last executing test programs: 1m26.028608842s ago: executing program 0 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flistxattr(r0, &(0x7f0000000040)=""/40, 0xfffffffffffffedd) 1m25.883143045s ago: executing program 0 (id=350): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3855bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba37757f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269bf8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000100)={0x0, 0x1804, 0x40}) 1m25.827625316s ago: executing program 0 (id=352): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) munlock(&(0x7f0000645000/0x3000)=nil, 0x3000) 1m25.743840348s ago: executing program 0 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m25.59499282s ago: executing program 0 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]}) 1m25.186834849s ago: executing program 0 (id=359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 1m24.900165946s ago: executing program 32 (id=359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 3.43631735s ago: executing program 4 (id=953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000) 2.814546351s ago: executing program 4 (id=958): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.452769811s ago: executing program 3 (id=960): ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000bc0)={&(0x7f0000000200)=0x81, 0x4, 0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000200), 0x0}, 0x20) 2.336643379s ago: executing program 5 (id=961): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x1, r0, 0x6}) 2.207381961s ago: executing program 2 (id=962): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) 2.014589972s ago: executing program 3 (id=964): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2900004, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./bus/file0\x00') 1.833810254s ago: executing program 2 (id=966): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 1.696535868s ago: executing program 1 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x93d0b5fa3da887e5, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 1.645463604s ago: executing program 2 (id=968): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) 1.557158117s ago: executing program 1 (id=969): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ecc000/0x4000)=nil, 0x4000}, 0x1}) 1.474599491s ago: executing program 3 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02}]}) 1.45390307s ago: executing program 2 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r0) 1.440641075s ago: executing program 4 (id=972): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000a0000000c0005000000356e5f"], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fe, &(0x7f00000004c0)="$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") r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.431567522s ago: executing program 1 (id=973): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x6f0, 0x4) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 1.263389799s ago: executing program 5 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 1.207617167s ago: executing program 4 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r0, r1, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.138054654s ago: executing program 4 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 1.072383421s ago: executing program 1 (id=977): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noquota}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@noinit_itable}, {@journal_checksum}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f0000000600)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@grpjquota}, {@data_writeback}, {@noblock_validity}, {@minixdf}, {@journal_checksum}]}, 0x0, 0x60d, &(0x7f0000000800)="$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") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@sysvgroups}]}, 0x1, 0x472, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.046702968s ago: executing program 2 (id=978): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 935.10157ms ago: executing program 3 (id=979): r0 = socket(0x10, 0x803, 0x0) close(0x3) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x143, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 876.386259ms ago: executing program 5 (id=980): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4015}, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) 611.959864ms ago: executing program 3 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0xffff1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 506.767742ms ago: executing program 5 (id=982): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x121000) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000003880)=""/4089, 0xa83}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 414.542674ms ago: executing program 4 (id=983): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f0000008380)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzhw4YByRYlct4pIASUBpVVEXFlCHHgRICSOgDhy4gX0wJUbL4BICRLQUweN/TzOeNnNOkm9s/bz+UjuzG+eGe8z/e54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/77g/OVBFx6edpwbGIz0Q/ohex0tRrEbGydiyvP4iI52K7OZ6NiOFSRJUbn454LSI+eiri7r1b682is/vsx3f+9Pff/fCJ7//tD8NT//nzjf7r09a7efPX//7L7UffXwAAAChRXdd1lT7mH0+f73tddwoAmIv8+l8nebl64erNBeuPWq1Wqw9h3VZPdrtdRMRme5vmPYPT8QBwyGzGx113gQ7Jv2iDiHii604AC63qugMciLv3bq1XKd+q/XqwttOerwXZk/9mtXt/x7TpLOPXmMzr+bUV/XhmSn9W5tSHRZLz743nf2mnfZTWO+j852Va/qOdW5+Kk/Pvj+c/5ujk35uYf6ly/oOHyr8vfwAAAAAAWGD53/+PdXz+d+nxd2VfHnT+d21OfQAAAAAAAACAT9vjjv+3qzL+HwAAACyq5rN64zdP3V827bvYmuUXq4gnx9YHCpNullntuh8AAAAAAAAAAAAAUJLBzjW8F6uIYUQ8ubpa13Xz0zZeP6zH3f6wK33/oWRd/5EHAIAdHz01di9/FbEcERfTd/0NV1dX63p5ZbVerVeW8vvZ0dJyvdL6XJunzbKl0ez3wysxqptfttzarm3W5+VZ7eO/r3msUd2f3bE56TBwAIiInVeju16Rjpi6fjq6fpfD4eD4P3oc/+xH189TAAAA4ODVdV1X6eu8j6dz/r2uOwUAzEV+/R8/L6BWq9Vqtfro1W31ZLfbRURstrdp3jMYjh8ADpnN+Hji8l8a4LcI0/KnCIOIeG6f6y4dcF+AxVR13QEOxN17t9arlG/Vfj1I47vna0H25L9ZbW+Xt580nWX8GpN5Pb+2oh/PTOnPs3PqwyLJ+ffG87+00z5K6x10/vMyLf9mP4910J+u5fz74/mPOTr59ybmX6qc/+Ch8u/LHwAAAAAAFlj+9/9jC3X+d/SouzPTg87/rh3YowIAAAAAAADAwbp779Z6vu81n///3IT13P95NOX8K/kXKeef7v/fvfDmpbH1+q35O2/dz/9f926t//7GPz+bp/vNf/e7hKr0zKrSM6JKj1QN0vQRd2yKrWF/1DzSsOr1B+man3r4TlyJq7ERp/es20vHw/32M3vam54Ot9vr/k772T3tg932vP25Pe3DdKVTvZLbT8Z6/CSuxtvb7U3b0oz9X57RXs9oz/n3Hf9FyvkPWj9N/qupvRqbNu582Pu/4749nfQ4b175/K9OH/zuzLQV/d19a2v274UO+rP9/+SJUfzs+sa1kzcv37hx7UykyZ6lZyNNPmU5/2H6yfm/9OJOe/673z5e73w4euj8F8VWDNr57842+b/Ymm/29+UO+jdvOf9R+sn5v53aJx//hzn/6cf/Kx30BwAAAAAAAAAAAAAAAB6kruvtW0TfjIjz6f6fru7NBADmK7/+10lePq+6/6jb/3HvfnTVf7V6znW1YP2Za/1JvVj9US9k/d8F68/C1W31ZG+0i4j4a3ub5j3DLyb9MgBgkX0SEf/ouhN0Rv4Fy9/310xPdN0ZYK6uv//Bjy5fvbpx7XrXPQEAAAAAAAAAHlUe/3OtNf7zibqub4+tt2f817di7XHH/xzkmd0BRqcMVN1/+H16kK3eqN9rDTf+fEwb/3u4O/eg8b8HMx5vOKN9NKN9aUb78oz2iTd6tOT8n2+Nd34iIo6PDb9ewviv42PelyDn/0Lr+dzk/6Wx9dr51789zPn39uR/6sZ7Pz11/f0PXr3y3uV3N97d+PG5M2dOnzt//sKFC6feuXJ14/TOfzvs8cHK+eexr10HWpacf85c/mXJ+X8h1fIvS87/i6mWf1ly/vn9nvzLkvPPn33kX5ac/8upln9Zcv5fTrX8y5LzfyXV8i9Lzv8rqZZ/WXL+r6Za/mXJ+Z9MtfzLkvM/lep95r9y0P1iPnL++QyX478sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/tVTLvyw5/6+mWv5lyfmfT7X8y5Lz/1qq5V+WnP+FVMu/LDn/r6da/mXJ+X8j1fIvS87/9VTLvyw5/2+mWv5lyfl/K9XyL0vO/9upln9Zcv5vpFr+Zbn//f9mzJgxk2e6/ssEAAAAAAAAAAAAAIybx+XEXe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH5m73EgMRBSJzVh45gQnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4XV8kArQHlArapWgvaBviAqVB6iKqCAhEQrYKs55///78zs7Myud7yZOefzkZJfdubMnDNn/jO7XzvfHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGt3+urlP1LIsq9VqxQWbs+wF9Xnd5Ob8klc/v8cHAAAArN/P838/d2O64NAqbtSwzT/f9s0vLy4uLmbvGf7T0c8sLqYrJrNsdDzL8uuiK997b61xm+DxbKI21PD1UJfdD3e5fqTL9aNdrh/rcv14l+snuly/7AQsc11WS3e2Pf/PzcUpzW7KRvPrtre51eO18aH6uUu3zWr5bRZHj2fz2clsLptp2r7YtpZv/9Xb6/t6cxb3NdSwr631FfKjR4/FY6iFc7y9aV9L9xn94LXZ5I9/9Oixvz7/7C3tZtfT0HR/xXHeta1+nB8LlxTHWsvG0zmJxznUcJxb2zwnw03HWctvV//v1uN8bpXHObx0mBuq9TmfyIby//5Wfp5Galmb87Q1XPbTO7Isu7R02K3bLNtXNpRtarpkaOn5mShWZP0+6kvpxdnImtbp7atYp/U5u715nba+JuLzf3u43cgKx9D4NP3gsbGG5/1ni1ezTqP6o17ptdK6Bnv9WumXNRjXxbfyB/1E2zW4PTz+R+9ceQ22XTtt1mB63A1rcFu3NTg0Npwfc3oSavltltbgzqbth/M91fL5zJ2d1+D0+VNnpxc+8tF75k8dPTF3Yu707p07Z3bv3bt///7p4/Mn52aKf1/l2e5/m7Kh9BrYFs5dfA28smXbxqW6+PmxZe+/V/s6nOjwOtzcsm2vX4cjrQ+utjEvyOVrunhtvKt+0icuD2UrvMby52fH+l+H6XE3vA5HGl6Hbb+ntHkdjqzidVjf5uyO1f3MMtLwT7tjWPl7wfrW4OaGNdj680jrGuz1zyP9sgYnwrr4zo6VvxdsDcf7xNRafx4ZXrYG08MN7z31S9LP+xP789FuXd5av+L6sezCwty5ex85ev78uZ1ZGBviJQ1rpXW9bmp4TNmy9Tq05vV6aP62J25tc/nmcK4m7qn/a2LF56q+zZ57Oz9X+Xe39uez6dJdWRg9ttHns9138/r5HMuyz37jsQe/9uhnX7fi+aznzY9Nr/9n8ZRLG95/R1d4/425/xfF/tJdPT48OlK8fofT2Rltej9ufqpG8veuWr7v56ZX9348Gv7Z6Pfjmzq8H29p2bbX78ejrQ8uvh/Xuv1px/q0Pp8TYZ2cnOn8flzfZsuuta7JkY7vx3eEWQvn/1UhKaRc1LB2Vlq3aV8jI6PhcY3EPTSv091N24+GbFbf11O7rm6d3nVHcV/D6dEt2ah1Otmyba/Xafqzr5XWaa3bn75dndbncyKsi5t2d16n9W2e3rP+987r4n82vHeOdVuDo8Nj9WMeTYswf7/PFq+La/De7Fh2JjuZzebXjuXrqZbva+q+1a3BsfDPRr9XbumwBu9q2bbXazB9H1tp7dVGlj/4Hmh9PifCunjyvs5rsL7N6/f19mfXu8IlaZuGn11b/3xtpT/zurXlNF2rtTISjvMb+zr/2Wx9m5P715ozO5+nu8Ml17c5T62v35VeU7PZxpynLeE4n92/8nmqH099m88cWOV6OpRl2cUP3Z//eW/4+5W/u/DtLzf9vUu7v9O5+KH7f/jC4/+0luMHYPD9ohibiu91DX8ztZq//wcAAAAGQsz9Q2Em8j8AAACURsz98f8KT+R/AAAAKI2Y+0fCTCqS/7e8/tn5X1zMUjN/MYjXp9PwQLFd7LjOhK8nF5fUL7//i3M/+ceLq9v3UJZlP3vgD9puv+WBeFyFyXCcV97QfPkyX75nVfs+8vDFtN/G/vrnwv3Hx7PaZdCugjuTZdlXb/xUvp/J917O59MPHMnng5eeeLy+zXMHiq/j7Z95SbH9X4Ty76HjR5tu/0w4D98Pc+Yt7c9HvN2XLr9q6753L+0v3q627Yb8YT/5vuJ+4+/J+fTjxfbxPK90/F/75FNfqm//yCvaH//FoXQceaU83v6pcL9fDPN/X1Zs3/gc1L+Ox//xcPxxf/F2937h622P/8oniu3PvrHY7kiYcf93ha+3v/HZ+cbz9UjtaNPjyt5UbBf3P/PtP86vj/cX77/1+CcOX246H63r4+n/KO5numX7eHncT/QPLfuv30/j+oz7f+qPjjQ9T932f+XBZ15Wv9/W/d/dst3ZD+3I9790f82/sekvP/6ptvuLx3Pob882PZ5D7wyv47D/J98X1mO4/v+uFPfX+tsVjryz+f0nbv+5zRebHk/05h8X+7/ymhP5HJ+4btP1L3jhDZdeXj93Wfat8eL+uu3/xF+daTr+z99cnI94fezot+5/JXH/5z48dfrMwoX52XRWH70x/905by2OJx7vjeG9tfXrw2fOv3/u3OTM5EyWTZb3V+hdtS+E+cNiXOq89eKyd9AdD4fn89Y//+qmO//9k/Hy/3xXcfnltxTft14Ztvt0uHxzeP7Wtv/lnrz95vz1XXs6HOHi8t8XvB5bt//P/lVtGB5/688Fcb2ffen78/NQvy7/vhFf1+s8/u/OFvfzlXBeF8NvZt5289L+GrePvxvh8kPF633d5y+8zcXn9W/C8/227xf3H48rPt7vhp9jvr6l+f0uro+vXBxqvf/8t3hcCu8n2aXi+rhVPN+Xn7u57eHF30OSXbol//pP0v3csqaHuZKFjyxMn5w/feGR6fNzC+enFz7y0cOnzlw4ff5w/rs8D3+g2+2X3p825e9Ps3N792T5u9WZ8ZkNeMO6hsefreb4zz58bHbfzJ2zc8ePXjh+/uGzc+dOHFtYODY3u3Dn0ePH5z7c7fbzswd37jqwe9+uqRPzswf3Hziw+8DU/Okz9cMoDqqLvTMfnDp97nB+k4WDew7svO++PTNTp87Mzh3cNzMzdaHb7fPvTVP1W//+1Lm5k0fPz5+am1qY/+jcwZ0H9u7d1fDbAH/S9vanzh5fmJw+d+H09IWFuXPTxWOZPJ9fXP/e123/lNPCfxU/z7aqFb+IL3vH3XvT72et++JjK95VsUnLLxB9Nvwumn950dn9q/k65v7RMJOK5H8AAACogpj7x8JM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/S9f/33JxVfvX/9+w/n/T7fX/9f/7ov//UL/1/4v3C/3/3lhv/17/P9D/1/9/Hvrzg3781en/t6f/Tzv91v+Puf+6LKtk/gcAAIAqiLl/U5iJ/A8AAAClEXP/9WEm8j8AAACURsz9LwgzqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6/9NZtfr/l3p5/Pr/+v8s12/9/5j7XxhmUpH8DwAAAFUQc/8NYSbyPwAAAJRGzP03hpnI/wAAAFAaMfdvDjOpSP7X/9f/1//X/9f/b79//f/BpP/fmf5/F/r/Pv9f/1//n57qt/5/zP0vCjOpSP4HAACAKoi5/8VhJvI/AAAA9J+Rq7tZzP0vCTNZlv+vcgcAAADA8y7m/puyliJ4Rf7+X/9f/7//+//j6Tr9f/3/rC/7/8OZ/n//0P/vTP+/C/1//X/9f/1/eqrf+v957s8mspeGmVQk/wMAAEAVxNx/c5iJ/A8AAAClEXP/L4WZyP8AAABQGjH3bwkzqUj+1//X/+///r/P/9f/7/f+v8//7yf6/53p/3eh/6//r/+v/09P9Vv/P+b+W8JMKpL/AQAAoApi7r81zET+BwAAgNKIuf+Xw0zkfwAAACiNmPu3hplUJP/r//d5/z82R/X/9f/1//X/9f9XRf+/M/3/LvT/9f/1//X/6al+6//H3P+yMJOK5H8AAACogpj7bwszkf8BAACgNGLuf3mYifwPAAAApRFz/2SYSUXyv/5/n/f/ix78mM//1//X/9f/1/9fHf3/zvT/u9D/1//vSf9/8WJ1+//jmf4/jfqt/x9z/+1hJhXJ/wAAAFAFMfdvCzOR/wEAAKA0Yu6/I8xE/gcAAIDSiLl/e5hJRfK//v9A9P8z/X/9f/1//X/9/9XR/+9M/78L/X/9f5//7/P/6al+6//H3P+KMJOK5H8AAACogpj77wwzkf8BAACgNGLuf2WYifwPAAAApRFz/11hJhXJ//r/+v/6//r/+v/t96//P5j0/zvT/+9C/1//X/9f/5+e6rf+f8z9rwozqUj+BwAAgCqIuX9HmIn8DwAAAKURc//dYSbyPwAAAJRGzP1TYSYVyf/6//r/+v/6//r/S8+h/v/g0//vTP+/C/1//X/9f/1/eqrf+v8x998TZlKR/A8AAABVEHP/vWEm8j8AAACURsz902Em8j8AAACURsz9M2EmFcn/+v/6//r/+v9r6v+/fOl+y9T/b7d//f/BpP/fmf5/F/r/+v/Pe/9/VP+fUum3/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNy/O8xE/gcAAIDSiLl/T5hJRfK//r/+v/6//r/P/2+/f/3/waT/31nv+//xIW5E/3982fb6//r//XT8Pv9f/5/l+q3/H3P/fWEmFcn/AAAAUAUx9+8NM5H/AQAAoDRi7t8XZiL/AwAAQGnE3L8/zKQi+V//X/9f/1//X/+//f71/weT/n9nPv+/C/1//X/9f/1/1umhP2z86ur6/2Pt7rgn/f+Y+w+EmVQk/wMAAEAVxNz/6jAT+R8AAABKI+b+X8nnvy5dIf8DAABAaRS5fyL71TCTiuR//f+m7nn94er/6//r/+v/5/T/B5P+f2f6/13o/+v/6//r/9NTK/b/Q/Ru3/9vqyf9/5j7D4aZVCT/AwAAQBXE3P9rYSbyPwAAAJRGzP2vCTOR/wEAAKA0Yu4/FGZSkfyv/+/z//X/9f/1/9vvf6P7//GTbvX/10f/vzP9/y70//X/9f/1/+mpq/v8/7Z60v+Puf+1YSYVyf8AAABQBTH33x9mIv8DAABAacTc/7owE/kfAAAASiPm/teHmVQk/+v/6//r/+v/6/+337/P/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/jeEmVQk/wMAAEAVxNz/xjAT+R8AAABKI+b+N4WZyP8AAABQGjH3vznMpCL5X/9f/1//X/9f/7/9/rv1/+Pn9ev/9xf9/870/7vQ/9f/1//X/6en+q3/H3P/r4eZVCT/AwAAwECaWNvmMfc/0Hpj+R8AAABKI+b+t4SZyP8AAABQGjH3vzXMpCL5X/9f/1//X/9f/7/9/n3+/2DS/+9swPr/P78hXK7/X9D/7+/jX2v/f6Tl62vS///eSv3/xfHW2+v/cy30W/8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox9/9GmElF8r/+f/04ltrL+v9l7f8P6f/3X///77+TZfr/+v89p//f2YD1/33+fwv9//4+fp//r//Pcv3W/4+5/51hJhXJ/wAAAFAFMfc/GGYi/wMAAEBpxNz/UJiJ/A8AAAClEXP/u8JMKpL/9f99/n81+v8+/z/rv/6/z/9vOKv6/72j/9+Z/n8X+v/6//3W//9v/X8GW7/1/2PufzjMpCL5HwAAAKog5v53h5nI/wAAAFAaMff/ZpiJ/A8AAAClEXP/e8JMKpL/9f8Hpf8/OaD9/8f0/69h//+2G4rt9P/1/1mi/9+Z/n8X+v/6//3W//f5/wy4fuv/x9z/3jCT1ef/iVVvCQAAADwvYu7/rTCTivz9PwAAAFRBzP2/HWYi/wMAAEBpxNz/O2EmFcn/+v+D0v/3+f+Z/r/P/295PPr/+v/tbFz/P77z6P/r/+v/R/r/+v/6/7Tqt/5/zP2/G2ZSkfwPAAAAVRBz//vCTOR/AAAAGAjt/p/sVjH3Hw4zkf8BAACgNGLuPxJmUpH8r/+/iv7/ePf70/9vPn79//brY039/z/b9m/f+ebbj+zU/9f/1/9fkw39/P/6i9/n/+v/6/8n+v/6//r/tOq3/n/M/UfDTCqS/wEAAKAKYu7/vTAT+R8AAABKI+b+Y2Em8j8AAACURsz9s2EmFcn/+v8+/1//v0/7/wP8+f/xfOj/N+tZ/z++6er/t1X079Mqurb9/3cv9cT1/9fa/x9re6n+v/7/IB+//r/+P8v1W/8/5v65MJOK5H8AAACogpD7h44Xc+kK+R8AAABKI+b+E2Em8j8AAACURsz97w8zqUj+1//X/9f/1//3+f/t99+p/18b8fn//Sr173+av1D0/1v0T/+/Pf1//f9BPn79f/1/luu3/n/M/fNhJhXJ/wAAAFAFMfd/IMxE/gcAAIDSiLn/g2Em8j8AAACURsz9J8NMKpL/9f8Hr/8ft9X/1//X/6/o5//r/3f0/+zdSZBldVbH8ZtYUFmBYbgwwoUbI1i6dMlC17p04cKNGyMMI8QBFWcK5xFFxVkRnAccQBBRQe0ZeqKbnqG76XmiB3oomm6iOsg85+R0870cXua79///fBacNqnkPYgy4UfWl3va/l7/H/T/fff/V/T/+n/9P6sxtf4/d//3xy2d7H8AAADoQe7+m+IW+x8AAACakbv/B+IW+x8AAACakbv/B+OWTva//v80/f9Opez5/3vf/yT6/2/R/x/2+vr/aff/1w36/9PQ/y+m/19C/+/5//p//T8rNbX+P3f/D8Utnex/AAAA6EHu/h+OW+x/AAAAaEbu/pvjFvsfAAAAmpG7/0filk72/77+f2Pos//PjHcWz//X/3v+v/5/W6v9v+f/n8759v+3vfSVT/+v/9f/B/3/kfr/i4d9vv6fFk2t/8/d/6NxSyf7HwAAAHqQu//H4hb7HwAAAJqRu/+WuMX+BwAAgGbk7v/xuKWT/b+65/9f2vr4TPv/ov/X/299QP+v/9f/z5bn/y/WU/9/85PX3/Tcg9/w0HFeX/+v//f8f/0/qzW1/j93/0/ELZ3sfwAAAOhB7v6fjFvsfwAAAGhG7v6filvsfwAAAGhG7v6fjls62f+r6/9n/fz/ov/X/299QP+v/9f/z5b+f7Ge+v+TvL7+X/+v/9f/s1pT6/9z9/9M3NLJ/gcAAIAe5O7/2bjF/gcAAIBm5O6/NW6x/wEAAKAZufsvxy2d7H/9/9n3/y/q//X/cfX/+n/9/9nT/y+m/19C/6//1//r/1mpqfX/uftvi1s62f8AAADQg9z9Pxe32P8AAADQjNz9Px+32P8AAADQjNz9vxC3dLL/9f+e/6//1//r/8dfX/8/T/r/xfT/S+j/T9vPX6v/1//r/9ntmP3/Cwu+bK+k/8/d/4txSyf7HwAAAHqQu/+X4hb7HwAAAJqRu/+X4xb7HwAAAJqRu/9X4pZO9r/+X/+v/z9S/7/1evr/ff3/wZ96W/T/4/T/50P/v9hk+v+NC6Mf1v/Pvv+f2PP/8yu2/l//z7pM7fn/uft/NW7pZP8DAABAD3L3/1rcsmD/H/tf5gMAAABrlbv/1+MW3/8HAACA2cvqLHf/b8Qtnex//b/+X//v+f+e/z/++ov6/4d2vT/9/7To/xebTP9/CP2//n/O71//r//noKn1/7n7fzNu6WT/AwAAQA9y998et9j/AAAA0Izc/b8Vt9j/AAAA0Izc/b8dt3Sy/8f7/53fr/8/Gv3/3vev/x//+bGq/j//iPr/hf3/t3r+f5/0/4udf/9/Uf+/949/wv5/+yuO/n/a77/x/v/Sss/X/zNmav1/7v474pZO9j8AAAD0IHf/78Qt9j8AAAA0I3f/78Yt9j8AAADM2jd/3U4Llrv/9+KWTva/5//r//X/8+v/Pf9/2zqf/z+ce/9/Qf9/RPr/xTz/f4nJ9v/b9P/Tfv+N9/+e/8+JTK3/z91/Z9zSyf4HAACAHtz5/LC1+39/GOx/AAAAmKPdv3Zg/y8oDbn7/yBusf8BAACgGbn7/zBu6WT/6//1//p//b/+f/z1p9X/e/7/Uc26/7+w8z/1//r/MTPt/y801v/fddjnT6H/v1X/z8Ts6f8f2fn4uvr/3P1/FLd0sv8BAACgB7n7/zhusf8BAACgGbn7/yRusf8BAACgGbn7/zRu6WT/n3n/f+nw19b/6//1//p//b/+f9Vm3f97/r/+v83+3/P/Pf9f/9+xnf5/79fDdfX/ufv/LG7pZP8DAABAD3L3/3ncYv8DAABAM3L33xW32P8AAADQjNz9fxG3dLL/Pf9f/6//1//r/8dfX/8/T/r/xfT/S+j/9f/6f/0/K7Xn+f+7rKv/z91/d9zSyf4HAACAHuTuvydusf8BAACgGbn7/zJusf8BAACgGbn7/ypu6WT/6//Ptv/Pj+v/9f+D/l//r/8/F932/xtjfyc66JD+//Hvvfztez+i/9f/6//1//p/VmAS/f/VnX+6zN3/13FLJ/sfAAAAepC7/2/iFvsfAAAAmpG7/2/jFvsfAAAAmpG7/+/ilmPu/69d6bs6P/p/z//X/+v/9f/jr6//n6du+/8j8vz/JfT/+n/9v/6flTqT/v/Kzhf34z7/P3f/38ctvv8PAAAAzcjd/w9xi/0PAAAAzcjd/49xy9L9f8PXnOHbAgAAAFYod/8/xS2dfP9f/6//1//r//X/469/0v5/cxin/z8f+v/F9P9L6P/1//p//T8rdSb9/y7H7f9z998bt3Sy/wEAAKAHufv/OW6x/wEAAKAZufv/JW6x/wEAAKAZufv/NW7pZP/r//X/+n/9v/5//PU9/3+e9P+L6f+HYbhvwRsY6/+vXtT/6//1//p/Tmhq/X/u/n+LWzrZ/wAAANCD3P33xS32PwAAADQjd//9cYv9DwAAAM3I3f/vcUsn+1//r//X/+v/9f/jr6//nyf9/2L6/yU8//+0/fxV/b/+X//PblPr/3P3PxC3dLL/AQAAoAe5+x+MW+x/AAAAaEbu/v+IW+x/AAAAaEbu/ofilk72v/5f/6//1/+fSf9/Wf+/n/7/fJxd/z/o//X/+v8lPP9f/6//Z7/z6v9fiK/3y/r/3P3/Gbd0sv8BAACgB7n7H45b7H8AAABoRu7+/4pb7H8AAABoRu7+/45bOtn/+n/9v/5f/+/5/+Ovr/+fJ8//X0z/v4T+X/+v/9f/s1Ln1f8f1vvv/79z9/9P3NLJ/gcAAIAe5O5/JG6x/wEAAKAZufsfjVvsfwAAAGhG7v7/jVs62f/6f/3/3v5/GPT/+n/9/7Zz6P83B/3/yun/F9P/L6H/b7P/v2ZoqP+/dOjn6/+Zoqn1/7n7/y9u6WT/AwAAQA9y9/9/3GL/AwAAQDNy978sbrH/AQAAoBm5+18et7S0/188PH2bf/9/cd8n6v+HYXjqFs//39X/7/z/tf5f/z+x/r/+qur/V0f/v5j+fwn9f5v9v+f/6/9Zm6n1/7n7XxG3tLT/AQAAoHO5+18Zt9j/AAAA0Izc/a+KW+x/AAAAaEbu/lfHLZ3s/z39/5Wd8Cx///T7//2fqP8fTvX8/xb7f8//1//r/3ty2v7+7s34e5r+X/+v/x/t5zcO+eeeIfr5l/789P/6f/0/aWr9f+7+18Qtnex/AAAA6EHu/sfiFvsfAAAAmpG7//G4xf4HAACAZuTuf23c0sn+n//z//d/ov5/0P930f9v6v/1//r/UVN5/v+NN37bE/p//X+L/f8inv+v/9f/s9/U+v/c/a+LWzrZ/wAAANCD3P2vj1vsfwAAAGhG7v43xC32PwAAADQjd/8b45ZO9v/B/v/aYbtQ3TbW/0ejpv/fRf+/9/3r/8d/fnj+v/5f/3/2ptL/e/7/yd6//n+F/f8Jfuqsu58/rXW//2P1/9948PP1/7Roav1/7v4n4pZO9j8AAAD0IHf/m+IW+x8AAACakbv/zXGL/Q8AAADNyN3/ZNzSyf73/H/9v/5f/6//H399/f886f8X0/8v0VL/fwIr6efzq6r+f77P//8q/T+rM7X+P3f/W+KWreF3w1ef8E8TAAAAmJDc/W+NWzr5/j8AAAD0IHf/2+IW+x8AAACakbv/7XFLJ/tf/6//1//r//X/46+v/58n/f9i+v8l+un/N8c+uO5+/rTW/f6b6f89/58Vmlr/n7v/HXFLJ/sfAAAAZuza5T/k+a3f5u5/Z9xi/wMAAEAzcve/K2452v6/cDbvCgAAAFil3P1PxS2dfP9f/6//b7///279/77X1//r/1um/1/8iyD1/0v00/+PWnc/P/f3X/3/1Yv6f/0/YWr9f+7+p+OWTvY/AAAA9CB3/7vjFvsfAAAAmpG7/z1xi/0PAAAAzcjd/964pZP9r//vq//fGHrs/z3/v5X+f3Pfn4/+X/8/Zj79/z2j/w1hz//X/+v/5/v+Pf9f/89BU+v/c/c/s3Ghy/0PAAAAc/Wd3/R9Tx/1xz6z9dvN4X1xi/0PAAAAzcjd//64xf4HAACAZuTu/0Dc0sn+1//31f/3+fx//X8r/b/n/+v/j2I+/f84/b/+X/8/3/ev/9f/c9DU+v/c/R+MW3YNv9H/QA8AAACwPtcd74fn7v9Q3NLJ9/8BAACgB7n7Pxy3HNj/V4/4q9oBAACAqcnd/5G4pZPv/+v/J97/D2fU/8eP0/9v0//r/8deX/8/T/r/xU7Z/1/d0P/r/xfQ/+v/9f/sN7X+P3f/ww8MXe5/AAAAaNSef6Pw0a3fbg4fi1vsfwAAAGhG7v6Pxy32PwAAADQjd/8n4pZO9r/+f+L9/4me/3+p/pfn/3fe/9++Ofr6+n/9f8v0/4t5/v8S+n/9v/5f/89KHaP/3xqkZ93/5+5/Nm7pZP8DAABAD3L3fzJusf8BAACgGbn7PxW32P8AAADQjNz9n45bOtn/+v819P93XByGM+3/j/D8f/1/H/3/Ia/fTv//9ddffuy7vuf+e/X/7DjP/j9/Luj/9f/6/236f/2//p/9pvb8/9z9n4lbOtn/AAAA0IPc/c/FLfY/AAAANCN3/2fjlpf2/6PrelcAAADAKuXu/1zc0sn3//X/LT7/f579f/61XkP/f3l+/X82xb33/57/r/8/yPP/F9P/L6H/1//r//X/rNTU+v/c/Z+PWzrZ/wAAANCD3P1fiFty/28c+1/dAwAAABOTu/9K3OL7/wAAANCM3P3Pxy2d7H/9v/5/Kv1/8vz/nc/z/P9t+n/9/3Ho/xfT/y+h/9f/6//1/6zU1Pr/3P1fjFs62f8AAADQg9z9L8Qt9j8AAAA0I3f/l+IW+x8AAACakbv/y3FLJ/tf/z8M1zy783H9v/5/6wP6f/2//n+2ptj/f8cxGvTz6f8vLf+B+n/9v/5f/6//ZwWm1v/n7v9KAAAA//+vq2ae") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) 370.728736ms ago: executing program 1 (id=984): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)={0x58, r1, 0x405, 0x70b927, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) 273.242209ms ago: executing program 5 (id=985): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x7f}, &(0x7f0000000100)=0x8) 199.451694ms ago: executing program 3 (id=986): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x401}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 165.369901ms ago: executing program 5 (id=987): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x2000000000000}) 49.747492ms ago: executing program 1 (id=988): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 0s ago: executing program 2 (id=989): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004941}, 0x400081c) kernel console output (not intermixed with test programs): o small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.837433][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.838694][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.868284][ T7097] loop4: detected capacity change from 0 to 1024 [ 130.873791][ T7097] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.883516][ T7097] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 130.883544][ T7097] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 130.883619][ T7097] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.892785][ T7097] EXT4-fs (loop4): journal inode is deleted [ 130.979304][ T7096] fido_id[7096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.346422][ T6923] hsr_slave_0: entered promiscuous mode [ 131.350935][ T6923] hsr_slave_1: entered promiscuous mode [ 131.354236][ T6923] debugfs: 'hsr0' already exists in 'hsr' [ 131.354266][ T6923] Cannot create hsr debugfs directory [ 131.514097][ T7111] loop3: detected capacity change from 0 to 2048 [ 131.625605][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.756229][ T5613] Bluetooth: hci1: command tx timeout [ 131.767442][ T61] IPVS: stop unused estimator thread 0... [ 131.832018][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 131.939850][ T3286] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 131.974631][ T3286] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.974664][ T3286] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.974664][ T3286] [ 131.974678][ T3286] EXT4-fs (loop3): Total free blocks count 0 [ 131.974690][ T3286] EXT4-fs (loop3): Free/Dirty block details [ 131.974703][ T3286] EXT4-fs (loop3): free_blocks=2415919504 [ 131.974716][ T3286] EXT4-fs (loop3): dirty_blocks=16 [ 131.974728][ T3286] EXT4-fs (loop3): Block reservation details [ 131.974739][ T3286] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 131.992071][ T308] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 131.992670][ T5610] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 132.800963][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801019][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.865651][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.419'. [ 132.929769][ T7151] bond0: ARP target 1.4.0.0 is already present [ 132.929796][ T7151] bond0: option arp_ip_target: invalid value (1025) [ 133.158672][ T6923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.178900][ T6923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.193790][ T6923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.219644][ T6923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.220508][ T6923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.252705][ T6923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.266443][ T6923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.312563][ T6923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.356671][ T5813] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.506672][ T5813] usb 5-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 133.507662][ T5813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 133.507690][ T5813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 133.511356][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.511380][ T5813] usb 5-1: Product: syz [ 133.511395][ T5813] usb 5-1: Manufacturer: syz [ 133.511410][ T5813] usb 5-1: SerialNumber: syz [ 133.573149][ T5813] usb 5-1: config 0 descriptor?? [ 133.586788][ T7155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.586926][ T7155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.809397][ T7155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.809533][ T7155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.866919][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.907134][ T151] IPVS: starting estimator thread 0... [ 133.924058][ T7177] loop2: detected capacity change from 0 to 1024 [ 133.925197][ T7177] EXT4-fs: Ignoring removed orlov option [ 133.939613][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.958579][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 133.977445][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.977494][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.977585][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.997166][ T7180] IPVS: using max 33 ests per chain, 79200 per kthread [ 134.042552][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.042656][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.065086][ T7177] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 134.085149][ T7177] EXT4-fs error (device loop2): __ext4_new_inode:1289: comm syz.2.423: failed to insert inode 12: doubly allocated? [ 134.246430][ T5813] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 134.265142][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.459629][ T6923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.614723][ T7187] loop1: detected capacity change from 0 to 32768 [ 134.651046][ T5813] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 134.663025][ T6923] veth0_vlan: entered promiscuous mode [ 134.698457][ T5813] usb 5-1: USB disconnect, device number 5 [ 134.733560][ T6923] veth1_vlan: entered promiscuous mode [ 134.764216][ T7187] JBD2: Ignoring recovery information on journal [ 134.848524][ T7187] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.923080][ T6923] veth0_macvtap: entered promiscuous mode [ 134.942105][ T6923] veth1_macvtap: entered promiscuous mode [ 134.973112][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.987290][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.027731][ T3686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.027844][ T3686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.027879][ T3686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.027913][ T3686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.209592][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.209640][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.417627][ T5608] ocfs2: Unmounting device (7,1) on (node local) [ 135.485640][ T7221] loop3: detected capacity change from 0 to 32768 [ 135.505106][ T7221] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.599943][ T7221] XFS (loop3): Ending clean mount [ 135.661092][ T7221] XFS (loop3): Quotacheck needed: Please wait. [ 135.725134][ T7236] loop4: detected capacity change from 0 to 256 [ 135.765506][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.765526][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.875212][ T7221] XFS (loop3): Quotacheck: Done. [ 135.966464][ T5610] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.731556][ T7255] WARNING! power/level is deprecated; use power/control instead [ 137.225531][ T1221] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.341432][ T7271] Bluetooth: MGMT ver 1.23 [ 137.376575][ T1221] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 137.377884][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 137.377915][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.377937][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.377960][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 137.386095][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.386120][ T1221] usb 2-1: Product: syz [ 137.386136][ T1221] usb 2-1: Manufacturer: syz [ 137.386150][ T1221] usb 2-1: SerialNumber: syz [ 137.467368][ T1221] usb 2-1: config 0 descriptor?? [ 137.698097][ T1221] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 137.921700][ T7261] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 137.922726][ T888] usb 2-1: USB disconnect, device number 5 [ 138.149685][ T7293] kernel read not supported for file /batadv_slave_1» (pid: 7293 comm: syz.3.454) [ 138.151859][ T32] audit: type=1800 audit(1790614198.736:32): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.454" name=6261746164765F736C6176655F31BB dev="mqueue" ino=13802 res=0 errno=0 [ 138.658039][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 138.658070][ T7306] block nbd0: Unsupported socket: should be TCP or UNIX. [ 138.798232][ T5749] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.947860][ T5749] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 138.950129][ T5749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.950159][ T5749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.950181][ T5749] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.950250][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.954559][ T5749] usb 6-1: config 0 descriptor?? [ 139.186868][ T888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.336954][ T888] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 139.338881][ T888] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.338914][ T888] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 139.338964][ T888] usb 3-1: config 1 interface 0 has no altsetting 0 [ 139.343818][ T888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.343844][ T888] usb 3-1: Product: syz [ 139.343859][ T888] usb 3-1: Manufacturer: syz [ 139.344086][ T888] usb 3-1: SerialNumber: syz [ 139.424665][ T7311] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.424815][ T7311] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.448816][ T7304] loop4: detected capacity change from 0 to 131072 [ 139.453827][ T7304] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 139.453852][ T7304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.484641][ T7304] F2FS-fs (loop4): invalid crc value [ 139.532058][ T5749] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 139.554821][ T7304] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.567966][ T7304] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.567994][ T7304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 139.615300][ T7304] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 139.624752][ T7304] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 139.887021][ T5342] usb 6-1: USB disconnect, device number 2 [ 140.091365][ T7329] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.305456][ T7331] loop3: detected capacity change from 0 to 32768 [ 140.319368][ T7331] (syz.3.467,7331,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.321173][ T7331] (syz.3.467,7331,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.388192][ T7331] JBD2: Ignoring recovery information on journal [ 140.472912][ T7331] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.676569][ T888] (unnamed net_device) (uninitialized): Assigned a random MAC address: 22:22:2d:30:0e:cc [ 140.763779][ T888] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 140.781300][ T888] usb 3-1: USB disconnect, device number 8 [ 140.868061][ T5342] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.961850][ T5610] ocfs2: Unmounting device (7,3) on (node local) [ 141.016060][ T5342] usb 5-1: Using ep0 maxpacket: 16 [ 141.018277][ T5342] usb 5-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 141.021407][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.021452][ T5342] usb 5-1: Product: syz [ 141.021467][ T5342] usb 5-1: Manufacturer: syz [ 141.021481][ T5342] usb 5-1: SerialNumber: syz [ 141.043268][ T5342] usb 5-1: config 0 descriptor?? [ 141.137473][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 141.137510][ T7348] netlink: 'syz.5.474': attribute type 30 has an invalid length. [ 141.177406][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 141.177443][ T7348] netlink: 'syz.5.474': attribute type 30 has an invalid length. [ 141.380763][ T308] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.381169][ T3686] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.381315][ T3686] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.381374][ T3686] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.519303][ T5342] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 141.544550][ T5342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.549905][ T5342] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 141.549955][ T5342] usb 5-1: media controller created [ 141.618918][ T5342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.721303][ T7336] dtv5100: wlen = 119, aborting. [ 141.933509][ T7357] loop5: detected capacity change from 0 to 4096 [ 141.973120][ T5342] zl10353_read_register: readreg error (reg=127, ret==0) [ 141.973180][ T5342] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 141.973193][ T5342] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 142.009329][ T5342] usb 5-1: USB disconnect, device number 6 [ 142.186817][ T5342] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 142.209908][ T5634] udevd[5634]: setting mode of /dev/bus/usb/005/006 to 020664 failed: No such file or directory [ 142.210034][ T5634] udevd[5634]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory [ 142.242501][ T5813] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.416728][ T5813] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 142.422061][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.422108][ T5813] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 142.441137][ T7361] loop3: detected capacity change from 0 to 131072 [ 142.456105][ T7361] F2FS-fs (loop3): Test dummy encryption mode enabled [ 142.457666][ T7370] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.467146][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.467173][ T5813] usb 3-1: Product: syz [ 142.467188][ T5813] usb 3-1: Manufacturer: syz [ 142.467202][ T5813] usb 3-1: SerialNumber: syz [ 142.528104][ T7361] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 142.550419][ T5813] cdc_mbim 3-1:1.0: skipping garbage [ 142.553119][ T7361] F2FS-fs (loop3): Mounted with checkpoint version = 1b41e955 [ 142.592211][ T32] audit: type=1800 audit(1790614203.176:33): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 142.739797][ T7369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.047868][ T7383] loop5: detected capacity change from 0 to 16 [ 143.058906][ T7383] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 143.059138][ T7383] erofs (device loop5): mounted with root inode @ nid 36. [ 143.110839][ T7383] erofs (device loop5): readahead error at folio 7 @ nid 36 [ 143.110886][ T7383] erofs (device loop5): unknown algorithm 5 @ pos 28160 for nid 36, please upgrade kernel [ 143.110908][ T7383] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 143.110940][ T7383] erofs (device loop5): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel [ 143.110958][ T7383] erofs (device loop5): readahead error at folio 5 @ nid 36 [ 143.110987][ T7383] erofs (device loop5): unknown algorithm 5 @ pos 19968 for nid 36, please upgrade kernel [ 143.111016][ T7383] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 143.111054][ T7383] erofs (device loop5): not enough plain data on disk @ la 15360 of nid 36 [ 143.111071][ T7383] erofs (device loop5): readahead error at folio 3 @ nid 36 [ 143.111095][ T7383] erofs (device loop5): unknown algorithm 5 @ pos 11776 for nid 36, please upgrade kernel [ 143.111114][ T7383] erofs (device loop5): readahead error at folio 2 @ nid 36 [ 143.111148][ T7383] erofs (device loop5): readahead error at folio 1 @ nid 36 [ 143.111168][ T7383] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 143.111207][ T7383] erofs (device loop5): read error -117 @ 0 of nid 36 [ 143.111225][ T7383] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 143.121715][ T7385] loop4: detected capacity change from 0 to 256 [ 143.124535][ T7383] erofs (device loop5): read error -117 @ 0 of nid 36 [ 143.124561][ T7383] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 143.165330][ T7385] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.428125][ T7369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.428597][ T5813] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 143.435233][ T5813] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 143.490597][ T5813] wwan wwan0: port wwan0mbim0 attached [ 143.543687][ T5813] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 4e:16:e1:51:a9:a0 [ 143.680769][ T1221] usb 3-1: USB disconnect, device number 9 [ 143.698296][ T1221] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 143.814996][ T1221] wwan wwan0: port wwan0mbim0 disconnected [ 144.098886][ T32] audit: type=1800 audit(1790614204.686:34): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.488" name="file1" dev="loop4" ino=122 res=0 errno=0 [ 144.511289][ T7409] loop1: detected capacity change from 0 to 1024 [ 144.947266][ T888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.974165][ T7400] loop5: detected capacity change from 0 to 32768 [ 145.068058][ T7400] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.098990][ T888] usb 3-1: Using ep0 maxpacket: 16 [ 145.100952][ T888] usb 3-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 145.102597][ T888] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 145.102621][ T888] usb 3-1: config 1 has no interface number 0 [ 145.102658][ T888] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.102682][ T888] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.102704][ T888] usb 3-1: config 1 interface 105 has no altsetting 0 [ 145.121087][ T888] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 145.121115][ T888] usb 3-1: Product: syz [ 145.121128][ T888] usb 3-1: Manufacturer: syz [ 145.121142][ T888] usb 3-1: SerialNumber: syz [ 145.141442][ T7415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.141569][ T7415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.391515][ T7400] XFS (loop5): Ending clean mount [ 145.443115][ T7443] device-mapper: ioctl: name not supplied when creating device [ 145.498930][ T7400] XFS (loop5): Quotacheck needed: Please wait. [ 145.581322][ T7415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.581434][ T7415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.609968][ T7446] loop1: detected capacity change from 0 to 16 [ 145.619524][ T7446] erofs (device loop1): mounted with root inode @ nid 36. [ 145.694640][ T7400] XFS (loop5): Quotacheck: Done. [ 146.132050][ T7400] syz.5.491 (7400): drop_caches: 2 [ 146.180387][ T6923] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.204355][ T888] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 146.206424][ T888] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 146.286506][ T888] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5e:70:59:11:16:90 [ 146.308661][ T5749] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.320840][ T888] usb 3-1: USB disconnect, device number 10 [ 146.327749][ T888] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 146.463657][ T888] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 146.463790][ T888] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 146.463909][ T888] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 146.471069][ T5749] usb 5-1: New USB device found: idVendor=065a, idProduct=0009, bcdDevice=1.00 [ 146.480157][ T5749] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.480185][ T5749] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 146.480221][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.563020][ T5749] opticon 5-1:1.0: opticon converter detected [ 146.590937][ T5749] usb 5-1: opticon converter now attached to ttyUSB0 [ 146.805347][ T7457] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 146.889873][ T7462] loop1: detected capacity change from 0 to 32768 [ 147.021466][ T1221] usb 5-1: USB disconnect, device number 7 [ 147.058512][ T1221] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 147.092192][ T1221] opticon 5-1:1.0: device disconnected [ 147.114456][ T7482] FAULT_INJECTION: forcing a failure. [ 147.114456][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 147.114489][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.3.512 Not tainted syzkaller #0 PREEMPT(full) [ 147.114512][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.114524][ T7482] Call Trace: [ 147.114531][ T7482] [ 147.114539][ T7482] dump_stack_lvl+0xe8/0x150 [ 147.114573][ T7482] should_fail_ex+0x3eb/0x540 [ 147.114609][ T7482] should_failslab+0xa8/0x100 [ 147.114639][ T7482] __kmalloc_noprof+0xf9/0x710 [ 147.114662][ T7482] ? lock_acquire+0x115/0x350 [ 147.114687][ T7482] ? tomoyo_encode+0x2ad/0x570 [ 147.114709][ T7482] ? tomoyo_encode+0x2ad/0x570 [ 147.114750][ T7482] tomoyo_encode+0x2ad/0x570 [ 147.114779][ T7482] tomoyo_mount_permission+0x3a4/0x9e0 [ 147.114799][ T7482] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 147.114827][ T7482] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 147.114848][ T7482] ? kasan_save_track+0x4f/0x80 [ 147.114918][ T7482] ? kasan_quarantine_put+0xbb/0x1f0 [ 147.114948][ T7482] security_sb_mount+0xe4/0x320 [ 147.114977][ T7482] path_mount+0xbc/0x1050 [ 147.115006][ T7482] ? user_path_at+0xd4/0x160 [ 147.115034][ T7482] __se_sys_mount+0x31d/0x420 [ 147.115067][ T7482] ? __pfx___se_sys_mount+0x10/0x10 [ 147.115098][ T7482] ? __x64_sys_mount+0x20/0xc0 [ 147.115125][ T7482] do_syscall_64+0x166/0x520 [ 147.115154][ T7482] ? trace_irq_disable+0x3b/0x140 [ 147.115183][ T7482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.115201][ T7482] ? clear_bhb_loop+0x70/0xc0 [ 147.115224][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.115245][ T7482] RIP: 0033:0x7f3a3319e159 [ 147.115264][ T7482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.115282][ T7482] RSP: 002b:00007f3a33ff8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.115305][ T7482] RAX: ffffffffffffffda RBX: 00007f3a33425fa0 RCX: 00007f3a3319e159 [ 147.115320][ T7482] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 147.115334][ T7482] RBP: 00007f3a3323506b R08: 0000000000000000 R09: 0000000000000000 [ 147.115346][ T7482] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 147.115359][ T7482] R13: 00007f3a33426038 R14: 00007f3a33425fa0 R15: 00007ffdcae8cfb8 [ 147.115393][ T7482] [ 147.521734][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.516'. [ 147.583351][ T7489] veth1_to_team: entered promiscuous mode [ 147.593721][ T7489] veth1_to_team: left promiscuous mode [ 147.825723][ T7494] loop4: detected capacity change from 0 to 2640 [ 147.873455][ T7494] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 147.873495][ T7494] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 147.873518][ T7494] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 147.873540][ T7494] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 147.873563][ T7494] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 147.873585][ T7494] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 147.873606][ T7494] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 147.873640][ T7494] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 147.873662][ T7494] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 147.873684][ T7494] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 147.947066][ T7479] loop2: detected capacity change from 0 to 32768 [ 147.983963][ T7479] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.511 (7479) [ 148.227652][ T7479] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.227688][ T7479] BTRFS info (device loop2): using blake2b checksum algorithm [ 148.350838][ T7487] loop3: detected capacity change from 0 to 32768 [ 148.400039][ T7487] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 148.426542][ T7479] BTRFS info (device loop2): enabling ssd optimizations [ 148.426569][ T7479] BTRFS info (device loop2): turning on async discard [ 148.426586][ T7479] BTRFS info (device loop2): enabling free space tree [ 148.426604][ T7479] BTRFS info (device loop2): use zstd compression, level 3 [ 148.431642][ T7487] JBD2: Ignoring recovery information on journal [ 148.541624][ T32] audit: type=1800 audit(1790614209.126:35): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 148.561819][ T7487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 149.085199][ T7546] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.085199][ T7546] The task syz.5.523 (7546) triggered the difference, watch for misbehavior. [ 149.190607][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.267709][ T5614] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 149.347157][ T9] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 149.400242][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.423433][ T9] usb 5-1: config 0 descriptor?? [ 149.570204][ T5610] ocfs2: Unmounting device (7,3) on (node local) [ 149.691212][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 149.927844][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 149.927870][ T9] [drm] Initialized udl on minor 1 [ 150.551761][ T7563] loop2: detected capacity change from 0 to 32768 [ 150.564560][ T7563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.526 (7563) [ 150.574585][ T7563] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.574640][ T7563] BTRFS info (device loop2): using crc32c checksum algorithm [ 150.676700][ T7563] BTRFS info (device loop2): enabling ssd optimizations [ 150.676728][ T7563] BTRFS info (device loop2): turning on async discard [ 150.676744][ T7563] BTRFS info (device loop2): enabling free space tree [ 150.708497][ T7568] loop3: detected capacity change from 0 to 32768 [ 150.723673][ T7568] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.528 (7568) [ 150.739436][ T7563] BTRFS info (device loop2 state M): use zstd compression, level 15 [ 150.758617][ T7568] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 150.758652][ T7568] BTRFS info (device loop3): using blake2b checksum algorithm [ 151.051685][ T7568] BTRFS info (device loop3): enabling ssd optimizations [ 151.051712][ T7568] BTRFS info (device loop3): turning on async discard [ 151.051728][ T7568] BTRFS info (device loop3): enabling free space tree [ 151.051746][ T7568] BTRFS info (device loop3): use zstd compression, level 3 [ 151.341420][ T7612] loop5: detected capacity change from 0 to 4096 [ 151.395153][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.492755][ T7616] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.603020][ T7568] BTRFS error (device loop3): target device is invalid! [ 151.774174][ T5610] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 151.843381][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.537'. [ 152.738744][ T7620] loop5: detected capacity change from 0 to 131072 [ 152.742862][ T7620] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 152.742885][ T7620] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 152.742911][ T7620] F2FS-fs (loop5): Test dummy encryption mode enabled [ 152.743450][ T7620] F2FS-fs (loop5): invalid crc value [ 152.840498][ T7620] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 152.840550][ T7620] loop5: lost filesystem error report for type 5 error -117 [ 152.862287][ T7620] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.865281][ T7620] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 152.865308][ T7620] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 152.865332][ T7620] F2FS-fs (loop5): Start checkpoint disabled! [ 152.914487][ T7620] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 152.927514][ T7620] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 152.927542][ T7620] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 153.034953][ T7615] loop1: detected capacity change from 0 to 32768 [ 153.057743][ T7615] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.535 (7615) [ 153.085029][ T7615] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 153.085064][ T7615] BTRFS info (device loop1): using crc32c checksum algorithm [ 153.089350][ T7634] loop2: detected capacity change from 0 to 512 [ 153.109001][ T7634] EXT4-fs: Ignoring removed nobh option [ 153.191589][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.191717][ T7634] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.348612][ T7615] BTRFS info (device loop1): enabling ssd optimizations [ 153.348638][ T7615] BTRFS info (device loop1): turning on async discard [ 153.348655][ T7615] BTRFS info (device loop1): enabling free space tree [ 153.463802][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.550207][ T5608] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 154.082278][ T7671] loop5: detected capacity change from 0 to 1024 [ 154.154060][ T7671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.580599][ T6923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.065014][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.561'. [ 155.065089][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 155.714580][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 155.715006][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 155.723127][ T9] usb 5-1: USB disconnect, device number 8 [ 155.729662][ T5749] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 155.809859][ T7690] loop5: detected capacity change from 0 to 131072 [ 155.819656][ T7690] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 155.819684][ T7690] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 155.821494][ T7690] F2FS-fs (loop5): invalid crc value [ 155.920149][ T7690] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.940156][ T7690] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 155.940185][ T7690] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 156.201445][ T7723] loop2: detected capacity change from 0 to 256 [ 156.248936][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 156.276350][ T7723] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 156.276680][ T7723] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 156.666922][ T5813] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.716074][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.808572][ T5813] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 156.809572][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.809600][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.809621][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.809659][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.812502][ T5813] usb 2-1: config 0 descriptor?? [ 156.945285][ T32] audit: type=1326 audit(1790614217.526:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 156.974124][ T32] audit: type=1326 audit(1790614217.556:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.002018][ T32] audit: type=1326 audit(1790614217.586:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.006749][ T32] audit: type=1326 audit(1790614217.596:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.011798][ T32] audit: type=1326 audit(1790614217.596:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.011847][ T32] audit: type=1326 audit(1790614217.596:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.011887][ T32] audit: type=1326 audit(1790614217.596:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.012440][ T32] audit: type=1326 audit(1790614217.596:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.012482][ T32] audit: type=1326 audit(1790614217.596:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.020268][ T32] audit: type=1326 audit(1790614217.606:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.580" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3a3319e159 code=0x7ffc0000 [ 157.039369][ T7744] loop4: detected capacity change from 0 to 2048 [ 157.166227][ T7748] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.436854][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.456841][ T5813] hid_parser_main: 5 callbacks suppressed [ 157.456866][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.456895][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.456923][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.456949][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.456979][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.457008][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.457034][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.457062][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.457087][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.457110][ T5813] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 157.618315][ T5813] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.755858][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.935670][ T7756] loop4: detected capacity change from 0 to 512 [ 158.066071][ T7756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.343782][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.805270][ T1013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.991751][ T1013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.053101][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.064453][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.079540][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.083143][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.085210][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.224329][ T1013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.421101][ T7774] loop5: detected capacity change from 0 to 131072 [ 159.433818][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.455048][ T7774] F2FS-fs (loop5): invalid crc value [ 159.528836][ T7774] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 159.551473][ T7774] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.652525][ T7797] ip_tables: iptables: counters copy to user failed while replacing table [ 159.708206][ T7774] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 160.326992][ T1221] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.419102][ T5342] usb 2-1: USB disconnect, device number 6 [ 160.436944][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 160.477249][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.492364][ T1221] usb 3-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 160.504933][ T1221] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 160.504964][ T1221] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 160.532367][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.532395][ T1221] usb 3-1: Product: syz [ 160.532408][ T1221] usb 3-1: Manufacturer: syz [ 160.532422][ T1221] usb 3-1: SerialNumber: syz [ 160.568733][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.606922][ T1221] usb 3-1: config 0 descriptor?? [ 160.607688][ T7810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.607828][ T7810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.706623][ T1013] bridge_slave_1: left allmulticast mode [ 160.706649][ T1013] bridge_slave_1: left promiscuous mode [ 160.706858][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.723535][ T1013] bridge_slave_0: left allmulticast mode [ 160.723559][ T1013] bridge_slave_0: left promiscuous mode [ 160.723754][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.821891][ T7810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.822023][ T7810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.179767][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.195640][ T5613] Bluetooth: hci2: command tx timeout [ 161.203687][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.298772][ T1013] bond0 (unregistering): Released all slaves [ 161.450175][ T7824] loop5: detected capacity change from 0 to 32768 [ 161.507367][ T7824] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.620576][ T7824] XFS (loop5): Ending clean mount [ 161.627249][ T7824] XFS (loop5): Quotacheck needed: Please wait. [ 161.668250][ T1221] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 161.688817][ T1221] usb 3-1: USB disconnect, device number 11 [ 161.811251][ T7824] XFS (loop5): Quotacheck: Done. [ 161.881962][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.882113][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.882262][ T7778] bridge_slave_0: entered allmulticast mode [ 161.891513][ T7778] bridge_slave_0: entered promiscuous mode [ 161.903846][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.903945][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.909826][ T7778] bridge_slave_1: entered allmulticast mode [ 161.919060][ T7778] bridge_slave_1: entered promiscuous mode [ 161.988086][ T6923] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.118294][ T7778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.144291][ T7778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.340299][ T1013] hsr_slave_0: left promiscuous mode [ 162.353722][ T1013] hsr_slave_1: left promiscuous mode [ 162.354614][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.354634][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.378031][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.378053][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.426130][ T1013] veth1_macvtap: left promiscuous mode [ 162.426167][ T1013] veth0_macvtap: left promiscuous mode [ 162.426380][ T1013] veth1_vlan: left promiscuous mode [ 162.426447][ T1013] veth0_vlan: left promiscuous mode [ 163.278030][ T5613] Bluetooth: hci2: command tx timeout [ 163.339820][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 163.365084][ T7886] loop1: detected capacity change from 0 to 1024 [ 163.372562][ T7886] EXT4-fs: Ignoring removed orlov option [ 163.372641][ T7886] EXT4-fs: Ignoring removed orlov option [ 163.399711][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 163.428933][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.518527][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.740592][ T7778] team0: Port device team_slave_0 added [ 163.760862][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 163.787761][ T7778] team0: Port device team_slave_1 added [ 163.848668][ T7778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.848686][ T7778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.848711][ T7778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.897310][ T7778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.897332][ T7778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.897358][ T7778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.048671][ T7778] hsr_slave_0: entered promiscuous mode [ 164.053047][ T7778] hsr_slave_1: entered promiscuous mode [ 164.434888][ T1013] IPVS: stop unused estimator thread 0... [ 165.013773][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 165.183696][ T7937] FAULT_INJECTION: forcing a failure. [ 165.183696][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 165.183727][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.1.630 Not tainted syzkaller #0 PREEMPT(full) [ 165.183751][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.183764][ T7937] Call Trace: [ 165.183772][ T7937] [ 165.183781][ T7937] dump_stack_lvl+0xe8/0x150 [ 165.183813][ T7937] should_fail_ex+0x3eb/0x540 [ 165.183850][ T7937] should_failslab+0xa8/0x100 [ 165.183884][ T7937] __kmalloc_cache_noprof+0x9e/0x600 [ 165.183909][ T7937] ? cgroup_init_fs_context+0x57/0x860 [ 165.183935][ T7937] ? cgroup_init_fs_context+0x57/0x860 [ 165.183964][ T7937] cgroup_init_fs_context+0x57/0x860 [ 165.183993][ T7937] ? mutex_init_lockdep+0xdf/0x110 [ 165.184024][ T7937] alloc_fs_context+0x99e/0xd00 [ 165.184062][ T7937] __se_sys_fsopen+0xa5/0x2c0 [ 165.184085][ T7937] do_syscall_64+0x166/0x520 [ 165.184112][ T7937] ? trace_irq_disable+0x3b/0x140 [ 165.184137][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.184159][ T7937] ? clear_bhb_loop+0x70/0xc0 [ 165.184185][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.184205][ T7937] RIP: 0033:0x7f8314f9e159 [ 165.184223][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.184240][ T7937] RSP: 002b:00007f8315edb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 165.184261][ T7937] RAX: ffffffffffffffda RBX: 00007f8315225fa0 RCX: 00007f8314f9e159 [ 165.184276][ T7937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000010c0 [ 165.184288][ T7937] RBP: 00007f831503506b R08: 0000000000000000 R09: 0000000000000000 [ 165.184302][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.184315][ T7937] R13: 00007f8315226038 R14: 00007f8315225fa0 R15: 00007fffcb035d48 [ 165.184344][ T7937] [ 165.250136][ T7910] loop4: detected capacity change from 0 to 32768 [ 165.295970][ T7941] loop2: detected capacity change from 0 to 2048 [ 165.331225][ T7941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.334616][ T7910] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.360947][ T5613] Bluetooth: hci2: command tx timeout [ 165.452996][ T7910] XFS (loop4): Ending clean mount [ 165.481119][ T7910] XFS (loop4): User initiated shutdown received. [ 165.481472][ T7910] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 165.481525][ T7910] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 165.620493][ T5611] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.373937][ T7974] loop2: detected capacity change from 0 to 512 [ 166.626907][ T7778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.654416][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.658456][ T7778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.682151][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.683509][ T7778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.712489][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.720300][ T7778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.751939][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.846513][ T5749] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 166.944112][ T7976] loop5: detected capacity change from 0 to 32768 [ 167.005677][ T5749] usb 2-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.009840][ T5749] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.009866][ T5749] usb 2-1: config 0 has no interface number 0 [ 167.009903][ T5749] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 167.009928][ T5749] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.017089][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 167.017114][ T5749] usb 2-1: Product: syz [ 167.017128][ T5749] usb 2-1: SerialNumber: syz [ 167.063910][ T5749] usb 2-1: config 0 descriptor?? [ 167.094104][ T5749] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 167.125337][ T7999] FAULT_INJECTION: forcing a failure. [ 167.125337][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.125368][ T7999] CPU: 1 UID: 0 PID: 7999 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) [ 167.125393][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.125406][ T7999] Call Trace: [ 167.125413][ T7999] [ 167.125422][ T7999] dump_stack_lvl+0xe8/0x150 [ 167.125456][ T7999] should_fail_ex+0x3eb/0x540 [ 167.125492][ T7999] _copy_to_user+0x31/0xb0 [ 167.125515][ T7999] put_timespec64+0xc8/0x130 [ 167.125546][ T7999] ? __pfx_put_timespec64+0x10/0x10 [ 167.125582][ T7999] poll_select_finish+0x473/0x650 [ 167.125608][ T7999] ? __pfx_poll_select_finish+0x10/0x10 [ 167.125636][ T7999] ? __pfx_set_user_sigmask+0x10/0x10 [ 167.125663][ T7999] ? __fget_files+0x3a2/0x420 [ 167.125688][ T7999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.125727][ T7999] __se_sys_pselect6+0x27e/0x320 [ 167.125754][ T7999] ? __pfx___se_sys_pselect6+0x10/0x10 [ 167.125782][ T7999] ? __x64_sys_pselect6+0x21/0xf0 [ 167.125805][ T7999] do_syscall_64+0x166/0x520 [ 167.125832][ T7999] ? trace_irq_disable+0x3b/0x140 [ 167.125860][ T7999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.125881][ T7999] ? clear_bhb_loop+0x70/0xc0 [ 167.125905][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.125926][ T7999] RIP: 0033:0x7f4b24b9e159 [ 167.125946][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.125962][ T7999] RSP: 002b:00007f4b259c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 167.125993][ T7999] RAX: ffffffffffffffda RBX: 00007f4b24e25fa0 RCX: 00007f4b24b9e159 [ 167.126010][ T7999] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.126022][ T7999] RBP: 00007f4b24c3506b R08: 0000200000000280 R09: 0000200000000300 [ 167.126037][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.126049][ T7999] R13: 00007f4b24e26038 R14: 00007f4b24e25fa0 R15: 00007ffedda2aeb8 [ 167.126082][ T7999] [ 167.319217][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.435891][ T5613] Bluetooth: hci2: command tx timeout [ 167.470176][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.503835][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.503946][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.530420][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.530542][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.609169][ T8005] loop4: detected capacity change from 0 to 64 [ 167.617889][ T5749] usb 2-1: USB disconnect, device number 7 [ 167.864370][ T7778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.884485][ T7995] loop2: detected capacity change from 0 to 32768 [ 167.933025][ T7995] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.040001][ T7995] XFS (loop2): Ending clean mount [ 168.108285][ T7778] veth0_vlan: entered promiscuous mode [ 168.138660][ T32] kauditd_printk_skb: 14 callbacks suppressed [ 168.138679][ T32] audit: type=1800 audit(1790614228.716:60): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.644" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 168.178306][ T8005] hfs: request for non-existent node 131072 in B*Tree [ 168.178325][ T8005] hfs: request for non-existent node 131072 in B*Tree [ 168.181962][ T7778] veth1_vlan: entered promiscuous mode [ 168.232394][ T7778] veth0_macvtap: entered promiscuous mode [ 168.246428][ T7995] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 168.309749][ T7778] veth1_macvtap: entered promiscuous mode [ 168.451822][ T7778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.459166][ T7778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.489805][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.490898][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.491023][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.565619][ T1013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.679758][ T5614] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.001986][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.002009][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.255167][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.255188][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.724148][ T8071] loop2: detected capacity change from 0 to 4096 [ 169.931788][ T8073] loop3: detected capacity change from 0 to 32768 [ 169.947582][ T8073] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 169.947602][ T8073] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 169.975902][ T8073] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 169.979623][ T5719] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 169.979641][ T5719] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 170.029817][ T8071] ntfs3(loop2): ino=19, mi_enum_attr [ 170.029849][ T8071] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 170.266397][ T32] audit: type=1807 audit(1790614230.846:61): action=measure res=1 [ 170.335672][ T5719] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 356ms [ 170.335857][ T5719] gfs2: fsid=syz:syz.0: jid=0: Done [ 170.335895][ T8073] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 170.336894][ T8087] ima: policy update completed [ 170.337041][ T32] audit: type=1802 audit(1790614230.926:62): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.664" res=1 errno=0 [ 170.617021][ T32] audit: type=1800 audit(1790614231.206:63): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 170.707373][ T32] audit: type=1800 audit(1790614231.296:64): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 170.721562][ T32] audit: type=1800 audit(1790614231.306:65): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 170.735357][ T32] audit: type=1800 audit(1790614231.316:66): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 170.817449][ T32] audit: type=1800 audit(1790614231.396:67): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 170.974110][ T8085] loop4: detected capacity change from 0 to 40427 [ 170.993573][ T32] audit: type=1800 audit(1790614231.576:68): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 171.016588][ T32] audit: type=1800 audit(1790614231.606:69): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 171.040049][ T8085] F2FS-fs (loop4): invalid crc value [ 171.058653][ T8105] loop2: detected capacity change from 0 to 512 [ 171.132721][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.132817][ T8105] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.280006][ T8085] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 171.357922][ T8085] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 171.357950][ T8085] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 171.357975][ T8085] F2FS-fs (loop4): Start checkpoint disabled! [ 171.417152][ T8085] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 171.434201][ T8085] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 171.434408][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.505331][ T8085] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 172.017074][ T8134] loop3: detected capacity change from 0 to 128 [ 172.041067][ T8134] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 172.343050][ T8138] syzkaller1: entered promiscuous mode [ 172.343073][ T8138] syzkaller1: entered allmulticast mode [ 172.450888][ T8139] IPVS: Scheduler module ip_vs_sip not found [ 172.870128][ T8156] loop3: detected capacity change from 0 to 512 [ 172.879550][ T8156] EXT4-fs: Ignoring removed nobh option [ 172.907284][ T8156] EXT4-fs (loop3): 1 truncate cleaned up [ 172.933147][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.954134][ T8155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.684'. [ 173.180002][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 173.180019][ T32] audit: type=1800 audit(1790614233.766:94): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 173.313115][ T32] audit: type=1800 audit(1790614233.896:95): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 173.326894][ T7778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.481690][ T32] audit: type=1800 audit(1790614234.066:96): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 173.608857][ T32] audit: type=1800 audit(1790614234.196:97): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 173.658775][ T8168] loop4: detected capacity change from 0 to 40427 [ 173.673946][ T32] audit: type=1800 audit(1790614234.256:98): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 173.681901][ T8168] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 173.681926][ T8168] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 173.693117][ T8168] F2FS-fs (loop4): invalid crc value [ 173.693643][ T8168] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 173.743219][ T32] audit: type=1800 audit(1790614234.326:99): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 173.869973][ T32] audit: type=1800 audit(1790614234.456:100): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 173.911802][ T32] audit: type=1800 audit(1790614234.496:101): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 174.009296][ T32] audit: type=1800 audit(1790614234.596:102): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 174.138192][ T8190] sctp: [Deprecated]: syz.3.697 (pid 8190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.138192][ T8190] Use struct sctp_sack_info instead [ 174.169612][ T8168] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.268428][ T32] audit: type=1800 audit(1790614234.856:103): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 174.305055][ T8168] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.305083][ T8168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.648412][ T8196] loop5: detected capacity change from 0 to 32768 [ 174.690647][ T8196] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 174.854340][ T5611] syz-executor: attempt to access beyond end of device [ 174.854340][ T5611] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.887281][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 174.887310][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.887328][ T5611] Call Trace: [ 174.887336][ T5611] [ 174.887344][ T5611] dump_stack_lvl+0xe8/0x150 [ 174.887385][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 174.887415][ T5611] f2fs_write_end_bio+0xda7/0x11c0 [ 174.887462][ T5611] __submit_merged_bio+0x258/0x6a0 [ 174.887485][ T5611] ? rcu_is_watching+0x16/0xb0 [ 174.887518][ T5611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 174.887543][ T5611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 174.887586][ T5611] f2fs_write_data_pages+0x2a13/0x36e0 [ 174.887648][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.887687][ T5611] ? is_bpf_text_address+0x292/0x2b0 [ 174.887705][ T5611] ? is_bpf_text_address+0x26/0x2b0 [ 174.887750][ T5611] ? stack_trace_save+0xa9/0x100 [ 174.887775][ T5611] ? __pfx_stack_trace_save+0x10/0x10 [ 174.887816][ T5611] ? lockdep_unlock+0x5c/0xd0 [ 174.887836][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 174.887886][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.887913][ T5611] do_writepages+0x338/0x560 [ 174.887946][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 174.887966][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 174.887990][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 174.888049][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 174.888074][ T5611] f2fs_sync_dirty_inodes+0x471/0x970 [ 174.888119][ T5611] f2fs_write_checkpoint+0x860/0x24d0 [ 174.888182][ T5611] kill_f2fs_super+0x2dc/0x700 [ 174.888213][ T5611] ? rcu_do_enqueue+0x616/0x870 [ 174.888236][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 174.888263][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 174.888306][ T5611] ? __pfx_call_rcu+0x10/0x10 [ 174.888339][ T5611] ? shrinker_free+0x2a7/0x3b0 [ 174.888370][ T5611] deactivate_locked_super+0xbe/0x110 [ 174.888397][ T5611] cleanup_mnt+0x3d3/0x460 [ 174.888429][ T5611] task_work_run+0x1d9/0x260 [ 174.888457][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 174.888491][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 174.888517][ T5611] ? rcu_is_watching+0x16/0xb0 [ 174.888550][ T5611] do_syscall_64+0x328/0x520 [ 174.888575][ T5611] ? trace_irq_disable+0x3b/0x140 [ 174.888600][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.888620][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 174.888644][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.888663][ T5611] RIP: 0033:0x7f4b24b9f397 [ 174.888682][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 174.888698][ T5611] RSP: 002b:00007ffedda2a128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 174.888720][ T5611] RAX: 0000000000000000 RBX: 00007f4b24c344bb RCX: 00007f4b24b9f397 [ 174.888734][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedda2a1e0 [ 174.888747][ T5611] RBP: 00007ffedda2a1e0 R08: 00007ffedda2b1e0 R09: 00000000ffffffff [ 174.888760][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedda2b270 [ 174.888773][ T5611] R13: 00007f4b24c344bb R14: 000000000002aa3b R15: 00007ffedda2b2b0 [ 174.888806][ T5611] [ 174.953842][ T5611] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 175.148548][ T6923] ocfs2: Unmounting device (7,5) on (node local) [ 176.019759][ T8229] ip_tables: iptables: counters copy to user failed while replacing table [ 176.060615][ T8225] loop1: detected capacity change from 0 to 4096 [ 176.282765][ T8234] loop3: detected capacity change from 0 to 2048 [ 176.308042][ T8225] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 176.340261][ T8234] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 176.340286][ T8234] UDF-fs: Scanning with blocksize 512 failed [ 176.403292][ T8234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.514246][ T8238] sd 0:0:1:0: PR command failed: 1026 [ 176.514293][ T8238] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 176.514327][ T8238] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 176.584769][ T8225] ntfs3(loop1): ino=1a, mi_enum_attr [ 176.584895][ T8225] ntfs3(loop1): ino=1a, mi_enum_attr [ 176.584913][ T8225] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 176.596187][ T5342] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.767264][ T5342] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.779578][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.819664][ T5342] usb 5-1: config 0 descriptor?? [ 177.065867][ T5342] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 177.111765][ T8246] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.306945][ T5342] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 177.306970][ T5342] [drm] Initialized udl on minor 1 [ 177.531156][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 177.867926][ T8266] pim6reg1: entered promiscuous mode [ 177.867950][ T8266] pim6reg1: entered allmulticast mode [ 178.195169][ T8280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.198857][ T32] kauditd_printk_skb: 62 callbacks suppressed [ 178.198873][ T32] audit: type=1800 audit(1790614238.786:166): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144080 res=0 errno=0 [ 178.282366][ T32] audit: type=1800 audit(1790614238.866:167): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 178.359054][ T32] audit: type=1800 audit(1790614238.946:168): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 178.414713][ T32] audit: type=1800 audit(1790614238.996:169): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 178.484648][ T32] audit: type=1800 audit(1790614239.066:170): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 178.579108][ T32] audit: type=1800 audit(1790614239.166:171): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 178.705812][ T32] audit: type=1800 audit(1790614239.286:172): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 178.798573][ T32] audit: type=1800 audit(1790614239.386:173): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 178.939239][ T32] audit: type=1800 audit(1790614239.526:174): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 179.189003][ T32] audit: type=1800 audit(1790614239.776:175): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 179.403548][ T8295] loop5: detected capacity change from 0 to 32768 [ 179.412674][ T8295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.738 (8295) [ 179.454919][ T8308] netlink: 104 bytes leftover after parsing attributes in process `syz.2.743'. [ 179.462813][ T8295] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.462844][ T8295] BTRFS info (device loop5): using sha256 checksum algorithm [ 179.574930][ T8295] BTRFS info (device loop5): enabling ssd optimizations [ 179.574958][ T8295] BTRFS info (device loop5): turning on async discard [ 179.574974][ T8295] BTRFS info (device loop5): enabling free space tree [ 179.596076][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.744'. [ 180.191863][ T8335] loop1: detected capacity change from 0 to 4096 [ 180.614688][ T6923] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.440114][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.100191][ T8365] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 182.295536][ T5719] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.317436][ T5342] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 182.317866][ T5342] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 182.343447][ T5342] usb 5-1: USB disconnect, device number 9 [ 182.358395][ T5813] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 182.468801][ T5719] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 182.473123][ T5719] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 182.473149][ T5719] usb 6-1: config 1 has no interface number 0 [ 182.484675][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.484700][ T5719] usb 6-1: Product: syz [ 182.484713][ T5719] usb 6-1: Manufacturer: syz [ 182.484728][ T5719] usb 6-1: SerialNumber: syz [ 182.521557][ T5719] usb 6-1: 3:1 : does not exist [ 182.521579][ T5719] usb 6-1: 3:2 : does not exist [ 182.710561][ T8369] loop1: detected capacity change from 0 to 40427 [ 182.741199][ T8369] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 182.741239][ T8369] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 182.774755][ T8369] F2FS-fs (loop1): Image doesn't support compression [ 182.789785][ T8369] F2FS-fs (loop1): invalid crc value [ 182.888598][ T8369] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.910507][ T8369] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 182.910534][ T8369] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 182.910560][ T8369] F2FS-fs (loop1): Start checkpoint disabled! [ 182.963788][ T8369] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 182.978112][ T8369] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.978142][ T8369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 183.206569][ T32] kauditd_printk_skb: 114 callbacks suppressed [ 183.206587][ T32] audit: type=1800 audit(1790614243.796:290): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 183.249758][ T32] audit: type=1800 audit(1790614243.836:291): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144436 res=0 errno=0 [ 183.369688][ T3686] kworker/u8:10: attempt to access beyond end of device [ 183.369688][ T3686] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 183.369767][ T3686] CPU: 0 UID: 0 PID: 3686 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 183.369790][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.369803][ T3686] Workqueue: writeback wb_workfn (flush-7:1) [ 183.369842][ T3686] Call Trace: [ 183.369850][ T3686] [ 183.369858][ T3686] dump_stack_lvl+0xe8/0x150 [ 183.369889][ T3686] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 183.369920][ T3686] f2fs_write_end_bio+0xda7/0x11c0 [ 183.369968][ T3686] __submit_merged_bio+0x258/0x6a0 [ 183.369990][ T3686] ? rcu_is_watching+0x16/0xb0 [ 183.370026][ T3686] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 183.370052][ T3686] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 183.370103][ T3686] f2fs_write_data_pages+0x2a13/0x36e0 [ 183.370178][ T3686] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.370221][ T3686] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 183.370310][ T3686] ? __lock_acquire+0x747/0x2de0 [ 183.370362][ T3686] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.370390][ T3686] do_writepages+0x338/0x560 [ 183.370422][ T3686] ? reacquire_held_locks+0x117/0x1a0 [ 183.370449][ T3686] ? writeback_sb_inodes+0x450/0x1af0 [ 183.370479][ T3686] __writeback_single_inode+0x136/0x1220 [ 183.370506][ T3686] ? do_raw_spin_unlock+0xf5/0x200 [ 183.370530][ T3686] writeback_sb_inodes+0x9de/0x1af0 [ 183.370551][ T3686] ? __lock_acquire+0x747/0x2de0 [ 183.370591][ T3686] ? lock_acquire+0x115/0x350 [ 183.370623][ T3686] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 183.370693][ T3686] ? rcu_is_watching+0x16/0xb0 [ 183.370722][ T3686] ? queue_io+0x2d3/0x470 [ 183.370750][ T3686] wb_writeback+0x41c/0xad0 [ 183.370776][ T3686] ? queue_io+0x1f1/0x470 [ 183.370806][ T3686] ? __pfx_wb_writeback+0x10/0x10 [ 183.370825][ T3686] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.370863][ T3686] wb_workfn+0x431/0x10f0 [ 183.370912][ T3686] ? __pfx_wb_workfn+0x10/0x10 [ 183.370949][ T3686] ? trace_hrtimer_start+0x82/0x200 [ 183.370980][ T3686] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.371011][ T3686] ? lock_acquire+0x115/0x350 [ 183.371046][ T3686] ? rcu_is_watching+0x16/0xb0 [ 183.371077][ T3686] ? process_scheduled_works+0x97a/0x1630 [ 183.371107][ T3686] process_scheduled_works+0xc3d/0x1630 [ 183.371178][ T3686] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.371215][ T3686] ? assign_work+0x3cf/0x5d0 [ 183.371250][ T3686] worker_thread+0xa47/0xfb0 [ 183.371310][ T3686] kthread+0x38b/0x480 [ 183.371335][ T3686] ? __pfx_worker_thread+0x10/0x10 [ 183.371362][ T3686] ? __pfx_kthread+0x10/0x10 [ 183.371387][ T3686] ret_from_fork+0x514/0xb70 [ 183.371410][ T3686] ? __pfx_ret_from_fork+0x10/0x10 [ 183.371430][ T3686] ? __switch_to+0xc78/0x1410 [ 183.371462][ T3686] ? __pfx_kthread+0x10/0x10 [ 183.371487][ T3686] ret_from_fork_asm+0x1a/0x30 [ 183.371535][ T3686] [ 183.375354][ T5342] usb 6-1: USB disconnect, device number 3 [ 183.404809][ T3686] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 183.404895][ T3686] CPU: 0 UID: 0 PID: 3686 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 183.404918][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.404930][ T3686] Workqueue: writeback wb_workfn (flush-7:1) [ 183.404969][ T3686] Call Trace: [ 183.404977][ T3686] [ 183.404984][ T3686] dump_stack_lvl+0xe8/0x150 [ 183.405014][ T3686] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 183.405043][ T3686] f2fs_write_end_bio+0xda7/0x11c0 [ 183.405087][ T3686] __submit_merged_bio+0x258/0x6a0 [ 183.405109][ T3686] ? rcu_is_watching+0x16/0xb0 [ 183.405142][ T3686] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 183.405167][ T3686] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 183.405219][ T3686] f2fs_write_data_pages+0x2a13/0x36e0 [ 183.405278][ T3686] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.405317][ T3686] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 183.405399][ T3686] ? __lock_acquire+0x747/0x2de0 [ 183.405440][ T3686] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.405465][ T3686] do_writepages+0x338/0x560 [ 183.405493][ T3686] ? reacquire_held_locks+0x117/0x1a0 [ 183.405517][ T3686] ? writeback_sb_inodes+0x450/0x1af0 [ 183.405544][ T3686] __writeback_single_inode+0x136/0x1220 [ 183.405569][ T3686] ? do_raw_spin_unlock+0xf5/0x200 [ 183.405592][ T3686] writeback_sb_inodes+0x9de/0x1af0 [ 183.405612][ T3686] ? __lock_acquire+0x747/0x2de0 [ 183.405651][ T3686] ? lock_acquire+0x115/0x350 [ 183.405681][ T3686] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 183.405743][ T3686] ? rcu_is_watching+0x16/0xb0 [ 183.405771][ T3686] ? queue_io+0x2d3/0x470 [ 183.405796][ T3686] wb_writeback+0x41c/0xad0 [ 183.405820][ T3686] ? queue_io+0x1f1/0x470 [ 183.405847][ T3686] ? __pfx_wb_writeback+0x10/0x10 [ 183.405867][ T3686] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.405902][ T3686] wb_workfn+0x431/0x10f0 [ 183.405948][ T3686] ? __pfx_wb_workfn+0x10/0x10 [ 183.405982][ T3686] ? trace_hrtimer_start+0x82/0x200 [ 183.406009][ T3686] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.406038][ T3686] ? lock_acquire+0x115/0x350 [ 183.406070][ T3686] ? rcu_is_watching+0x16/0xb0 [ 183.406099][ T3686] ? process_scheduled_works+0x97a/0x1630 [ 183.406127][ T3686] process_scheduled_works+0xc3d/0x1630 [ 183.406193][ T3686] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.406226][ T3686] ? assign_work+0x3cf/0x5d0 [ 183.406259][ T3686] worker_thread+0xa47/0xfb0 [ 183.406314][ T3686] kthread+0x38b/0x480 [ 183.406336][ T3686] ? __pfx_worker_thread+0x10/0x10 [ 183.406362][ T3686] ? __pfx_kthread+0x10/0x10 [ 183.406386][ T3686] ret_from_fork+0x514/0xb70 [ 183.406407][ T3686] ? __pfx_ret_from_fork+0x10/0x10 [ 183.406425][ T3686] ? __switch_to+0xc78/0x1410 [ 183.406455][ T3686] ? __pfx_kthread+0x10/0x10 [ 183.406479][ T3686] ret_from_fork_asm+0x1a/0x30 [ 183.406523][ T3686] [ 183.420137][ T3686] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 183.475153][ T32] audit: type=1800 audit(1790614244.056:292): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 183.537929][ T32] audit: type=1800 audit(1790614244.126:293): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 183.722997][ T32] audit: type=1800 audit(1790614244.306:294): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 184.030247][ T8383] loop2: detected capacity change from 0 to 32768 [ 184.048987][ T32] audit: type=1800 audit(1790614244.626:295): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 184.102946][ T32] audit: type=1800 audit(1790614244.686:296): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 184.172766][ T32] audit: type=1800 audit(1790614244.756:297): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 184.272525][ T32] audit: type=1800 audit(1790614244.856:298): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 184.276989][ T8383] lbmIODone: I/O error in JFS log [ 184.277004][ T8383] *** Log Format Error ! *** [ 184.277410][ T8383] lmLogInit: exit(-22) [ 184.277479][ T8383] lmLogOpen: exit(-22) [ 184.410125][ T8405] veth0: entered promiscuous mode [ 184.417086][ T32] audit: type=1800 audit(1790614244.996:299): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 184.452192][ T8404] veth0: left promiscuous mode [ 184.585018][ T8383] jfs_dirty_inode called on read-only volume [ 184.585032][ T8383] Is remount racy? [ 184.660732][ T8401] jfs_dirty_inode called on read-only volume [ 184.660748][ T8401] Is remount racy? [ 184.712518][ T8401] jfs_dirty_inode called on read-only volume [ 184.712537][ T8401] Is remount racy? [ 184.712547][ T8401] jfs_dirty_inode called on read-only volume [ 184.712555][ T8401] Is remount racy? [ 185.075064][ T8421] ip_tables: iptables: counters copy to user failed while replacing table [ 185.097175][ T8421] tipc: Started in network mode [ 185.097206][ T8421] tipc: Node identity ac1414aa, cluster identity 4711 [ 185.130007][ T8421] tipc: Enabled bearer , priority 10 [ 185.284024][ T8428] syzkaller1: entered promiscuous mode [ 185.284046][ T8428] syzkaller1: entered allmulticast mode [ 185.596233][ T8436] loop3: detected capacity change from 0 to 4096 [ 185.671423][ T8436] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 185.675071][ T8436] ntfs3(loop3): Failed to load $Extend (-22). [ 185.675095][ T8436] ntfs3(loop3): Failed to initialize $Extend. [ 186.131245][ T8447] mtrr: base(0x27f5000) is not aligned on a size(0x0000) boundary [ 186.612736][ T8445] loop4: detected capacity change from 0 to 131072 [ 186.642971][ T9] tipc: Node number set to 2886997162 [ 186.655628][ T5342] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 186.716294][ T8445] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 186.731076][ T8445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 186.804325][ T8445] F2FS-fs (loop4): recover xattr in inode (7), error(0) [ 186.804386][ T8445] F2FS-fs (loop4): set inode (7) has corrupted xattr [ 186.808615][ T8445] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 186.829417][ T5342] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 186.830629][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.830653][ T5342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.830673][ T5342] usb 4-1: config 1 has no interface number 0 [ 186.830713][ T5342] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.830739][ T5342] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 186.830766][ T5342] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 186.833159][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.833183][ T5342] usb 4-1: Product: syz [ 186.833197][ T5342] usb 4-1: Manufacturer: syz [ 186.833211][ T5342] usb 4-1: SerialNumber: syz [ 186.870332][ T8451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.071531][ T8449] loop2: detected capacity change from 0 to 32768 [ 187.085031][ T8449] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 187.098412][ T8449] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.795 (8449) [ 187.132216][ T8449] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 187.132253][ T8449] BTRFS info (device loop2): using crc32c checksum algorithm [ 187.250488][ T8449] BTRFS info (device loop2): rebuilding free space tree [ 187.339641][ T8451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.415911][ T8479] loop1: detected capacity change from 0 to 4096 [ 187.420922][ T8479] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 187.505315][ T8479] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 187.505345][ T8479] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 187.547635][ T8449] BTRFS info (device loop2): disabling free space tree [ 187.547722][ T8449] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.547746][ T8449] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.661118][ T8449] BTRFS info (device loop2): enabling ssd optimizations [ 187.661146][ T8449] BTRFS info (device loop2): turning on async discard [ 187.661163][ T8449] BTRFS info (device loop2): force clearing of disk cache [ 187.661185][ T8449] BTRFS info (device loop2): use zstd compression, level 3 [ 187.768209][ T5342] cdc_ncm 4-1:1.1: bind() failure [ 187.832350][ T3686] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 187.851402][ T5608] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 187.851431][ T5608] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 187.851447][ T5608] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 187.851564][ T3686] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 188.026579][ T9] usb 4-1: USB disconnect, device number 5 [ 188.137083][ T5614] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 188.429973][ T32] kauditd_printk_skb: 44 callbacks suppressed [ 188.429992][ T32] audit: type=1800 audit(1790614249.016:344): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 188.475809][ T32] audit: type=1800 audit(1790614249.046:345): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 188.628302][ T32] audit: type=1800 audit(1790614249.206:346): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 188.629913][ T32] audit: type=1800 audit(1790614249.216:347): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145218 res=0 errno=0 [ 188.742250][ T32] audit: type=1800 audit(1790614249.326:348): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 188.748314][ T32] audit: type=1800 audit(1790614249.336:349): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145229 res=0 errno=0 [ 188.895297][ T32] audit: type=1800 audit(1790614249.476:350): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 189.002898][ T32] audit: type=1800 audit(1790614249.586:351): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 189.043678][ T32] audit: type=1800 audit(1790614249.626:352): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 189.183503][ T32] audit: type=1800 audit(1790614249.766:353): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 189.215021][ T8519] netlink: 44 bytes leftover after parsing attributes in process `syz.5.814'. [ 189.215045][ T8519] netlink: 43 bytes leftover after parsing attributes in process `syz.5.814'. [ 189.215061][ T8519] netlink: 'syz.5.814': attribute type 6 has an invalid length. [ 189.215074][ T8519] netlink: 'syz.5.814': attribute type 5 has an invalid length. [ 189.215085][ T8519] netlink: 43 bytes leftover after parsing attributes in process `syz.5.814'. [ 189.303134][ T8520] 9p: Bad value for 'rfdno' [ 190.033296][ T8540] loop4: detected capacity change from 0 to 8192 [ 190.049776][ T8540] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.102686][ T8546] loop2: detected capacity change from 0 to 2048 [ 190.144892][ T8546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.218185][ T8545] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 190.221539][ T8545] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 190.221568][ T8545] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.221568][ T8545] [ 190.221582][ T8545] EXT4-fs (loop2): Total free blocks count 0 [ 190.221595][ T8545] EXT4-fs (loop2): Free/Dirty block details [ 190.221630][ T8545] EXT4-fs (loop2): free_blocks=4096 [ 190.221661][ T8545] EXT4-fs (loop2): dirty_blocks=512 [ 190.221673][ T8545] EXT4-fs (loop2): Block reservation details [ 190.221684][ T8545] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 190.315566][ T888] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.360677][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.478242][ T888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 190.478294][ T888] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 190.481306][ T888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.481329][ T888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.497869][ T888] usb 6-1: string descriptor 0 read error: -22 [ 190.498000][ T888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.560916][ T888] usb 6-1: selecting invalid altsetting 1 [ 190.572541][ T888] usb 6-1: unit 6 not found! [ 190.715624][ T5619] Bluetooth: hci5: command 0xfc11 tx timeout [ 190.715750][ T5613] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 191.181537][ T8570] loop2: detected capacity change from 0 to 256 [ 191.246211][ T8570] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 191.452897][ T888] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 191.738969][ T888] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 191.761484][ T888] usb 6-1: USB disconnect, device number 4 [ 191.788019][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.088624][ T8593] FAULT_INJECTION: forcing a failure. [ 192.088624][ T8593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.088659][ T8593] CPU: 0 UID: 0 PID: 8593 Comm: syz.1.843 Not tainted syzkaller #0 PREEMPT(full) [ 192.088705][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.088719][ T8593] Call Trace: [ 192.088727][ T8593] [ 192.088736][ T8593] dump_stack_lvl+0xe8/0x150 [ 192.088773][ T8593] should_fail_ex+0x3eb/0x540 [ 192.088811][ T8593] _copy_from_user+0x2d/0xb0 [ 192.088835][ T8593] __x64_sys_setrlimit+0xcc/0x150 [ 192.088858][ T8593] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 192.088893][ T8593] do_syscall_64+0x166/0x520 [ 192.088921][ T8593] ? trace_irq_disable+0x3b/0x140 [ 192.088949][ T8593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.088971][ T8593] ? clear_bhb_loop+0x70/0xc0 [ 192.088997][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.089018][ T8593] RIP: 0033:0x7f8314f9e159 [ 192.089037][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.089054][ T8593] RSP: 002b:00007f8315edb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 192.089078][ T8593] RAX: ffffffffffffffda RBX: 00007f8315225fa0 RCX: 00007f8314f9e159 [ 192.089093][ T8593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 192.089104][ T8593] RBP: 00007f831503506b R08: 0000000000000000 R09: 0000000000000000 [ 192.089117][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.089128][ T8593] R13: 00007f8315226038 R14: 00007f8315225fa0 R15: 00007fffcb035d48 [ 192.089158][ T8593] [ 192.326995][ T8595] FAULT_INJECTION: forcing a failure. [ 192.326995][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 192.327028][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.2.845 Not tainted syzkaller #0 PREEMPT(full) [ 192.327051][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.327064][ T8595] Call Trace: [ 192.327072][ T8595] [ 192.327081][ T8595] dump_stack_lvl+0xe8/0x150 [ 192.327125][ T8595] should_fail_ex+0x3eb/0x540 [ 192.327163][ T8595] should_failslab+0xa8/0x100 [ 192.327197][ T8595] __kmalloc_noprof+0xf9/0x710 [ 192.327223][ T8595] ? load_msg+0xcc/0x3a0 [ 192.327245][ T8595] ? load_msg+0xcc/0x3a0 [ 192.327378][ T8595] load_msg+0xcc/0x3a0 [ 192.327423][ T8595] do_msgsnd+0x1a9/0x14f0 [ 192.327454][ T8595] ? __pfx_do_futex+0x10/0x10 [ 192.327475][ T8595] ? __fget_files+0x3a2/0x420 [ 192.327505][ T8595] ? lock_acquire+0x115/0x350 [ 192.327539][ T8595] ? __pfx_do_msgsnd+0x10/0x10 [ 192.327570][ T8595] ? __might_fault+0xaf/0x130 [ 192.327596][ T8595] ? __x64_sys_msgsnd+0xee/0x120 [ 192.327625][ T8595] do_syscall_64+0x166/0x520 [ 192.327652][ T8595] ? trace_irq_disable+0x3b/0x140 [ 192.327679][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.327699][ T8595] ? clear_bhb_loop+0x70/0xc0 [ 192.327723][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.327743][ T8595] RIP: 0033:0x7f6310d9e159 [ 192.327762][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.327778][ T8595] RSP: 002b:00007f6311bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 192.327799][ T8595] RAX: ffffffffffffffda RBX: 00007f6311025fa0 RCX: 00007f6310d9e159 [ 192.327815][ T8595] RDX: 0000000000002000 RSI: 0000200000000940 RDI: 0000000000000000 [ 192.327829][ T8595] RBP: 00007f6310e3506b R08: 0000000000000000 R09: 0000000000000000 [ 192.327842][ T8595] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 192.327853][ T8595] R13: 00007f6311026038 R14: 00007f6311025fa0 R15: 00007ffeeaadbe08 [ 192.327882][ T8595] [ 192.657550][ T8610] loop4: detected capacity change from 0 to 512 [ 192.677831][ T8610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.723789][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 192.736070][ T8610] EXT4-fs (loop4): 1 truncate cleaned up [ 192.740565][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.769496][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 192.798394][ T5342] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 192.998228][ T8610] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #12: comm syz.4.849: bad extra_isize 62 (inode size 256) [ 193.095043][ T8610] EXT4-fs (loop4): Remounting filesystem read-only [ 193.299963][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.473132][ T32] kauditd_printk_skb: 115 callbacks suppressed [ 193.473152][ T32] audit: type=1800 audit(1790614254.056:469): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 193.524105][ T32] audit: type=1800 audit(1790614254.106:470): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 193.578520][ T32] audit: type=1800 audit(1790614254.166:471): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 193.582795][ T8634] C: renamed from veth1_to_team (while UP) [ 193.615214][ T8634] netlink: 'syz.2.860': attribute type 3 has an invalid length. [ 193.615229][ T8634] netlink: 116 bytes leftover after parsing attributes in process `syz.2.860'. [ 193.627416][ T8634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.645734][ T32] audit: type=1800 audit(1790614254.206:472): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 193.683314][ T32] audit: type=1800 audit(1790614254.266:473): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 193.796973][ T32] audit: type=1800 audit(1790614254.386:474): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 193.826861][ T5813] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 193.850913][ T32] audit: type=1800 audit(1790614254.436:475): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 193.878432][ T8644] loop1: detected capacity change from 0 to 1024 [ 193.880759][ T8644] EXT4-fs: Ignoring removed orlov option [ 193.885103][ T32] audit: type=1800 audit(1790614254.466:476): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 193.930334][ T32] audit: type=1800 audit(1790614254.516:477): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 193.956777][ T32] audit: type=1800 audit(1790614254.536:478): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 193.980135][ T8644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.016112][ T5813] usb 6-1: New USB device found: idVendor=056a, idProduct=5000, bcdDevice=0.00 [ 194.019037][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 194.019081][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.054705][ T5813] usb 6-1: config 0 descriptor?? [ 194.060349][ T8637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 194.073498][ T8644] EXT4-fs error (device loop1): ext4_rename:3822: inode #12: comm syz.1.867: target of rename is already freed [ 194.155522][ T888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.246382][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246437][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.315987][ T888] usb 5-1: New USB device found: idVendor=28bd, idProduct=0042, bcdDevice=0.00 [ 194.320232][ T888] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.320258][ T888] usb 5-1: config 0 has no interface number 0 [ 194.320295][ T888] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.320321][ T888] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.320341][ T888] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.320382][ T888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.323808][ T888] usb 5-1: config 0 descriptor?? [ 194.343025][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.510225][ T5813] hid_parser_main: 4 callbacks suppressed [ 194.510251][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510282][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510308][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510335][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510361][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510385][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510410][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510435][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510461][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.510487][ T5813] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 194.594625][ T5813] wacom 0003:056A:5000.0004: reserved main item tag 0xe [ 194.625308][ T5813] wacom 0003:056A:5000.0004: hidraw0: USB HID v7f.fd Device [HID 056a:5000] on usb-dummy_hcd.5-1/input0 [ 194.712351][ T1221] usb 6-1: USB disconnect, device number 5 [ 194.740197][ T8660] fido_id[8660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 195.077232][ T888] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0005/input/input17 [ 195.098136][ T8648] loop4: detected capacity change from 0 to 2048 [ 195.115487][ T8648] EXT4-fs (loop4): Invalid log block size: 2147483646 [ 195.431892][ T888] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 195.443156][ T888] usb 5-1: USB disconnect, device number 10 [ 195.702120][ T8670] fido_id[8670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 195.873099][ T8674] tipc: Enabled bearer , priority 0 [ 196.095089][ T8682] loop5: detected capacity change from 0 to 8 [ 196.126788][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 196.185954][ T8678] loop1: detected capacity change from 0 to 8192 [ 196.238337][ T8678] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.290874][ T8682] SQUASHFS error: lzo decompression failed, data probably corrupt [ 196.290910][ T8682] SQUASHFS error: Failed to read block 0x82: -5 [ 196.290924][ T8682] SQUASHFS error: Unable to read metadata cache entry [80] [ 196.290943][ T8682] SQUASHFS error: Unable to read inode 0x11f [ 196.296071][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 196.508308][ T8672] ceph: No mds server is up or the cluster is laggy [ 196.558205][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 196.915727][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.011669][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 197.068586][ T9] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 197.069609][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 197.069638][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.069663][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.069686][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8306, setting to 1024 [ 197.071440][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 197.071463][ T9] usb 2-1: Product: syz [ 197.071478][ T9] usb 2-1: Manufacturer: syz [ 197.156523][ T5813] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.331483][ T5813] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 197.334393][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.334426][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.334458][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.334494][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.364681][ T8689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.364801][ T8689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.378382][ T5813] usb 4-1: config 0 descriptor?? [ 197.422518][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 197.422538][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 197.474263][ T9] DVB: Unable to find symbol cx22700_attach() [ 197.487009][ T9] DVB: Unable to find symbol tda10046_attach() [ 197.487025][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 197.715664][ T9] usb 2-1: USB disconnect, device number 8 [ 197.859544][ T5813] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 198.122512][ T888] usb 4-1: USB disconnect, device number 6 [ 198.444080][ T8746] FAULT_INJECTION: forcing a failure. [ 198.444080][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 198.444111][ T8746] CPU: 1 UID: 0 PID: 8746 Comm: syz.5.905 Not tainted syzkaller #0 PREEMPT(full) [ 198.444135][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.444148][ T8746] Call Trace: [ 198.444156][ T8746] [ 198.444166][ T8746] dump_stack_lvl+0xe8/0x150 [ 198.444202][ T8746] should_fail_ex+0x3eb/0x540 [ 198.444241][ T8746] should_failslab+0xa8/0x100 [ 198.444283][ T8746] __kmalloc_cache_noprof+0x9e/0x600 [ 198.444311][ T8746] ? __kasan_kmalloc+0x93/0xb0 [ 198.444338][ T8746] ? mqueue_init_fs_context+0x55/0x580 [ 198.444370][ T8746] ? mqueue_init_fs_context+0x55/0x580 [ 198.444409][ T8746] mqueue_init_fs_context+0x55/0x580 [ 198.444445][ T8746] alloc_fs_context+0x99e/0xd00 [ 198.444484][ T8746] mq_init_ns+0x10d/0x770 [ 198.444516][ T8746] copy_ipcs+0x460/0x6c0 [ 198.444539][ T8746] create_new_namespaces+0x210/0x6b0 [ 198.444573][ T8746] ? security_capable+0x7e/0x2c0 [ 198.444601][ T8746] unshare_nsproxy_namespaces+0x144/0x190 [ 198.444636][ T8746] ksys_unshare+0x53c/0x890 [ 198.444670][ T8746] ? __pfx_ksys_unshare+0x10/0x10 [ 198.444704][ T8746] ? rcu_is_watching+0x16/0xb0 [ 198.444744][ T8746] __x64_sys_unshare+0x38/0x50 [ 198.444774][ T8746] do_syscall_64+0x166/0x520 [ 198.444801][ T8746] ? trace_irq_disable+0x3b/0x140 [ 198.444829][ T8746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.444850][ T8746] ? clear_bhb_loop+0x70/0xc0 [ 198.444874][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.444893][ T8746] RIP: 0033:0x7fa669d9e159 [ 198.444911][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.444930][ T8746] RSP: 002b:00007fa66ab90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 198.444954][ T8746] RAX: ffffffffffffffda RBX: 00007fa66a025fa0 RCX: 00007fa669d9e159 [ 198.444970][ T8746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 198.444984][ T8746] RBP: 00007fa669e3506b R08: 0000000000000000 R09: 0000000000000000 [ 198.444998][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.445011][ T8746] R13: 00007fa66a026038 R14: 00007fa66a025fa0 R15: 00007ffe21325d48 [ 198.445045][ T8746] [ 198.496198][ T32] kauditd_printk_skb: 101 callbacks suppressed [ 198.496216][ T32] audit: type=1800 audit(1790614259.076:580): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 198.553609][ T32] audit: type=1800 audit(1790614259.136:581): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 198.630733][ T32] audit: type=1326 audit(1790614259.196:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.4.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b24b9e159 code=0x0 [ 198.635493][ T5733] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.730179][ T32] audit: type=1800 audit(1790614259.296:583): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 198.810284][ T8754] loop3: detected capacity change from 0 to 128 [ 198.825031][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 198.832469][ T5733] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 198.834416][ T5733] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 198.834442][ T5733] usb 2-1: config 0 has no interface number 0 [ 198.846696][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.846721][ T5733] usb 2-1: Product: syz [ 198.846734][ T5733] usb 2-1: Manufacturer: syz [ 198.846748][ T5733] usb 2-1: SerialNumber: syz [ 198.869188][ T5733] usb 2-1: config 0 descriptor?? [ 198.882652][ T8754] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 198.882683][ T8754] hpfs: filesystem error: improperly stopped [ 198.882696][ T8754] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 198.882710][ T8754] hpfs: You really don't want any checks? You are crazy... [ 198.882722][ T8754] hpfs: Code page index out of array [ 198.882729][ T8754] hpfs: code page support is disabled [ 198.887836][ T8754] hpfs: hpfs_map_4sectors(): unaligned read [ 198.889109][ T8754] hpfs: hpfs_map_4sectors(): unaligned read [ 198.889127][ T8754] hpfs: filesystem error: unable to find root dir [ 198.904589][ T32] audit: type=1800 audit(1790614259.486:584): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 198.912462][ T32] audit: type=1800 audit(1790614259.486:585): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148177 res=0 errno=0 [ 198.930902][ T32] audit: type=1800 audit(1790614259.516:586): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=148209 res=0 errno=0 [ 198.942859][ T32] audit: type=1800 audit(1790614259.526:587): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=148184 res=0 errno=0 [ 198.942903][ T32] audit: type=1800 audit(1790614259.526:588): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=148185 res=0 errno=0 [ 199.112897][ T32] audit: type=1800 audit(1790614259.696:589): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 199.247682][ T8750] loop5: detected capacity change from 0 to 32768 [ 199.296271][ T8750] JBD2: Ignoring recovery information on journal [ 199.296594][ T5733] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 199.296621][ T5733] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.385567][ T8750] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 199.572357][ T8750] syz.5.907 (8750) used greatest stack depth: 19256 bytes left [ 199.612806][ T6923] ocfs2: Unmounting device (7,5) on (node local) [ 199.621419][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.701945][ T5733] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 199.702209][ T5733] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 199.737847][ T5733] usb 2-1: USB disconnect, device number 9 [ 199.776463][ T9] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 199.777628][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.777652][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.777670][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.777712][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.777738][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.779493][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.779516][ T9] usb 4-1: Product: syz [ 199.779531][ T9] usb 4-1: Manufacturer: syz [ 199.840713][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 199.840739][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.891217][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 199.891236][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 199.926489][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 199.926511][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 200.029042][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 200.029215][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 200.029475][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 200.029499][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 200.029705][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 200.029727][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 200.029950][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 200.029980][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 200.030078][ T9] usb 4-1: USB disconnect, device number 7 [ 200.030184][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 200.030216][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 200.030234][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 200.515045][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 200.530445][ T8784] bond0: (slave bond_slave_0): Releasing backup interface [ 200.600311][ T8784] bond_slave_0: entered promiscuous mode [ 200.600336][ T8784] bond_slave_0: entered allmulticast mode [ 200.696206][ T5733] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.845484][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 200.846192][ T5733] usb 2-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 200.847187][ T5733] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 200.850196][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.850221][ T5733] usb 2-1: Product: syz [ 200.850236][ T5733] usb 2-1: Manufacturer: syz [ 200.850250][ T5733] usb 2-1: SerialNumber: syz [ 200.933943][ T5733] snd-ua101 2-1:1.1: sample format descriptor not found [ 200.933987][ T5733] snd-ua101 2-1:1.0: invalid num_altsetting [ 201.323810][ T5733] usb 2-1: USB disconnect, device number 10 [ 201.572057][ T8792] loop4: detected capacity change from 0 to 131072 [ 201.593071][ T8792] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 201.593109][ T8792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 201.595232][ T8792] F2FS-fs (loop4): invalid crc value [ 201.706340][ T8792] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.719133][ T8806] loop3: detected capacity change from 0 to 1024 [ 201.732138][ T8792] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 201.732165][ T8792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 201.836318][ T8792] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 201.839064][ T8792] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 202.154119][ T8824] loop2: detected capacity change from 0 to 256 [ 202.407827][ T8830] sd 0:0:1:0: device reset [ 203.543984][ T32] kauditd_printk_skb: 70 callbacks suppressed [ 203.544003][ T32] audit: type=1800 audit(1790614264.126:660): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 203.640706][ T32] audit: type=1800 audit(1790614264.226:661): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 203.743682][ T32] audit: type=1800 audit(1790614264.326:662): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 204.116267][ T8891] loop4: detected capacity change from 0 to 1024 [ 204.124857][ T8891] EXT4-fs: Ignoring removed bh option [ 204.169622][ T8891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.173641][ T32] audit: type=1800 audit(1790614264.756:663): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 204.276363][ T8884] loop2: detected capacity change from 0 to 32768 [ 204.299980][ T32] audit: type=1800 audit(1790614264.886:664): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 204.336308][ T8884] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 204.359879][ T32] audit: type=1800 audit(1790614264.946:665): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 204.438321][ T8884] XFS (loop2): Ending clean mount [ 204.614289][ T8884] XFS (loop2): User initiated shutdown received. [ 204.614337][ T8884] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 204.614386][ T8884] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 204.645524][ T32] audit: type=1800 audit(1790614265.206:666): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 204.694687][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.851132][ T5614] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 204.878719][ T32] audit: type=1800 audit(1790614265.456:667): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 205.173568][ T32] audit: type=1800 audit(1790614265.756:668): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0 [ 205.239216][ T32] audit: type=1800 audit(1790614265.826:669): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 205.378305][ T8927] netlink: 'syz.4.958': attribute type 10 has an invalid length. [ 205.387320][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.388515][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.434797][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.434859][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 205.434912][ T8927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.437229][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.437351][ T8927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.480471][ T8927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.482645][ T8929] bridge_slave_1: left allmulticast mode [ 205.482670][ T8929] bridge_slave_1: left promiscuous mode [ 205.482929][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.539094][ T8924] xt_hashlimit: size too large, truncated to 1048576 [ 205.543923][ T8929] bridge_slave_0: left allmulticast mode [ 205.543947][ T8929] bridge_slave_0: left promiscuous mode [ 205.544174][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.565003][ T8928] support for cryptoloop has been removed. Use dm-crypt instead. [ 205.774822][ T8929] bond0: (slave bridge0): Releasing backup interface [ 206.131427][ T8952] loop3: detected capacity change from 0 to 2048 [ 206.159540][ T8953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.632157][ T8953] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 206.650290][ T8953] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 206.695657][ T8953] Remounting filesystem read-only [ 206.701941][ T7778] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 206.751064][ T8975] loop4: detected capacity change from 0 to 8 [ 206.758733][ T8975] Page size > filesystem block size (0). This is currently not supported! [ 207.018968][ T8987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 207.150089][ T8990] loop1: detected capacity change from 0 to 1024 [ 207.225310][ T8990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.381875][ T8990] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 207.476452][ T8990] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 207.483944][ T8990] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 207.550672][ T9002] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 207.684593][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.993808][ T9017] loop3: detected capacity change from 0 to 1024 [ 208.010050][ T9017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.054664][ T9017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 208.054774][ T9017] System zones: 0-1, 3-36 [ 208.094308][ T9017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.203413][ T9023] ------------[ cut here ]------------ [ 208.203428][ T9023] current_phy->suspended [ 208.203450][ T9023] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0x15f4/0x1620, CPU#0: syz.1.988/9023 [ 208.226736][ T9023] Modules linked in: [ 208.230648][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.1.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.241572][ T9023] Tainted: [L]=SOFTLOCKUP [ 208.245954][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.258314][ T9023] RIP: 0010:hwsim_hw_xmit+0x15f4/0x1620 [ 208.263917][ T9023] Code: c6 05 07 b3 1c 09 01 48 c7 c7 20 cd be 8c be 0d 01 00 00 48 c7 c2 c0 cd be 8c e8 67 48 5d fa e9 f4 eb ff ff e8 4d de 81 fa 90 <0f> 0b 90 e9 e1 ea ff ff 89 d9 80 e1 07 38 c1 0f 8c c6 ea ff ff 48 [ 208.284468][ T9023] RSP: 0018:ffffc90006b7f260 EFLAGS: 00010287 [ 208.290610][ T9023] RAX: ffffffff87471fc3 RBX: ffff888026d42d78 RCX: 0000000000080000 [ 208.298666][ T9023] RDX: ffffc90003ee1000 RSI: 000000000000012f RDI: 0000000000000130 [ 208.306698][ T9023] RBP: ffffc90006b7f3d8 R08: ffff888026d426ab R09: 1ffff11004da84d5 [ 208.314689][ T9023] R10: dffffc0000000000 R11: ffffffff874709d0 R12: dffffc0000000000 [ 208.322751][ T9023] R13: ffff888026d42760 R14: ffff888026d42d20 R15: 1ffff11004da84ec [ 208.330788][ T9023] FS: 00007f8315edb6c0(0000) GS:ffff888124cad000(0000) knlGS:0000000000000000 [ 208.339794][ T9023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.346438][ T9023] CR2: 0000001b3361cff8 CR3: 0000000055f04000 CR4: 00000000003526f0 [ 208.354454][ T9023] Call Trace: [ 208.357811][ T9023] [ 208.360769][ T9023] ? ieee802154_hold_queue+0xd1/0x3a0 [ 208.366221][ T9023] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 208.371386][ T9023] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 208.377266][ T9023] ieee802154_tx+0x26d/0x510 [ 208.381888][ T9023] ieee802154_subif_start_xmit+0x110/0x190 [ 208.385897][ T9011] loop4: detected capacity change from 0 to 32768 [ 208.394185][ T9023] dev_hard_start_xmit+0x2cd/0x830 [ 208.399396][ T9023] sch_direct_xmit+0x257/0x4c0 [ 208.404188][ T9023] ? __pfx_sch_direct_xmit+0x10/0x10 [ 208.409573][ T9023] ? ieee802154_hdr_push_addr+0x90/0x160 [ 208.415242][ T9023] __dev_queue_xmit+0x177f/0x3820 [ 208.416609][ T9011] [ 208.416609][ T9011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.416609][ T9011] [ 208.430846][ T9023] ? __dev_queue_xmit+0x29b/0x3820 [ 208.438326][ T9023] ? __might_fault+0xaf/0x130 [ 208.443034][ T9023] ? __pfx___dev_queue_xmit+0x10/0x10 [ 208.448530][ T9023] ? _copy_from_iter+0x2d3/0x1660 [ 208.453590][ T9023] ? __pfx_ieee802154_header_create+0x10/0x10 [ 208.459742][ T9023] ? __pfx__copy_from_iter+0x10/0x10 [ 208.465084][ T9023] ? plist_check_list+0x2ef/0x310 [ 208.470434][ T9023] dgram_sendmsg+0x709/0xe30 [ 208.475071][ T9023] ? __pfx_dgram_sendmsg+0x10/0x10 [ 208.480266][ T9023] ? aa_sock_msg_perm+0x144/0x210 [ 208.485316][ T9023] ? apparmor_socket_sendmsg+0x98/0x360 [ 208.490934][ T9023] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 208.496986][ T9023] sock_sendmsg_nosec+0x13a/0x180 [ 208.502041][ T9023] ____sys_sendmsg+0x54e/0x850 [ 208.506888][ T9023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.512301][ T9023] ? import_iovec+0x73/0xa0 [ 208.516869][ T9023] ___sys_sendmsg+0x2a5/0x360 [ 208.521569][ T9023] ? __lock_acquire+0x747/0x2de0 [ 208.526626][ T9023] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.531851][ T9023] ? futex_wait+0x2a2/0x390 [ 208.536447][ T9023] ? __fget_files+0x3a2/0x420 [ 208.541149][ T9023] ? __fget_files+0x2a/0x420 [ 208.545815][ T9023] __x64_sys_sendmsg+0x1b1/0x290 [ 208.550774][ T9023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.556310][ T9023] do_syscall_64+0x166/0x520 [ 208.560920][ T9023] ? trace_irq_disable+0x3b/0x140 [ 208.566004][ T9023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.572098][ T9023] ? clear_bhb_loop+0x70/0xc0 [ 208.577022][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.582930][ T9023] RIP: 0033:0x7f8314f9e159 [ 208.586936][ T32] kauditd_printk_skb: 38 callbacks suppressed [ 208.586950][ T32] audit: type=1800 audit(1790614269.116:708): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 208.586997][ T32] audit: type=1800 audit(1790614269.166:709): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 208.632859][ T9023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.652551][ T9023] RSP: 002b:00007f8315edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.661036][ T9023] RAX: ffffffffffffffda RBX: 00007f8315225fa0 RCX: 00007f8314f9e159 [ 208.669091][ T9023] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 208.677123][ T9023] RBP: 00007f831503506b R08: 0000000000000000 R09: 0000000000000000 [ 208.685115][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.693163][ T9023] R13: 00007f8315226038 R14: 00007f8315225fa0 R15: 00007fffcb035d48 [ 208.701210][ T9023] [ 208.704243][ T9023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.711532][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.1.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.722396][ T9023] Tainted: [L]=SOFTLOCKUP [ 208.726728][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.736787][ T9023] Call Trace: [ 208.740080][ T9023] [ 208.743025][ T9023] vpanic+0x26f/0x710 [ 208.747038][ T9023] panic+0xc5/0xd0 [ 208.750778][ T9023] ? __pfx_panic+0x10/0x10 [ 208.755220][ T9023] __warn+0x315/0x4c0 [ 208.759224][ T9023] ? hwsim_hw_xmit+0x15f4/0x1620 [ 208.764191][ T9023] ? hwsim_hw_xmit+0x15f4/0x1620 [ 208.769151][ T9023] __report_bug+0x276/0x570 [ 208.773669][ T9023] ? unwind_get_return_address+0x4d/0x90 [ 208.779330][ T9023] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 208.785515][ T9023] ? hwsim_hw_xmit+0x15f4/0x1620 [ 208.790483][ T9023] ? __pfx___report_bug+0x10/0x10 [ 208.795536][ T9023] ? stack_trace_save+0xa9/0x100 [ 208.800491][ T9023] ? __pfx_stack_trace_save+0x10/0x10 [ 208.805852][ T9023] ? __pfx_hlock_conflict+0x10/0x10 [ 208.811051][ T9023] ? check_path+0x21/0x40 [ 208.815391][ T9023] ? hwsim_hw_xmit+0x15f4/0x1620 [ 208.820341][ T9023] report_bug+0x16b/0x220 [ 208.824657][ T9023] ? hwsim_hw_xmit+0x15f4/0x1620 [ 208.829579][ T9023] ? hwsim_hw_xmit+0x15f6/0x1620 [ 208.834508][ T9023] handle_bug+0x9c/0x200 [ 208.838770][ T9023] exc_invalid_op+0x1a/0x50 [ 208.843264][ T9023] asm_exc_invalid_op+0x1a/0x20 [ 208.848122][ T9023] RIP: 0010:hwsim_hw_xmit+0x15f4/0x1620 [ 208.853656][ T9023] Code: c6 05 07 b3 1c 09 01 48 c7 c7 20 cd be 8c be 0d 01 00 00 48 c7 c2 c0 cd be 8c e8 67 48 5d fa e9 f4 eb ff ff e8 4d de 81 fa 90 <0f> 0b 90 e9 e1 ea ff ff 89 d9 80 e1 07 38 c1 0f 8c c6 ea ff ff 48 [ 208.873252][ T9023] RSP: 0018:ffffc90006b7f260 EFLAGS: 00010287 [ 208.879341][ T9023] RAX: ffffffff87471fc3 RBX: ffff888026d42d78 RCX: 0000000000080000 [ 208.887330][ T9023] RDX: ffffc90003ee1000 RSI: 000000000000012f RDI: 0000000000000130 [ 208.895318][ T9023] RBP: ffffc90006b7f3d8 R08: ffff888026d426ab R09: 1ffff11004da84d5 [ 208.903305][ T9023] R10: dffffc0000000000 R11: ffffffff874709d0 R12: dffffc0000000000 [ 208.911297][ T9023] R13: ffff888026d42760 R14: ffff888026d42d20 R15: 1ffff11004da84ec [ 208.919297][ T9023] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 208.924443][ T9023] ? hwsim_hw_xmit+0x15f3/0x1620 [ 208.929435][ T9023] ? ieee802154_hold_queue+0xd1/0x3a0 [ 208.934835][ T9023] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 208.939986][ T9023] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 208.945820][ T9023] ieee802154_tx+0x26d/0x510 [ 208.950438][ T9023] ieee802154_subif_start_xmit+0x110/0x190 [ 208.956277][ T9023] dev_hard_start_xmit+0x2cd/0x830 [ 208.961429][ T9023] sch_direct_xmit+0x257/0x4c0 [ 208.966214][ T9023] ? __pfx_sch_direct_xmit+0x10/0x10 [ 208.971515][ T9023] ? ieee802154_hdr_push_addr+0x90/0x160 [ 208.977171][ T9023] __dev_queue_xmit+0x177f/0x3820 [ 208.982233][ T9023] ? __dev_queue_xmit+0x29b/0x3820 [ 208.987369][ T9023] ? __might_fault+0xaf/0x130 [ 208.992064][ T9023] ? __pfx___dev_queue_xmit+0x10/0x10 [ 208.997455][ T9023] ? _copy_from_iter+0x2d3/0x1660 [ 209.002507][ T9023] ? __pfx_ieee802154_header_create+0x10/0x10 [ 209.008604][ T9023] ? __pfx__copy_from_iter+0x10/0x10 [ 209.013927][ T9023] ? plist_check_list+0x2ef/0x310 [ 209.018972][ T9023] dgram_sendmsg+0x709/0xe30 [ 209.023593][ T9023] ? __pfx_dgram_sendmsg+0x10/0x10 [ 209.028727][ T9023] ? aa_sock_msg_perm+0x144/0x210 [ 209.033774][ T9023] ? apparmor_socket_sendmsg+0x98/0x360 [ 209.039337][ T9023] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 209.045359][ T9023] sock_sendmsg_nosec+0x13a/0x180 [ 209.050423][ T9023] ____sys_sendmsg+0x54e/0x850 [ 209.055220][ T9023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.060538][ T9023] ? import_iovec+0x73/0xa0 [ 209.065066][ T9023] ___sys_sendmsg+0x2a5/0x360 [ 209.069764][ T9023] ? __lock_acquire+0x747/0x2de0 [ 209.074724][ T9023] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.079950][ T9023] ? futex_wait+0x2a2/0x390 [ 209.084500][ T9023] ? __fget_files+0x3a2/0x420 [ 209.089192][ T9023] ? __fget_files+0x2a/0x420 [ 209.093813][ T9023] __x64_sys_sendmsg+0x1b1/0x290 [ 209.098772][ T9023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.104271][ T9023] do_syscall_64+0x166/0x520 [ 209.108879][ T9023] ? trace_irq_disable+0x3b/0x140 [ 209.113919][ T9023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.119993][ T9023] ? clear_bhb_loop+0x70/0xc0 [ 209.124688][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.130592][ T9023] RIP: 0033:0x7f8314f9e159 [ 209.135025][ T9023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.154640][ T9023] RSP: 002b:00007f8315edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.163075][ T9023] RAX: ffffffffffffffda RBX: 00007f8315225fa0 RCX: 00007f8314f9e159 [ 209.171064][ T9023] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 209.179043][ T9023] RBP: 00007f831503506b R08: 0000000000000000 R09: 0000000000000000 [ 209.187025][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.195008][ T9023] R13: 00007f8315226038 R14: 00007f8315225fa0 R15: 00007fffcb035d48 [ 209.203008][ T9023] [ 209.206183][ T9023] Kernel Offset: disabled [ 209.210499][ T9023] Rebooting in 86400 seconds..