last executing test programs: 1m35.878552605s ago: executing program 1 (id=95): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0880c, &(0x7f00000002c0)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x5, 0x2ea, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000640)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000680)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x842048, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x842, 0x2c) mkdirat(0xffffffffffffff9c, 0x0, 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 1m35.43234967s ago: executing program 1 (id=98): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x3, @mcast2, 0xe}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x17, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1m35.192779085s ago: executing program 1 (id=100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) splice(r2, 0x0, r1, 0x0, 0x10000, 0x0) write(r0, &(0x7f0000000e00)='w', 0x1) 1m34.771735478s ago: executing program 1 (id=102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000000480)="$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") open(&(0x7f0000000a00)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000ac0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x14b) 1m34.129660604s ago: executing program 1 (id=107): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1m33.126516587s ago: executing program 1 (id=115): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x559e, &(0x7f0000000280)="$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") chdir(&(0x7f000000cec0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r0 = openat(0xffffffffffffff9c, &(0x7f000000cf40)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f000000d000)={{r0}, 0x0, 0x0, @inherit={0x68, 0x0}, @subvolid=0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000e000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 1m32.475537673s ago: executing program 32 (id=115): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x559e, &(0x7f0000000280)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f000000cec0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r0 = openat(0xffffffffffffff9c, &(0x7f000000cf40)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f000000d000)={{r0}, 0x0, 0x0, @inherit={0x68, 0x0}, @subvolid=0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000e000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 26.506200724s ago: executing program 4 (id=433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x4, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0x2, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x6, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x6, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcde, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0x2, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x5, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x2, 0x7f, 0x5, 0xf700000, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24044814}, 0x4084) 26.110245045s ago: executing program 4 (id=437): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r3, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 25.453072752s ago: executing program 4 (id=441): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket(0x11, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 24.343066266s ago: executing program 4 (id=444): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000000480)="$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") open(&(0x7f0000000a00)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000ac0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x14b) 23.835806438s ago: executing program 4 (id=447): io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x60000, 0x3800, 0x4}) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x1d, 0x2, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x51, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7ae, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xfffffff8, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 22.862257197s ago: executing program 4 (id=456): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) ptrace(0x10, r0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000200)) ptrace$cont(0x21, r0, 0x5, 0x4) 22.242046051s ago: executing program 33 (id=456): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) ptrace(0x10, r0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000200)) ptrace$cont(0x21, r0, 0x5, 0x4) 11.041668609s ago: executing program 3 (id=486): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x2b) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700ff"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000700)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) 9.403332667s ago: executing program 0 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) 9.402526987s ago: executing program 2 (id=488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_FW_MASK={0x0, 0x5, 0xfff}]}}]}, 0x40}}, 0x0) 9.357332341s ago: executing program 3 (id=489): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a00209041005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000480), 0xa, 0x62080) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000005c80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000005c00)=ANY=[@ANYBLOB="20010b"], 0x0}) 7.755122466s ago: executing program 0 (id=490): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e00), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001e40)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000001e80)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001ec0)={0xfffffff0, 0xbe, 0x803, 0x401, 0x4, "01000000000080000027af00000700"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001f40)=0x1) 7.753583996s ago: executing program 2 (id=491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x5, 0x400055}]}}}}}}}, 0x0) 6.011205484s ago: executing program 0 (id=492): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002200)={0x0, 0x3, 0xfffff000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.996528086s ago: executing program 2 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x2ffc, 0x60, 0x8000, 0x5, 0x0, [{0x2, 0xa5, 0x5, '\x00', 0xf9}, {0x9, 0x80, 0x80}, {0x3, 0xcc, 0x2, '\x00', 0xf}, {0x7, 0x84, 0x8, '\x00', 0x13}, {0x2, 0x7f, 0xe, '\x00', 0x3b}, {0x9, 0x1, 0x40, '\x00', 0x9}, {0x1, 0x4d, 0x60, '\x00', 0x6e}, {0x0, 0x5, 0x2, '\x00', 0x10}, {0x9, 0x0, 0xa, '\x00', 0x78}, {0x4, 0x8, 0x5, '\x00', 0xcc}, {0x2c, 0x0, 0x1, '\x00', 0x5}, {0x2, 0x4, 0x81, '\x00', 0x8}, {0x6, 0x6, 0xf9, '\x00', 0x7b}, {0x3, 0x6, 0x7, '\x00', 0x3}, {0x4, 0x3, 0xe, '\x00', 0x3}, {0x9, 0x4, 0x4, '\x00', 0x9}, {0xaf, 0x0, 0x0, '\x00', 0xfe}, {0x6, 0x9, 0x6, '\x00', 0x3}, {0x0, 0x3, 0x0, '\x00', 0x10}, {0x1, 0x2, 0x0, '\x00', 0x5}, {0x5, 0x5, 0x57, '\x00', 0x2}, {0x3, 0x1, 0x2, '\x00', 0x3}, {0x5, 0x89, 0x80, '\x00', 0x1}, {0x3, 0x9, 0x3, '\x00', 0x4}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x6e, 0x0, 0x200100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4a10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.994111856s ago: executing program 3 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x1a, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 4.040959166s ago: executing program 0 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0xc}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.039895006s ago: executing program 2 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006028000001082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 4.024759898s ago: executing program 3 (id=497): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="500003"], 0x6) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="40010f01"], 0x8c) 2.110473254s ago: executing program 0 (id=498): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x400c, 0x200000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c02, 0x0, 0xffffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0xd0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.100902105s ago: executing program 2 (id=499): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000640)=""/180, 0xb4}], 0x1) close(r1) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.100117325s ago: executing program 3 (id=500): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x7ff}], 0x1, 0x40002042, 0x0) 17.566129ms ago: executing program 0 (id=501): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x5005}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="12030800030016000c0045f5"], 0x32) 536.98µs ago: executing program 2 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x70}}]}, 0x88}}, 0x0) 0s ago: executing program 3 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x8, 0x5}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x5e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44c, &(0x7f0000000b40)="$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") kernel console output (not intermixed with test programs): ? __x64_sys_futex+0xf0/0xf0 [ 144.895035][ T6933] ? __x64_sys_futex+0x21/0xf0 [ 144.899853][ T6933] do_syscall_64+0x55/0xb0 [ 144.904317][ T6933] ? clear_bhb_loop+0x40/0x90 [ 144.909054][ T6933] ? clear_bhb_loop+0x40/0x90 [ 144.913769][ T6933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.919700][ T6933] RIP: 0033:0x7fc8f71a94d9 [ 144.924146][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.943876][ T6933] RSP: 002b:00007fc8f80270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 144.952338][ T6933] RAX: ffffffffffffffda RBX: 00007fc8f7425fa8 RCX: 00007fc8f71a94d9 [ 144.960436][ T6933] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc8f7425fac [ 144.968440][ T6933] RBP: 00007fc8f7425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 144.976559][ T6933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.984581][ T6933] R13: 00007fc8f7426038 R14: 00007fff40e85ed0 R15: 00007fff40e85fb8 [ 144.992627][ T6933] [ 145.060074][ T6937] process 'syz.4.249' launched './file0' with NULL argv: empty string added [ 145.078310][ T6937] FAULT_INJECTION: forcing a failure. [ 145.078310][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 145.104717][ T6937] CPU: 0 PID: 6937 Comm: syz.4.249 Not tainted syzkaller #0 [ 145.112097][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 145.122217][ T6937] Call Trace: [ 145.125559][ T6937] [ 145.128538][ T6937] dump_stack_lvl+0x18c/0x250 [ 145.133280][ T6937] ? show_regs_print_info+0x20/0x20 [ 145.138562][ T6937] ? load_image+0x420/0x420 [ 145.143113][ T6937] ? __might_sleep+0xe0/0xe0 [ 145.147743][ T6937] ? __lock_acquire+0x7eb0/0x7eb0 [ 145.152801][ T6937] should_fail_ex+0x394/0x4c0 [ 145.157539][ T6937] should_failslab+0x9/0x20 [ 145.162072][ T6937] slab_pre_alloc_hook+0x59/0x300 [ 145.167124][ T6937] ? __lock_acquire+0x7eb0/0x7eb0 [ 145.172188][ T6937] ? security_prepare_creds+0x4b/0x130 [ 145.177688][ T6937] ? security_prepare_creds+0x4b/0x130 [ 145.183359][ T6937] __kmem_cache_alloc_node+0x53/0x260 [ 145.188765][ T6937] ? security_prepare_creds+0x4b/0x130 [ 145.194258][ T6937] __kmalloc+0xa7/0x240 [ 145.198459][ T6937] security_prepare_creds+0x4b/0x130 [ 145.203800][ T6937] prepare_creds+0x427/0x5d0 [ 145.208440][ T6937] prepare_exec_creds+0x18/0x210 [ 145.213428][ T6937] bprm_execve+0xf3/0x1730 [ 145.217895][ T6937] ? get_arg_page+0x3d3/0x560 [ 145.222661][ T6937] ? load_image+0x420/0x420 [ 145.227241][ T6937] ? alloc_bprm+0x9a0/0x9a0 [ 145.231800][ T6937] ? put_arg_page+0xea/0x260 [ 145.236433][ T6937] ? copy_string_kernel+0x1e9/0x220 [ 145.241676][ T6937] do_execveat_common+0x501/0x6b0 [ 145.246748][ T6937] __x64_sys_execve+0x92/0xa0 [ 145.251510][ T6937] do_syscall_64+0x55/0xb0 [ 145.255974][ T6937] ? clear_bhb_loop+0x40/0x90 [ 145.260687][ T6937] ? clear_bhb_loop+0x40/0x90 [ 145.265548][ T6937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.271516][ T6937] RIP: 0033:0x7ff804ba94d9 [ 145.275971][ T6937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.295628][ T6937] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 145.304089][ T6937] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 145.312104][ T6937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 145.320109][ T6937] RBP: 00007ff804c3804e R08: 0000000000000000 R09: 0000000000000000 [ 145.328130][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.336244][ T6937] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 145.344277][ T6937] [ 145.370280][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.770608][ T6954] loop3: detected capacity change from 0 to 1024 [ 146.128098][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.205956][ T6942] loop0: detected capacity change from 0 to 40427 [ 146.227134][ T6942] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 146.249339][ T6942] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 146.325884][ T6942] F2FS-fs (loop0): invalid crc value [ 146.358007][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 146.366229][ T5819] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 146.378973][ T5819] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 146.399166][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.407247][ T5819] usb 5-1: Product: syz [ 146.437780][ T5819] usb 5-1: Manufacturer: syz [ 146.494643][ T5819] usb 5-1: SerialNumber: syz [ 146.511638][ T5819] usb 5-1: config 0 descriptor?? [ 146.520994][ T6942] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.521250][ T5819] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 146.537006][ T5819] usb 5-1: setting power ON [ 146.542251][ T5819] dvb-usb: bulk message failed: -22 (2/0) [ 146.583478][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.612284][ T5819] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 146.634667][ T5819] usb 5-1: media controller created [ 146.642015][ T6971] loop2: detected capacity change from 0 to 16 [ 146.677735][ T6942] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 146.721814][ T6971] erofs: (device loop2): mounted with root inode @ nid 36. [ 146.747060][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.766648][ T6956] dvb-usb: bulk message failed: -22 (3/0) [ 146.803460][ T6942] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.842817][ T5819] usb 5-1: selecting invalid altsetting 6 [ 146.853763][ T5819] usb 5-1: digital interface selection failed (-22) [ 146.861118][ T5819] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 146.880680][ T5819] usb 5-1: setting power OFF [ 146.898153][ T5819] dvb-usb: bulk message failed: -22 (2/0) [ 146.926719][ T5819] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 146.966550][ T5819] (NULL device *): no alternate interface [ 147.019279][ T6977] loop2: detected capacity change from 0 to 128 [ 147.087732][ T5819] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 147.116316][ T5819] usb 5-1: USB disconnect, device number 2 [ 147.411546][ T6982] mmap: syz.2.261 (6982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.569255][ T6985] smc: removing ib device rxe0 [ 148.378931][ T5771] EXT4-fs error: 314 callbacks suppressed [ 148.378949][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 148.404500][ T7007] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.270: Invalid inode table block 0 in block_group 0 [ 148.425524][ T6986] loop2: detected capacity change from 0 to 32768 [ 148.438429][ T7007] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 148.440586][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 148.448535][ T7007] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.270: mark_inode_dirty error [ 148.487102][ T7007] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.270: Invalid inode table block 0 in block_group 0 [ 148.511422][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 148.560281][ T6986] JBD2: Ignoring recovery information on journal [ 148.582662][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 148.598408][ T7007] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 148.664062][ T7007] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.270: mark_inode_dirty error [ 148.697962][ T970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.779779][ T6986] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 148.930564][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 148.974293][ T970] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 148.998836][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.064673][ T970] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 149.348415][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.444875][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1508 with max blocks 4 with error 117 [ 149.466334][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 149.466334][ T60] [ 149.555274][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 149.564610][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.618300][ T5819] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 149.642734][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 7 with max blocks 3 with error 117 [ 149.669770][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 149.669770][ T60] [ 149.680422][ T5819] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.697175][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.706802][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1006 with max blocks 17 with error 117 [ 149.727411][ T5819] usb 1-1: Product: syz [ 149.732195][ T5819] usb 1-1: Manufacturer: syz [ 149.736860][ T5819] usb 1-1: SerialNumber: syz [ 149.746239][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 149.746239][ T60] [ 149.767204][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 5 with max blocks 5 with error 117 [ 149.799917][ T5819] cdc_mbim 1-1:1.0: skipping garbage [ 149.821814][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 149.821814][ T60] [ 149.902762][ T970] gspca_nw80x: reg_r err -71 [ 149.917704][ T970] nw80x: probe of 4-1:3.0 failed with error -71 [ 149.951485][ T970] usb 4-1: USB disconnect, device number 6 [ 149.987161][ T7023] FAULT_INJECTION: forcing a failure. [ 149.987161][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 150.000341][ T7023] CPU: 0 PID: 7023 Comm: syz.4.273 Not tainted syzkaller #0 [ 150.007692][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 150.017808][ T7023] Call Trace: [ 150.021181][ T7023] [ 150.024170][ T7023] dump_stack_lvl+0x18c/0x250 [ 150.029014][ T7023] ? show_regs_print_info+0x20/0x20 [ 150.034370][ T7023] ? load_image+0x420/0x420 [ 150.039033][ T7023] ? __might_sleep+0xe0/0xe0 [ 150.043695][ T7023] ? __lock_acquire+0x7eb0/0x7eb0 [ 150.048783][ T7023] should_fail_ex+0x394/0x4c0 [ 150.053528][ T7023] should_failslab+0x9/0x20 [ 150.058087][ T7023] slab_pre_alloc_hook+0x59/0x300 [ 150.063175][ T7023] kmem_cache_alloc+0x5a/0x2d0 [ 150.067993][ T7023] ? __kernfs_new_node+0xe5/0x7f0 [ 150.073133][ T7023] __kernfs_new_node+0xe5/0x7f0 [ 150.078053][ T7023] ? kernfs_new_node+0x260/0x260 [ 150.083157][ T7023] ? up_write+0x1be/0x410 [ 150.087527][ T7023] kernfs_new_node+0x14c/0x260 [ 150.092428][ T7023] __kernfs_create_file+0x4b/0x2e0 [ 150.097687][ T7023] sysfs_add_file_mode_ns+0x237/0x2f0 [ 150.103361][ T7023] sysfs_merge_group+0x184/0x320 [ 150.108342][ T7023] ? sysfs_remove_groups+0xa0/0xa0 [ 150.113684][ T7023] ? device_add_class_symlinks+0x240/0x240 [ 150.119559][ T7023] dpm_sysfs_add+0xd2/0x270 [ 150.124126][ T7023] device_add+0x55c/0xc40 [ 150.128499][ T7023] iommufd_test+0x121d/0x2a20 [ 150.133248][ T7023] ? iommufd_selftest_destroy+0xf0/0xf0 [ 150.138846][ T7023] ? __lock_acquire+0x7eb0/0x7eb0 [ 150.143909][ T7023] ? __lock_acquire+0x7eb0/0x7eb0 [ 150.148977][ T7023] ? __might_fault+0xaa/0x120 [ 150.153700][ T7023] ? __might_fault+0xaa/0x120 [ 150.158416][ T7023] iommufd_fops_ioctl+0x48b/0x540 [ 150.163480][ T7023] ? iommufd_ctx_put+0x40/0x40 [ 150.168298][ T7023] ? __fget_files+0x28/0x460 [ 150.173210][ T7023] ? bpf_lsm_file_ioctl+0x9/0x10 [ 150.178202][ T7023] ? security_file_ioctl+0x80/0xa0 [ 150.183357][ T7023] ? iommufd_ctx_put+0x40/0x40 [ 150.188172][ T7023] __se_sys_ioctl+0xfd/0x170 [ 150.192803][ T7023] do_syscall_64+0x55/0xb0 [ 150.197275][ T7023] ? clear_bhb_loop+0x40/0x90 [ 150.202166][ T7023] ? clear_bhb_loop+0x40/0x90 [ 150.206892][ T7023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.212833][ T7023] RIP: 0033:0x7ff804ba94d9 [ 150.217280][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.237010][ T7023] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.245556][ T7023] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 150.253566][ T7023] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 150.261576][ T7023] RBP: 00007ff804c3804e R08: 0000000000000000 R09: 0000000000000000 [ 150.269588][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.277593][ T7023] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 150.285637][ T7023] [ 150.312189][ T7016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.628250][ T7029] loop4: detected capacity change from 0 to 49152 [ 150.636137][ T7029] ext4: Unknown parameter 'fowner>00000000000000000000' [ 150.717518][ T7029] EXT4-fs error (device loop4): ext4_init_orphan_info:629: comm syz.4.274: orphan file block 12: bad checksum [ 150.738748][ T7029] EXT4-fs (loop4): mount failed [ 150.933228][ T7016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.948655][ T5819] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 150.958576][ T5819] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 150.976949][ T5819] wwan wwan0: port wwan0mbim0 attached [ 150.999629][ T5819] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 9a:fd:de:8e:eb:7f [ 151.105003][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 151.123909][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 151.229239][ T7045] FAULT_INJECTION: forcing a failure. [ 151.229239][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 151.243338][ T7045] CPU: 1 PID: 7045 Comm: syz.4.278 Not tainted syzkaller #0 [ 151.250708][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 151.260863][ T7045] Call Trace: [ 151.264194][ T7045] [ 151.267174][ T7045] dump_stack_lvl+0x18c/0x250 [ 151.272021][ T7045] ? show_regs_print_info+0x20/0x20 [ 151.277296][ T7045] ? load_image+0x420/0x420 [ 151.281862][ T7045] ? __might_sleep+0xe0/0xe0 [ 151.286522][ T7045] ? __lock_acquire+0x7eb0/0x7eb0 [ 151.291614][ T7045] should_fail_ex+0x394/0x4c0 [ 151.296361][ T7045] should_failslab+0x9/0x20 [ 151.301083][ T7045] slab_pre_alloc_hook+0x59/0x300 [ 151.306210][ T7045] ? rng_is_initialized+0x40/0x40 [ 151.311319][ T7045] ? ceph_create_client+0x6f/0x300 [ 151.316517][ T7045] __kmem_cache_alloc_node+0x53/0x260 [ 151.321969][ T7045] ? ceph_create_client+0x6f/0x300 [ 151.327185][ T7045] kmalloc_trace+0x2a/0xe0 [ 151.331699][ T7045] ceph_create_client+0x6f/0x300 [ 151.332865][ T5445] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 151.336692][ T7045] ceph_get_tree+0x1ca/0x1800 [ 151.336769][ T7045] ? bpf_lsm_capable+0x9/0x10 [ 151.336791][ T7045] ? security_capable+0x89/0xb0 [ 151.336817][ T7045] vfs_get_tree+0x8c/0x280 [ 151.336847][ T7045] vfs_cmd_create+0xe3/0x230 [ 151.336883][ T7045] __se_sys_fsconfig+0x70a/0x850 [ 151.336922][ T7045] ? __x64_sys_fsconfig+0xc0/0xc0 [ 151.336962][ T7045] ? lockdep_hardirqs_on+0x98/0x150 [ 151.336981][ T7045] ? __x64_sys_fsconfig+0x20/0xc0 [ 151.337012][ T7045] do_syscall_64+0x55/0xb0 [ 151.391955][ T7045] ? clear_bhb_loop+0x40/0x90 [ 151.396686][ T7045] ? clear_bhb_loop+0x40/0x90 [ 151.401423][ T7045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.407406][ T7045] RIP: 0033:0x7ff804ba94d9 [ 151.411882][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.431544][ T7045] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 151.440013][ T7045] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 151.448034][ T7045] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 151.456140][ T7045] RBP: 00007ff804c3804e R08: 0000000000000000 R09: 0000000000000000 [ 151.464327][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.472341][ T7045] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 151.480362][ T7045] [ 151.568850][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.575968][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.583793][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.590583][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.597359][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.604111][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.610858][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.617698][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.624149][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.630976][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.637417][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.644159][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.652487][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.659249][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.670631][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.677387][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.685171][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.691939][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.698629][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 151.705389][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 151.731260][ T7053] loop3: detected capacity change from 0 to 1024 [ 151.878292][ T970] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.900058][ T7053] hfsplus: xattr searching failed [ 151.936040][ T7053] hfsplus: xattr searching failed [ 152.044065][ T1136] hfsplus: b-tree write err: -5, ino 3 [ 152.071674][ T970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.086877][ T970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.108890][ T970] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.119502][ T970] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.133029][ T7060] capability: warning: `syz.4.281' uses 32-bit capabilities (legacy support in use) [ 152.156111][ T7060] FAULT_INJECTION: forcing a failure. [ 152.156111][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 152.170330][ T970] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 152.180190][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.189171][ T7060] CPU: 0 PID: 7060 Comm: syz.4.281 Not tainted syzkaller #0 [ 152.196524][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 152.206632][ T7060] Call Trace: [ 152.209954][ T7060] [ 152.212918][ T7060] dump_stack_lvl+0x18c/0x250 [ 152.217667][ T7060] ? show_regs_print_info+0x20/0x20 [ 152.222958][ T7060] ? load_image+0x420/0x420 [ 152.227531][ T7060] ? __lock_acquire+0x7eb0/0x7eb0 [ 152.232643][ T7060] should_fail_ex+0x394/0x4c0 [ 152.237380][ T7060] should_failslab+0x9/0x20 [ 152.241921][ T7060] slab_pre_alloc_hook+0x59/0x300 [ 152.246993][ T7060] ? x509_key_preparse+0x31b/0x6c0 [ 152.252158][ T7060] __kmem_cache_alloc_node+0x53/0x260 [ 152.257570][ T7060] ? x509_key_preparse+0x31b/0x6c0 [ 152.262743][ T7060] kmalloc_trace+0x2a/0xe0 [ 152.267235][ T7060] x509_key_preparse+0x31b/0x6c0 [ 152.272257][ T7060] asymmetric_key_preparse+0xa9/0x140 [ 152.277701][ T7060] __key_create_or_update+0x362/0xa80 [ 152.283144][ T7060] ? key_create_or_update+0x60/0x60 [ 152.288469][ T7060] ? search_process_keyrings_rcu+0x360/0x360 [ 152.294511][ T7060] ? __virt_addr_valid+0x10c/0x380 [ 152.299707][ T7060] ? __virt_addr_valid+0x10c/0x380 [ 152.304864][ T7060] key_create_or_update+0x42/0x60 [ 152.309991][ T7060] __se_sys_add_key+0x34f/0x410 [ 152.314908][ T7060] ? __x64_sys_add_key+0xc0/0xc0 [ 152.319914][ T7060] ? lockdep_hardirqs_on+0x98/0x150 [ 152.325168][ T7060] ? __x64_sys_add_key+0x20/0xc0 [ 152.330169][ T7060] do_syscall_64+0x55/0xb0 [ 152.334638][ T7060] ? clear_bhb_loop+0x40/0x90 [ 152.339405][ T7060] ? clear_bhb_loop+0x40/0x90 [ 152.344216][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.350152][ T7060] RIP: 0033:0x7ff804ba94d9 [ 152.354599][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.374256][ T7060] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 152.382712][ T7060] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 152.390723][ T7060] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 152.398732][ T7060] RBP: 00007ff804c3804e R08: ffffffffffffffff R09: 0000000000000000 [ 152.406759][ T7060] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 152.414767][ T7060] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 152.422806][ T7060] [ 152.733856][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 152.745475][ T9] usb 1-1: USB disconnect, device number 5 [ 152.753091][ T9] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 153.048715][ T7075] loop0: detected capacity change from 0 to 33792 [ 153.100354][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 153.126551][ T7075] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.169888][ T5819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.203986][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.277127][ T7083] FAULT_INJECTION: forcing a failure. [ 153.277127][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 153.302514][ T7083] CPU: 0 PID: 7083 Comm: syz.4.288 Not tainted syzkaller #0 [ 153.309903][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 153.320100][ T7083] Call Trace: [ 153.323452][ T7083] [ 153.326448][ T7083] dump_stack_lvl+0x18c/0x250 [ 153.331286][ T7083] ? show_regs_print_info+0x20/0x20 [ 153.336550][ T7083] ? load_image+0x420/0x420 [ 153.341143][ T7083] ? __might_sleep+0xe0/0xe0 [ 153.345938][ T7083] ? __lock_acquire+0x7eb0/0x7eb0 [ 153.351035][ T7083] ? verify_lock_unused+0x140/0x140 [ 153.356300][ T7083] should_fail_ex+0x394/0x4c0 [ 153.361054][ T7083] should_failslab+0x9/0x20 [ 153.365628][ T7083] slab_pre_alloc_hook+0x59/0x300 [ 153.370976][ T7083] kmem_cache_alloc+0x5a/0x2d0 [ 153.375792][ T7083] ? mas_alloc_nodes+0x2f8/0x8c0 [ 153.380807][ T7083] mas_alloc_nodes+0x2f8/0x8c0 [ 153.385650][ T7083] mas_preallocate+0xa1f/0x1170 [ 153.388357][ T5819] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.390657][ T7083] ? vma_merge+0x8e4/0x2130 [ 153.404532][ T7083] ? mas_destroy+0x20a0/0x20a0 [ 153.409367][ T7083] ? down_read_killable+0x340/0x340 [ 153.411946][ T5819] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.414611][ T7083] ? vma_iter_config+0xe6/0x270 [ 153.426074][ T5819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.429640][ T7083] vma_merge+0x1709/0x2130 [ 153.429693][ T7083] ? init_vma_prep+0x160/0x160 [ 153.429745][ T7083] __se_sys_mremap+0xd9b/0x11a0 [ 153.444424][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 153.447982][ T7083] ? __x64_sys_mremap+0xc0/0xc0 [ 153.448027][ T7083] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 153.448069][ T7083] ? lockdep_hardirqs_on+0x98/0x150 [ 153.448090][ T7083] ? __x64_sys_mremap+0x20/0xc0 [ 153.484965][ T7083] do_syscall_64+0x55/0xb0 [ 153.489445][ T7083] ? clear_bhb_loop+0x40/0x90 [ 153.494205][ T7083] ? clear_bhb_loop+0x40/0x90 [ 153.498941][ T7083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.504888][ T7083] RIP: 0033:0x7ff804ba94d9 [ 153.509339][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.528984][ T7083] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 153.537433][ T7083] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 153.545444][ T7083] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000000000 [ 153.553455][ T7083] RBP: 00007ff804c3804e R08: 0000200000001000 R09: 0000000000000000 [ 153.561466][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.569468][ T7083] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 153.577487][ T7083] [ 153.583263][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 153.596944][ T7069] EXT4-fs error: 336 callbacks suppressed [ 153.596961][ T7069] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.285: Invalid inode table block 0 in block_group 0 [ 153.617788][ T5819] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.624904][ T7069] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 153.628339][ T7082] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.288: Invalid inode table block 0 in block_group 0 [ 153.649881][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.658180][ T7069] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.285: mark_inode_dirty error [ 153.658571][ T7069] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.285: Invalid inode table block 0 in block_group 0 [ 153.686291][ T7082] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 153.696617][ T5819] usb 4-1: Product: syz [ 153.701150][ T5819] usb 4-1: Manufacturer: syz [ 153.706350][ T7069] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 153.707240][ T7082] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2030: comm syz.4.288: mark_inode_dirty error [ 153.727407][ T7069] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.285: mark_inode_dirty error [ 153.746190][ T5819] cdc_wdm 4-1:1.0: skipping garbage [ 153.752022][ T5819] cdc_wdm 4-1:1.0: skipping garbage [ 153.757719][ T7069] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.285: Invalid inode table block 0 in block_group 0 [ 153.778954][ T5819] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.785829][ T5819] cdc_wdm 4-1:1.0: Unknown control protocol [ 154.015184][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.023104][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.054494][ T970] gud 3-1:1.0: USB-2: Failed to add properties (ret=-71) [ 154.061879][ T970] gud 3-1:1.0: Failed to get connectors (error=-71) [ 154.085024][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.086068][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.101827][ T7087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.111877][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.119202][ T7087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.144541][ T970] gud: probe of 3-1:1.0 failed with error -71 [ 154.173052][ T970] usb 3-1: USB disconnect, device number 7 [ 154.255131][ T7087] team0: Port device bridge0 added [ 154.274623][ T7091] loop0: detected capacity change from 0 to 33280 [ 154.295307][ T7091] EXT4-fs (loop0): Test dummy encryption mode enabled [ 154.310362][ T7091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.333081][ T7091] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.291: bad orphan inode 131083 [ 154.361203][ T7091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.504317][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.563967][ T5819] usb 4-1: USB disconnect, device number 7 [ 154.641579][ T7099] FAULT_INJECTION: forcing a failure. [ 154.641579][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 154.660735][ T7099] CPU: 1 PID: 7099 Comm: syz.0.292 Not tainted syzkaller #0 [ 154.668202][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 154.678314][ T7099] Call Trace: [ 154.681652][ T7099] [ 154.684647][ T7099] dump_stack_lvl+0x18c/0x250 [ 154.689410][ T7099] ? show_regs_print_info+0x20/0x20 [ 154.694692][ T7099] ? load_image+0x420/0x420 [ 154.699302][ T7099] ? __might_sleep+0xe0/0xe0 [ 154.703959][ T7099] ? __lock_acquire+0x7eb0/0x7eb0 [ 154.709063][ T7099] should_fail_ex+0x394/0x4c0 [ 154.713820][ T7099] should_failslab+0x9/0x20 [ 154.718385][ T7099] slab_pre_alloc_hook+0x59/0x300 [ 154.723468][ T7099] kmem_cache_alloc+0x5a/0x2d0 [ 154.728259][ T7099] ? prepare_creds+0x30/0x5d0 [ 154.733037][ T7099] prepare_creds+0x30/0x5d0 [ 154.737597][ T7099] prepare_exec_creds+0x18/0x210 [ 154.742608][ T7099] bprm_execve+0xf3/0x1730 [ 154.747137][ T7099] ? get_arg_page+0x3d3/0x560 [ 154.751880][ T7099] ? up_write+0x1be/0x410 [ 154.756253][ T7099] ? alloc_bprm+0x9a0/0x9a0 [ 154.760784][ T7099] ? put_arg_page+0xea/0x260 [ 154.765405][ T7099] ? copy_string_kernel+0x1e9/0x220 [ 154.770633][ T7099] do_execveat_common+0x501/0x6b0 [ 154.775806][ T7099] __x64_sys_execve+0x92/0xa0 [ 154.780526][ T7099] do_syscall_64+0x55/0xb0 [ 154.784997][ T7099] ? clear_bhb_loop+0x40/0x90 [ 154.789756][ T7099] ? clear_bhb_loop+0x40/0x90 [ 154.794494][ T7099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.800420][ T7099] RIP: 0033:0x7f231dba94d9 [ 154.804854][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.824484][ T7099] RSP: 002b:00007f231eac2028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 154.833034][ T7099] RAX: ffffffffffffffda RBX: 00007f231de25fa0 RCX: 00007f231dba94d9 [ 154.841039][ T7099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 154.849054][ T7099] RBP: 00007f231dc3804e R08: 0000000000000000 R09: 0000000000000000 [ 154.857048][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.865127][ T7099] R13: 00007f231de26038 R14: 00007f231de25fa0 R15: 00007fff45733b18 [ 154.873190][ T7099] [ 155.054719][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 155.084425][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 155.108476][ T7105] loop4: detected capacity change from 0 to 34816 [ 155.145434][ T7108] FAULT_INJECTION: forcing a failure. [ 155.145434][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.160926][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.174394][ T7105] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.179088][ T7108] CPU: 1 PID: 7108 Comm: syz.2.297 Not tainted syzkaller #0 [ 155.192202][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 155.202438][ T7108] Call Trace: [ 155.205784][ T7108] [ 155.208774][ T7108] dump_stack_lvl+0x18c/0x250 [ 155.213519][ T7108] ? show_regs_print_info+0x20/0x20 [ 155.218778][ T7108] ? load_image+0x420/0x420 [ 155.223447][ T7108] ? __might_fault+0xaa/0x120 [ 155.228190][ T7108] ? __lock_acquire+0x7eb0/0x7eb0 [ 155.233281][ T7108] ? __virt_addr_valid+0x10c/0x380 [ 155.238452][ T7108] should_fail_ex+0x394/0x4c0 [ 155.243183][ T7108] _copy_to_user+0x2f/0xa0 [ 155.247760][ T7108] bpf_verifier_vlog+0x4e6/0x840 [ 155.252844][ T7108] __btf_verifier_log+0xe3/0x140 [ 155.257829][ T7108] ? btf_check_sec_info+0x350/0x350 [ 155.263074][ T7108] btf_verifier_log_vsi+0x1fd/0x3d0 [ 155.268320][ T7108] ? sort_r+0x17f5/0x1810 [ 155.272695][ T7108] ? btf_datasec_show+0x970/0x970 [ 155.277793][ T7108] btf_datasec_check_meta+0x97f/0xb50 [ 155.283236][ T7108] btf_check_all_metas+0x371/0xaf0 [ 155.288438][ T7108] btf_parse_type_sec+0xfc/0x1960 [ 155.293516][ T7108] ? btf_check_sec_info+0x350/0x350 [ 155.298765][ T7108] ? __virt_addr_valid+0x10c/0x380 [ 155.304373][ T7108] ? btf_verifier_log+0x1a0/0x1a0 [ 155.309440][ T7108] ? btf_parse_hdr+0x545/0x700 [ 155.314245][ T7108] ? btf_parse_str_sec+0x20d/0x2a0 [ 155.319401][ T7108] btf_new_fd+0x440/0x9e0 [ 155.323784][ T7108] ? bpf_btf_show_fdinfo+0x80/0x80 [ 155.328965][ T7108] ? capable+0x88/0xe0 [ 155.333092][ T7108] __sys_bpf+0x670/0x890 [ 155.337383][ T7108] ? bpf_link_show_fdinfo+0x560/0x560 [ 155.342891][ T7108] ? lock_chain_count+0x20/0x20 [ 155.347783][ T7108] __x64_sys_bpf+0x7c/0x90 [ 155.352265][ T7108] do_syscall_64+0x55/0xb0 [ 155.356721][ T7108] ? clear_bhb_loop+0x40/0x90 [ 155.361440][ T7108] ? clear_bhb_loop+0x40/0x90 [ 155.366251][ T7108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.372233][ T7108] RIP: 0033:0x7efe907a94d9 [ 155.376678][ T7108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.396430][ T7108] RSP: 002b:00007efe91683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.404996][ T7108] RAX: ffffffffffffffda RBX: 00007efe90a25fa0 RCX: 00007efe907a94d9 [ 155.413031][ T7108] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 155.421058][ T7108] RBP: 00007efe9083804e R08: 0000000000000000 R09: 0000000000000000 [ 155.429169][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.437184][ T7108] R13: 00007efe90a26038 R14: 00007efe90a25fa0 R15: 00007ffdd3f3e938 [ 155.445222][ T7108] [ 155.462573][ T7111] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 72: padding at end of block bitmap is not set [ 155.703372][ T7116] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.945832][ T27] audit: type=1800 audit(1700000020.610:9): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.296" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 156.113561][ T7130] udevd[7130]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 156.162312][ T6358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.238014][ T5819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.251266][ T7134] FAULT_INJECTION: forcing a failure. [ 156.251266][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 156.252023][ T7133] ip_tables: iptables: counters copy to user failed while replacing table [ 156.299726][ T7134] CPU: 1 PID: 7134 Comm: syz.0.307 Not tainted syzkaller #0 [ 156.307143][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 156.317285][ T7134] Call Trace: [ 156.320689][ T7134] [ 156.323671][ T7134] dump_stack_lvl+0x18c/0x250 [ 156.328419][ T7134] ? show_regs_print_info+0x20/0x20 [ 156.333688][ T7134] ? load_image+0x420/0x420 [ 156.338266][ T7134] ? __might_sleep+0xe0/0xe0 [ 156.342932][ T7134] ? __lock_acquire+0x7eb0/0x7eb0 [ 156.348052][ T7134] should_fail_ex+0x394/0x4c0 [ 156.352793][ T7134] should_failslab+0x9/0x20 [ 156.357357][ T7134] slab_pre_alloc_hook+0x59/0x300 [ 156.362448][ T7134] ? assoc_array_insert+0x445/0x3080 [ 156.367813][ T7134] __kmem_cache_alloc_node+0x53/0x260 [ 156.373344][ T7134] ? assoc_array_insert+0x445/0x3080 [ 156.378707][ T7134] kmalloc_trace+0x2a/0xe0 [ 156.383290][ T7134] assoc_array_insert+0x445/0x3080 [ 156.388497][ T7134] ? __siphash_unaligned+0x25c/0x3d0 [ 156.393857][ T7134] ? down_read_killable+0x340/0x340 [ 156.399124][ T7134] __key_link_begin+0xd6/0x1e0 [ 156.403958][ T7134] __key_create_or_update+0x407/0xa80 [ 156.409402][ T7134] ? key_create_or_update+0x60/0x60 [ 156.414675][ T7134] ? search_process_keyrings_rcu+0x360/0x360 [ 156.420721][ T7134] ? __virt_addr_valid+0x10c/0x380 [ 156.425904][ T7134] ? __virt_addr_valid+0x10c/0x380 [ 156.431338][ T7134] key_create_or_update+0x42/0x60 [ 156.436410][ T7134] __se_sys_add_key+0x34f/0x410 [ 156.441414][ T7134] ? __x64_sys_add_key+0xc0/0xc0 [ 156.446486][ T7134] ? lockdep_hardirqs_on+0x98/0x150 [ 156.451718][ T7134] ? __x64_sys_add_key+0x20/0xc0 [ 156.456702][ T7134] do_syscall_64+0x55/0xb0 [ 156.461168][ T7134] ? clear_bhb_loop+0x40/0x90 [ 156.465887][ T7134] ? clear_bhb_loop+0x40/0x90 [ 156.470616][ T7134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.476647][ T7134] RIP: 0033:0x7f231dba94d9 [ 156.481096][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.500753][ T7134] RSP: 002b:00007f231eac2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 156.509298][ T7134] RAX: ffffffffffffffda RBX: 00007f231de25fa0 RCX: 00007f231dba94d9 [ 156.517572][ T7134] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 156.525578][ T7134] RBP: 00007f231dc3804e R08: ffffffffffffffff R09: 0000000000000000 [ 156.533587][ T7134] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 156.541592][ T7134] R13: 00007f231de26038 R14: 00007f231de25fa0 R15: 00007fff45733b18 [ 156.549721][ T7134] [ 156.628963][ T7133] syz.2.306 uses obsolete (PF_INET,SOCK_PACKET) [ 156.705586][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.718218][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.734061][ T5819] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.744196][ T5819] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.757435][ T5819] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 156.770398][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.878139][ T5773] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 157.928577][ T7170] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 157.980462][ T7173] FAULT_INJECTION: forcing a failure. [ 157.980462][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 157.993870][ T7173] CPU: 0 PID: 7173 Comm: syz.2.322 Not tainted syzkaller #0 [ 158.001227][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 158.011345][ T7173] Call Trace: [ 158.014680][ T7173] [ 158.017679][ T7173] dump_stack_lvl+0x18c/0x250 [ 158.022513][ T7173] ? show_regs_print_info+0x20/0x20 [ 158.027970][ T7173] ? load_image+0x420/0x420 [ 158.032550][ T7173] should_fail_ex+0x394/0x4c0 [ 158.037296][ T7173] should_failslab+0x9/0x20 [ 158.041854][ T7173] slab_pre_alloc_hook+0x59/0x300 [ 158.046959][ T7173] kmem_cache_alloc+0x5a/0x2d0 [ 158.051812][ T7173] ? sctp_get_port_local+0x69f/0x15d0 [ 158.057256][ T7173] sctp_get_port_local+0x69f/0x15d0 [ 158.062624][ T7173] ? sctp_do_bind+0x8f0/0x8f0 [ 158.067369][ T7173] ? sctp_bind_addr_match+0x30/0x2a0 [ 158.072726][ T7173] sctp_do_bind+0x4c0/0x8f0 [ 158.077301][ T7173] sctp_connect_new_asoc+0x26a/0x6a0 [ 158.082684][ T7173] ? __sctp_connect+0xd80/0xd80 [ 158.087597][ T7173] ? __local_bh_enable_ip+0x13a/0x1c0 [ 158.090830][ T5819] gud 4-1:1.0: USB-2: Failed to add properties (ret=-71) [ 158.093016][ T7173] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 158.105734][ T7173] ? security_sctp_bind_connect+0x89/0xb0 [ 158.111536][ T7173] sctp_sendmsg+0x1519/0x27b0 [ 158.116297][ T7173] ? sctp_getsockopt+0xb60/0xb60 [ 158.121308][ T7173] ? aa_sk_perm+0x7bb/0x8e0 [ 158.125910][ T7173] ? aa_af_perm+0x330/0x330 [ 158.130507][ T7173] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 158.134821][ T5819] gud 4-1:1.0: Failed to get connectors (error=-71) [ 158.136976][ T7173] ? sock_rps_record_flow+0x19/0x3f0 [ 158.149010][ T7173] ? inet_sendmsg+0xce/0x2a0 [ 158.153725][ T7173] __sys_sendto+0x4a9/0x6b0 [ 158.158325][ T7173] ? __ia32_sys_getpeername+0x90/0x90 [ 158.163771][ T7173] ? __lock_acquire+0x7eb0/0x7eb0 [ 158.168877][ T7173] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.175020][ T7173] ? lock_chain_count+0x20/0x20 [ 158.179951][ T7173] __x64_sys_sendto+0xde/0xf0 [ 158.184693][ T7173] do_syscall_64+0x55/0xb0 [ 158.189167][ T7173] ? clear_bhb_loop+0x40/0x90 [ 158.193907][ T7173] ? clear_bhb_loop+0x40/0x90 [ 158.198413][ T5819] gud: probe of 4-1:1.0 failed with error -71 [ 158.198653][ T7173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.210779][ T7173] RIP: 0033:0x7efe907a94d9 [ 158.215267][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.227185][ T7170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.234912][ T7173] RSP: 002b:00007efe91683028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 158.234943][ T7173] RAX: ffffffffffffffda RBX: 00007efe90a25fa0 RCX: 00007efe907a94d9 [ 158.234959][ T7173] RDX: 0000000000000001 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 158.234975][ T7173] RBP: 00007efe9083804e R08: 0000200000000e00 R09: 000000000000001c [ 158.234989][ T7173] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 158.235002][ T7173] R13: 00007efe90a26038 R14: 00007efe90a25fa0 R15: 00007ffdd3f3e938 [ 158.235037][ T7173] [ 158.331486][ T5773] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 158.342739][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.352709][ T5773] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.358920][ T5819] usb 4-1: USB disconnect, device number 8 [ 158.363228][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.398400][ T5773] usb 5-1: Product: syz [ 158.402881][ T5773] usb 5-1: Manufacturer: syz [ 158.424770][ T7174] bond1: (slave gretap1): making interface the new active one [ 158.436065][ T5773] usb 5-1: SerialNumber: syz [ 158.460770][ T5773] usb 5-1: config 0 descriptor?? [ 158.481674][ T7174] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 158.504312][ T5773] usb 5-1: selecting invalid altsetting 0 [ 158.644031][ T7177] EXT4-fs error: 586 callbacks suppressed [ 158.644049][ T7177] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.325: Invalid inode table block 0 in block_group 0 [ 158.666481][ T7125] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.303: Invalid inode table block 0 in block_group 0 [ 158.694807][ T7177] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 158.704788][ T7125] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 158.723488][ T7177] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.325: mark_inode_dirty error [ 158.735705][ T7125] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2034: comm syz.3.303: mark_inode_dirty error [ 158.752960][ T7157] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.315: Invalid inode table block 0 in block_group 0 [ 158.767133][ T7177] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.325: Invalid inode table block 0 in block_group 0 [ 158.784391][ T7125] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.303: Invalid inode table block 0 in block_group 0 [ 158.809156][ T7177] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 158.831875][ T7178] FAULT_INJECTION: forcing a failure. [ 158.831875][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 158.851228][ T7178] CPU: 1 PID: 7178 Comm: syz.0.325 Not tainted syzkaller #0 [ 158.858606][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 158.868720][ T7178] Call Trace: [ 158.872051][ T7178] [ 158.875039][ T7178] dump_stack_lvl+0x18c/0x250 [ 158.879816][ T7178] ? show_regs_print_info+0x20/0x20 [ 158.885071][ T7178] ? load_image+0x420/0x420 [ 158.889634][ T7178] ? __lock_acquire+0x7eb0/0x7eb0 [ 158.894716][ T7178] ? number+0xc9d/0xf00 [ 158.898939][ T7178] should_fail_ex+0x394/0x4c0 [ 158.903812][ T7178] should_failslab+0x9/0x20 [ 158.908378][ T7178] slab_pre_alloc_hook+0x59/0x300 [ 158.913515][ T7178] ? kobject_set_name_vargs+0x61/0x110 [ 158.919054][ T7178] ? kobject_set_name_vargs+0x61/0x110 [ 158.924592][ T7178] __kmem_cache_alloc_node+0x53/0x260 [ 158.930040][ T7178] ? kobject_set_name_vargs+0x61/0x110 [ 158.935577][ T7178] __kmalloc_node_track_caller+0xa4/0x230 [ 158.941384][ T7178] kvasprintf+0xec/0x1a0 [ 158.945713][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 158.951010][ T7178] ? bust_spinlocks+0xd0/0xd0 [ 158.955766][ T7178] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 158.961761][ T7178] ? kvasprintf_const+0xe1/0x240 [ 158.966800][ T7178] kobject_set_name_vargs+0x61/0x110 [ 158.972179][ T7178] kobject_init_and_add+0xef/0x1a0 [ 158.977383][ T7178] ? register_netdevice+0x12aa/0x1ba0 [ 158.982835][ T7178] ? ppp_dev_configure+0x850/0xad0 [ 158.988030][ T7178] ? ppp_ioctl+0xafb/0x1bc0 [ 158.992604][ T7178] ? __se_sys_ioctl+0xfd/0x170 [ 158.997501][ T7178] ? kobject_add+0x240/0x240 [ 159.002193][ T7178] ? dev_uevent_filter+0x43/0xb0 [ 159.007205][ T7178] ? kobject_uevent_env+0x2ed/0x890 [ 159.012508][ T7178] net_rx_queue_update_kobjects+0x1e0/0x590 [ 159.018495][ T7178] netdev_register_kobject+0x235/0x320 [ 159.024039][ T7178] register_netdevice+0x12aa/0x1ba0 [ 159.029320][ T7178] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 159.035027][ T7178] ? netif_stacked_transfer_operstate+0x210/0x210 [ 159.041523][ T7178] ? mutex_unlock+0x10/0x10 [ 159.046095][ T7178] ? vscnprintf+0x80/0x80 [ 159.050503][ T7178] ? net_generic+0x1e/0x240 [ 159.055077][ T7178] ? radix_tree_lookup+0x267/0x280 [ 159.060268][ T7178] ppp_dev_configure+0x850/0xad0 [ 159.065328][ T7178] ppp_ioctl+0xafb/0x1bc0 [ 159.069741][ T7178] ? ppp_poll+0x250/0x250 [ 159.074139][ T7178] ? __fget_files+0x28/0x460 [ 159.078813][ T7178] ? bpf_lsm_file_ioctl+0x9/0x10 [ 159.083822][ T7178] ? security_file_ioctl+0x80/0xa0 [ 159.089008][ T7178] ? ppp_poll+0x250/0x250 [ 159.093417][ T7178] __se_sys_ioctl+0xfd/0x170 [ 159.098083][ T7178] do_syscall_64+0x55/0xb0 [ 159.102568][ T7178] ? clear_bhb_loop+0x40/0x90 [ 159.107409][ T7178] ? clear_bhb_loop+0x40/0x90 [ 159.112167][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.118137][ T7178] RIP: 0033:0x7f231dba94d9 [ 159.122611][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.142299][ T7178] RSP: 002b:00007f231eac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.150818][ T7178] RAX: ffffffffffffffda RBX: 00007f231de25fa0 RCX: 00007f231dba94d9 [ 159.158857][ T7178] RDX: 0000200000000300 RSI: 00000000c004743e RDI: 0000000000000005 [ 159.166984][ T7178] RBP: 00007f231dc3804e R08: 0000000000000000 R09: 0000000000000000 [ 159.175014][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.183044][ T7178] R13: 00007f231de26038 R14: 00007f231de25fa0 R15: 00007fff45733b18 [ 159.191102][ T7178] [ 159.230698][ T5773] usb 5-1: USB disconnect, device number 3 [ 159.301223][ T7178] kobject: can not set name properly! [ 159.535151][ T7188] loop2: detected capacity change from 0 to 164 [ 159.625698][ T7188] ISOFS: unable to read i-node block [ 159.643141][ T7188] isofs_fill_super: get root inode failed [ 160.064607][ T7201] xt_hashlimit: size too large, truncated to 1048576 [ 161.245826][ T7205] loop0: detected capacity change from 0 to 32768 [ 161.303357][ T7205] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 161.331142][ T7205] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.406576][ T7205] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 161.478379][ T7205] XFS (loop0): Tail block (0x10) overwrite detected. Updated to 0x30 [ 161.541052][ T7205] XFS (loop0): Ending clean mount [ 161.558345][ T7205] XFS (loop0): Quotacheck needed: Please wait. [ 161.688398][ T7205] XFS (loop0): Quotacheck: Done. [ 161.696013][ T7207] loop3: detected capacity change from 0 to 40427 [ 161.727270][ T7211] loop2: detected capacity change from 0 to 32768 [ 161.749392][ T7207] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 161.790975][ T7207] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 161.810330][ T7211] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.335 (7211) [ 161.830327][ T7207] F2FS-fs (loop3): invalid crc value [ 161.867811][ T7207] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.910288][ T7211] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 161.933961][ T7211] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 161.958860][ T7211] BTRFS info (device loop2): use zlib compression, level 3 [ 161.976456][ T7211] BTRFS info (device loop2): using free space tree [ 162.016657][ T7207] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 162.075035][ T7207] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.158304][ T7211] BTRFS info (device loop2): enabling ssd optimizations [ 162.195934][ T7211] BTRFS info (device loop2): auto enabling async discard [ 162.231602][ T5783] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.255263][ T7239] udevd[7239]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 162.494016][ T7240] udevd[7240]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 162.752954][ T5787] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 163.176022][ T7243] bridge0: port 3(veth0_vlan) entered blocking state [ 163.208127][ T7243] bridge0: port 3(veth0_vlan) entered disabled state [ 163.215427][ T7243] veth0_vlan: entered allmulticast mode [ 163.237452][ T7245] loop2: detected capacity change from 0 to 33280 [ 163.261182][ T7245] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 163.274421][ T7243] veth0_vlan: left allmulticast mode [ 163.361503][ T7245] EXT4-fs (loop2): 1 truncate cleaned up [ 163.424491][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.535131][ T27] audit: type=1800 audit(1700000028.200:10): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.337" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 163.892088][ T5771] EXT4-fs error: 296 callbacks suppressed [ 163.892109][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 163.938080][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 163.951264][ T7252] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.336: Invalid inode table block 0 in block_group 0 [ 163.975467][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 163.984646][ T7252] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 163.997454][ T7252] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.336: mark_inode_dirty error [ 164.045657][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.063876][ T7252] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.336: Invalid inode table block 0 in block_group 0 [ 164.087378][ T7252] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 164.114707][ T7252] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.336: mark_inode_dirty error [ 164.177817][ T7252] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.336: Invalid inode table block 0 in block_group 0 [ 164.626085][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1500 with max blocks 3 with error 117 [ 164.641587][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 164.641587][ T12] [ 164.653498][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1019 with max blocks 4 with error 117 [ 164.666661][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 164.666661][ T12] [ 164.679655][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1490 with max blocks 22 with error 117 [ 164.712658][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 164.712658][ T12] [ 164.854653][ T7271] loop2: detected capacity change from 0 to 33792 [ 164.872004][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 7 with max blocks 3 with error 117 [ 164.907994][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 164.907994][ T12] [ 164.923737][ T7271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.931193][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 5 with max blocks 1 with error 117 [ 164.978013][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 164.978013][ T12] [ 165.020699][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.213136][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.454297][ T7286] FAULT_INJECTION: forcing a failure. [ 165.454297][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 165.472834][ T7286] CPU: 1 PID: 7286 Comm: syz.4.349 Not tainted syzkaller #0 [ 165.480398][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 165.490690][ T7286] Call Trace: [ 165.494064][ T7286] [ 165.497037][ T7286] dump_stack_lvl+0x18c/0x250 [ 165.501783][ T7286] ? show_regs_print_info+0x20/0x20 [ 165.507053][ T7286] ? load_image+0x420/0x420 [ 165.511626][ T7286] ? __might_sleep+0xe0/0xe0 [ 165.516310][ T7286] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.521424][ T7286] should_fail_ex+0x394/0x4c0 [ 165.526178][ T7286] should_failslab+0x9/0x20 [ 165.530827][ T7286] slab_pre_alloc_hook+0x59/0x300 [ 165.535902][ T7286] ? __might_sleep+0xe0/0xe0 [ 165.540549][ T7286] ? load_msg+0xc4/0x380 [ 165.544841][ T7286] ? load_msg+0xc4/0x380 [ 165.549141][ T7286] __kmem_cache_alloc_node+0x53/0x260 [ 165.554572][ T7286] ? load_msg+0xc4/0x380 [ 165.558864][ T7286] __kmalloc+0xa7/0x240 [ 165.563083][ T7286] load_msg+0xc4/0x380 [ 165.567211][ T7286] do_msgsnd+0x1a8/0x1300 [ 165.571615][ T7286] ? __might_fault+0xaa/0x120 [ 165.576361][ T7286] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.581450][ T7286] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 165.587537][ T7286] ? ksys_msgsnd+0xa0/0xa0 [ 165.592027][ T7286] ? __might_fault+0xc6/0x120 [ 165.596769][ T7286] ? __might_fault+0xaa/0x120 [ 165.601512][ T7286] ? __x64_sys_msgsnd+0xe9/0x110 [ 165.606515][ T7286] do_syscall_64+0x55/0xb0 [ 165.611001][ T7286] ? clear_bhb_loop+0x40/0x90 [ 165.615750][ T7286] ? clear_bhb_loop+0x40/0x90 [ 165.620504][ T7286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.626474][ T7286] RIP: 0033:0x7ff804ba94d9 [ 165.630951][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.650623][ T7286] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 165.659103][ T7286] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 165.667142][ T7286] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000000 [ 165.675267][ T7286] RBP: 00007ff804c3804e R08: 0000000000000000 R09: 0000000000000000 [ 165.683321][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.691363][ T7286] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 165.699424][ T7286] [ 166.217715][ T7290] loop3: detected capacity change from 0 to 40427 [ 166.230443][ T7290] F2FS-fs (loop3): invalid crc value [ 166.240053][ T7290] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.317336][ T7290] F2FS-fs (loop3): Start checkpoint disabled! [ 166.345270][ T7290] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 166.717785][ T12] kworker/u4:1: attempt to access beyond end of device [ 166.717785][ T12] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.737267][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 166.771880][ T7310] loop4: detected capacity change from 0 to 33792 [ 166.789055][ T7310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.814678][ T7310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.929580][ T7253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.185857][ T7315] netlink: 68 bytes leftover after parsing attributes in process `syz.2.359'. [ 167.575024][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 167.684279][ T6358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.880009][ T7317] loop0: detected capacity change from 0 to 32768 [ 167.927417][ T7317] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.360 (7317) [ 167.987989][ T7317] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.009368][ T7317] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 168.038101][ T7317] BTRFS info (device loop0): use zlib compression, level 3 [ 168.052532][ T7317] BTRFS info (device loop0): using free space tree [ 168.206664][ T7347] udevd[7347]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 168.208260][ T7317] BTRFS info (device loop0): enabling ssd optimizations [ 168.258104][ T7317] BTRFS info (device loop0): auto enabling async discard [ 168.507547][ T7331] loop4: detected capacity change from 0 to 32768 [ 168.569621][ T7331] JBD2: Ignoring recovery information on journal [ 168.672985][ T7331] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.698637][ T7329] loop3: detected capacity change from 0 to 32768 [ 168.792811][ T7329] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 168.804760][ T5783] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.819361][ T7329] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.904977][ T5771] EXT4-fs error: 602 callbacks suppressed [ 168.904995][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 168.983622][ T7329] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 168.995948][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 169.044883][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 169.071127][ T7329] XFS (loop3): Tail block (0x10) overwrite detected. Updated to 0x30 [ 169.081752][ T7330] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.364: Invalid inode table block 0 in block_group 0 [ 169.094943][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 169.148267][ T7330] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 169.164104][ T7330] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2030: comm syz.4.364: mark_inode_dirty error [ 169.192328][ T7329] XFS (loop3): Ending clean mount [ 169.198278][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 169.207642][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 169.220809][ T7330] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.364: Invalid inode table block 0 in block_group 0 [ 169.246252][ T7329] XFS (loop3): Quotacheck needed: Please wait. [ 169.347922][ T7329] XFS (loop3): Quotacheck: Done. [ 169.544211][ T7368] tipc: Started in network mode [ 169.569044][ T6358] ocfs2: Unmounting device (7,4) on (node local) [ 169.572112][ T7368] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 169.599933][ T7368] tipc: Enabled bearer , priority 0 [ 169.840047][ T5791] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.868895][ T7375] loop0: detected capacity change from 0 to 33280 [ 169.910471][ T7375] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #15: comm syz.0.373: corrupted inode contents [ 169.972304][ T7375] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 170.019290][ T7375] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #15: comm syz.0.373: corrupted inode contents [ 170.070993][ T7375] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.373: mark_inode_dirty error [ 170.102874][ T7375] EXT4-fs (loop0): 1 orphan inode deleted [ 170.124117][ T7375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.242698][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.463873][ T7388] FAULT_INJECTION: forcing a failure. [ 170.463873][ T7388] name failslab, interval 1, probability 0, space 0, times 0 [ 170.478403][ T7388] CPU: 0 PID: 7388 Comm: syz.0.378 Not tainted syzkaller #0 [ 170.485781][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.495987][ T7388] Call Trace: [ 170.499320][ T7388] [ 170.502302][ T7388] dump_stack_lvl+0x18c/0x250 [ 170.507045][ T7388] ? show_regs_print_info+0x20/0x20 [ 170.512315][ T7388] ? load_image+0x420/0x420 [ 170.517014][ T7388] ? __lock_acquire+0x7eb0/0x7eb0 [ 170.522115][ T7388] should_fail_ex+0x394/0x4c0 [ 170.526868][ T7388] should_failslab+0x9/0x20 [ 170.528625][ T7379] loop2: detected capacity change from 0 to 32768 [ 170.531416][ T7388] slab_pre_alloc_hook+0x59/0x300 [ 170.543061][ T7388] ? io_alloc_page_table+0x30/0xe0 [ 170.548246][ T7388] ? io_alloc_page_table+0x30/0xe0 [ 170.553433][ T7388] __kmem_cache_alloc_node+0x53/0x260 [ 170.558913][ T7388] ? io_alloc_page_table+0x30/0xe0 [ 170.564126][ T7388] __kmalloc+0xa7/0x240 [ 170.568351][ T7388] io_alloc_page_table+0x30/0xe0 [ 170.573357][ T7388] io_rsrc_data_alloc+0x91/0x280 [ 170.578459][ T7388] io_sqe_buffers_register+0x173/0x520 [ 170.584084][ T7388] ? __might_fault+0xaa/0x120 [ 170.588833][ T7388] ? io_sqe_files_register+0x5e0/0x5e0 [ 170.594381][ T7388] ? __might_fault+0xaa/0x120 [ 170.599118][ T7388] ? __might_fault+0xc6/0x120 [ 170.603858][ T7388] ? __might_fault+0xaa/0x120 [ 170.608661][ T7388] io_register_rsrc+0x247/0x280 [ 170.613576][ T7388] ? mutex_lock_nested+0x20/0x20 [ 170.618582][ T7388] ? io_pollfree_wake+0x1f0/0x1f0 [ 170.623691][ T7388] ? __fget_files+0x3fc/0x460 [ 170.628453][ T7388] __se_sys_io_uring_register+0x791/0xc40 [ 170.634269][ T7388] do_syscall_64+0x55/0xb0 [ 170.638772][ T7388] ? clear_bhb_loop+0x40/0x90 [ 170.643524][ T7388] ? clear_bhb_loop+0x40/0x90 [ 170.648329][ T7388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.654303][ T7388] RIP: 0033:0x7f231dba94d9 [ 170.658791][ T7388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.678660][ T7388] RSP: 002b:00007f231eac2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 170.687170][ T7388] RAX: ffffffffffffffda RBX: 00007f231de25fa0 RCX: 00007f231dba94d9 [ 170.695301][ T7388] RDX: 0000200000000280 RSI: 000000000000000f RDI: 0000000000000003 [ 170.703353][ T7388] RBP: 00007f231dc3804e R08: 0000000000000000 R09: 0000000000000000 [ 170.711432][ T7388] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 170.719460][ T7388] R13: 00007f231de26038 R14: 00007f231de25fa0 R15: 00007fff45733b18 [ 170.727518][ T7388] [ 170.744728][ T5819] tipc: Node number set to 43690 [ 170.766486][ T7379] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 170.900646][ T7379] XFS (loop2): Ending clean mount [ 171.277795][ T5787] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 171.686860][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 171.747784][ T7402] loop0: detected capacity change from 0 to 32768 [ 171.757059][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 171.817350][ T7402] JBD2: Ignoring recovery information on journal [ 171.818398][ T5819] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 171.898582][ T7402] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 172.053898][ T5819] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 172.083832][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.106471][ T5819] usb 5-1: Product: syz [ 172.118120][ T5819] usb 5-1: Manufacturer: syz [ 172.123026][ T5819] usb 5-1: SerialNumber: syz [ 172.141344][ T7412] loop2: detected capacity change from 0 to 8192 [ 172.162090][ T5819] usb 5-1: config 0 descriptor?? [ 172.207224][ T7412] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.230177][ T7404] loop3: detected capacity change from 0 to 40427 [ 172.260306][ T7412] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 172.270615][ T7404] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 172.279413][ T7412] REISERFS (device loop2): using ordered data mode [ 172.287047][ T7404] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 172.295048][ T7412] reiserfs: using flush barriers [ 172.314206][ T7412] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.340724][ T7412] REISERFS (device loop2): checking transaction log (loop2) [ 172.349310][ T7404] F2FS-fs (loop3): invalid crc value [ 172.381225][ T7404] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.391319][ T7412] REISERFS (device loop2): Using r5 hash to sort names [ 172.433502][ T7412] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 172.465488][ T5819] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 004 [ 172.523139][ T7404] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 172.608803][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 172.626445][ T7404] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.782319][ T7404] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 172.829929][ T27] audit: type=1800 audit(1700000037.500:11): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.375" name="file2" dev="loop3" ino=13 res=0 errno=0 [ 172.891766][ T7404] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030 [ 172.935204][ T7404] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 173.031731][ T5791] syz-executor: attempt to access beyond end of device [ 173.031731][ T5791] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 173.071120][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.080487][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.483698][ T7431] FAULT_INJECTION: forcing a failure. [ 173.483698][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 173.497538][ T7431] CPU: 0 PID: 7431 Comm: syz.2.388 Not tainted syzkaller #0 [ 173.504940][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 173.515058][ T7431] Call Trace: [ 173.518394][ T7431] [ 173.521379][ T7431] dump_stack_lvl+0x18c/0x250 [ 173.526133][ T7431] ? show_regs_print_info+0x20/0x20 [ 173.531407][ T7431] ? load_image+0x420/0x420 [ 173.535978][ T7431] ? __might_sleep+0xe0/0xe0 [ 173.540641][ T7431] ? __lock_acquire+0x7eb0/0x7eb0 [ 173.545748][ T7431] should_fail_ex+0x394/0x4c0 [ 173.550497][ T7431] should_failslab+0x9/0x20 [ 173.555058][ T7431] slab_pre_alloc_hook+0x59/0x300 [ 173.560147][ T7431] kmem_cache_alloc+0x5a/0x2d0 [ 173.564975][ T7431] ? security_inode_alloc+0x34/0x110 [ 173.570332][ T7431] security_inode_alloc+0x34/0x110 [ 173.575513][ T7431] inode_init_always+0x914/0xc90 [ 173.580558][ T7431] new_inode_pseudo+0x95/0x1d0 [ 173.585511][ T7431] new_inode+0x22/0x1d0 [ 173.589775][ T7431] shmem_get_inode+0x34d/0xcd0 [ 173.594631][ T7431] shmem_symlink+0xa3/0x470 [ 173.599203][ T7431] ? inode_permission+0xf3/0x480 [ 173.604196][ T7431] ? bpf_lsm_inode_symlink+0x9/0x10 [ 173.609463][ T7431] vfs_symlink+0x138/0x2b0 [ 173.613945][ T7431] do_symlinkat+0x1ba/0x400 [ 173.618522][ T7431] ? vfs_symlink+0x2b0/0x2b0 [ 173.623273][ T7431] ? getname_flags+0x20a/0x500 [ 173.628105][ T7431] __x64_sys_symlink+0x7e/0x90 [ 173.632930][ T7431] do_syscall_64+0x55/0xb0 [ 173.637420][ T7431] ? clear_bhb_loop+0x40/0x90 [ 173.642159][ T7431] ? clear_bhb_loop+0x40/0x90 [ 173.646903][ T7431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.652863][ T7431] RIP: 0033:0x7efe907a94d9 [ 173.657337][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.677095][ T7431] RSP: 002b:00007efe91683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 173.685666][ T7431] RAX: ffffffffffffffda RBX: 00007efe90a25fa0 RCX: 00007efe907a94d9 [ 173.693739][ T7431] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000200000000680 [ 173.701774][ T7431] RBP: 00007efe9083804e R08: 0000000000000000 R09: 0000000000000000 [ 173.709808][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.717835][ T7431] R13: 00007efe90a26038 R14: 00007efe90a25fa0 R15: 00007ffdd3f3e938 [ 173.725976][ T7431] [ 173.759313][ T5819] usb 5-1: USB disconnect, device number 4 [ 173.909895][ T7433] EXT4-fs error: 389 callbacks suppressed [ 173.909914][ T7433] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.389: Invalid inode table block 0 in block_group 0 [ 173.929022][ T7433] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 173.938974][ T7433] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2032: comm syz.2.389: mark_inode_dirty error [ 173.960562][ T7433] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.389: Invalid inode table block 0 in block_group 0 [ 173.974065][ T7433] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 173.983923][ T7433] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2032: comm syz.2.389: mark_inode_dirty error [ 173.997210][ T7433] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.389: Invalid inode table block 0 in block_group 0 [ 174.010045][ T7433] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 174.020324][ T7433] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2032: comm syz.2.389: mark_inode_dirty error [ 174.032502][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 174.059978][ T7405] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.382: Invalid inode table block 0 in block_group 0 [ 174.168233][ T28] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 174.333693][ T7439] kvm: MWAIT instruction emulated as NOP! [ 174.350067][ T28] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 174.361691][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.372596][ T28] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.382537][ T28] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.391364][ T28] usb 4-1: Product: syz [ 174.395821][ T28] usb 4-1: Manufacturer: syz [ 174.410433][ T28] usb 4-1: SerialNumber: syz [ 174.434569][ T28] usb 4-1: config 0 descriptor?? [ 174.454958][ T28] usb 4-1: selecting invalid altsetting 0 [ 174.644230][ T7443] FAULT_INJECTION: forcing a failure. [ 174.644230][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 174.658042][ T7443] CPU: 1 PID: 7443 Comm: syz.4.392 Not tainted syzkaller #0 [ 174.665402][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 174.675505][ T7443] Call Trace: [ 174.678817][ T7443] [ 174.681804][ T7443] dump_stack_lvl+0x18c/0x250 [ 174.686543][ T7443] ? show_regs_print_info+0x20/0x20 [ 174.691773][ T7443] ? load_image+0x420/0x420 [ 174.696304][ T7443] ? __lock_acquire+0x7eb0/0x7eb0 [ 174.701359][ T7443] should_fail_ex+0x394/0x4c0 [ 174.706070][ T7443] should_failslab+0x9/0x20 [ 174.710592][ T7443] slab_pre_alloc_hook+0x59/0x300 [ 174.715639][ T7443] ? __vmalloc_node_range+0x598/0x1320 [ 174.721173][ T7443] ? __vmalloc_node_range+0x598/0x1320 [ 174.726702][ T7443] __kmem_cache_alloc_node+0x53/0x260 [ 174.732123][ T7443] ? __vmalloc_node_range+0x598/0x1320 [ 174.737614][ T7443] __kmalloc_node+0xa6/0x240 [ 174.742239][ T7443] __vmalloc_node_range+0x598/0x1320 [ 174.747554][ T7443] ? __stack_depot_save+0x1f/0x660 [ 174.752723][ T7443] ? do_syscall_64+0x55/0xb0 [ 174.757520][ T7443] ? free_vm_area+0x50/0x50 [ 174.762099][ T7443] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 174.767677][ T7443] __vmalloc+0x7a/0x90 [ 174.771806][ T7443] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 174.777434][ T7443] bpf_prog_alloc_no_stats+0x46/0x460 [ 174.782884][ T7443] bpf_prog_alloc+0x3d/0x1a0 [ 174.787542][ T7443] ? bpf_prog_create_from_user+0x31/0x420 [ 174.793332][ T7443] bpf_prog_create_from_user+0xa6/0x420 [ 174.798932][ T7443] ? seccomp_notify_detach+0x220/0x220 [ 174.804447][ T7443] do_seccomp+0x794/0xdc0 [ 174.808827][ T7443] ? prctl_set_seccomp+0x60/0x60 [ 174.813829][ T7443] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 174.819857][ T7443] ? lockdep_hardirqs_on+0x98/0x150 [ 174.825093][ T7443] do_syscall_64+0x55/0xb0 [ 174.829552][ T7443] ? clear_bhb_loop+0x40/0x90 [ 174.834276][ T7443] ? clear_bhb_loop+0x40/0x90 [ 174.839000][ T7443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.844957][ T7443] RIP: 0033:0x7ff804ba94d9 [ 174.849411][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.869095][ T7443] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 174.877575][ T7443] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 174.885580][ T7443] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 174.893613][ T7443] RBP: 00007ff804c3804e R08: 0000000000000000 R09: 0000000000000000 [ 174.901635][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.909636][ T7443] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 174.917980][ T7443] [ 174.964121][ T7443] syz.4.392: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 174.986053][ T7443] CPU: 1 PID: 7443 Comm: syz.4.392 Not tainted syzkaller #0 [ 174.993446][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 175.003736][ T7443] Call Trace: [ 175.007123][ T7443] [ 175.010134][ T7443] dump_stack_lvl+0x18c/0x250 [ 175.014881][ T7443] ? show_regs_print_info+0x20/0x20 [ 175.020142][ T7443] ? load_image+0x420/0x420 [ 175.024708][ T7443] ? __rcu_read_unlock+0x7c/0xd0 [ 175.029702][ T7443] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.036188][ T7443] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 175.042757][ T7443] warn_alloc+0x246/0x340 [ 175.047148][ T7443] ? zone_watermark_ok_safe+0x230/0x230 [ 175.052757][ T7443] ? __vmalloc_node_range+0x598/0x1320 [ 175.058285][ T7443] ? __vmalloc_node_range+0x598/0x1320 [ 175.063813][ T7443] ? rcu_is_watching+0x15/0xb0 [ 175.068661][ T7443] ? __vmalloc_node_range+0x598/0x1320 [ 175.074173][ T7443] ? __kmalloc_node+0xe4/0x240 [ 175.078992][ T7443] __vmalloc_node_range+0x661/0x1320 [ 175.084324][ T7443] ? __stack_depot_save+0x1f/0x660 [ 175.089492][ T7443] ? free_vm_area+0x50/0x50 [ 175.094041][ T7443] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 175.099644][ T7443] __vmalloc+0x7a/0x90 [ 175.103757][ T7443] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 175.109339][ T7443] bpf_prog_alloc_no_stats+0x46/0x460 [ 175.114769][ T7443] bpf_prog_alloc+0x3d/0x1a0 [ 175.119393][ T7443] ? bpf_prog_create_from_user+0x31/0x420 [ 175.125149][ T7443] bpf_prog_create_from_user+0xa6/0x420 [ 175.130730][ T7443] ? seccomp_notify_detach+0x220/0x220 [ 175.136227][ T7443] do_seccomp+0x794/0xdc0 [ 175.140610][ T7443] ? prctl_set_seccomp+0x60/0x60 [ 175.145586][ T7443] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 175.151613][ T7443] ? lockdep_hardirqs_on+0x98/0x150 [ 175.156841][ T7443] do_syscall_64+0x55/0xb0 [ 175.161294][ T7443] ? clear_bhb_loop+0x40/0x90 [ 175.166012][ T7443] ? clear_bhb_loop+0x40/0x90 [ 175.170732][ T7443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.176662][ T7443] RIP: 0033:0x7ff804ba94d9 [ 175.181105][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.200919][ T7443] RSP: 002b:00007ff8059a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 175.209374][ T7443] RAX: ffffffffffffffda RBX: 00007ff804e25fa0 RCX: 00007ff804ba94d9 [ 175.217381][ T7443] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 175.225398][ T7443] RBP: 00007ff804c3804e R08: 0000000000000000 R09: 0000000000000000 [ 175.233400][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.241401][ T7443] R13: 00007ff804e26038 R14: 00007ff804e25fa0 R15: 00007fff7755dd88 [ 175.249422][ T7443] [ 175.271818][ T9] usb 4-1: USB disconnect, device number 9 [ 175.284056][ T7443] Mem-Info: [ 175.287332][ T7443] active_anon:6757 inactive_anon:0 isolated_anon:0 [ 175.287332][ T7443] active_file:1230 inactive_file:40067 isolated_file:0 [ 175.287332][ T7443] unevictable:768 dirty:238 writeback:0 [ 175.287332][ T7443] slab_reclaimable:11170 slab_unreclaimable:94276 [ 175.287332][ T7443] mapped:24835 shmem:1384 pagetables:722 [ 175.287332][ T7443] sec_pagetables:0 bounce:0 [ 175.287332][ T7443] kernel_misc_reclaimable:0 [ 175.287332][ T7443] free:1353263 free_pcp:7876 free_cma:0 [ 175.338206][ T7443] Node 0 active_anon:27028kB inactive_anon:0kB active_file:4920kB inactive_file:160064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99340kB dirty:952kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:2888kB sec_pagetables:0kB all_unreclaimable? no [ 175.401483][ T7443] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 175.433161][ T7443] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.468374][ T7443] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 175.480912][ T7443] Node 0 DMA32 free:1497220kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:26988kB inactive_anon:0kB active_file:4920kB inactive_file:159232kB unevictable:1536kB writepending:952kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:10324kB local_pcp:624kB free_cma:0kB [ 175.514029][ T7443] lowmem_reserve[]: 0 0 0 0 0 [ 175.523362][ T7443] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.553729][ T7443] lowmem_reserve[]: 0 0 0 0 0 [ 175.560191][ T7443] Node 1 Normal free:3900472kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21020kB local_pcp:9864kB free_cma:0kB [ 175.592950][ T7443] lowmem_reserve[]: 0 0 0 0 0 [ 175.597720][ T7443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.611429][ T7443] Node 0 DMA32: 939*4kB (UME) 809*8kB (UME) 433*16kB (UME) 241*32kB (UME) 216*64kB (UME) 155*128kB (UM) 79*256kB (UM) 42*512kB (UME) 16*1024kB (UM) 12*2048kB (ME) 331*4096kB (UM) = 1496996kB [ 175.630656][ T7443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.644739][ T7443] Node 1 Normal: 210*4kB (UME) 42*8kB (UME) 38*16kB (UME) 86*32kB (UME) 10*64kB (UME) 2*128kB (UE) 1*256kB (U) 3*512kB (UM) 0*1024kB 1*2048kB (U) 950*4096kB (M) = 3900472kB [ 175.662526][ T7443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.672218][ T7443] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.681788][ T7443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.691472][ T7443] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.701102][ T7443] 42674 total pagecache pages [ 175.705844][ T7443] 0 pages in swap cache [ 175.710625][ T7443] Free swap = 124208kB [ 175.714854][ T7443] Total swap = 124996kB [ 175.719247][ T7443] 2097051 pages RAM [ 175.723266][ T7443] 0 pages HighMem/MovableOnly [ 175.728038][ T7443] 421729 pages reserved [ 175.732380][ T7443] 0 pages cma reserved [ 175.937624][ T7450] loop2: detected capacity change from 0 to 34816 [ 176.045423][ T7450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.058282][ T7450] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.072730][ T7454] FAULT_INJECTION: forcing a failure. [ 176.072730][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 176.122835][ T7454] CPU: 1 PID: 7454 Comm: syz.3.396 Not tainted syzkaller #0 [ 176.130233][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 176.140349][ T7454] Call Trace: [ 176.143680][ T7454] [ 176.146664][ T7454] dump_stack_lvl+0x18c/0x250 [ 176.151453][ T7454] ? show_regs_print_info+0x20/0x20 [ 176.156718][ T7454] ? load_image+0x420/0x420 [ 176.161303][ T7454] ? __lock_acquire+0x7eb0/0x7eb0 [ 176.166445][ T7454] should_fail_ex+0x394/0x4c0 [ 176.171195][ T7454] should_failslab+0x9/0x20 [ 176.175755][ T7454] slab_pre_alloc_hook+0x59/0x300 [ 176.180888][ T7454] ? io_alloc_page_table+0x30/0xe0 [ 176.186063][ T7454] ? io_alloc_page_table+0x30/0xe0 [ 176.191228][ T7454] __kmem_cache_alloc_node+0x53/0x260 [ 176.196842][ T7454] ? io_alloc_page_table+0x30/0xe0 [ 176.202450][ T7454] __kmalloc+0xa7/0x240 [ 176.206685][ T7454] io_alloc_page_table+0x30/0xe0 [ 176.211731][ T7454] io_rsrc_data_alloc+0x91/0x280 [ 176.216741][ T7454] io_sqe_buffers_register+0x173/0x520 [ 176.222279][ T7454] ? __might_fault+0xaa/0x120 [ 176.227207][ T7454] ? io_sqe_files_register+0x5e0/0x5e0 [ 176.232738][ T7454] ? __might_fault+0xaa/0x120 [ 176.237494][ T7454] ? __might_fault+0xc6/0x120 [ 176.242233][ T7454] ? __might_fault+0xaa/0x120 [ 176.246984][ T7454] io_register_rsrc+0x247/0x280 [ 176.251917][ T7454] ? mutex_lock_nested+0x20/0x20 [ 176.256913][ T7454] ? io_pollfree_wake+0x1f0/0x1f0 [ 176.262024][ T7454] ? __fget_files+0x3fc/0x460 [ 176.266845][ T7454] __se_sys_io_uring_register+0x791/0xc40 [ 176.272666][ T7454] do_syscall_64+0x55/0xb0 [ 176.277152][ T7454] ? clear_bhb_loop+0x40/0x90 [ 176.281905][ T7454] ? clear_bhb_loop+0x40/0x90 [ 176.286663][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.292629][ T7454] RIP: 0033:0x7fc8f71a94d9 [ 176.297114][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.316809][ T7454] RSP: 002b:00007fc8f8027028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 176.325307][ T7454] RAX: ffffffffffffffda RBX: 00007fc8f7425fa0 RCX: 00007fc8f71a94d9 [ 176.333342][ T7454] RDX: 0000200000000280 RSI: 000000000000000f RDI: 0000000000000003 [ 176.341401][ T7454] RBP: 00007fc8f723804e R08: 0000000000000000 R09: 0000000000000000 [ 176.349436][ T7454] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 176.357506][ T7454] R13: 00007fc8f7426038 R14: 00007fc8f7425fa0 R15: 00007fff40e85fb8 [ 176.365563][ T7454] [ 176.448965][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.679776][ T7448] loop4: detected capacity change from 0 to 32768 [ 176.695179][ T7448] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.393 (7448) [ 176.729973][ T7448] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 176.763065][ T7448] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 176.786756][ T7448] BTRFS info (device loop4): use zlib compression, level 3 [ 176.806276][ T7448] BTRFS info (device loop4): using free space tree [ 176.922581][ T7448] BTRFS info (device loop4): enabling ssd optimizations [ 176.938509][ T7448] BTRFS info (device loop4): auto enabling async discard [ 176.951325][ T7481] udevd[7481]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 177.045324][ T7483] loop0: detected capacity change from 0 to 64 [ 177.202934][ T7486] udevd[7486]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 177.495283][ T6358] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 177.579463][ T7491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 177.617113][ T7491] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 178.214324][ T7497] loop3: detected capacity change from 0 to 40427 [ 178.241396][ T7497] F2FS-fs (loop3): invalid crc value [ 178.257439][ T7497] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.271719][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 178.336005][ T7497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.467103][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.498012][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 178.507038][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.518416][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 178.529364][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 178.538958][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.559689][ T7499] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.571434][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 178.588030][ T9] hub: probe of 5-1:1.0 failed with error -5 [ 178.594730][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 178.610242][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 178.634084][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 178.658258][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 178.771732][ T7507] FAULT_INJECTION: forcing a failure. [ 178.771732][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 178.808093][ T7507] CPU: 1 PID: 7507 Comm: syz.0.415 Not tainted syzkaller #0 [ 178.815604][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 178.825722][ T7507] Call Trace: [ 178.829050][ T7507] [ 178.832037][ T7507] dump_stack_lvl+0x18c/0x250 [ 178.836798][ T7507] ? show_regs_print_info+0x20/0x20 [ 178.842056][ T7507] ? load_image+0x420/0x420 [ 178.846629][ T7507] ? __might_sleep+0xe0/0xe0 [ 178.851277][ T7507] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.856359][ T7507] should_fail_ex+0x394/0x4c0 [ 178.861219][ T7507] should_failslab+0x9/0x20 [ 178.865820][ T7507] slab_pre_alloc_hook+0x59/0x300 [ 178.870919][ T7507] kmem_cache_alloc+0x5a/0x2d0 [ 178.875756][ T7507] ? __kernfs_new_node+0xe5/0x7f0 [ 178.880892][ T7507] __kernfs_new_node+0xe5/0x7f0 [ 178.885824][ T7507] ? idr_get_free+0x8a4/0xa10 [ 178.890588][ T7507] ? kernfs_new_node+0x260/0x260 [ 178.895604][ T7507] ? node_tag_clear+0x1ec/0x310 [ 178.900555][ T7507] kernfs_new_node+0x14c/0x260 [ 178.905390][ T7507] __kernfs_create_file+0x4b/0x2e0 [ 178.910596][ T7507] sysfs_add_file_mode_ns+0x237/0x2f0 [ 178.916129][ T7507] internal_create_group+0x431/0xd10 [ 178.921558][ T7507] ? kernfs_add_one+0x149/0x6b0 [ 178.926483][ T7507] ? sysfs_create_group+0x20/0x20 [ 178.931955][ T7507] ? up_write+0x1be/0x410 [ 178.936364][ T7507] sysfs_create_groups+0x59/0x120 [ 178.941444][ T7507] device_add_attrs+0xdf/0x830 [ 178.946255][ T7507] ? device_add_class_symlinks+0x240/0x240 [ 178.952106][ T7507] ? device_add_class_symlinks+0x21f/0x240 [ 178.957957][ T7507] device_add+0x51a/0xc40 [ 178.962331][ T7507] netdev_register_kobject+0x188/0x320 [ 178.967831][ T7507] register_netdevice+0x12aa/0x1ba0 [ 178.973082][ T7507] ? __kmem_cache_alloc_node+0x197/0x260 [ 178.978773][ T7507] ? netif_stacked_transfer_operstate+0x210/0x210 [ 178.985223][ T7507] ? mutex_lock_nested+0x20/0x20 [ 178.990224][ T7507] ? alloc_netdev_mqs+0xbee/0x1090 [ 178.995390][ T7507] ? alloc_netdev_mqs+0xce4/0x1090 [ 179.000570][ T7507] register_netdev+0x3b/0x50 [ 179.005204][ T7507] gprs_attach+0x185/0x520 [ 179.009662][ T7507] pep_setsockopt+0x329/0x4a0 [ 179.014405][ T7507] ? pep_init+0x330/0x330 [ 179.018775][ T7507] ? __fget_files+0x28/0x460 [ 179.023538][ T7507] ? aa_sock_opt_perm+0x74/0x100 [ 179.028528][ T7507] ? sock_common_setsockopt+0x36/0xc0 [ 179.033948][ T7507] ? sock_common_recvmsg+0x190/0x190 [ 179.039277][ T7507] do_sock_setsockopt+0x175/0x1a0 [ 179.044351][ T7507] ? __fdget+0x180/0x210 [ 179.048694][ T7507] __x64_sys_setsockopt+0x182/0x200 [ 179.053955][ T7507] do_syscall_64+0x55/0xb0 [ 179.058508][ T7507] ? clear_bhb_loop+0x40/0x90 [ 179.063237][ T7507] ? clear_bhb_loop+0x40/0x90 [ 179.067979][ T7507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.074052][ T7507] RIP: 0033:0x7f231dba94d9 [ 179.078510][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.098264][ T7507] RSP: 002b:00007f231eac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.106911][ T7507] RAX: ffffffffffffffda RBX: 00007f231de25fa0 RCX: 00007f231dba94d9 [ 179.115034][ T7507] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000004 [ 179.123062][ T7507] RBP: 00007f231dc3804e R08: 0000000000000004 R09: 0000000000000000 [ 179.131190][ T7507] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 179.139203][ T7507] R13: 00007f231de26038 R14: 00007f231de25fa0 R15: 00007fff45733b18 [ 179.147222][ T7507] [ 179.165604][ T7504] EXT4-fs error: 379 callbacks suppressed [ 179.165622][ T7504] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.415: Invalid inode table block 0 in block_group 0 [ 179.209023][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 179.230275][ T7504] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 179.245887][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 179.255263][ T7504] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.415: mark_inode_dirty error [ 179.256384][ T7504] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.415: Invalid inode table block 0 in block_group 0 [ 179.286630][ T7504] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 179.297264][ T7504] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.415: mark_inode_dirty error [ 179.312310][ T7504] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.415: Invalid inode table block 0 in block_group 0 [ 179.315154][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 179.583741][ T7499] usb 5-1: reset full-speed USB device number 5 using dummy_hcd [ 179.601549][ T7499] usb 5-1: device reset changed ep0 maxpacket size! [ 179.626047][ T9] usb 5-1: USB disconnect, device number 5 [ 179.645362][ T7499] cdc_wdm 5-1:1.0: Error autopm - -16 [ 179.818080][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 179.952072][ T7511] loop3: detected capacity change from 0 to 32768 [ 180.000656][ T7511] JBD2: Ignoring recovery information on journal [ 180.045744][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.063353][ T7511] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 180.120936][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 180.147116][ T9] usb 5-1: can't read configurations, error -71 [ 180.747689][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 181.424346][ T7548] loop4: detected capacity change from 0 to 34816 [ 181.449619][ T7550] loop2: detected capacity change from 0 to 33792 [ 181.476068][ T7547] vxlan0: entered promiscuous mode [ 181.515511][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.546078][ T7550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.578375][ T7550] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.598895][ T7548] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.709238][ T7550] EXT4-fs error (device loop2): ext4_free_blocks:6699: comm syz.2.422: Freeing blocks not in datazone - block = 0, count = 16 [ 181.839382][ T7542] loop3: detected capacity change from 0 to 32768 [ 181.923565][ T6358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.955959][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.977151][ T7542] JBD2: Ignoring recovery information on journal [ 182.144575][ T7542] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 182.253612][ T7567] loop4: detected capacity change from 0 to 512 [ 182.514211][ T7542] OCFS2: ERROR (device loop3): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 2 used bits, but a count shows 1 [ 182.552111][ T7542] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 182.562785][ T7542] OCFS2: File system is now read-only. [ 182.570433][ T7542] (syz.3.418,7542,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 182.581678][ T7542] (syz.3.418,7542,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 182.611616][ T7542] (syz.3.418,7542,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 182.627422][ T7542] (syz.3.418,7542,1):ocfs2_lock_refcount_allocators:2908 ERROR: status = -30 [ 182.659389][ T7542] (syz.3.418,7542,1):ocfs2_make_clusters_writable:3227 ERROR: status = -30 [ 182.671226][ T7542] (syz.3.418,7542,1):ocfs2_replace_cow:3387 ERROR: status = -30 [ 182.692911][ T7542] (syz.3.418,7542,1):ocfs2_refcount_cow_hunk:3462 ERROR: status = -30 [ 182.704399][ T7542] (syz.3.418,7542,0):ocfs2_refcount_cow:3506 ERROR: status = -30 [ 182.721104][ T7542] (syz.3.418,7542,0):ocfs2_orphan_for_truncate:389 ERROR: status = -30 [ 182.735101][ T7542] (syz.3.418,7542,0):ocfs2_truncate_file:502 ERROR: status = -30 [ 182.744620][ T7542] (syz.3.418,7542,0):ocfs2_setattr:1216 ERROR: status = -30 [ 182.802764][ T7542] syz.3.418 (7542) used greatest stack depth: 17720 bytes left [ 182.847309][ T7584] loop2: detected capacity change from 0 to 256 [ 182.891745][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 183.224757][ T7589] loop2: detected capacity change from 0 to 33280 [ 183.314699][ T7589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.339482][ T7589] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.423643][ T7596] FAULT_INJECTION: forcing a failure. [ 183.423643][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.430988][ T7589] EXT4-fs error (device loop2): __ext4_new_inode:1083: comm syz.2.434: reserved inode found cleared - inode=1 [ 183.459781][ T7596] CPU: 0 PID: 7596 Comm: syz.0.436 Not tainted syzkaller #0 [ 183.467158][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.477278][ T7596] Call Trace: [ 183.480599][ T7596] [ 183.483573][ T7596] dump_stack_lvl+0x18c/0x250 [ 183.488302][ T7596] ? show_regs_print_info+0x20/0x20 [ 183.493573][ T7596] ? load_image+0x420/0x420 [ 183.498131][ T7596] ? __might_fault+0xaa/0x120 [ 183.502856][ T7596] ? __lock_acquire+0x7eb0/0x7eb0 [ 183.507935][ T7596] should_fail_ex+0x394/0x4c0 [ 183.512668][ T7596] _copy_to_user+0x2f/0xa0 [ 183.517121][ T7596] vivid_radio_rx_read+0xa22/0xc00 [ 183.522272][ T7596] ? vivid_stop_generating_vid_out+0x9a0/0x9a0 [ 183.528462][ T7596] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 183.535091][ T7596] ? video_devdata+0x6e/0xc0 [ 183.539740][ T7596] ? vivid_radio_read+0x75/0xb0 [ 183.544640][ T7596] v4l2_read+0x19a/0x2c0 [ 183.548922][ T7596] do_iter_read+0x4fb/0xcb0 [ 183.553475][ T7596] ? video_device_pipeline+0xa0/0xa0 [ 183.558795][ T7596] ? vfs_iter_read+0xa0/0xa0 [ 183.563426][ T7596] ? __import_iovec+0x5f2/0x850 [ 183.568318][ T7596] ? import_iovec+0x73/0xa0 [ 183.572853][ T7596] do_readv+0x264/0x460 [ 183.577044][ T7596] ? generic_file_rw_checks+0x280/0x280 [ 183.582665][ T7596] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 183.588695][ T7596] ? lock_chain_count+0x20/0x20 [ 183.593588][ T7596] ? lockdep_hardirqs_on+0x98/0x150 [ 183.598829][ T7596] do_syscall_64+0x55/0xb0 [ 183.603282][ T7596] ? clear_bhb_loop+0x40/0x90 [ 183.608010][ T7596] ? clear_bhb_loop+0x40/0x90 [ 183.612728][ T7596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.618661][ T7596] RIP: 0033:0x7f231dba94d9 [ 183.623124][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.642773][ T7596] RSP: 002b:00007f231eac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 183.651228][ T7596] RAX: ffffffffffffffda RBX: 00007f231de25fa0 RCX: 00007f231dba94d9 [ 183.659236][ T7596] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 183.667247][ T7596] RBP: 00007f231dc3804e R08: 0000000000000000 R09: 0000000000000000 [ 183.675259][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.683279][ T7596] R13: 00007f231de26038 R14: 00007f231de25fa0 R15: 00007fff45733b18 [ 183.691300][ T7596] [ 183.963964][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.058358][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 184.109389][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.201951][ T7606] bridge_slave_0 (unregistering): left allmulticast mode [ 184.219718][ T7606] bridge_slave_0 (unregistering): left promiscuous mode [ 184.227085][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.305372][ T7608] EXT4-fs error: 566 callbacks suppressed [ 184.305392][ T7608] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.439: Invalid inode table block 0 in block_group 0 [ 184.329752][ T7600] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.438: Invalid inode table block 0 in block_group 0 [ 184.342483][ T7608] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 184.356087][ T7600] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 184.357026][ T7604] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.4.441: Invalid inode table block 0 in block_group 0 [ 184.366010][ T7608] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2032: comm syz.2.439: mark_inode_dirty error [ 184.400553][ T7600] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.438: mark_inode_dirty error [ 184.413274][ T7608] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.439: Invalid inode table block 0 in block_group 0 [ 184.436111][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 184.449148][ T7604] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 184.671867][ T7605] loop3: detected capacity change from 0 to 32768 [ 184.688180][ T7605] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.440 (7605) [ 184.722660][ T7605] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.738785][ T7605] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 184.755350][ T7605] BTRFS info (device loop3): use zlib compression, level 3 [ 184.763328][ T7605] BTRFS info (device loop3): using free space tree [ 184.850097][ T7653] udevd[7653]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 184.868236][ T7605] BTRFS info (device loop3): enabling ssd optimizations [ 184.875511][ T7605] BTRFS info (device loop3): auto enabling async discard [ 184.939280][ T27] audit: type=1800 audit(1700000049.610:12): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.440" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 184.987312][ T7656] udevd[7656]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 185.176142][ T7658] loop4: detected capacity change from 0 to 33792 [ 185.199552][ T7658] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.234346][ T5791] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.255008][ T7658] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 185.285717][ T7658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.448616][ T7658] loop4: detected capacity change from 33792 to 64 [ 185.630657][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.671868][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.701545][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.740979][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.763486][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.778161][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.807151][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.822405][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.837343][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 185.853349][ T6358] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 186.365919][ T6358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.478049][ T7662] kmmpd-loop4: attempt to access beyond end of device [ 186.478049][ T7662] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 186.497554][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.525507][ T7662] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 186.706974][ T7693] loop3: detected capacity change from 0 to 33792 [ 186.770555][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.804906][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.823865][ T7693] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.925210][ T7693] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 186.964809][ T7693] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 186.979366][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.130961][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.508770][ T7696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 187.670128][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.312816][ T7748] EXT4-fs error: 414 callbacks suppressed [ 189.312835][ T7748] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.465: Invalid inode table block 0 in block_group 0 [ 189.317470][ T7749] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.472: Invalid inode table block 0 in block_group 0 [ 189.340980][ T7748] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 189.383764][ T7748] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2032: comm syz.2.465: mark_inode_dirty error [ 189.393033][ T7749] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 189.407655][ T7749] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2034: comm syz.3.472: mark_inode_dirty error [ 189.426442][ T7748] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.465: Invalid inode table block 0 in block_group 0 [ 189.469708][ T7749] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.472: Invalid inode table block 0 in block_group 0 [ 189.472434][ T7748] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 189.484104][ T7749] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 189.555679][ T60] hsr_slave_0: left promiscuous mode [ 189.582419][ T60] hsr_slave_1: left promiscuous mode [ 189.619300][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.635595][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.660962][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.673614][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.687015][ T60] bridge_slave_1: left allmulticast mode [ 189.696051][ T60] bridge_slave_1: left promiscuous mode [ 189.705103][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.736777][ T60] veth1_macvtap: left promiscuous mode [ 189.742700][ T60] veth0_macvtap: left promiscuous mode [ 189.751264][ T60] veth1_vlan: left promiscuous mode [ 189.756714][ T60] veth0_vlan: left promiscuous mode [ 189.778295][ T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.958095][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 189.969133][ T28] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 189.983464][ T28] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.994048][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.013536][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.030343][ T28] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.045414][ T28] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.056008][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.266781][ T7762] loop0: detected capacity change from 0 to 34816 [ 190.302103][ T7761] kvm: emulating exchange as write [ 190.316143][ T28] usb 4-1: usb_control_msg returned -32 [ 190.350458][ T28] usbtmc 4-1:16.0: can't read capabilities [ 190.393286][ T7762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.451570][ T27] audit: type=1800 audit(1700000055.120:13): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.466" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 190.490987][ T27] audit: type=1800 audit(1700000055.150:14): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.466" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 190.789553][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.925798][ T28] usb 4-1: USB disconnect, device number 10 [ 190.964321][ T7770] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 191.448647][ T7776] loop2: detected capacity change from 0 to 32768 [ 191.471868][ T7776] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.469 (7776) [ 191.489872][ T60] team0 (unregistering): Port device team_slave_1 removed [ 191.520754][ T7776] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.531760][ T7776] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 191.540844][ T7776] BTRFS info (device loop2): setting nodatasum [ 191.547232][ T7776] BTRFS info (device loop2): force zlib compression, level 3 [ 191.555375][ T7776] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 191.564921][ T7776] BTRFS info (device loop2): use lzo compression, level 0 [ 191.591585][ T7776] BTRFS info (device loop2): turning on flush-on-commit [ 191.611601][ T7776] BTRFS info (device loop2): setting nodatasum [ 191.638148][ T7776] BTRFS info (device loop2): max_inline at 4096 [ 191.646266][ T7776] BTRFS info (device loop2): using free space tree [ 191.655747][ T60] team0 (unregistering): Port device team_slave_0 removed [ 191.734005][ T7791] udevd[7791]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 191.769162][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.790406][ T7776] BTRFS info (device loop2): enabling ssd optimizations [ 191.808083][ T7776] BTRFS info (device loop2): auto enabling async discard [ 191.896325][ T7795] udevd[7795]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 191.926154][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.329331][ T5787] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.598466][ T60] team0 (unregistering): Port device bridge0 removed [ 192.694754][ T60] bond0 (unregistering): Released all slaves [ 194.321514][ T7817] EXT4-fs error: 234 callbacks suppressed [ 194.321532][ T7817] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.476: Invalid inode table block 0 in block_group 0 [ 194.352645][ T7818] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.0.475: Invalid inode table block 0 in block_group 0 [ 194.365355][ T7817] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 194.384818][ T7820] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.477: Invalid inode table block 0 in block_group 0 [ 194.393329][ T7817] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2032: comm syz.2.476: mark_inode_dirty error [ 194.408367][ T7820] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 194.411111][ T7818] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 194.427462][ T7820] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2034: comm syz.3.477: mark_inode_dirty error [ 194.442466][ T7818] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2028: comm syz.0.475: mark_inode_dirty error [ 194.454984][ T7820] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.3.477: Invalid inode table block 0 in block_group 0 [ 194.484177][ T7821] FAULT_INJECTION: forcing a failure. [ 194.484177][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 194.501215][ T7821] CPU: 0 PID: 7821 Comm: syz.3.477 Not tainted syzkaller #0 [ 194.508591][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.518740][ T7821] Call Trace: [ 194.522091][ T7821] [ 194.525066][ T7821] dump_stack_lvl+0x18c/0x250 [ 194.529832][ T7821] ? show_regs_print_info+0x20/0x20 [ 194.535114][ T7821] ? load_image+0x420/0x420 [ 194.539696][ T7821] ? __might_sleep+0xe0/0xe0 [ 194.544391][ T7821] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.549577][ T7821] should_fail_ex+0x394/0x4c0 [ 194.554336][ T7821] should_failslab+0x9/0x20 [ 194.558920][ T7821] slab_pre_alloc_hook+0x59/0x300 [ 194.564011][ T7821] ? __kernfs_new_node+0xaa/0x7f0 [ 194.569117][ T7821] ? __kernfs_new_node+0xaa/0x7f0 [ 194.574220][ T7821] __kmem_cache_alloc_node+0x53/0x260 [ 194.579668][ T7821] ? __kernfs_new_node+0xaa/0x7f0 [ 194.584791][ T7821] __kmalloc_node_track_caller+0xa4/0x230 [ 194.590692][ T7821] kstrdup+0x3b/0x80 [ 194.594656][ T7821] __kernfs_new_node+0xaa/0x7f0 [ 194.599586][ T7821] ? down_write+0x16e/0x200 [ 194.604170][ T7821] ? kernfs_new_node+0x260/0x260 [ 194.609201][ T7821] ? up_write+0x1be/0x410 [ 194.613606][ T7821] kernfs_new_node+0x14c/0x260 [ 194.618445][ T7821] kernfs_create_dir_ns+0x44/0x120 [ 194.623630][ T7821] sysfs_create_dir_ns+0x130/0x2a0 [ 194.628804][ T7821] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.633897][ T7821] ? sysfs_warn_dup+0xa0/0xa0 [ 194.638634][ T7821] ? do_raw_spin_unlock+0x121/0x230 [ 194.643895][ T7821] kobject_add_internal+0x617/0xc90 [ 194.649159][ T7821] kobject_add+0x164/0x240 [ 194.653628][ T7821] ? kobject_init+0x1d0/0x1d0 [ 194.658454][ T7821] ? kobject_init+0x1d0/0x1d0 [ 194.663198][ T7821] ? kobject_init+0x7f/0x1d0 [ 194.667855][ T7821] ? get_device_parent+0x366/0x390 [ 194.673021][ T7821] device_add+0x3fa/0xc40 [ 194.677416][ T7821] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 194.682937][ T7821] wakeup_source_register+0x163/0x240 [ 194.688367][ T7821] ep_insert+0xeb2/0x1990 [ 194.692788][ T7821] ? ep_loop_check+0x1b0/0x1b0 [ 194.697620][ T7821] ? mutex_lock_nested+0x20/0x20 [ 194.702608][ T7821] ? bpf_lsm_capable+0x9/0x10 [ 194.707350][ T7821] ? security_capable+0x89/0xb0 [ 194.712433][ T7821] do_epoll_ctl+0x8bc/0xf40 [ 194.717029][ T7821] __x64_sys_epoll_ctl+0x166/0x1b0 [ 194.722233][ T7821] ? ep_modify+0xa80/0xa80 [ 194.726731][ T7821] ? lockdep_hardirqs_on+0x98/0x150 [ 194.731988][ T7821] do_syscall_64+0x55/0xb0 [ 194.736478][ T7821] ? clear_bhb_loop+0x40/0x90 [ 194.741324][ T7821] ? clear_bhb_loop+0x40/0x90 [ 194.746099][ T7821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.752112][ T7821] RIP: 0033:0x7fc8f71a94d9 [ 194.756591][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.776269][ T7821] RSP: 002b:00007fc8f8027028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 194.784783][ T7821] RAX: ffffffffffffffda RBX: 00007fc8f7425fa0 RCX: 00007fc8f71a94d9 [ 194.792837][ T7821] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 194.800889][ T7821] RBP: 00007fc8f723804e R08: 0000000000000000 R09: 0000000000000000 [ 194.808922][ T7821] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 194.816933][ T7821] R13: 00007fc8f7426038 R14: 00007fc8f7425fa0 R15: 00007fff40e85fb8 [ 194.824956][ T7821] [ 194.837496][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.854079][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.865601][ T1295] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 194.867513][ T7821] kobject: kobject_add_internal failed for wakeup12 (error: -12 parent: wakeup) [ 195.681870][ T7837] ip_tables: iptables: counters copy to user failed while replacing table [ 196.871048][ T2914] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1008 with max blocks 15 with error 117 [ 196.883964][ T2914] EXT4-fs (sda1): This should not happen!! Data will be lost [ 196.883964][ T2914] [ 197.041090][ T2914] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1018 with max blocks 5 with error 117 [ 197.077947][ T2914] EXT4-fs (sda1): This should not happen!! Data will be lost [ 197.077947][ T2914] [ 197.101305][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 197.111875][ T2914] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 5 with max blocks 5 with error 117 [ 197.133587][ T2914] EXT4-fs (sda1): This should not happen!! Data will be lost [ 197.133587][ T2914] [ 197.144706][ T2914] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1501 with max blocks 11 with error 117 [ 197.165106][ T7852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.173256][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 197.181535][ T2914] EXT4-fs (sda1): This should not happen!! Data will be lost [ 197.181535][ T2914] [ 197.194455][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 198.474937][ T7860] loop0: detected capacity change from 0 to 16 [ 198.491256][ T7861] ip6gre1: entered promiscuous mode [ 198.512656][ T7860] erofs: (device loop0): mounted with root inode @ nid 36. [ 198.521911][ T7861] ip6gre1: entered allmulticast mode [ 199.589059][ T7863] EXT4-fs error: 195 callbacks suppressed [ 199.589072][ T7863] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 199.757558][ T7865] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 199.833547][ T7866] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 199.909701][ T7867] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 199.975156][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 199.988337][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 199.997987][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 200.010363][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 200.031825][ T7869] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 200.044557][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 200.124519][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 200.418013][ T970] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.600620][ T970] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 200.609056][ T970] usb 4-1: config 0 has no interface number 0 [ 200.615224][ T970] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.626331][ T970] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.636316][ T970] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.649325][ T970] usb 4-1: config 0 interface 16 has no altsetting 0 [ 200.656071][ T970] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 200.665353][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.675554][ T970] usb 4-1: config 0 descriptor?? [ 201.106470][ T970] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.0002/input/input6 [ 201.237192][ T970] saitek 0003:06A3:0CD0.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 201.266524][ T7883] udevd[7883]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 201.593406][ T5819] usb 4-1: USB disconnect, device number 11 [ 205.292420][ T5771] EXT4-fs error: 170 callbacks suppressed [ 205.292440][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 205.315728][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 205.325837][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 205.343611][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 205.360463][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 205.370066][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 205.382233][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 205.395395][ T5771] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 205.404984][ T5771] EXT4-fs error (device sda1): ext4_dirty_inode:6188: inode #2022: comm syz-executor: mark_inode_dirty error [ 205.420373][ T5771] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 205.492908][ T7903] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x2 [ 205.564893][ T7907] kvm: user requested TSC rate below hardware speed [ 205.584394][ T7907] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=5 req=457 state=1 status=67 (errno 9: Bad file descriptor) [ 207.560792][ T7917] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 209.532712][ T5771] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 209.578782][ T5771] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.266665][ T7930] tipc: Resetting bearer [ 210.452555][ T7930] tipc: Disabling bearer [ 210.784579][ T7929] EXT4-fs error: 191 callbacks suppressed [ 210.784594][ T7929] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.502: Invalid inode table block 0 in block_group 0 [ 210.805685][ T7929] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 210.815542][ T7929] EXT4-fs error (device sda1): ext4_evict_inode:254: inode #2032: comm syz.2.502: mark_inode_dirty error [ 210.827363][ T7929] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.840422][ T7929] EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:478: comm syz.2.502: Invalid block bitmap block 0 in block_group 3 [ 210.856101][ T7929] EXT4-fs error (device sda1): ext4_discard_preallocations:5645: comm syz.2.502: Error -117 reading block bitmap for 3 [ 210.871457][ T7929] EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:478: comm syz.2.502: Invalid block bitmap block 0 in block_group 3 [ 210.873226][ T7930] EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:478: comm syz.0.501: Invalid block bitmap block 0 in block_group 2 [ 210.895243][ T7929] EXT4-fs error (device sda1): ext4_discard_preallocations:5645: comm syz.2.502: Error -117 reading block bitmap for 3 [ 210.907694][ T7930] EXT4-fs error (device sda1): ext4_discard_preallocations:5645: comm syz.0.501: Error -117 reading block bitmap for 2 [ 210.923872][ T7929] EXT4-fs error (device sda1): __ext4_get_inode_loc:4509: comm syz.2.502: Invalid inode table block 0 in block_group 0 [ 210.941327][ T7929] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.941508][ T7930] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.964974][ T7930] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.966650][ T7928] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 210.988759][ T7928] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 211.033911][ T7928] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 211.188459][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!