5964] usb 3-1: Product: syz [ 524.088253][ T5964] usb 3-1: Manufacturer: syz [ 524.118918][T10316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1362'. [ 524.138689][ T5964] usb 3-1: SerialNumber: syz [ 524.271179][T10323] loop0: detected capacity change from 0 to 512 [ 524.381031][T10328] loop3: detected capacity change from 0 to 136 [ 524.397319][T10323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.421670][ T5964] usb 3-1: 0:2 : does not exist [ 524.425630][T10323] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.434587][ T5964] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 524.461279][ T5964] usb 3-1: USB disconnect, device number 24 [ 524.637113][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.783064][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.691941][T10346] loop2: detected capacity change from 0 to 32768 [ 525.702902][T10346] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1374 (10346) [ 525.731687][T10346] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 525.731797][T10346] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 525.731823][T10346] BTRFS info (device loop2): using free-space-tree [ 526.186670][ T5846] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 526.453771][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 526.899067][T10371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1379'. [ 526.921384][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.953202][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.001610][ T24] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 527.042917][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.145208][ T24] usb 6-1: config 0 descriptor?? [ 529.401388][ T972] usb 6-1: USB disconnect, device number 24 [ 529.694272][ T5929] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 529.933972][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 529.959842][ T5929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 530.049101][ T5929] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 530.080514][ T5929] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 530.104019][ T5929] usb 5-1: Product: syz [ 530.115292][ T5929] usb 5-1: Manufacturer: syz [ 530.154343][ T5929] usb 5-1: SerialNumber: syz [ 530.181846][ T5929] usb 5-1: config 0 descriptor?? [ 530.409098][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 530.423370][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 530.435425][T10429] sctp: [Deprecated]: syz.3.1395 (pid 10429) Use of int in maxseg socket option. [ 530.435425][T10429] Use struct sctp_assoc_value instead [ 530.891643][ T5929] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 530.926977][ T5929] gspca_sunplus: reg_w_riv err -71 [ 530.937183][ T5929] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 530.966104][ T5929] usb 5-1: USB disconnect, device number 32 [ 532.750600][T10453] loop0: detected capacity change from 0 to 256 [ 532.789326][T10453] exfat: Deprecated parameter 'utf8' [ 533.225819][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 533.236202][T10453] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 533.283694][ T3410] IPVS: starting estimator thread 0... [ 533.415813][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.427637][T10458] IPVS: using max 24 ests per chain, 57600 per kthread [ 533.445024][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.479734][ T24] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 533.526042][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.572141][ T24] usb 6-1: config 0 descriptor?? [ 536.072417][ T24] usb 6-1: USB disconnect, device number 25 [ 536.132332][T10486] misc userio: Invalid payload size [ 536.977228][T10504] loop2: detected capacity change from 0 to 16 [ 536.989321][T10503] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1422'. [ 537.092221][T10504] erofs (device loop2): mounted with root inode @ nid 36. [ 538.474629][T10515] sctp: [Deprecated]: syz.3.1425 (pid 10515) Use of int in maxseg socket option. [ 538.474629][T10515] Use struct sctp_assoc_value instead [ 539.134633][T10527] loop5: detected capacity change from 0 to 40427 [ 539.236614][T10527] F2FS-fs (loop5): heap/no_heap options were deprecated [ 539.243989][T10527] F2FS-fs (loop5): build fault injection rate: 19 [ 539.250571][T10527] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 539.271237][T10527] F2FS-fs (loop5): invalid crc value [ 539.300689][T10527] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 539.377526][T10527] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 539.418815][T10527] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 539.500516][T10527] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0 [ 540.890575][T10550] loop4: detected capacity change from 0 to 40427 [ 540.951084][T10549] fuse: Unknown parameter 'grou00000000000000000000' [ 540.958191][T10550] F2FS-fs (loop4): invalid crc value [ 541.079654][T10550] F2FS-fs (loop4): Start checkpoint disabled! [ 541.143934][T10550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 541.243799][ T12] kworker/u8:0: attempt to access beyond end of device [ 541.243799][ T12] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 541.327204][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 541.327231][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.327250][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 541.327288][ T12] Call Trace: [ 541.327295][ T12] [ 541.327304][ T12] dump_stack_lvl+0x189/0x250 [ 541.327333][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.327354][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 541.327382][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 541.327406][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.327428][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 541.327456][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 541.327484][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.327504][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 541.327536][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 541.327568][ T12] f2fs_write_end_io+0x495/0x810 [ 541.327585][ T12] ? blkg_put+0x22/0x240 [ 541.327622][ T12] __submit_merged_bio+0x27a/0x6a0 [ 541.327655][ T12] __submit_merged_write_cond+0x255/0x530 [ 541.327687][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 541.327746][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 541.327787][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 541.327838][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 541.327865][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.327886][ T12] ? look_up_lock_class+0x74/0x170 [ 541.327923][ T12] ? trace_f2fs_writepages+0x7f/0x200 [ 541.327951][ T12] ? f2fs_write_node_pages+0x478/0x6e0 [ 541.327980][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 541.328012][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328039][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 541.328069][ T12] do_writepages+0x32e/0x550 [ 541.328094][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328115][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 541.328137][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 541.328166][ T12] __writeback_single_inode+0x145/0xff0 [ 541.328187][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328207][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 541.328242][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 541.328275][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328307][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 541.328363][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328384][ T12] ? rcu_is_watching+0x15/0xb0 [ 541.328406][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328435][ T12] wb_writeback+0x43b/0xaf0 [ 541.328462][ T12] ? queue_io+0x3b1/0x590 [ 541.328485][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 541.328513][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.328545][ T12] wb_workfn+0x409/0xef0 [ 541.328587][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 541.328618][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328639][ T12] ? __lock_acquire+0xab9/0xd20 [ 541.328668][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328691][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328715][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.328741][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 541.328762][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 541.328785][ T12] process_scheduled_works+0xae1/0x17b0 [ 541.328833][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.328861][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.328890][ T12] worker_thread+0x8a0/0xda0 [ 541.328936][ T12] kthread+0x711/0x8a0 [ 541.328966][ T12] ? __pfx_worker_thread+0x10/0x10 [ 541.328988][ T12] ? __pfx_kthread+0x10/0x10 [ 541.329012][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.329036][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.329062][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 541.329083][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.329109][ T12] ? __pfx_kthread+0x10/0x10 [ 541.329137][ T12] ret_from_fork+0x3fc/0x770 [ 541.329160][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 541.329185][ T12] ? __switch_to_asm+0x39/0x70 [ 541.329209][ T12] ? __switch_to_asm+0x33/0x70 [ 541.329239][ T12] ? __pfx_kthread+0x10/0x10 [ 541.329267][ T12] ret_from_fork_asm+0x1a/0x30 [ 541.329307][ T12] [ 541.329314][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 542.915761][T10574] loop1: detected capacity change from 0 to 128 [ 543.071653][T10574] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 543.090532][T10574] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 543.405907][ T5842] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.451000][T10603] fuse: Unknown parameter 'group_i00000000000000000000' [ 544.640381][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 545.444089][T10608] loop1: detected capacity change from 0 to 40427 [ 545.456364][T10608] F2FS-fs (loop1): invalid crc value [ 545.671426][T10608] F2FS-fs (loop1): Start checkpoint disabled! [ 545.691331][T10608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 546.779410][ T13] kworker/u8:1: attempt to access beyond end of device [ 546.779410][ T13] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 546.853547][ T6054] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 546.871712][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 546.871746][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.871764][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 546.871814][ T13] Call Trace: [ 546.871824][ T13] [ 546.871835][ T13] dump_stack_lvl+0x189/0x250 [ 546.871876][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.871906][ T13] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 546.871947][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 546.871982][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.872013][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 546.872052][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 546.872093][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.872124][ T13] ? f2fs_hw_is_readonly+0x39b/0x470 [ 546.872169][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 546.872216][ T13] f2fs_write_end_io+0x495/0x810 [ 546.872240][ T13] ? blkg_put+0x22/0x240 [ 546.872292][ T13] __submit_merged_bio+0x27a/0x6a0 [ 546.872338][ T13] __submit_merged_write_cond+0x255/0x530 [ 546.872385][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 546.872469][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 546.872535][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 546.872608][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 546.872648][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.872678][ T13] ? look_up_lock_class+0x74/0x170 [ 546.872732][ T13] ? trace_f2fs_writepages+0x7f/0x200 [ 546.872773][ T13] ? f2fs_write_node_pages+0x478/0x6e0 [ 546.872816][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 546.872871][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 546.872915][ T13] do_writepages+0x32e/0x550 [ 546.872956][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.872986][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 546.873019][ T13] ? writeback_sb_inodes+0x372/0x1000 [ 546.873060][ T13] __writeback_single_inode+0x145/0xff0 [ 546.873089][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873120][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 546.873164][ T13] writeback_sb_inodes+0x6b5/0x1000 [ 546.873203][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 546.873247][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873292][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 546.873372][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873404][ T13] ? rcu_is_watching+0x15/0xb0 [ 546.873436][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873478][ T13] wb_writeback+0x43b/0xaf0 [ 546.873525][ T13] ? queue_io+0x3b1/0x590 [ 546.873558][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 546.873598][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.873644][ T13] wb_workfn+0x409/0xef0 [ 546.873703][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 546.873749][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873779][ T13] ? __lock_acquire+0xab9/0xd20 [ 546.873820][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873855][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.873890][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.873927][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 546.873957][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 546.873991][ T13] process_scheduled_works+0xae1/0x17b0 [ 546.874060][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 546.874101][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.874143][ T13] worker_thread+0x8a0/0xda0 [ 546.874209][ T13] kthread+0x711/0x8a0 [ 546.874251][ T13] ? __pfx_worker_thread+0x10/0x10 [ 546.874283][ T13] ? __pfx_kthread+0x10/0x10 [ 546.874317][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.874352][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.874389][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.874419][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.874457][ T13] ? __pfx_kthread+0x10/0x10 [ 546.874503][ T13] ret_from_fork+0x3fc/0x770 [ 546.874537][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 546.874572][ T13] ? __switch_to_asm+0x39/0x70 [ 546.874608][ T13] ? __switch_to_asm+0x33/0x70 [ 546.874642][ T13] ? __pfx_kthread+0x10/0x10 [ 546.874682][ T13] ret_from_fork_asm+0x1a/0x30 [ 546.874739][ T13] [ 547.558892][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 547.783485][ T6054] usb 4-1: Using ep0 maxpacket: 16 [ 547.821187][ T6054] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 547.873456][ T6054] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.929642][ T6054] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.961678][ T6054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.001727][ T6054] usb 4-1: Product: syz [ 548.033554][ T6054] usb 4-1: Manufacturer: syz [ 548.073432][ T6054] usb 4-1: SerialNumber: syz [ 548.341092][ T6054] usb 4-1: 0:2 : does not exist [ 548.353176][ T6054] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 548.398749][ T6054] usb 4-1: USB disconnect, device number 19 [ 548.568894][T10652] fuse: Unknown parameter 'group_i00000000000000000000' [ 548.729421][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.623500][ T5964] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 551.457369][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 551.494771][ T5964] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 551.507240][ T5964] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 551.656585][ T5964] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 551.895200][ T5964] usb 5-1: Product: syz [ 551.899408][ T5964] usb 5-1: Manufacturer: syz [ 551.945038][ T5964] usb 5-1: SerialNumber: syz [ 552.170534][ T5964] usb 5-1: config 0 descriptor?? [ 552.387214][T10691] syzkaller0: entered promiscuous mode [ 552.392801][T10691] syzkaller0: entered allmulticast mode [ 552.681377][T10697] syz.2.1477: attempt to access beyond end of device [ 552.681377][T10697] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 552.695030][T10697] hfsplus: unable to find HFS+ superblock [ 552.729240][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 553.495694][ T5964] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 553.583160][ T5964] gspca_sunplus: reg_w_riv err -71 [ 553.679695][ T5964] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 553.804013][ T5964] usb 5-1: USB disconnect, device number 33 [ 553.971277][T10706] fuse: Unknown parameter 'group_i00000000000000000000' [ 554.599577][T10716] geneve2: entered promiscuous mode [ 557.200968][T10738] syz.1.1491: attempt to access beyond end of device [ 557.200968][T10738] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 557.214555][T10738] hfsplus: unable to find HFS+ superblock [ 558.734397][ T8187] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 558.742938][ T24] usb 1-1: device descriptor read/all, error -110 [ 558.883629][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 559.234240][T10749] fuse: Unknown parameter 'group_id00000000000000000000' [ 559.303787][ T8187] usb 2-1: Using ep0 maxpacket: 8 [ 559.355857][ T8187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 559.412657][ T8187] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 559.451898][ T8187] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 559.481013][ T8187] usb 2-1: Product: syz [ 559.491135][ T8187] usb 2-1: Manufacturer: syz [ 559.497939][ T3410] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 559.514941][ T8187] usb 2-1: SerialNumber: syz [ 559.534697][ T8187] usb 2-1: config 0 descriptor?? [ 559.551822][T10756] syzkaller0: entered promiscuous mode [ 559.563583][T10756] syzkaller0: entered allmulticast mode [ 559.683665][ T3410] usb 4-1: Using ep0 maxpacket: 16 [ 559.691329][ T3410] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 559.704957][ T3410] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 559.713857][ T3410] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 559.722196][ T3410] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 559.731199][ T3410] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 559.740338][ T3410] usb 4-1: config 0 has no interface number 0 [ 559.749743][ T3410] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 559.761141][ T3410] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 559.771412][ T3410] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 559.783012][ T3410] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.840582][ T3410] usb 4-1: config 0 interface 125 has no altsetting 0 [ 559.850709][ T3410] usb 4-1: config 0 interface 125 has no altsetting 2 [ 559.878546][ T3410] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 559.888540][ T3410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.912097][ T3410] usb 4-1: Product: syz [ 560.263034][T10767] loop2: detected capacity change from 0 to 40427 [ 560.285155][T10767] F2FS-fs (loop2): build fault injection rate: 690 [ 560.291740][T10767] F2FS-fs (loop2): Image doesn't support compression [ 560.299145][T10767] F2FS-fs (loop2): Image doesn't support compression [ 560.306019][T10767] F2FS-fs (loop2): build fault injection type: 0x4 [ 560.310064][ T8187] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 560.347138][ T3410] usb 4-1: Manufacturer: syz [ 560.357267][T10767] F2FS-fs (loop2): invalid crc value [ 560.455242][ T3410] usb 4-1: SerialNumber: syz [ 560.577695][T10767] F2FS-fs (loop2): Start checkpoint disabled! [ 560.602869][ T8187] gspca_sunplus: reg_w_riv err -71 [ 560.653780][T10767] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 560.919006][T10767] overlayfs: failed to resolve './file0': -2 [ 560.973783][ T8187] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 560.985608][ T3410] usb 4-1: config 0 descriptor?? [ 561.027104][ T3410] usb 4-1: selecting invalid altsetting 2 [ 561.057093][ T8187] usb 2-1: USB disconnect, device number 31 [ 561.594724][ T1142] kworker/u8:6: attempt to access beyond end of device [ 561.594724][ T1142] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 561.753505][ T1142] CPU: 0 UID: 0 PID: 1142 Comm: kworker/u8:6 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 561.753542][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.753559][ T1142] Workqueue: writeback wb_workfn (flush-7:2) [ 561.753611][ T1142] Call Trace: [ 561.753621][ T1142] [ 561.753632][ T1142] dump_stack_lvl+0x189/0x250 [ 561.753672][ T1142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.753706][ T1142] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 561.753748][ T1142] ? __pfx_queue_work_on+0x10/0x10 [ 561.753783][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.753815][ T1142] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 561.753855][ T1142] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 561.753896][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.753926][ T1142] ? f2fs_hw_is_readonly+0x39b/0x470 [ 561.753971][ T1142] f2fs_handle_critical_error+0x37c/0x540 [ 561.754019][ T1142] f2fs_write_end_io+0x495/0x810 [ 561.754043][ T1142] ? blkg_put+0x22/0x240 [ 561.754096][ T1142] __submit_merged_bio+0x27a/0x6a0 [ 561.754141][ T1142] __submit_merged_write_cond+0x255/0x530 [ 561.754188][ T1142] f2fs_write_data_pages+0x261d/0x3000 [ 561.754278][ T1142] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 561.754318][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754369][ T1142] ? unwind_next_frame+0xa5/0x2390 [ 561.754433][ T1142] ? ret_from_fork_asm+0x1a/0x30 [ 561.754477][ T1142] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 561.754516][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754567][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754596][ T1142] ? __lock_acquire+0xab9/0xd20 [ 561.754631][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754672][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754710][ T1142] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 561.754754][ T1142] do_writepages+0x32e/0x550 [ 561.754790][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754820][ T1142] ? reacquire_held_locks+0x127/0x1d0 [ 561.754852][ T1142] ? writeback_sb_inodes+0x372/0x1000 [ 561.754894][ T1142] __writeback_single_inode+0x145/0xff0 [ 561.754924][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.754952][ T1142] ? do_raw_spin_unlock+0x122/0x240 [ 561.754998][ T1142] writeback_sb_inodes+0x6b5/0x1000 [ 561.755027][ T1142] ? __lock_acquire+0xab9/0xd20 [ 561.755058][ T1142] ? rcu_is_watching+0x15/0xb0 [ 561.755094][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755141][ T1142] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 561.755221][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755251][ T1142] ? rcu_is_watching+0x15/0xb0 [ 561.755291][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755331][ T1142] wb_writeback+0x43b/0xaf0 [ 561.755370][ T1142] ? queue_io+0x3b1/0x590 [ 561.755405][ T1142] ? __pfx_wb_writeback+0x10/0x10 [ 561.755445][ T1142] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.755491][ T1142] wb_workfn+0x409/0xef0 [ 561.755551][ T1142] ? __pfx_wb_workfn+0x10/0x10 [ 561.755596][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755626][ T1142] ? __lock_acquire+0xab9/0xd20 [ 561.755667][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755702][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755735][ T1142] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.755773][ T1142] ? process_scheduled_works+0x9ef/0x17b0 [ 561.755803][ T1142] ? process_scheduled_works+0x9ef/0x17b0 [ 561.755838][ T1142] process_scheduled_works+0xae1/0x17b0 [ 561.755905][ T1142] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.755946][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.755988][ T1142] worker_thread+0x8a0/0xda0 [ 561.756053][ T1142] kthread+0x711/0x8a0 [ 561.756097][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 561.756128][ T1142] ? __pfx_kthread+0x10/0x10 [ 561.756163][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.756199][ T1142] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.756235][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.756274][ T1142] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.756313][ T1142] ? __pfx_kthread+0x10/0x10 [ 561.756352][ T1142] ret_from_fork+0x3fc/0x770 [ 561.756384][ T1142] ? __pfx_ret_from_fork+0x10/0x10 [ 561.756421][ T1142] ? __switch_to_asm+0x39/0x70 [ 561.756456][ T1142] ? __switch_to_asm+0x33/0x70 [ 561.756489][ T1142] ? __pfx_kthread+0x10/0x10 [ 561.756528][ T1142] ret_from_fork_asm+0x1a/0x30 [ 561.756586][ T1142] [ 561.768037][ C1] usb 4-1: async_complete: urb error -71 [ 562.181319][ C1] usb 4-1: async_complete: urb error -71 [ 562.187052][ C1] usb 4-1: async_complete: urb error -71 [ 562.192759][ C1] usb 4-1: async_complete: urb error -71 [ 562.202666][ T1142] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 562.244002][ T1142] CPU: 0 UID: 0 PID: 1142 Comm: kworker/u8:6 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 562.244043][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.244062][ T1142] Workqueue: writeback wb_workfn (flush-7:2) [ 562.244119][ T1142] Call Trace: [ 562.244131][ T1142] [ 562.244142][ T1142] dump_stack_lvl+0x189/0x250 [ 562.244189][ T1142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.244223][ T1142] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 562.244268][ T1142] ? __pfx_queue_work_on+0x10/0x10 [ 562.244308][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.244343][ T1142] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 562.244390][ T1142] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 562.244433][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.244467][ T1142] ? f2fs_hw_is_readonly+0x39b/0x470 [ 562.244524][ T1142] f2fs_handle_critical_error+0x37c/0x540 [ 562.244580][ T1142] f2fs_write_end_io+0x495/0x810 [ 562.244608][ T1142] ? blkg_put+0x22/0x240 [ 562.244671][ T1142] __submit_merged_bio+0x27a/0x6a0 [ 562.244726][ T1142] __submit_merged_write_cond+0x255/0x530 [ 562.244782][ T1142] f2fs_write_data_pages+0x261d/0x3000 [ 562.244883][ T1142] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 562.244930][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.244990][ T1142] ? unwind_next_frame+0xa5/0x2390 [ 562.245066][ T1142] ? ret_from_fork_asm+0x1a/0x30 [ 562.245117][ T1142] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 562.245162][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245223][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245257][ T1142] ? __lock_acquire+0xab9/0xd20 [ 562.245301][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245351][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245398][ T1142] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 562.245450][ T1142] do_writepages+0x32e/0x550 [ 562.245499][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245534][ T1142] ? reacquire_held_locks+0x127/0x1d0 [ 562.245571][ T1142] ? writeback_sb_inodes+0x372/0x1000 [ 562.245620][ T1142] __writeback_single_inode+0x145/0xff0 [ 562.245654][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245689][ T1142] ? do_raw_spin_unlock+0x122/0x240 [ 562.245742][ T1142] writeback_sb_inodes+0x6b5/0x1000 [ 562.245778][ T1142] ? __lock_acquire+0xab9/0xd20 [ 562.245815][ T1142] ? rcu_is_watching+0x15/0xb0 [ 562.245856][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.245911][ T1142] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 562.246010][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.246045][ T1142] ? rcu_is_watching+0x15/0xb0 [ 562.246081][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.246130][ T1142] wb_writeback+0x43b/0xaf0 [ 562.246177][ T1142] ? queue_io+0x3b1/0x590 [ 562.246210][ T1142] ? __pfx_wb_writeback+0x10/0x10 [ 562.246248][ T1142] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.246298][ T1142] wb_workfn+0x409/0xef0 [ 562.246370][ T1142] ? __pfx_wb_workfn+0x10/0x10 [ 562.246419][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.246451][ T1142] ? __lock_acquire+0xab9/0xd20 [ 562.246506][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.246547][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.246588][ T1142] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.246632][ T1142] ? process_scheduled_works+0x9ef/0x17b0 [ 562.246668][ T1142] ? process_scheduled_works+0x9ef/0x17b0 [ 562.246708][ T1142] process_scheduled_works+0xae1/0x17b0 [ 562.246791][ T1142] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.246839][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.246889][ T1142] worker_thread+0x8a0/0xda0 [ 562.246968][ T1142] kthread+0x711/0x8a0 [ 562.247019][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 562.247055][ T1142] ? __pfx_kthread+0x10/0x10 [ 562.247095][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.247136][ T1142] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.247180][ T1142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.247215][ T1142] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.247258][ T1142] ? __pfx_kthread+0x10/0x10 [ 562.247305][ T1142] ret_from_fork+0x3fc/0x770 [ 562.247344][ T1142] ? __pfx_ret_from_fork+0x10/0x10 [ 562.247388][ T1142] ? __switch_to_asm+0x39/0x70 [ 562.247429][ T1142] ? __switch_to_asm+0x33/0x70 [ 562.247469][ T1142] ? __pfx_kthread+0x10/0x10 [ 562.247529][ T1142] ret_from_fork_asm+0x1a/0x30 [ 562.247596][ T1142] [ 562.247609][ T1142] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 562.284301][ T3410] get_1284_register: usb error -71 [ 562.505488][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.510559][ T3410] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 562.526599][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.538449][ T3410] usb 4-1: USB disconnect, device number 20 [ 562.974273][T10790] fuse: Unknown parameter 'group_id00000000000000000000' [ 563.933947][ T972] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 564.042858][T10800] syzkaller0: entered promiscuous mode [ 564.050605][T10800] syzkaller0: entered allmulticast mode [ 564.103632][ T972] usb 5-1: Using ep0 maxpacket: 32 [ 564.128165][ T972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 564.167129][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 564.186341][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 564.225045][ T972] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 564.240652][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.270412][ T972] usb 5-1: config 0 descriptor?? [ 564.290004][T10794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 564.313303][ T972] hub 5-1:0.0: USB hub found [ 564.333554][ T5937] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 564.503699][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 564.511362][ T972] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 564.527587][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 564.557526][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.579207][ T5937] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 564.602083][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.627767][ T5937] usb 6-1: Product: syz [ 564.642790][ T5937] usb 6-1: Manufacturer: syz [ 564.664937][ T5937] usb 6-1: SerialNumber: syz [ 564.684741][T10808] syz.2.1505: attempt to access beyond end of device [ 564.684741][T10808] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 564.698880][T10808] hfsplus: unable to find HFS+ superblock [ 564.757078][ T972] usbhid 5-1:0.0: can't add hid device: -71 [ 564.766277][ T5937] usb 6-1: config 0 descriptor?? [ 564.781716][ T972] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 564.822937][ T5937] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 564.901863][ T5937] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 564.922101][ T972] usb 5-1: USB disconnect, device number 34 [ 565.635192][ T5937] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 565.737045][ T5937] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 566.252885][ T5937] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 566.260144][ T5937] em28xx 6-1:0.0: No AC97 audio processor [ 566.623870][ T3410] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 566.818597][ T3410] usb 4-1: Using ep0 maxpacket: 8 [ 566.892630][ T3410] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 566.983202][ T3410] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 567.044346][ T3410] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 567.078954][ T3410] usb 4-1: Product: syz [ 567.083305][ T3410] usb 4-1: Manufacturer: syz [ 567.112777][ T3410] usb 4-1: SerialNumber: syz [ 567.138803][ T3410] usb 4-1: config 0 descriptor?? [ 567.325583][ T972] usb 6-1: USB disconnect, device number 26 [ 567.333254][ T972] em28xx 6-1:0.0: Disconnecting em28xx [ 567.383873][ T972] em28xx 6-1:0.0: Freeing device [ 567.482175][T10826] syz.1.1522: attempt to access beyond end of device [ 567.482175][T10826] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 567.495850][T10826] hfsplus: unable to find HFS+ superblock [ 568.101512][T10830] fuse: Unknown parameter 'group_id00000000000000000000' [ 568.430163][ T3410] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 568.438634][ T3410] gspca_sunplus: reg_w_riv err -71 [ 568.444521][ T3410] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 568.455540][ T3410] usb 4-1: USB disconnect, device number 21 [ 568.618573][T10834] loop2: detected capacity change from 0 to 1024 [ 568.676682][T10834] EXT4-fs: Ignoring removed mblk_io_submit option [ 568.811234][T10834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.998088][T10840] fuse: Unknown parameter 'fd0x0000000000000007' [ 569.069110][ T972] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 569.540589][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.589020][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.607396][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.640738][ T972] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 569.651660][ T972] usb 5-1: config 0 has no interface number 0 [ 569.689499][ T972] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 569.739940][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.774058][ T972] usb 5-1: Product: syz [ 569.778272][ T972] usb 5-1: Manufacturer: syz [ 569.794536][ T972] usb 5-1: SerialNumber: syz [ 569.834531][ T972] usb 5-1: config 0 descriptor?? [ 569.894680][ T5964] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 570.081961][ T5964] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 570.091080][ T5964] usb 1-1: config 8 has no interface number 0 [ 570.101956][ T5964] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 570.153699][ T5964] usb 1-1: config 8 interface 177 has no altsetting 0 [ 570.207845][ T5964] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 570.258015][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.455948][T10852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 570.750400][ T972] usb 5-1: Firmware version (0.0) predates our first public release. [ 571.080103][ T5964] usb 1-1: string descriptor 0 read error: -71 [ 571.101793][ T972] usb 5-1: Please update to version 0.2 or newer [ 571.130241][ T5964] ir_toy 1-1:8.177: required endpoints not found [ 571.236937][ T972] usb 5-1: USB disconnect, device number 35 [ 571.290956][ T5964] usb 1-1: USB disconnect, device number 27 [ 571.468015][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 572.125031][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 572.217876][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 572.268005][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 572.346238][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.382008][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.417624][T10882] fuse: Bad value for 'user_id' [ 572.429698][ T9] usb 3-1: Product: syz [ 572.439839][ T9] usb 3-1: Manufacturer: syz [ 572.447245][T10882] fuse: Bad value for 'user_id' [ 572.457881][ T9] usb 3-1: SerialNumber: syz [ 572.474361][ T9] usb 3-1: config 0 descriptor?? [ 572.502521][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 572.519207][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 572.618649][T10886] syz.1.1540: attempt to access beyond end of device [ 572.618649][T10886] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 572.623619][ T5964] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 572.641858][T10886] hfsplus: unable to find HFS+ superblock [ 573.203668][ T972] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 573.327701][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 573.395015][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 573.475476][ T972] usb 6-1: Using ep0 maxpacket: 16 [ 573.531327][T10888] loop4: detected capacity change from 0 to 1024 [ 573.552977][ T972] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.564702][T10888] hfsplus: Bad value for 'uid' [ 573.673821][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 574.033313][ T972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.083275][ T972] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.095706][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.113770][ T5964] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 574.116026][ T972] usb 6-1: Product: syz [ 574.175854][ T972] usb 6-1: Manufacturer: syz [ 574.191757][ T5964] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 574.197354][ T972] usb 6-1: SerialNumber: syz [ 574.241401][ T5964] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 574.250884][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 574.283622][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 574.298252][ T5964] usb 4-1: Product: syz [ 574.302443][ T5964] usb 4-1: Manufacturer: syz [ 574.319325][ T5964] usb 4-1: SerialNumber: syz [ 574.342945][ T5964] usb 4-1: config 0 descriptor?? [ 574.436827][ T972] usb 6-1: 0:2 : does not exist [ 574.473933][ T972] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 574.549997][ T972] usb 6-1: USB disconnect, device number 27 [ 575.360525][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.582487][T10906] loop4: detected capacity change from 0 to 32768 [ 575.584848][ T5964] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 575.701281][ T5964] gspca_sunplus: reg_w_riv err -71 [ 575.751551][ T5964] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 576.106899][T10906] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 576.106922][T10906] allowing incompatible features above 0.0: (unknown version) [ 576.106934][T10906] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 576.143851][T10906] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 576.152093][T10906] bcachefs (loop4): initializing new filesystem [ 576.158789][T10916] loop5: detected capacity change from 0 to 32768 [ 576.181106][T10906] bcachefs (loop4): going read-write [ 576.211647][ T8187] usb 3-1: USB disconnect, device number 25 [ 576.256842][T10916] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 576.265199][T10916] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 576.276967][ T8187] em28xx 3-1:0.0: Disconnecting em28xx [ 576.302427][ T5964] usb 4-1: USB disconnect, device number 23 [ 576.303042][T10916] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 576.318679][T10906] bcachefs (loop4): marking superblocks [ 576.329492][ T972] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 576.338473][ T972] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 576.338876][T10906] bcachefs (loop4): initializing freespace [ 576.361027][T10906] bcachefs (loop4): done initializing freespace [ 576.373423][T10906] bcachefs (loop4): reading snapshots table [ 576.379384][T10906] bcachefs (loop4): reading snapshots done [ 576.436236][T10906] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 576.447140][T10906] bcachefs (loop4): done starting filesystem [ 576.464027][ T8187] em28xx 3-1:0.0: Freeing device [ 576.652496][ T30] audit: type=1800 audit(1752519349.148:100): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1549" name="file1" dev="loop4" ino=4098 res=0 errno=0 [ 576.773010][ T972] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 434ms [ 576.794450][ T972] gfs2: fsid=syz:syz.0: jid=0: Done [ 576.800489][T10916] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 576.833676][ T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 576.973982][ T8187] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 577.002312][T10906] syz.4.1549 (10906) used greatest stack depth: 16920 bytes left [ 577.103679][ T24] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 577.162984][ T5844] bcachefs (loop4): shutting down [ 577.177355][ T24] usb 1-1: config 8 has no interface number 0 [ 577.236804][ T5844] bcachefs (loop4): going read-only [ 577.281510][ T24] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 577.293405][ T8187] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 577.319462][ T5844] bcachefs (loop4): finished waiting for writes to stop [ 577.360541][ T8187] usb 3-1: config 0 has no interface number 0 [ 577.409997][ T24] usb 1-1: config 8 interface 177 has no altsetting 0 [ 577.438933][ T5844] bcachefs (loop4): flushing journal and stopping allocators, journal seq 23 [ 577.542174][ T8187] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 577.570918][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 577.705593][ T8187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.736217][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.844677][ T8187] usb 3-1: Product: syz [ 577.902841][T10928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.910651][ T8187] usb 3-1: Manufacturer: syz [ 577.939347][ T8187] usb 3-1: SerialNumber: syz [ 577.972237][ T8187] usb 3-1: config 0 descriptor?? [ 578.092637][ T5844] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 23 [ 578.170400][ T24] usb 1-1: string descriptor 0 read error: -71 [ 578.178953][ T5844] bcachefs (loop4): clean shutdown complete, journal seq 24 [ 578.189698][ T24] ir_toy 1-1:8.177: required endpoints not found [ 578.221540][ T24] usb 1-1: USB disconnect, device number 28 [ 578.229050][ T5844] bcachefs (loop4): marking filesystem clean [ 578.466242][ T5844] bcachefs (loop4): shutdown complete [ 578.680533][T10939] loop1: detected capacity change from 0 to 4096 [ 578.824234][ T8187] usb 3-1: Firmware version (0.0) predates our first public release. [ 578.836311][T10939] ntfs3(loop1): ino=3, Correct links count -> 2. [ 578.856833][ T8187] usb 3-1: Please update to version 0.2 or newer [ 579.154920][ T8187] usb 3-1: USB disconnect, device number 26 [ 579.586187][T10948] syz.5.1558: attempt to access beyond end of device [ 579.586187][T10948] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 579.599601][T10948] hfsplus: unable to find HFS+ superblock [ 581.044252][ T8187] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 581.373509][ T8187] usb 6-1: Using ep0 maxpacket: 16 [ 581.405808][ T8187] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 581.410333][T10967] loop2: detected capacity change from 0 to 1024 [ 581.431668][T10967] hfsplus: Bad value for 'uid' [ 581.461101][ T8187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 581.517258][ T8187] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 581.575236][ T8187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.583327][ T8187] usb 6-1: Product: syz [ 581.586196][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 581.612670][ T8187] usb 6-1: Manufacturer: syz [ 581.617635][ T8187] usb 6-1: SerialNumber: syz [ 581.624042][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 581.707967][ T8187] usb 6-1: config 0 descriptor?? [ 581.756348][ T8187] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 581.773574][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 581.785938][ T8187] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 581.800477][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 581.818752][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 581.833647][ T9] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 581.856181][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.861223][ T9] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 581.873562][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.932454][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.952180][ T9] usb 1-1: Product: syz [ 581.963600][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.972203][ T24] usb 2-1: Product: syz [ 581.972471][ T9] usb 1-1: Manufacturer: syz [ 581.980803][ T24] usb 2-1: Manufacturer: syz [ 581.985785][ T9] usb 1-1: SerialNumber: syz [ 582.004193][ T24] usb 2-1: SerialNumber: syz [ 582.035682][ T9] usb 1-1: config 0 descriptor?? [ 582.206000][ T3410] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 582.297882][ T24] usb 2-1: 0:2 : does not exist [ 582.363530][ T8187] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 582.376912][ T8187] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 582.384080][ T3410] usb 3-1: Using ep0 maxpacket: 32 [ 582.392505][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 582.416129][ T3410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.448520][ T3410] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 582.487480][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 582.515493][ T24] usb 2-1: USB disconnect, device number 32 [ 582.521593][ T3410] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.537635][ T3410] usb 3-1: config 1 interface 1 has no altsetting 0 [ 582.568092][ T3410] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.582706][ T9] gspca_sunplus: reg_w_riv err -71 [ 582.588763][ T3410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.597046][ T3410] usb 3-1: Product: syz [ 582.604832][ T3410] usb 3-1: Manufacturer: syz [ 582.616791][ T3410] usb 3-1: SerialNumber: syz [ 582.652521][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 582.697647][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.731551][ T9] usb 1-1: USB disconnect, device number 29 [ 582.856289][ T8187] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 582.894278][ T8187] em28xx 6-1:0.0: No AC97 audio processor [ 583.038151][ T3410] usb 3-1: USB disconnect, device number 27 [ 583.481754][T10977] loop3: detected capacity change from 0 to 32768 [ 583.569412][T10977] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 583.617877][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.688348][T10977] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 583.923053][T10992] syz.2.1573: attempt to access beyond end of device [ 583.923053][T10992] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 583.936750][T10992] hfsplus: unable to find HFS+ superblock [ 584.067986][T10993] loop4: detected capacity change from 0 to 16 [ 584.302925][T10993] erofs (device loop4): mounted with root inode @ nid 36. [ 584.408790][T10995] fuse: Bad value for 'fd' [ 584.854765][ T3410] usb 6-1: USB disconnect, device number 28 [ 584.991067][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 584.992476][ T3410] em28xx 6-1:0.0: Disconnecting em28xx [ 585.064823][T10990] @ÿ: renamed from bond_slave_0 (while UP) [ 585.087360][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1578'. [ 585.124375][ T3410] em28xx 6-1:0.0: Freeing device [ 585.183862][T11008] tipc: Started in network mode [ 585.220948][T11008] tipc: Node identity 4, cluster identity 4711 [ 585.252010][T11008] tipc: Node number set to 4 [ 585.373209][T11014] loop4: detected capacity change from 0 to 1024 [ 585.424734][T11014] hfsplus: Bad value for 'uid' [ 585.476197][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 585.857633][ T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 586.036435][ T9] usb 4-1: config 0 has no interface number 0 [ 586.276154][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 586.443462][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.513480][ T9] usb 4-1: Product: syz [ 586.536768][ T9] usb 4-1: Manufacturer: syz [ 586.563439][ T9] usb 4-1: SerialNumber: syz [ 586.615882][ T9] usb 4-1: config 0 descriptor?? [ 587.003574][ T5848] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 587.043675][ T9367] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 587.109030][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 587.170916][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 587.194699][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.206405][ T9367] usb 5-1: Using ep0 maxpacket: 8 [ 587.219702][ T9367] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 587.236996][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.252136][ T9367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.272950][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.291152][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.303014][ T9367] pvrusb2: Hardware description: Terratec Grabster AV400 [ 587.311071][ T9367] pvrusb2: ********** [ 587.315881][ T9367] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 587.326799][ T5848] usb 2-1: Product: syz [ 587.331089][ T5848] usb 2-1: Manufacturer: syz [ 587.336584][ T9367] pvrusb2: Important functionality might not be entirely working. [ 587.344837][ T5848] usb 2-1: SerialNumber: syz [ 587.367755][ T9367] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 587.392663][ T9367] pvrusb2: ********** [ 587.459803][T11019] loop2: detected capacity change from 0 to 40427 [ 587.472746][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 587.482779][ T9] usb 4-1: Please update to version 0.2 or newer [ 587.525348][ T2337] pvrusb2: Invalid write control endpoint [ 587.553250][T11019] F2FS-fs (loop2): invalid crc value [ 587.593479][ T3410] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 587.597681][ T5848] usb 2-1: 0:2 : does not exist [ 587.611023][ T9] usb 4-1: USB disconnect, device number 24 [ 587.635280][ T5848] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 587.728295][T11026] pvrusb2: Invalid write control endpoint [ 587.757605][ T24] usb 5-1: USB disconnect, device number 36 [ 587.803532][ T5848] usb 2-1: USB disconnect, device number 33 [ 587.857542][ T3410] usb 1-1: Using ep0 maxpacket: 32 [ 587.885662][ T3410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.908630][ T2337] pvrusb2: Invalid write control endpoint [ 587.923625][ T3410] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 587.937238][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 587.949444][ T8159] udevd[8159]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.986938][ T3410] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.002562][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 588.022127][ T3410] usb 1-1: config 1 interface 1 has no altsetting 0 [ 588.035542][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 588.046729][ T3410] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.065478][ T2337] pvrusb2: Device being rendered inoperable [ 588.094426][ T3410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.102321][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 588.113320][ T3410] usb 1-1: Product: syz [ 588.119787][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 588.135541][ T3410] usb 1-1: Manufacturer: syz [ 588.140158][ T3410] usb 1-1: SerialNumber: syz [ 588.163692][T11019] F2FS-fs (loop2): Start checkpoint disabled! [ 588.196092][ T2337] pvrusb2: Attached sub-driver cx25840 [ 588.201688][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 588.213545][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 588.233456][T11019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 588.243274][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 588.357055][ T12] kworker/u8:0: attempt to access beyond end of device [ 588.357055][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 588.409433][ T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 588.416929][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 588.416994][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.417029][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 588.417122][ T12] Call Trace: [ 588.417141][ T12] [ 588.417162][ T12] dump_stack_lvl+0x189/0x250 [ 588.417240][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.417309][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 588.417392][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 588.417460][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.417523][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 588.417606][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 588.417691][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.417751][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 588.417843][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 588.417940][ T12] f2fs_write_end_io+0x495/0x810 [ 588.417993][ T12] ? blkg_put+0x22/0x240 [ 588.418100][ T12] __submit_merged_bio+0x27a/0x6a0 [ 588.418196][ T12] __submit_merged_write_cond+0x255/0x530 [ 588.418301][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 588.418478][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 588.418603][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 588.418785][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 588.418874][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.418949][ T12] ? look_up_lock_class+0x74/0x170 [ 588.419076][ T12] ? trace_f2fs_writepages+0x7f/0x200 [ 588.419168][ T12] ? f2fs_write_node_pages+0x478/0x6e0 [ 588.419275][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 588.419378][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.419464][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 588.419560][ T12] do_writepages+0x32e/0x550 [ 588.419642][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.419708][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 588.419779][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 588.419872][ T12] __writeback_single_inode+0x145/0xff0 [ 588.419937][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.420003][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 588.420111][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 588.420218][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.420331][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 588.420518][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.420585][ T12] ? rcu_is_watching+0x15/0xb0 [ 588.420655][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.420748][ T12] wb_writeback+0x43b/0xaf0 [ 588.420838][ T12] ? queue_io+0x3b1/0x590 [ 588.420911][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 588.421003][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.421106][ T12] wb_workfn+0x409/0xef0 [ 588.421240][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 588.421353][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.421419][ T12] ? __lock_acquire+0xab9/0xd20 [ 588.421515][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.421589][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.421653][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.421722][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 588.421777][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 588.421838][ T12] process_scheduled_works+0xae1/0x17b0 [ 588.421968][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 588.422042][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.422118][ T12] worker_thread+0x8a0/0xda0 [ 588.422244][ T12] kthread+0x711/0x8a0 [ 588.422326][ T12] ? __pfx_worker_thread+0x10/0x10 [ 588.422383][ T12] ? __pfx_kthread+0x10/0x10 [ 588.422446][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.422510][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.422578][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.422632][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.422704][ T12] ? __pfx_kthread+0x10/0x10 [ 588.422776][ T12] ret_from_fork+0x3fc/0x770 [ 588.422836][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 588.422904][ T12] ? __switch_to_asm+0x39/0x70 [ 588.422967][ T12] ? __switch_to_asm+0x33/0x70 [ 588.423030][ T12] ? __pfx_kthread+0x10/0x10 [ 588.423103][ T12] ret_from_fork_asm+0x1a/0x30 [ 588.423208][ T12] [ 588.424148][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 588.590805][ T3410] usb 1-1: USB disconnect, device number 30 [ 588.974137][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.991124][ T9] usb 6-1: Product: syz [ 588.995578][ T9] usb 6-1: Manufacturer: syz [ 589.000196][ T9] usb 6-1: SerialNumber: syz [ 589.083445][ T8187] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 589.094730][ T9] usb 6-1: config 0 descriptor?? [ 589.240220][ T8187] usb 2-1: Using ep0 maxpacket: 16 [ 589.256795][ T8187] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 589.307866][ T8187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.396819][ T8187] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 589.406224][ T8187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.414379][ T8187] usb 2-1: Product: syz [ 589.418571][ T8187] usb 2-1: Manufacturer: syz [ 589.423192][ T8187] usb 2-1: SerialNumber: syz [ 589.432101][ T8187] usb 2-1: config 0 descriptor?? [ 589.455040][ T8187] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 589.525581][ T9] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 589.533949][ T9] usb 6-1: Firmware version (0.0) predates our first public release. [ 589.562732][ T8187] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 589.590314][ T9] usb 6-1: Please update to version 0.2 or newer [ 589.852768][T11059] loop3: detected capacity change from 0 to 1024 [ 589.993039][T11059] hfsplus: Bad value for 'uid' [ 590.169315][ T8187] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 590.294972][ T8187] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 590.421164][ T8187] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 590.574092][ T8187] em28xx 2-1:0.0: No AC97 audio processor [ 590.702379][ T9] usb 6-1: USB disconnect, device number 29 [ 591.855149][ T5964] usb 2-1: USB disconnect, device number 34 [ 591.999833][ T5964] em28xx 2-1:0.0: Disconnecting em28xx [ 592.026118][ T5964] em28xx 2-1:0.0: Freeing device [ 592.907358][T11103] loop4: detected capacity change from 0 to 1024 [ 592.997709][T11103] hfsplus: Bad value for 'uid' [ 596.328711][T11145] sctp: [Deprecated]: syz.5.1622 (pid 11145) Use of int in maxseg socket option. [ 596.328711][T11145] Use struct sctp_assoc_value instead [ 596.768783][T11155] comedi comedi3: pcl730: I/O port conflict (0xcf8,4) [ 597.444150][T11128] loop2: detected capacity change from 0 to 32768 [ 597.503514][ T9367] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 597.527476][T11166] fuse: Unknown parameter 'fd0x0000000000000007' [ 597.595482][T11128] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 597.693619][ T9367] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 597.704000][ T9367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.712088][ T9367] usb 2-1: Product: syz [ 597.718052][ T9367] usb 2-1: Manufacturer: syz [ 597.722919][ T9367] usb 2-1: SerialNumber: syz [ 597.731200][T11128] XFS (loop2): Ending clean mount [ 597.738762][ T9367] usb 2-1: config 0 descriptor?? [ 598.043469][ T8187] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 598.098487][T11181] 9pnet_virtio: no channels available for device syz [ 598.818719][ T9367] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 598.839671][ T9367] usb 2-1: Firmware version (0.0) predates our first public release. [ 598.851093][ T9367] usb 2-1: Please update to version 0.2 or newer [ 598.870651][ T8187] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 598.887223][ T5846] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 598.897434][ T8187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.935584][ T8187] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 598.965064][ T8187] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 598.983475][ T8187] usb 1-1: Manufacturer: syz [ 599.017164][ T8187] usb 1-1: config 0 descriptor?? [ 599.110759][ T9367] usb 2-1: USB disconnect, device number 35 [ 599.399325][ T8187] rc_core: IR keymap rc-hauppauge not found [ 599.426077][ T8187] Registered IR keymap rc-empty [ 599.512608][ T8187] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 599.576622][ T8187] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 599.625644][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 599.656577][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.680346][T11197] dummy0: entered promiscuous mode [ 599.693708][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 599.704637][T11197] macsec1: entered promiscuous mode [ 599.710546][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.727174][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1640'. [ 599.760745][T11197] macsec1: entered allmulticast mode [ 599.769023][ T8187] usb 1-1: USB disconnect, device number 31 [ 599.775420][T11197] dummy0: entered allmulticast mode [ 599.969506][T11197] dummy0: left allmulticast mode [ 599.978950][T11197] dummy0: left promiscuous mode [ 600.624215][T11212] loop1: detected capacity change from 0 to 256 [ 601.140157][T11220] 9pnet_virtio: no channels available for device syz [ 604.074689][T11255] fuse: Unknown parameter 'fd0x0000000000000007' [ 604.426064][T11259] 9pnet_virtio: no channels available for device syz [ 605.173862][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 605.386082][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 605.403571][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.425648][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 605.443757][ T3410] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 605.444034][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 605.468619][T11265] gtp0: entered promiscuous mode [ 605.518634][ T9] usb 5-1: Manufacturer: syz [ 605.544646][ T9] usb 5-1: config 0 descriptor?? [ 605.603435][ T3410] usb 2-1: Using ep0 maxpacket: 8 [ 605.624534][ T3410] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 605.632657][ T3410] usb 2-1: config 0 has no interface number 0 [ 605.674120][ T9] rc_core: IR keymap rc-hauppauge not found [ 605.683263][ T9] Registered IR keymap rc-empty [ 605.683603][ T3410] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 605.705320][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 605.733483][ T3410] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 605.759100][ T3410] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.760003][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 605.785130][ T3410] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 605.913735][ T3410] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 605.933586][ T3410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.956398][ T3410] usb 2-1: config 0 descriptor?? [ 606.029253][ T3410] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 606.040932][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 606.042457][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.097634][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.776971][ T5964] usb 5-1: USB disconnect, device number 37 [ 606.889904][ T24] usb 2-1: USB disconnect, device number 36 [ 606.896070][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 606.941807][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 607.902526][T11299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 608.225690][T11303] 9pnet_virtio: no channels available for device syz [ 609.195533][T11307] loop2: detected capacity change from 0 to 512 [ 609.321355][T11311] gtp0: entered promiscuous mode [ 609.352257][T11307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 609.478051][T11307] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.645607][T11307] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #12: comm syz.2.1676: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 610.263450][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 610.360697][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 610.657512][T11335] 9pnet_virtio: no channels available for device syz [ 611.438759][ T24] usb 6-1: config 0 has no interfaces? [ 611.470262][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.496068][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.507361][ T24] usb 6-1: Product: syz [ 611.514248][ T24] usb 6-1: Manufacturer: syz [ 611.521590][ T24] usb 6-1: SerialNumber: syz [ 611.564697][ T24] usb 6-1: config 0 descriptor?? [ 611.848427][T11350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1691'. [ 612.291470][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 612.730899][T11359] gtp0: entered promiscuous mode [ 612.939696][T11362] loop4: detected capacity change from 0 to 32768 [ 613.091907][T11362] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 613.091935][T11362] allowing incompatible features above 0.0: (unknown version) [ 613.091947][T11362] features: [ 613.125900][T11362] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 613.134143][T11362] bcachefs (loop4): initializing new filesystem [ 613.147889][T11362] bcachefs (loop4): going read-write [ 613.195487][T11362] bcachefs (loop4): marking superblocks [ 613.211555][T11362] bcachefs (loop4): initializing freespace [ 613.221501][T11362] bcachefs (loop4): done initializing freespace [ 613.230417][T11362] bcachefs (loop4): reading snapshots table [ 613.237287][T11362] bcachefs (loop4): reading snapshots done [ 613.338790][T11362] bcachefs (loop4): done starting filesystem [ 613.728207][ T5844] bcachefs (loop4): shutting down [ 613.751233][ T5844] bcachefs (loop4): going read-only [ 613.793575][ T5844] bcachefs (loop4): finished waiting for writes to stop [ 613.933864][ T8187] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 614.056205][ T5844] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 614.164897][T11390] 9pnet_virtio: no channels available for device syz [ 614.373519][ T8187] usb 3-1: Using ep0 maxpacket: 16 [ 614.982947][T11389] syz.0.1702: attempt to access beyond end of device [ 614.982947][T11389] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 614.996254][T11389] hfsplus: unable to find HFS+ superblock [ 615.004524][ T8187] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 615.172632][ T8187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.184527][ T8187] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.195549][ T8187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.213641][ T8187] usb 3-1: Product: syz [ 615.217296][ T5844] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5 [ 615.217856][ T8187] usb 3-1: Manufacturer: syz [ 615.231910][ T8187] usb 3-1: SerialNumber: syz [ 615.272883][ T5844] bcachefs (loop4): clean shutdown complete, journal seq 6 [ 615.307709][ T5844] bcachefs (loop4): marking filesystem clean [ 615.494156][ T8187] usb 3-1: 0:2 : does not exist [ 615.524484][ T8187] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 615.759312][ T8187] usb 3-1: USB disconnect, device number 28 [ 615.779268][ T5844] bcachefs (loop4): shutdown complete [ 616.017588][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.033543][ T972] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 616.286823][ T5964] usb 6-1: USB disconnect, device number 30 [ 616.433888][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 616.441851][ T972] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.492716][ T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.521169][ T972] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.535897][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.545841][ T972] usb 2-1: Product: syz [ 616.556834][ T972] usb 2-1: Manufacturer: syz [ 616.568539][ T972] usb 2-1: SerialNumber: syz [ 616.794110][ T972] usb 2-1: 0:2 : does not exist [ 616.809591][ T972] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 616.860278][ T972] usb 2-1: USB disconnect, device number 37 [ 616.966417][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.029120][T11417] fuse: Bad value for 'rootmode' [ 619.027687][T11436] 9pnet_virtio: no channels available for device syz [ 619.752363][T11437] syz.2.1717: attempt to access beyond end of device [ 619.752363][T11437] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 619.765657][T11437] hfsplus: unable to find HFS+ superblock [ 620.654706][T11453] fuse: Bad value for 'rootmode' [ 620.716119][T11455] loop1: detected capacity change from 0 to 16 [ 620.738937][T11455] erofs (device loop1): mounted with root inode @ nid 36. [ 620.804021][T11460] batadv_slave_0: entered promiscuous mode [ 620.812316][T11459] batadv_slave_0: left promiscuous mode [ 622.200627][T11476] 9pnet_virtio: no channels available for device syz [ 622.821725][T11484] syz.1.1733: attempt to access beyond end of device [ 622.821725][T11484] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 622.835861][T11484] hfsplus: unable to find HFS+ superblock [ 623.096705][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1734'. [ 623.716075][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.722841][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.505424][ T972] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 624.706213][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 624.729856][ T972] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 624.831725][ T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.896796][ T972] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.906137][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.012514][ T972] usb 3-1: Product: syz [ 625.029130][ T972] usb 3-1: Manufacturer: syz [ 625.064437][T11518] input: syz1 as /devices/virtual/input/input40 [ 625.158197][ T972] usb 3-1: SerialNumber: syz [ 626.217425][ T972] usb 3-1: 0:2 : does not exist [ 626.270816][ T972] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 626.468665][ T972] usb 3-1: USB disconnect, device number 29 [ 626.808972][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.306685][T11534] 9pnet_virtio: no channels available for device syz [ 628.173612][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1752'. [ 628.818262][T11544] loop3: detected capacity change from 0 to 32768 [ 628.886945][T11544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 628.895903][T11544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 628.932772][T11544] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 628.995290][T11544] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 629.053992][T11544] ------------[ cut here ]------------ [ 629.059782][T11544] UBSAN: shift-out-of-bounds in fs/gfs2/dir.c:1544:15 [ 629.066635][T11544] shift exponent 32 is too large for 32-bit type 'u32' (aka 'unsigned int') [ 629.075743][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.3.1755 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 629.075776][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.075792][T11544] Call Trace: [ 629.075802][T11544] [ 629.075811][T11544] dump_stack_lvl+0x189/0x250 [ 629.075854][T11544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.075885][T11544] ? __pfx__printk+0x10/0x10 [ 629.075928][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.075966][T11544] ubsan_epilogue+0xa/0x40 [ 629.076003][T11544] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 629.076059][T11544] gfs2_dir_read+0x1730/0x1780 [ 629.076097][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076129][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076161][T11544] ? __pfx_inode_dio_wait+0x10/0x10 [ 629.076191][T11544] ? __pfx___might_resched+0x10/0x10 [ 629.076225][T11544] ? __pfx_gfs2_dir_read+0x10/0x10 [ 629.076255][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076284][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076313][T11544] ? gfs2_glock_nq+0x10bb/0x1900 [ 629.076356][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076391][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076420][T11544] ? gfs2_glock_wait+0x20f/0x2a0 [ 629.076460][T11544] gfs2_readdir+0x14c/0x1b0 [ 629.076492][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076529][T11544] ? __pfx_gfs2_readdir+0x10/0x10 [ 629.076566][T11544] ? iterate_dir+0x5af/0x770 [ 629.076596][T11544] ? iterate_dir+0x49f/0x770 [ 629.076621][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076650][T11544] ? down_read_killable+0x1d1/0x350 [ 629.076678][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076713][T11544] iterate_dir+0x5af/0x770 [ 629.076749][T11544] __se_sys_getdents64+0xe4/0x260 [ 629.076782][T11544] ? __pfx___se_sys_getdents64+0x10/0x10 [ 629.076810][T11544] ? __pfx_filldir64+0x10/0x10 [ 629.076841][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.076870][T11544] ? rcu_is_watching+0x15/0xb0 [ 629.076907][T11544] ? do_syscall_64+0xbe/0x3b0 [ 629.076939][T11544] do_syscall_64+0xfa/0x3b0 [ 629.076962][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.077002][T11544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.077026][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.077055][T11544] ? exc_page_fault+0x9f/0xf0 [ 629.077098][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.077122][T11544] RIP: 0033:0x7f6faa98e929 [ 629.077143][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.077165][T11544] RSP: 002b:00007f6fab7cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 629.077191][T11544] RAX: ffffffffffffffda RBX: 00007f6faabb5fa0 RCX: 00007f6faa98e929 [ 629.077210][T11544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 629.077225][T11544] RBP: 00007f6faaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 629.077242][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.077257][T11544] R13: 0000000000000000 R14: 00007f6faabb5fa0 R15: 00007ffd3baa7a58 [ 629.077296][T11544] [ 629.077305][T11544] ---[ end trace ]--- [ 629.388096][T11544] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 629.395288][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.3.1755 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 629.405615][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.415665][T11544] Call Trace: [ 629.418941][T11544] [ 629.421871][T11544] dump_stack_lvl+0x99/0x250 [ 629.426498][T11544] ? __asan_memcpy+0x40/0x70 [ 629.431099][T11544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.436314][T11544] ? __pfx__printk+0x10/0x10 [ 629.440924][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.446579][T11544] panic+0x2db/0x790 [ 629.450491][T11544] ? __pfx_panic+0x10/0x10 [ 629.454915][T11544] ? _printk+0xcf/0x120 [ 629.459089][T11544] ? __pfx__printk+0x10/0x10 [ 629.463702][T11544] check_panic_on_warn+0x89/0xb0 [ 629.468659][T11544] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 629.475099][T11544] gfs2_dir_read+0x1730/0x1780 [ 629.479967][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.485601][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.491235][T11544] ? __pfx_inode_dio_wait+0x10/0x10 [ 629.496439][T11544] ? __pfx___might_resched+0x10/0x10 [ 629.501729][T11544] ? __pfx_gfs2_dir_read+0x10/0x10 [ 629.506848][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.512486][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.518121][T11544] ? gfs2_glock_nq+0x10bb/0x1900 [ 629.523079][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.528718][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.534365][T11544] ? gfs2_glock_wait+0x20f/0x2a0 [ 629.539325][T11544] gfs2_readdir+0x14c/0x1b0 [ 629.543836][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.549475][T11544] ? __pfx_gfs2_readdir+0x10/0x10 [ 629.554509][T11544] ? iterate_dir+0x5af/0x770 [ 629.559108][T11544] ? iterate_dir+0x49f/0x770 [ 629.563705][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.569354][T11544] ? down_read_killable+0x1d1/0x350 [ 629.574550][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.580206][T11544] iterate_dir+0x5af/0x770 [ 629.584647][T11544] __se_sys_getdents64+0xe4/0x260 [ 629.589671][T11544] ? __pfx___se_sys_getdents64+0x10/0x10 [ 629.595302][T11544] ? __pfx_filldir64+0x10/0x10 [ 629.600085][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.605712][T11544] ? rcu_is_watching+0x15/0xb0 [ 629.610486][T11544] ? do_syscall_64+0xbe/0x3b0 [ 629.615169][T11544] do_syscall_64+0xfa/0x3b0 [ 629.619674][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.624909][T11544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.630966][T11544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.636593][T11544] ? exc_page_fault+0x9f/0xf0 [ 629.641280][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.647182][T11544] RIP: 0033:0x7f6faa98e929 [ 629.651601][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.671218][T11544] RSP: 002b:00007f6fab7cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 629.679663][T11544] RAX: ffffffffffffffda RBX: 00007f6faabb5fa0 RCX: 00007f6faa98e929 [ 629.687651][T11544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 629.695628][T11544] RBP: 00007f6faaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 629.703690][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.711657][T11544] R13: 0000000000000000 R14: 00007f6faabb5fa0 R15: 00007ffd3baa7a58 [ 629.719646][T11544] [ 629.722961][T11544] Kernel Offset: disabled [ 629.727359][T11544] Rebooting in 86400 seconds..