last executing test programs: 3m47.316593148s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@nouid32}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 3m46.795420089s ago: executing program 0 (id=13): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @mcast2, 0xd}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x4001c00) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 3m44.815379194s ago: executing program 0 (id=24): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000", @ANYRES16, @ANYBLOB="e045d7a87e41b1be5b76bfe4748327db6ef1c683152b97bcad1d3fc8f24e2902a3126e6838bae6a0"], 0x1, 0x6b4, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 3m44.52383202s ago: executing program 32 (id=24): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000", @ANYRES16, @ANYBLOB="e045d7a87e41b1be5b76bfe4748327db6ef1c683152b97bcad1d3fc8f24e2902a3126e6838bae6a0"], 0x1, 0x6b4, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 51.091630074s ago: executing program 3 (id=1437): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 50.894140013s ago: executing program 3 (id=1438): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd, 0x0, 0xfffc}}}}}}, 0x0) 50.655654019s ago: executing program 3 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") syz_open_procfs(0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x3, 0x1}]}, 0x14, 0x0) 50.180011581s ago: executing program 3 (id=1445): clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180)={[0x403]}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 49.397530264s ago: executing program 3 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 49.217712679s ago: executing program 3 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/49, 0x31) 34.118735432s ago: executing program 33 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/49, 0x31) 4.362093713s ago: executing program 5 (id=1874): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,coherency=full,resv_level=00000000000000000000\x00\x00\x00\x00\x00\x00\x00\x00ocks,coherency=full,inode64,\x00'], 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xfc937e2fe0fdebf6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}) 3.849434903s ago: executing program 1 (id=1877): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYRES8], 0x21, 0x554e, &(0x7f00000058c0)="$eJzs3E1vG0UYAOBx0vSbEiEO3LqoQkqk2qrTD8EtQCs+RKqowIETOLZjubG9Uew4IScOHBEH/gkCiRNHfgMHztwQBxA3JJB3JqgpTUGKEzfJ80jrd2d2992ZTWTp3V05AKfWbPbHb6VwJVwIIUyHEC6HUKyX0lJYjOGlEMLVEMLUI0sp9f/TcTaEcDGEcGWUPOYspU1fXR9eu/3ru79//+O5M5e+/u6nyc0amLRXQgjd9bi+1Y0xb8X4MPXXhu0idm8NU4wbumupnce41VwpMmzVdverFfFmK+6fr2/2R3G1U6uPYqu9WvSv9+IJ+8PWbp7igIe1jaLdaK4Usd3Pi9jaiePa3onfbTv9QczTSPk+LdKHwWA3xv7mdjPOZ32tiPXeIPXHvHmjuT2KwxTT6UI97zSKcawc5Eo/015+r93b3M6GzY1+O+9ltyvVVyvVO+XqRt5oDpq3yrVu486tbK7VGe1WHjRr3cVWnrc6zUo9785nc616vVytZnN3myvtWi+rVis3KzfKt+fT2vXsrfsfZp1GNjeKb7R7m4N2p5+t5htZPGI+W6jcfG0+u1bN3l9azpYf3Lu3tPzBx3c/uv/60jtvZjOjv9q/h5XNLdxYWChXb5QXqvMHuwDP9vxT2t1hfZ4GPcb5w4GUJj0AgONH/Q9MwuHV/xsPQnh6/b/73fa0+n/6P+r/oP4fi2NV/572+v8Q5g8Hov4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fp755u1iZTa2L6X+51LXC6ldCiFMhRD+eoLpcHZPzumUZ2af/WceG8MPpVBkGJ3jXFouhhAW0/Ln84d9FQAAAODk+vazq1/Gaj1+zE56QIxZKS1PFG/aTF3+ZIwnm5n9ZUzZpkYfL44pWfH/fSZsjylbcQPr/JiSxVtuZ8aV7X+Z3hPOPxJKMUw9fsTYZgsAAEzM3krgaKsQAAAAjtIX+25ZO9JxcMSKB8PpXfz0Av+5GNLDvgux7dEfAAAAHF/7vhgOAAAAnBhF/e/3/wAAAOBki7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzNzr3cJg7EcQD+G+PF+9Ki1d63ldygjJSQY44RBaQJSiAtpAFqILeUEEHkB1GIiIDYjkX0fZI9sWX9ZsbhwMygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj1ki+ndzf/bpjnrTQNFQNpKdwAAAIA9VtliWv4xrq5/1vd/17f+1tdJRAwiYt/wPY1vO5lpnZO983z2pg33EWVCUceoPn5ExEV1bOJP128BAAAAvqRhcVrO5pN64b08jftuFY0d/T/M63Lw67KlqpOIyMaPLaUNirx/LYWVn+9hXO+t53TlBFbevFWVcspt2FbaUaof22xn7fJXRVIVB95Ka30HAAA+UbpTHBqF+N4PAABwvq76bgBd+H7wiSS2S5kvS4Gjqsh3Igz6AQAA4HwlfTcAAAAA6Fw5/j9l/7/oZ/+/eLL/HwAAAHxYtf8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXVpli+lyNp80zVlvmmmnNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD83Z3P/QEIE5CHIAQSAyzUdUtLN8QAihj4E5Ci1C2hLj/aDLSqkLKwocxdEIwIIYHC1n+AqRtSK3UpWwcPRWJhMbrzXXxpKtVtlDsn+Xykd+9rx7n3fWfJ8vfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI0+mMZJduhM4rh47s7DGytZf/eRPnNr495i1rI4qjPp/eG16oOo21wiAAAAHB5JWd+HEO6nm0tZH3fy+j8tX5PV/D++MInLev7Rur/sy9o/a3/8/uCVrYE6k3Gyk15YHQ5O7kyltXeznG8vPvEVrfzK5/dekvwNiT9ef3mU5tcz+v727Q/beXikjmwBgGdxouyLoPw+lPX9JhMD4NBoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0Xp4royjEMJiaxpn7j68sfK4/tbGvcWynb15c6N6zuwUaQjhwupwcLLGucy7q9euX1oeDgdX6g9eDyE0Nfr7xfQvfTrDi0No5PrsVfDfeDx+qt862nzOuwri4s2el3z2R/Dkz45OtJefTAAAHDRp0bKvkffTzaXsuWghhPFP2+v/typxmLH+f/DZ2TvVsar1f7+2Gc6/3trlr3pXr11/Z/Xy8sXBxcEX757qv9c/fe7MmXO9/F5Jzx0TAAAAdqddtGr9Hy/sXP8/XonDjPX/1z/0v52O9Fd+VP/vNF30azoTAACAw+2lN/7953HbLKN2O3yzvLZ2pT85bj0+NTk2kOpTO1K0av2fLDSdFQAAAFCH0Xq0bf3/fCUOM67/P//zq79Wz5mEEI4V6/8nVr4cnq9vOnOtjj8nbnqOAAAANOtY0arr/2m+/z/e2vIQhxDefnMSF/8GcKb6P/nou1+qYyWV/f+n65viXIq7k+uR990QWt1tP/6zscQAAAA4kI4WLSv2/043lz7/7fgnbfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2fwAAAP//Fwg9JA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) write$FUSE_IOCTL(r1, &(0x7f0000006000)={0x20, 0x0, 0x0, {0x600, 0x0, 0x2, 0x8}}, 0x20) 3.427065245s ago: executing program 5 (id=1881): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34020000", @ANYRES16=r2, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="1802028040000140240001007072696f72697479000000000000000000000000000000000000100000000000050003000e"], 0x234}, 0x1, 0x0, 0x0, 0x4000431}, 0xc040) 2.971350103s ago: executing program 5 (id=1883): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x50, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x61}, @broadcast, @broadcast, @initial, {0x8, 0x14}}, 0x1800, 0x8, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xd, 0x5]}]}, 0x50}, 0x1, 0x0, 0x0, 0x63586791227cfe5}, 0x0) 2.697159727s ago: executing program 5 (id=1885): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$get_keyring_id(0x0, r0, 0x4) 2.586642388s ago: executing program 2 (id=1886): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:00/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='00:00\x00', 0x6) 2.561082333s ago: executing program 4 (id=1887): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) 2.402449503s ago: executing program 5 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 -4.0 +4.1 +4.2\n', 0x15) close(r0) 2.239442615s ago: executing program 4 (id=1889): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="edae", 0x2}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, &(0x7f0000003480)=""/203, 0xcb}, 0x9}], 0x1, 0x40010110, 0x0) 2.134082286s ago: executing program 5 (id=1890): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.127938427s ago: executing program 2 (id=1891): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000001040)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x890, 0x0, 0xfc, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000001c00)='./bus/file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 2.007446661s ago: executing program 4 (id=1893): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f00000006c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 1.933405835s ago: executing program 1 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004480)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000600), 0x100, 0x3f00) 1.711320498s ago: executing program 2 (id=1896): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002800)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noquota}, {@delalloc}, {@noblock_validity}, {@nodioread_nolock}, {@errors_remount}]}, 0x11, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.574192105s ago: executing program 4 (id=1898): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.464638066s ago: executing program 1 (id=1899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000500) 1.399569629s ago: executing program 1 (id=1900): syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x4, 0x71}, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x1000004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac4, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x8, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x9, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x2, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x961e, 0x7, 0xaf, 0x20000006, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 1.216749104s ago: executing program 2 (id=1903): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 1.178899311s ago: executing program 4 (id=1904): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4533, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000140, 0x0, 0x0) 1.015433263s ago: executing program 4 (id=1905): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x135) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff00000007050102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000fc0)={{0x108, 0x0, 0x80, 0x235, 0x7a, 0x7, 0x17d, 0x7}}, 0x20) 1.015248673s ago: executing program 6 (id=1906): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 1.002134606s ago: executing program 2 (id=1907): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) creat(&(0x7f0000000080)='./file1\x00', 0x1) 935.738548ms ago: executing program 6 (id=1908): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x409, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10102, 0x0) 823.394601ms ago: executing program 6 (id=1909): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002007379"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 690.442406ms ago: executing program 6 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) 427.679787ms ago: executing program 1 (id=1911): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x1f, 0xd1, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) 385.019686ms ago: executing program 6 (id=1912): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b1, 0x0, 0x7}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 59.370869ms ago: executing program 1 (id=1913): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x7}, 0x1c) 35.356904ms ago: executing program 6 (id=1914): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="ddb4830bf3c217e5334a349f9399b4e54be21715e9787fa378042d6be5f56f2862ea27a9070c4a480d344d1b9a81ce58636277f89f95bedf9156f299e6a9a72efea51ab1e86e8cdcff0666f8d8f69bdcbe5eea0e3df843da3f2efc56d8b909ea4ab2cdd2728ba7c790c0ab0352e8b02d4d65dbe7e07ba59e0be19aa2f7edcaff99e34409524b587e316865df7ad92c7e9e00000000"}, {0x0, 0x5f}], 0x2) 0s ago: executing program 2 (id=1915): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a7256", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 242.868273][ T8155] ptp ptp0: new virtual clock ptp1 [ 242.880259][ T8155] ptp ptp0: guarantee physical clock free running [ 242.901707][ T8155] ptp ptp0: delete virtual clock ptp1 [ 242.967238][ T8155] ptp ptp0: only physical clock in use now [ 243.067979][ T4327] usb 5-1: USB disconnect, device number 15                                                                                                                                                                                                                                                                     [ 244.449190][ T4768] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 244.480550][ T4768] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 244.499070][ T8205] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 244.528355][ T8205] FAT-fs (loop5): Filesystem has been set read-only [ 244.534202][ T6484] usb 5-1: Using ep0 maxpacket: 16 syzkaller syzkaller login: [ 244.547046][ T6484] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 244.558518][ T8205] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 244.576843][ T6484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.594650][ T6484] usb 5-1: Product: syz [ 244.596777][ T8205] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 244.602173][ T6484] usb 5-1: Manufacturer: syz [ 244.612017][ T6484] usb 5-1: SerialNumber: syz [ 244.612441][ T8210] loop3: detected capacity change from 0 to 128 [ 244.651298][ T6484] usb 5-1: config 0 descriptor?? [ 244.670062][ T6484] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 244.698352][ T8210] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 244.710275][ T6484] usb 5-1: Detected FT-X [ 244.762130][ T8208] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 244.882783][ T6484] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 245.058005][ T4768] em28xx 3-1:0.0: chip ID is em2765 [ 245.317233][ T6484] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 245.552132][ T4768] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 245.580738][ T4768] em28xx 3-1:0.0: board has no eeprom [ 245.596249][ T4326] usb 5-1: USB disconnect, device number 16 [ 245.614162][ T4326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 245.625849][ T4326] ftdi_sio 5-1:0.0: device disconnected [ 245.666601][ T8235] loop5: detected capacity change from 0 to 1024 [ 245.683220][ T4768] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 245.701789][ T4768] em28xx 3-1:0.0: dvb set to bulk mode. [ 245.709648][ T4627] em28xx 3-1:0.0: Binding DVB extension [ 245.732894][ T8235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 245.782535][ T4768] usb 3-1: USB disconnect, device number 19 [ 245.823318][ T8235] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.824339][ T4768] em28xx 3-1:0.0: Disconnecting em28xx [ 245.877673][ T4627] em28xx 3-1:0.0: Registering input extension [ 245.887578][ T8234] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.1284: Freeing blocks not in datazone - block = 0, count = 16 [ 245.896145][ T4768] em28xx 3-1:0.0: Closing input extension [ 245.924460][ T8234] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1284: bg 0: block 112: padding at end of block bitmap is not set [ 245.984092][ T8234] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 245.998429][ T4768] em28xx 3-1:0.0: Freeing device [ 246.012954][ T8244] loop3: detected capacity change from 0 to 128 [ 246.047598][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 246.051872][ T8244] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 246.123138][ T4627] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 246.156171][ T8244] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 246.184060][ T8244] EXT4-fs (loop3): shut down requested (2) [ 246.214683][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1288'. [ 246.270407][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 246.306900][ T4627] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.335153][ T4627] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 246.351845][ T8253] loop2: detected capacity change from 0 to 64 [ 246.364776][ T4627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 246.385023][ T4627] usb 2-1: Product: syz [ 246.389345][ T4627] usb 2-1: Manufacturer: syz [ 246.444314][ T4627] usb 2-1: selecting invalid altsetting 1 [ 246.469907][ T4627] dvb_ttusb_budget: ttusb_init_controller: error [ 246.497494][ T4627] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 246.622484][ T8260] netlink: 'syz.5.1295': attribute type 3 has an invalid length. [ 246.667411][ T8233] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 246.727666][ T4627] DVB: Unable to find symbol cx22700_attach() [ 246.801695][ T4327] kernel read not supported for file /dsp (pid: 4327 comm: kworker/0:5) [ 246.866636][ T4627] DVB: Unable to find symbol tda10046_attach() [ 246.887582][ T4627] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 246.952130][ T4627] usb 2-1: USB disconnect, device number 15 [ 247.222882][ T8281] FAULT_INJECTION: forcing a failure. [ 247.222882][ T8281] name failslab, interval 1, probability 0, space 0, times 0 [ 247.283145][ T8281] CPU: 0 PID: 8281 Comm: syz.4.1303 Not tainted syzkaller #0 [ 247.290621][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.300909][ T8281] Call Trace: [ 247.304237][ T8281] [ 247.307292][ T8281] dump_stack_lvl+0x188/0x24e [ 247.312198][ T8281] ? show_regs_print_info+0x12/0x12 [ 247.317715][ T8281] ? load_image+0x410/0x410 [ 247.322270][ T8281] ? __might_sleep+0xd0/0xd0 [ 247.326889][ T8281] ? __lock_acquire+0x7ea0/0x7ea0 [ 247.331994][ T8281] should_fail_ex+0x390/0x4c0 [ 247.336768][ T8281] should_failslab+0x5/0x20 [ 247.341316][ T8281] slab_pre_alloc_hook+0x59/0x300 [ 247.346383][ T8281] ? copy_net_ns+0x17c/0x5b0 [ 247.351012][ T8281] __kmem_cache_alloc_node+0x4f/0x270 [ 247.356412][ T8281] ? copy_net_ns+0x17c/0x5b0 [ 247.361058][ T8281] kmalloc_trace+0x26/0xe0 [ 247.365497][ T8281] copy_net_ns+0x17c/0x5b0 [ 247.370036][ T8281] create_new_namespaces+0x3ce/0x700 [ 247.375352][ T8281] unshare_nsproxy_namespaces+0x116/0x160 [ 247.381179][ T8281] ksys_unshare+0x4f6/0x8e0 [ 247.385796][ T8281] ? sighand_ctor+0x40/0x40 [ 247.390327][ T8281] ? lock_chain_count+0x20/0x20 [ 247.395204][ T8281] ? syscall_enter_from_user_mode+0x21/0x80 [ 247.401132][ T8281] __x64_sys_unshare+0x34/0x40 [ 247.406002][ T8281] do_syscall_64+0x4c/0xa0 [ 247.410490][ T8281] ? clear_bhb_loop+0x60/0xb0 [ 247.415182][ T8281] ? clear_bhb_loop+0x60/0xb0 [ 247.419874][ T8281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.425896][ T8281] RIP: 0033:0x7f83ae39e159 [ 247.430346][ T8281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.450149][ T8281] RSP: 002b:00007f83af291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 247.458588][ T8281] RAX: ffffffffffffffda RBX: 00007f83ae625fa0 RCX: 00007f83ae39e159 [ 247.466583][ T8281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 247.474745][ T8281] RBP: 00007f83ae43506b R08: 0000000000000000 R09: 0000000000000000 [ 247.482912][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.490923][ T8281] R13: 00007f83ae626038 R14: 00007f83ae625fa0 R15: 00007ffc3bd384e8 [ 247.498942][ T8281] [ 247.502001][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.796971][ T8297] loop3: detected capacity change from 0 to 1024 [ 247.828047][ T8297] EXT4-fs: Ignoring removed bh option [ 247.879291][ T8297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.908537][ T8297] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.979828][ T8297] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.1310: lblock 3 mapped to illegal pblock 3 (length 3) [ 248.003778][ T8297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 248.016441][ T8297] EXT4-fs (loop3): This should not happen!! Data will be lost [ 248.016441][ T8297] [ 248.030585][ T8307] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1310: lblock 3 mapped to illegal pblock 3 (length 1) [ 248.062404][ T8307] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1310: lblock 3 mapped to illegal pblock 3 (length 1) [ 248.090419][ T8307] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1310: lblock 3 mapped to illegal pblock 3 (length 1) [ 248.130617][ T8307] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1310: lblock 3 mapped to illegal pblock 3 (length 1) [ 248.201664][ T8297] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.1310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 248.224225][ T8311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1314'. [ 248.270240][ T8311] (unnamed net_device) (uninitialized): option ad_select: invalid value (10) [ 248.286686][ T8297] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem [ 248.337204][ T8318] loop1: detected capacity change from 0 to 256 [ 248.414701][ T8318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 248.464329][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 248.531453][ T4327] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 248.723186][ T6484] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 248.739365][ T4327] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 248.749219][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.763625][ T4327] usb 5-1: Product: syz [ 248.767963][ T4327] usb 5-1: Manufacturer: syz [ 248.774113][ T4327] usb 5-1: SerialNumber: syz [ 248.796460][ T4327] usb 5-1: config 0 descriptor?? [ 248.923273][ T6484] usb 3-1: Using ep0 maxpacket: 8 [ 248.930993][ T6484] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 248.959364][ T6484] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 248.984214][ T6484] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.004718][ T6484] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.020241][ T6484] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.031810][ T8337] FAULT_INJECTION: forcing a failure. [ 249.031810][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 249.043189][ T6484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.052440][ T8337] CPU: 1 PID: 8337 Comm: syz.5.1327 Not tainted syzkaller #0 [ 249.060929][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.071203][ T8337] Call Trace: [ 249.074524][ T8337] [ 249.077498][ T8337] dump_stack_lvl+0x188/0x24e [ 249.082230][ T8337] ? show_regs_print_info+0x12/0x12 [ 249.087480][ T8337] ? load_image+0x410/0x410 [ 249.092062][ T8337] ? __might_sleep+0xd0/0xd0 [ 249.096711][ T8337] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.101800][ T8337] should_fail_ex+0x390/0x4c0 [ 249.106537][ T8337] should_failslab+0x5/0x20 [ 249.111088][ T8337] slab_pre_alloc_hook+0x59/0x300 [ 249.116291][ T8337] kmem_cache_alloc+0x56/0x2f0 [ 249.121102][ T8337] ? mas_alloc_nodes+0x2ec/0x880 [ 249.126175][ T8337] mas_alloc_nodes+0x2ec/0x880 [ 249.130995][ T8337] mas_preallocate+0x162/0x3b0 [ 249.135827][ T8337] __vma_adjust+0x2ff/0x1d00 [ 249.140507][ T8337] ? validate_mm+0x2e0/0x2e0 [ 249.145145][ T8337] ? up_write+0x1b6/0x410 [ 249.149527][ T8337] ? anon_vma_clone+0x475/0x4c0 [ 249.154419][ T8337] __split_vma+0x3a2/0x4f0 [ 249.158983][ T8337] madvise_update_vma+0x4ca/0xad0 [ 249.164087][ T8337] do_madvise+0xfae/0x3520 [ 249.168562][ T8337] ? release_firmware_map_entry+0x187/0x187 [ 249.174585][ T8337] ? plist_add+0x3d7/0x490 [ 249.179144][ T8337] ? madvise_set_anon_name+0x420/0x420 [ 249.184650][ T8337] ? schedule+0xd0/0x180 [ 249.188985][ T8337] ? futex_wait_queue+0x23/0x1b0 [ 249.193983][ T8337] ? futex_wait_queue+0x134/0x1b0 [ 249.199143][ T8337] ? futex_unqueue+0xc7/0xf0 [ 249.203982][ T8337] ? futex_wait+0x4a3/0x5c0 [ 249.208519][ T8337] ? futex_wait_setup+0x270/0x270 [ 249.213702][ T8337] ? file_end_write+0x156/0x250 [ 249.218867][ T8337] ? vfs_write+0x777/0x9a0 [ 249.223324][ T8337] ? do_futex+0x310/0x320 [ 249.227797][ T8337] ? __ia32_sys_get_robust_list+0x100/0x100 [ 249.233734][ T8337] ? lock_chain_count+0x20/0x20 [ 249.238642][ T8337] __x64_sys_madvise+0xa2/0xb0 [ 249.243542][ T8337] do_syscall_64+0x4c/0xa0 [ 249.247996][ T8337] ? clear_bhb_loop+0x60/0xb0 [ 249.252703][ T8337] ? clear_bhb_loop+0x60/0xb0 [ 249.257411][ T8337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.263327][ T8337] RIP: 0033:0x7f9ec079e159 [ 249.267778][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.285001][ T6484] usb 3-1: GET_CAPABILITIES returned 0 [ 249.287493][ T8337] RSP: 002b:00007f9ec1714028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 249.287525][ T8337] RAX: ffffffffffffffda RBX: 00007f9ec0a25fa0 RCX: 00007f9ec079e159 [ 249.287542][ T8337] RDX: 000000000000000c RSI: 0000000000003000 RDI: 0000200000000000 [ 249.293518][ T6484] usbtmc 3-1:16.0: can't read capabilities [ 249.301516][ T8337] RBP: 00007f9ec083506b R08: 0000000000000000 R09: 0000000000000000 [ 249.301537][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.301550][ T8337] R13: 00007f9ec0a26038 R14: 00007f9ec0a25fa0 R15: 00007ffce8bc0668 [ 249.301582][ T8337] [ 249.354618][ T4326] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 249.369579][ T4327] usb 5-1: Firmware version (0.0) predates our first public release. [ 249.380961][ T4327] usb 5-1: Please update to version 0.2 or newer [ 249.388946][ T4327] usb 5-1: Firmware: build [ 249.541335][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1330'. [ 249.554664][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 249.564751][ T4326] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 249.564790][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 249.576816][ T4326] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 249.585809][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.596973][ T4326] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.612648][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1330'. [ 249.624467][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1330'. [ 249.638541][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1330'. [ 249.669319][ T4326] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 249.669379][ T4327] usb 5-1: USB disconnect, device number 17 [ 249.689075][ T4326] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 249.705012][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.725872][ T7] usb 3-1: USB disconnect, device number 20 [ 249.751824][ T8331] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 249.989403][ T4326] usbhid 2-1:2.0: can't add hid device: -71 [ 249.999856][ T4326] usbhid: probe of 2-1:2.0 failed with error -71 [ 250.009816][ T4326] usb 2-1: USB disconnect, device number 16 [ 250.238476][ T8362] loop3: detected capacity change from 0 to 4096 [ 250.523185][ T4326] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 250.723102][ T4326] usb 2-1: Using ep0 maxpacket: 32 [ 250.730981][ T4326] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 250.749258][ T4326] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.759118][ T4326] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 250.780006][ T4326] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 250.789880][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.831317][ T26] audit: type=1800 audit(1791035009.746:28): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1344" name="scan_secs" dev="configfs" ino=47454 res=0 errno=0 [ 250.854834][ T4627] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 250.873269][ T4768] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 250.881986][ T4326] ldusb 2-1:2.0: LD USB Device #0 now attached to major 180 minor 0 [ 250.972538][ T8380] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1346'. [ 251.039887][ T8331] ldusb 2-1:2.0: Write buffer overflow, 1 bytes dropped [ 251.049235][ T8331] ldusb 2-1:2.0: Couldn't submit interrupt_out_urb -90 [ 251.064723][ T4621] usb 2-1: USB disconnect, device number 17 [ 251.079150][ T4621] ldusb 2-1:2.0: LD USB Device #0 now disconnected [ 251.087793][ T4768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.100237][ T4627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 251.112758][ T4768] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.124339][ T4627] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 251.136595][ T4768] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 251.150282][ T4768] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 251.159676][ T4768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.169056][ T4627] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 251.179263][ T4627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.191056][ T4627] usb 4-1: Product: syz [ 251.195950][ T4627] usb 4-1: Manufacturer: syz [ 251.202325][ T4768] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 251.210007][ T4627] usb 4-1: SerialNumber: syz [ 251.215024][ T4768] keyspan 5-1:1.0: unsupported endpoint type 0 [ 251.223907][ T4768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 251.246636][ T4768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 251.254584][ T4768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 251.266585][ T4768] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 251.277491][ T4768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 251.287290][ T4768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 251.297039][ T4768] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 251.413141][ T4326] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 251.442260][ T4627] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.595986][ T4326] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.629317][ T4326] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 251.642946][ T4627] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 251.658634][ T4627] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 251.683192][ T4326] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 251.699877][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.709433][ T4326] usb 6-1: Product: syz [ 251.727031][ T4326] usb 6-1: Manufacturer: syz [ 251.732404][ T4326] usb 6-1: SerialNumber: syz [ 252.013180][ T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 252.056694][ T4627] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 252.069282][ T4627] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 252.138042][ T8397] loop1: detected capacity change from 0 to 40427 [ 252.157916][ T8397] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 252.166388][ T8397] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 252.188056][ T8397] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 252.198216][ T8397] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 252.209497][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 252.224704][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.225057][ T8397] F2FS-fs (loop1): invalid crc value [ 252.237617][ T7] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 252.249737][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.261908][ T8397] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.269666][ T4627] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 252.271593][ T7] usb 3-1: config 0 descriptor?? [ 252.309074][ T4326] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.342041][ T4627] usb 4-1: USB disconnect, device number 17 [ 252.451411][ T8397] F2FS-fs (loop1): Start checkpoint disabled! [ 252.479386][ T8397] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 252.488817][ T8397] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 252.517624][ T26] audit: type=1800 audit(1791035011.436:29): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1353" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 252.535884][ T8397] syz.1.1353: attempt to access beyond end of device [ 252.535884][ T8397] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 252.538817][ T26] audit: type=1800 audit(1791035011.446:30): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1353" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 252.563653][ T8397] F2FS-fs (loop1) : inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x290/0x6c0 [ 252.694148][ T4342] kworker/u4:6: attempt to access beyond end of device [ 252.694148][ T4342] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 252.721582][ T7] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:258A:6A88.0015/input/input38 [ 252.812352][ T7] itetech 0003:258A:6A88.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 252.927986][ T4326] usb 6-1: failed to enable PITCH for EP 0x82 [ 252.953265][ T4326] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 252.990666][ T4326] usb 6-1: clock source 0 is not valid, cannot use [ 253.016395][ T8404] loop3: detected capacity change from 0 to 128 [ 253.029364][ T4326] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 253.036827][ T4326] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 253.038941][ T7] usb 3-1: USB disconnect, device number 21 [ 253.094227][ T8404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 253.106400][ T8401] fido_id[8401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 253.107154][ T8405] loop1: detected capacity change from 0 to 128 [ 253.167762][ T8404] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.206047][ T4326] usb 6-1: USB disconnect, device number 18 [ 253.209210][ T6484] usb 5-1: USB disconnect, device number 18 [ 253.223460][ T8405] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 253.247729][ T8405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.347339][ T6484] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 253.381425][ T6484] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 253.420252][ T6484] keyspan 5-1:1.0: device disconnected [ 253.451319][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.492266][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 253.596029][ T7288] udevd[7288]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 253.711627][ T8413] loop5: detected capacity change from 0 to 128 [ 253.731140][ T8413] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.248205][ T8435] loop5: detected capacity change from 0 to 16 [ 254.278757][ T8435] erofs: (device loop5): mounted with root inode @ nid 36. [ 254.325066][ T8435] program syz.5.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.349850][ T7] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 254.560076][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 254.580294][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.613199][ T7] usb 3-1: config 13 has an invalid interface number: 79 but max is 0 [ 254.622152][ T7] usb 3-1: config 13 has no interface number 0 [ 254.628935][ T7] usb 3-1: config 13 interface 79 has no altsetting 0 [ 254.638837][ T7] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=b6.bf [ 254.665842][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.695744][ T7] usb 3-1: Product: syz [ 254.699988][ T7] usb 3-1: Manufacturer: syz [ 254.723278][ T7] usb 3-1: SerialNumber: syz [ 254.952082][ T7] usb-storage 3-1:13.79: USB Mass Storage device detected [ 255.085786][ T7] gspca_main: pac207-2.14.0 probing 093a:2476 [ 255.124115][ T7] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 255.157109][ T7] usb 3-1: USB disconnect, device number 22 [ 255.375085][ T8470] netlink: 192852 bytes leftover after parsing attributes in process `syz.4.1381'. [ 255.403516][ T8469] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 255.418700][ T8470] netlink: get zone limit has 4 unknown bytes [ 255.609361][ T8479] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.865702][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872121][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.225697][ T8498] loop1: detected capacity change from 0 to 32768 [ 256.282833][ T8498] XFS (loop1): Mounting V5 Filesystem [ 256.349740][ T8498] XFS (loop1): Ending clean mount [ 256.410450][ T8498] XFS (loop1): User initiated shutdown received. [ 256.431660][ T8498] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 256.446782][ T8498] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 256.511907][ T4276] XFS (loop1): Unmounting Filesystem [ 256.889966][ T8500] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 257.219982][ T8523] loop5: detected capacity change from 0 to 512 [ 257.368317][ T8523] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.380128][ T8527] loop3: detected capacity change from 0 to 1024 [ 257.403345][ T8523] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.428454][ T8527] EXT4-fs: Ignoring removed oldalloc option [ 257.434834][ T4326] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.492477][ T8527] EXT4-fs: Ignoring removed oldalloc option [ 257.522619][ T8519] loop4: detected capacity change from 0 to 131072 [ 257.541119][ T8519] F2FS-fs (loop4): Found nat_bits in checkpoint [ 257.554364][ T8527] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.605704][ T8519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 257.647612][ T4326] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 257.671816][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.680458][ T8519] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix. [ 257.700819][ T8527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.764451][ T4326] usb 2-1: config 0 descriptor?? [ 257.771292][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 257.810427][ T4326] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 257.855213][ T8527] EXT4-fs (loop3): shut down requested (2) [ 258.005089][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 258.443158][ T4768] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 258.533308][ T6484] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 258.604319][ T4326] gspca_stv06xx: I2C: Read error writing address: -71 [ 258.607004][ T8547] loop5: detected capacity change from 0 to 32768 [ 258.619415][ T4326] usb 2-1: USB disconnect, device number 18 [ 258.644941][ T4768] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.694354][ T4768] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 258.716644][ T4768] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 258.731609][ T4768] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 258.747878][ T8547] XFS (loop5): Mounting V5 Filesystem [ 258.749001][ T4768] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.753860][ T6484] usb 3-1: Using ep0 maxpacket: 16 [ 258.763296][ T4768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.776359][ T4768] usb 4-1: Product: syz [ 258.780562][ T4768] usb 4-1: Manufacturer: syz [ 258.785388][ T4768] usb 4-1: SerialNumber: syz [ 258.794746][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 258.804472][ T4768] cdc_mbim 4-1:1.0: skipping garbage [ 258.820435][ T6484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.842722][ T6484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.853245][ T6484] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.866563][ T6484] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.876125][ T6484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.887007][ T6484] usb 3-1: config 0 descriptor?? [ 258.905652][ T8547] XFS (loop5): Ending clean mount [ 258.930909][ T8547] XFS (loop5): User initiated shutdown received. [ 258.937853][ T8547] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 258.952436][ T8547] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 259.000940][ T4424] XFS (loop5): Unmounting Filesystem [ 259.019116][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.043238][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.302113][ T8566] loop1: detected capacity change from 0 to 1024 [ 259.315192][ T6484] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 259.342027][ T8566] EXT4-fs: Ignoring removed bh option [ 259.353682][ T6484] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 259.400987][ T6484] microsoft 0003:045E:07DA.0016: no inputs found [ 259.411603][ T6484] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 259.429596][ T8570] loop4: detected capacity change from 0 to 1024 [ 259.449104][ T8566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.461313][ T8570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.481731][ T8570] EXT4-fs: Ignoring removed orlov option [ 259.602582][ T7] usb 3-1: USB disconnect, device number 23 [ 259.633337][ T8574] fido_id[8574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 259.635862][ T8570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.686775][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.694295][ T8539] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.701932][ T4768] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 259.723201][ T6484] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 259.751647][ T4768] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 259.811167][ T4768] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:88:7b:a7:eb:3d [ 259.853782][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 259.865984][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 259.941466][ T6484] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.975043][ T6484] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 259.999686][ T6484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 260.033275][ T6484] usb 6-1: Product: syz [ 260.043335][ T6484] usb 6-1: Manufacturer: syz [ 260.052841][ T7] usb 4-1: USB disconnect, device number 18 [ 260.078515][ T7] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 260.098797][ T6484] usb 6-1: selecting invalid altsetting 1 [ 260.106144][ T6484] dvb_ttusb_budget: ttusb_init_controller: error [ 260.112859][ T6484] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 260.285620][ T8569] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 260.357031][ T6484] DVB: Unable to find symbol cx22700_attach() [ 260.521858][ T6484] DVB: Unable to find symbol tda10046_attach() [ 260.537470][ T6484] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 260.586559][ T6484] usb 6-1: USB disconnect, device number 19 [ 260.786186][ T8604] FAULT_INJECTION: forcing a failure. [ 260.786186][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 260.836999][ T8604] CPU: 0 PID: 8604 Comm: syz.3.1421 Not tainted syzkaller #0 [ 260.844478][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.854822][ T8604] Call Trace: [ 260.858243][ T8604] [ 260.861212][ T8604] dump_stack_lvl+0x188/0x24e [ 260.866019][ T8604] ? show_regs_print_info+0x12/0x12 [ 260.871332][ T8604] ? load_image+0x410/0x410 [ 260.875876][ T8604] ? __might_sleep+0xd0/0xd0 [ 260.880478][ T8604] ? __lock_acquire+0x7ea0/0x7ea0 [ 260.885542][ T8604] should_fail_ex+0x390/0x4c0 [ 260.890252][ T8604] should_failslab+0x5/0x20 [ 260.894770][ T8604] slab_pre_alloc_hook+0x59/0x300 [ 260.899900][ T8604] ? slab_post_alloc_hook+0x67/0x490 [ 260.905300][ T8604] kmem_cache_alloc_bulk+0x42/0x4e0 [ 260.910556][ T8604] ? kmem_cache_alloc+0x1b2/0x2f0 [ 260.915693][ T8604] ? mas_alloc_nodes+0x2ec/0x880 [ 260.920656][ T8604] mas_alloc_nodes+0x449/0x880 [ 260.925448][ T8604] mas_preallocate+0x162/0x3b0 [ 260.930231][ T8604] __vma_adjust+0x2ff/0x1d00 [ 260.934850][ T8604] ? clear_nonspinnable+0x60/0x60 [ 260.939893][ T8604] ? validate_mm+0x2e0/0x2e0 [ 260.944522][ T8604] ? up_write+0x1b6/0x410 [ 260.948960][ T8604] __split_vma+0x3a2/0x4f0 [ 260.953641][ T8604] mlock_fixup+0x490/0x580 [ 260.958117][ T8604] apply_vma_lock_flags+0x257/0x3b0 [ 260.963373][ T8604] ? do_mlock+0x640/0x640 [ 260.967804][ T8604] ? rwsem_write_trylock+0x135/0x1c0 [ 260.973118][ T8604] ? do_mlock+0x194/0x640 [ 260.977571][ T8604] do_mlock+0x4d6/0x640 [ 260.981753][ T8604] ? lru_gen_add_folio+0xe20/0xe20 [ 260.986972][ T8604] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.993057][ T8604] ? lock_chain_count+0x20/0x20 [ 260.997934][ T8604] ? syscall_enter_from_user_mode+0x21/0x80 [ 261.004112][ T8604] __x64_sys_mlock+0x5c/0x70 [ 261.008722][ T8604] do_syscall_64+0x4c/0xa0 [ 261.013155][ T8604] ? clear_bhb_loop+0x60/0xb0 [ 261.017848][ T8604] ? clear_bhb_loop+0x60/0xb0 [ 261.022537][ T8604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.028527][ T8604] RIP: 0033:0x7f1d9cf9e159 [ 261.033056][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.052948][ T8604] RSP: 002b:00007f1d9deb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 261.061654][ T8604] RAX: ffffffffffffffda RBX: 00007f1d9d225fa0 RCX: 00007f1d9cf9e159 [ 261.069639][ T8604] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 261.077801][ T8604] RBP: 00007f1d9d03506b R08: 0000000000000000 R09: 0000000000000000 [ 261.086135][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.094119][ T8604] R13: 00007f1d9d226038 R14: 00007f1d9d225fa0 R15: 00007ffe3934e9f8 [ 261.102121][ T8604] [ 261.350401][ T8618] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 261.367670][ T8610] IPVS: Scheduler module ip_vs_sip not found [ 261.387596][ T8618] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 261.430300][ T8620] loop4: detected capacity change from 0 to 256 [ 261.477147][ T8620] exfat: Deprecated parameter 'utf8' [ 261.504055][ T8620] exfat: Deprecated parameter 'namecase' [ 261.509859][ T8620] exfat: Deprecated parameter 'namecase' [ 261.543971][ T8620] exfat: Deprecated parameter 'utf8' [ 261.577952][ T8620] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 261.583643][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 261.603119][ T8624] netlink: 'syz.5.1428': attribute type 30 has an invalid length. [ 261.647795][ T8624] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.657860][ T8624] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.666675][ T8624] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.675526][ T8624] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.678348][ T8626] loop2: detected capacity change from 0 to 4096 [ 261.787872][ T8632] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.799949][ T8624] device vxlan0 entered promiscuous mode [ 261.851187][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 261.913587][ T8627] netlink: 'syz.5.1428': attribute type 30 has an invalid length. [ 261.967915][ T8627] device vxlan1 entered promiscuous mode [ 262.109083][ T8637] loop4: detected capacity change from 0 to 512 [ 262.293269][ T8637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.325345][ T8637] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.471158][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 262.527126][ T8647] loop1: detected capacity change from 0 to 4096 [ 262.564009][ T8647] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 262.575805][ T4627] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 262.642016][ T8647] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 262.659989][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 262.682046][ T8647] ntfs3: loop1: mft corrupted [ 262.691879][ T8647] ntfs3: loop1: Failed to load $Extend. [ 262.746419][ T4326] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 262.767557][ T8658] ip_tables: iptables: counters copy to user failed while replacing table [ 262.785466][ T4627] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.811071][ T4627] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 262.866580][ T4627] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 262.904414][ T4627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.945109][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.967085][ T4627] usb 6-1: Product: syz [ 262.989617][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.003091][ T4627] usb 6-1: Manufacturer: syz [ 263.007879][ T4627] usb 6-1: SerialNumber: syz [ 263.032822][ T4326] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.072362][ T4326] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.086126][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.114145][ T4326] usb 3-1: config 0 descriptor?? [ 263.120321][ T8667] loop3: detected capacity change from 0 to 256 [ 263.212217][ T8667] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 263.269251][ T4627] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 263.471865][ T4627] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 263.491323][ T4627] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 263.557837][ T4326] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 263.597136][ T4326] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 263.873462][ T4627] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 263.897592][ T4627] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 264.074136][ T4627] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 264.142082][ T4627] usb 6-1: USB disconnect, device number 20 [ 264.409383][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.044327][ T4621] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 265.061643][ T8700] loop4: detected capacity change from 0 to 40427 [ 265.110506][ T8700] F2FS-fs (loop4): invalid crc value [ 265.165890][ T8700] F2FS-fs (loop4): Found nat_bits in checkpoint [ 265.248987][ T4621] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 265.267367][ T8700] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 265.277068][ T4621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.301518][ T4621] usb 6-1: Product: syz [ 265.306170][ T8700] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 265.346730][ T4621] usb 6-1: Manufacturer: syz [ 265.351772][ T4621] usb 6-1: SerialNumber: syz [ 265.392125][ T4621] usb 6-1: config 0 descriptor?? [ 265.507298][ T8700] syz.4.1451: attempt to access beyond end of device [ 265.507298][ T8700] loop4: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 265.690438][ T4285] syz-executor: attempt to access beyond end of device [ 265.690438][ T4285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.852262][ T4621] usb 6-1: Firmware version (0.0) predates our first public release. [ 265.872483][ T4621] usb 6-1: Please update to version 0.2 or newer [ 265.902564][ T4621] usb 6-1: Firmware: build [ 266.024029][ T4627] usb 3-1: USB disconnect, device number 24 [ 266.140891][ T4621] usb 6-1: USB disconnect, device number 21 [ 266.257934][ T4627] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 266.398556][ T8728] device dummy0 entered promiscuous mode [ 266.407350][ T8728] device netdevsim0 entered promiscuous mode [ 266.421510][ T8728] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 266.431746][ T8728] Cannot create hsr debugfs directory [ 266.445882][ T4627] usb 3-1: Using ep0 maxpacket: 32 [ 266.481235][ T4627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.500485][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 266.516710][ T4627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.531893][ T4627] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 266.562131][ T4627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.593818][ T4627] usb 3-1: config 0 descriptor?? [ 266.715830][ T8732] loop4: detected capacity change from 0 to 128 [ 266.827228][ T8731] syz.4.1462: attempt to access beyond end of device [ 266.827228][ T8731] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 267.010169][ T4627] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 267.030227][ T4627] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 267.075460][ T4627] ft260 0003:0403:6030.0018: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 267.207924][ T4627] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 267.448219][ T8743] capability: warning: `syz.4.1466' uses 32-bit capabilities (legacy support in use) [ 267.481584][ T8745] loop5: detected capacity change from 0 to 2048 [ 267.675872][ T7] usb 3-1: USB disconnect, device number 25 [ 267.862877][ T8750] device vxcan3 entered promiscuous mode [ 268.187054][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.197302][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.213775][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.973137][ T4621] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 268.995730][ T8778] loop5: detected capacity change from 0 to 8 [ 269.037974][ T8778] SQUASHFS error: Unknown LZ4 version [ 269.044789][ T8778] squashfs image failed sanity check [ 269.145759][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 269.155346][ T4621] usb 2-1: Using ep0 maxpacket: 8 [ 269.162782][ T4621] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 269.183584][ T4621] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.200885][ T4621] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.219257][ T4621] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.239763][ T4621] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.274377][ T4621] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.301220][ T4621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.462278][ T8786] loop4: detected capacity change from 0 to 256 [ 269.532354][ T8786] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.561323][ T4621] usb 2-1: usb_control_msg returned -32 [ 269.569134][ T4621] usbtmc 2-1:16.0: can't read capabilities [ 269.623423][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 269.842436][ T8791] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.962602][ T8795] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 269.980874][ T7] usb 2-1: USB disconnect, device number 19 [ 270.098047][ T8797] loop2: detected capacity change from 0 to 2048 [ 270.184906][ T8797] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 270.203215][ T8797] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.384723][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 270.534565][ T8805] loop2: detected capacity change from 0 to 256 [ 270.562900][ T26] audit: type=1800 audit(1791035029.476:31): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1485" name="file1" dev="loop4" ino=1048655 res=0 errno=0 [ 271.218796][ T8819] loop5: detected capacity change from 0 to 1764 [ 271.587199][ T8827] loop5: detected capacity change from 0 to 1024 [ 271.638480][ T8827] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.653260][ T8827] EXT4-fs: Ignoring removed oldalloc option [ 271.671195][ T8814] loop4: detected capacity change from 0 to 40427 [ 271.688678][ T8827] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 271.705335][ T8814] F2FS-fs (loop4): invalid crc value [ 271.716825][ T8827] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.752611][ T8814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.819522][ T8827] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 271.979723][ T8814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 272.024091][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 272.218665][ T4285] syz-executor: attempt to access beyond end of device [ 272.218665][ T4285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.236839][ T8822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.273215][ T8822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.299757][ T8822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.317313][ T8822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.653278][ T6484] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 272.853328][ T6484] usb 2-1: Using ep0 maxpacket: 32 [ 272.878615][ T6484] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 272.907277][ T6484] usb 2-1: config 0 has no interface number 0 [ 272.933361][ T6484] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.955410][ T6484] usb 2-1: config 0 interface 85 has no altsetting 0 [ 272.965421][ T6484] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 272.983486][ T6484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.007043][ T6484] usb 2-1: Product: syz [ 273.011277][ T6484] usb 2-1: Manufacturer: syz [ 273.033199][ T6484] usb 2-1: SerialNumber: syz [ 273.059041][ T6484] usb 2-1: config 0 descriptor?? [ 273.333127][ T4327] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 273.429166][ T8862] loop4: detected capacity change from 0 to 2048 [ 273.529071][ T8865] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.543299][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.552108][ T4327] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 273.601031][ T4327] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 273.659398][ T4327] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 273.683766][ T6484] appletouch 2-1:0.85: Geyser mode initialized. [ 273.704643][ T8862] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 273.715040][ T6484] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input40 [ 273.724846][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.765728][ T4327] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 273.814058][ T4327] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 273.814105][ T8868] loop5: detected capacity change from 0 to 8192 [ 273.916588][ T4621] usb 2-1: USB disconnect, device number 20 [ 273.916652][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 274.047129][ T4621] appletouch 2-1:0.85: input: appletouch disconnected [ 274.163308][ T8851] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 274.180570][ T8851] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 274.213788][ T8851] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 274.325521][ T8851] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 274.343270][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.349576][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.349669][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.368503][ T4327] usb 3-1: USB disconnect, device number 26 [ 274.379277][ T4327] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 274.397317][ T4327] spcp8x5 3-1:1.0: device disconnected [ 274.687644][ T8880] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 274.707128][ T8883] loop5: detected capacity change from 0 to 512 [ 274.744247][ T8883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.751122][ T8883] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.778342][ T8883] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 274.809063][ T8883] EXT4-fs (loop5): 1 truncate cleaned up [ 274.852188][ T8883] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 275.130416][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 275.427023][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'. [ 275.532860][ T8901] loop2: detected capacity change from 0 to 1024 [ 275.594331][ T8901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.621633][ T8903] loop4: detected capacity change from 0 to 1024 [ 275.683633][ T8901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 275.902564][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 276.065718][ T8917] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1534'. [ 276.440132][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 276.489689][ T8931] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 276.523629][ T8935] FAULT_INJECTION: forcing a failure. [ 276.523629][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 276.529622][ T8931] netlink: 'syz.4.1542': attribute type 2 has an invalid length. [ 276.560453][ T8937] loop2: detected capacity change from 0 to 1024 [ 276.575552][ T8935] CPU: 1 PID: 8935 Comm: syz.1.1543 Not tainted syzkaller #0 [ 276.583264][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.593369][ T8935] Call Trace: [ 276.596706][ T8935] [ 276.599676][ T8935] dump_stack_lvl+0x188/0x24e [ 276.604494][ T8935] ? show_regs_print_info+0x12/0x12 [ 276.609718][ T8935] ? load_image+0x410/0x410 [ 276.614254][ T8935] ? __might_sleep+0xd0/0xd0 [ 276.618865][ T8935] ? __lock_acquire+0x7ea0/0x7ea0 [ 276.623923][ T8935] should_fail_ex+0x390/0x4c0 [ 276.628715][ T8935] should_failslab+0x5/0x20 [ 276.633328][ T8935] slab_pre_alloc_hook+0x59/0x300 [ 276.638399][ T8935] ? __split_vma+0x4f0/0x4f0 [ 276.643030][ T8935] kmem_cache_alloc+0x56/0x2f0 [ 276.647815][ T8935] ? vm_area_dup+0x23/0x1a0 [ 276.652427][ T8935] vm_area_dup+0x23/0x1a0 [ 276.656771][ T8935] __split_vma+0xb9/0x4f0 [ 276.661139][ T8935] ? split_vma+0x70/0xf0 [ 276.665403][ T8935] mlock_fixup+0x508/0x580 [ 276.669850][ T8935] apply_vma_lock_flags+0x257/0x3b0 [ 276.675089][ T8935] ? do_mlock+0x640/0x640 [ 276.679472][ T8935] ? rwsem_write_trylock+0x135/0x1c0 [ 276.684893][ T8935] ? do_mlock+0x194/0x640 [ 276.689284][ T8935] do_mlock+0x4d6/0x640 [ 276.693573][ T8935] ? lru_gen_add_folio+0xe20/0xe20 [ 276.698803][ T8935] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 276.704833][ T8935] ? lock_chain_count+0x20/0x20 [ 276.709797][ T8935] ? syscall_enter_from_user_mode+0x21/0x80 [ 276.715723][ T8935] __x64_sys_mlock+0x5c/0x70 [ 276.720332][ T8935] do_syscall_64+0x4c/0xa0 [ 276.724877][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 276.729567][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 276.734262][ T8935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.740167][ T8935] RIP: 0033:0x7ff50739e159 [ 276.744597][ T8935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.764411][ T8935] RSP: 002b:00007ff5082fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 276.772850][ T8935] RAX: ffffffffffffffda RBX: 00007ff507625fa0 RCX: 00007ff50739e159 [ 276.780843][ T8935] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 276.789360][ T8935] RBP: 00007ff50743506b R08: 0000000000000000 R09: 0000000000000000 [ 276.797341][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.805324][ T8935] R13: 00007ff507626038 R14: 00007ff507625fa0 R15: 00007ffcb1d68a48 [ 276.813324][ T8935] [ 277.052774][ T8948] FAULT_INJECTION: forcing a failure. [ 277.052774][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 277.075855][ T8937] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 277.095063][ T8948] CPU: 1 PID: 8948 Comm: syz.4.1549 Not tainted syzkaller #0 [ 277.102500][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.112589][ T8948] Call Trace: [ 277.115900][ T8948] [ 277.118864][ T8948] dump_stack_lvl+0x188/0x24e [ 277.123686][ T8948] ? show_regs_print_info+0x12/0x12 [ 277.128978][ T8948] ? load_image+0x410/0x410 [ 277.133536][ T8948] ? __lock_acquire+0x7ea0/0x7ea0 [ 277.138621][ T8948] should_fail_ex+0x390/0x4c0 [ 277.143343][ T8948] should_failslab+0x5/0x20 [ 277.147905][ T8948] slab_pre_alloc_hook+0x59/0x300 [ 277.152983][ T8948] kmem_cache_alloc+0x56/0x2f0 [ 277.157788][ T8948] ? __alloc_file+0x25/0x230 [ 277.162430][ T8948] __alloc_file+0x25/0x230 [ 277.166894][ T8948] alloc_empty_file+0x90/0x180 [ 277.171672][ T8948] dentry_open+0x57/0x120 [ 277.176019][ T8948] __se_sys_open_tree+0x715/0x870 [ 277.181065][ T8948] ? do_syscall_64+0x4c/0xa0 [ 277.185693][ T8948] ? __x64_sys_open_tree+0x80/0x80 [ 277.190831][ T8948] ? lockdep_hardirqs_on+0x94/0x140 [ 277.196052][ T8948] do_syscall_64+0x4c/0xa0 [ 277.200566][ T8948] ? clear_bhb_loop+0x60/0xb0 [ 277.205260][ T8948] ? clear_bhb_loop+0x60/0xb0 [ 277.209981][ T8948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.216065][ T8948] RIP: 0033:0x7f83ae39e159 [ 277.220498][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.240179][ T8948] RSP: 002b:00007f83af291028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 277.248628][ T8948] RAX: ffffffffffffffda RBX: 00007f83ae625fa0 RCX: 00007f83ae39e159 [ 277.256713][ T8948] RDX: 0000000000000101 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 277.264714][ T8948] RBP: 00007f83ae43506b R08: 0000000000000000 R09: 0000000000000000 [ 277.272720][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.280796][ T8948] R13: 00007f83ae626038 R14: 00007f83ae625fa0 R15: 00007ffc3bd384e8 [ 277.288887][ T8948] [ 277.305047][ T8937] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 277.353657][ T8937] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1545: Failed to acquire dquot type 0 [ 277.388074][ T8937] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 277.441790][ T8937] EXT4-fs (loop2): 1 truncate cleaned up [ 277.454966][ T8937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.517474][ T26] audit: type=1800 audit(1791035036.436:32): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1545" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 277.886326][ T8961] loop5: detected capacity change from 0 to 2048 [ 277.930531][ T8961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.967778][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 278.233150][ T4621] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 278.423332][ T4621] usb 2-1: Using ep0 maxpacket: 32 [ 278.430329][ T7] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 278.439066][ T4621] usb 2-1: config 7 has an invalid interface number: 2 but max is 0 [ 278.463462][ T4621] usb 2-1: config 7 has no interface number 0 [ 278.464073][ T7] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 278.516431][ T4621] usb 2-1: config 7 interface 2 has no altsetting 0 [ 278.552813][ T4621] usb 2-1: New USB device found, idVendor=05ac, idProduct=1871, bcdDevice=82.84 [ 278.599266][ T4621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.629336][ T4621] usb 2-1: Product: syz [ 278.639989][ T4621] usb 2-1: Manufacturer: syz [ 278.650770][ T4621] usb 2-1: SerialNumber: syz [ 278.747020][ T7] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 278.924243][ T4621] usb 2-1: USB disconnect, device number 21 [ 279.153301][ T4768] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 279.265090][ T4327] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 279.343324][ T4768] usb 5-1: Using ep0 maxpacket: 8 [ 279.350574][ T4768] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.370084][ T4768] usb 5-1: config 179 has no interface number 0 [ 279.380816][ T4768] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 279.413193][ T4768] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 279.433145][ T4768] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.463179][ T8972] ceph: No mds server is up or the cluster is laggy [ 279.480937][ T4768] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 279.505621][ T4768] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.543286][ T4768] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 279.552405][ T4768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.621852][ T8985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.772836][ T8999] ALSA: mixer_oss: invalid OSS volume 'syz_tun' [ 279.819266][ T9001] loop5: detected capacity change from 0 to 256 [ 279.865257][ T9001] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 280.063394][ T4768] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input41 [ 280.424111][ T9009] loop2: detected capacity change from 0 to 1024 [ 280.461873][ T4327] usb 5-1: USB disconnect, device number 19 [ 280.461990][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 280.476541][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 280.484952][ T4327] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 280.567971][ T4293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.582362][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.594224][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.602669][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.611728][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.619230][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.959370][ T9010] chnl_net:caif_netlink_parms(): no params data found [ 281.023354][ T4627] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 281.141393][ T26] audit: type=1800 audit(1791035040.056:33): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1582" name="c_chmask" dev="configfs" ino=48986 res=0 errno=0 [ 281.219073][ T9010] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.235178][ T4627] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.251903][ T4627] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 281.263875][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.273156][ T4627] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.274680][ T9010] device bridge_slave_0 entered promiscuous mode [ 281.282350][ T4627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.297627][ T4627] usb 6-1: Product: syz [ 281.304172][ T4627] usb 6-1: Manufacturer: syz [ 281.308971][ T4627] usb 6-1: SerialNumber: syz [ 281.325087][ T9010] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.332363][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.342273][ T9010] device bridge_slave_1 entered promiscuous mode [ 281.383938][ T9010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.394517][ T9038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 281.407131][ T9010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.499880][ T9010] team0: Port device team_slave_0 added [ 281.550838][ T9010] team0: Port device team_slave_1 added [ 281.616332][ T9010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.624256][ T9010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.658015][ T9010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.717006][ T9010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.728240][ T9046] ip_tables: iptables: counters copy to user failed while replacing table [ 281.743490][ T9010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.813053][ T9010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.941278][ T9010] device hsr_slave_0 entered promiscuous mode [ 281.949905][ T9010] device hsr_slave_1 entered promiscuous mode [ 281.957099][ T9010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.969842][ T9010] Cannot create hsr debugfs directory [ 282.173425][ T6484] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 282.310681][ T9010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.322473][ T9010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.336247][ T9010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.367546][ T9010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.376080][ T6484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.396571][ T4627] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 282.406986][ T6484] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.419501][ T4627] cdc_ncm 6-1:1.0: bind() failure [ 282.427244][ T6484] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 282.445909][ T4627] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 282.446624][ T6484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.475722][ T4627] cdc_ncm 6-1:1.1: bind() failure [ 282.510186][ T4627] usb 6-1: USB disconnect, device number 22 [ 282.609340][ T9010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.636852][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.654926][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.663332][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 282.687042][ T9010] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.714608][ T6484] usb 3-1: USB disconnect, device number 27 [ 282.731036][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.763476][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.787262][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.794518][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.817459][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.836676][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.852775][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.870446][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.877725][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.880029][ T9074] loop4: detected capacity change from 0 to 128 [ 282.912917][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.946173][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.961744][ T9074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.988852][ T9078] kernel read not supported for file /events/enable (pid: 9078 comm: syz.1.1602) [ 283.013308][ T9074] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.022412][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.045472][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.101257][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.110537][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.119970][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.129451][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.150602][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.163919][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.185976][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.200189][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.205778][ T9082] FAULT_INJECTION: forcing a failure. [ 283.205778][ T9082] name failslab, interval 1, probability 0, space 0, times 0 [ 283.215729][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.233593][ T9082] CPU: 0 PID: 9082 Comm: syz.1.1604 Not tainted syzkaller #0 [ 283.241039][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 283.242458][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 283.251117][ T9082] Call Trace: [ 283.251130][ T9082] [ 283.251139][ T9082] dump_stack_lvl+0x188/0x24e [ 283.251172][ T9082] ? show_regs_print_info+0x12/0x12 [ 283.251195][ T9082] ? load_image+0x410/0x410 [ 283.251226][ T9082] ? __lock_acquire+0x7ea0/0x7ea0 [ 283.251258][ T9082] should_fail_ex+0x390/0x4c0 [ 283.251292][ T9082] should_failslab+0x5/0x20 [ 283.251310][ T9082] slab_pre_alloc_hook+0x59/0x300 [ 283.251339][ T9082] kmem_cache_alloc+0x56/0x2f0 [ 283.251360][ T9082] ? security_inode_alloc+0x30/0x110 [ 283.251386][ T9082] security_inode_alloc+0x30/0x110 [ 283.251410][ T9082] inode_init_always+0x910/0xc90 [ 283.251440][ T9082] new_inode_pseudo+0x91/0x1c0 [ 283.251466][ T9082] create_pipe_files+0x4c/0x6b0 [ 283.327054][ T9082] __do_pipe_flags+0x46/0x1f0 [ 283.331856][ T9082] do_pipe2+0xa7/0x190 [ 283.335945][ T9082] ? _compound_head+0x120/0x120 [ 283.340819][ T9082] ? lock_chain_count+0x20/0x20 [ 283.345692][ T9082] ? syscall_enter_from_user_mode+0x21/0x80 [ 283.351617][ T9082] __x64_sys_pipe+0x36/0x40 [ 283.356320][ T9082] do_syscall_64+0x4c/0xa0 [ 283.360750][ T9082] ? clear_bhb_loop+0x60/0xb0 [ 283.365449][ T9082] ? clear_bhb_loop+0x60/0xb0 [ 283.370137][ T9082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.376133][ T9082] RIP: 0033:0x7ff50739e159 [ 283.380565][ T9082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.400273][ T9082] RSP: 002b:00007ff5082fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 283.408790][ T9082] RAX: ffffffffffffffda RBX: 00007ff507625fa0 RCX: 00007ff50739e159 [ 283.416778][ T9082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.424767][ T9082] RBP: 00007ff50743506b R08: 0000000000000000 R09: 0000000000000000 [ 283.432751][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.440820][ T9082] R13: 00007ff507626038 R14: 00007ff507625fa0 R15: 00007ffcb1d68a48 [ 283.449162][ T9082] [ 283.533922][ T6484] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 283.735307][ T6484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.766836][ T6484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.793310][ T6484] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.808950][ T4627] kernel read not supported for file /video7 (pid: 4627 comm: kworker/1:13) [ 283.821456][ T6484] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.858586][ T6484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.889328][ T6484] usb 6-1: config 0 descriptor?? [ 284.038827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.049856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.067930][ T9010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.149996][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 284.314757][ T6484] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 284.353605][ T6484] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 284.418126][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1614'. [ 284.749029][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 284.953065][ T6484] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 285.024415][ T9133] loop4: detected capacity change from 0 to 128 [ 285.052894][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.087868][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.102457][ T9133] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 285.125860][ T9133] hpfs: filesystem error: improperly stopped [ 285.137843][ T9133] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 285.151431][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.154005][ T9133] hpfs: You really don't want any checks? You are crazy... [ 285.165644][ T6484] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 285.181494][ T9133] hpfs: hpfs_map_sector(): read error [ 285.187243][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.189354][ T6484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.206846][ T9010] device veth0_vlan entered promiscuous mode [ 285.222022][ T9133] hpfs: code page support is disabled [ 285.223078][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.238601][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.251375][ T9133] hpfs: hpfs_map_4sectors(): unaligned read [ 285.268155][ T9133] hpfs: hpfs_map_4sectors(): unaligned read [ 285.283138][ T9133] hpfs: filesystem error: unable to find root dir [ 285.292454][ T9010] device veth1_vlan entered promiscuous mode [ 285.371130][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.378528][ T9133] hpfs: hpfs_map_4sectors(): unaligned read [ 285.380745][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.395662][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.405465][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.415900][ T9133] hpfs: hpfs_map_sector(): read error [ 285.417500][ T9010] device veth0_macvtap entered promiscuous mode [ 285.435111][ T9010] device veth1_macvtap entered promiscuous mode [ 285.512586][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.534129][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.545005][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.562482][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.574544][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.585456][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.595570][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.606422][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.616339][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.627638][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.631174][ T27] usb 6-1: USB disconnect, device number 23 [ 285.639325][ T9010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.662429][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.690894][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.717026][ T9141] FAULT_INJECTION: forcing a failure. [ 285.717026][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 285.730982][ T9141] CPU: 0 PID: 9141 Comm: syz.4.1622 Not tainted syzkaller #0 [ 285.737156][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.738617][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.738634][ T9141] Call Trace: [ 285.738642][ T9141] [ 285.738651][ T9141] dump_stack_lvl+0x188/0x24e [ 285.754888][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.756869][ T9141] ? show_regs_print_info+0x12/0x12 [ 285.781173][ T9141] ? load_image+0x410/0x410 [ 285.785682][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.785706][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.796112][ T9141] ? __might_sleep+0xd0/0xd0 [ 285.796138][ T9141] ? __lock_acquire+0x7ea0/0x7ea0 [ 285.796169][ T9141] should_fail_ex+0x390/0x4c0 [ 285.796203][ T9141] should_failslab+0x5/0x20 [ 285.796223][ T9141] slab_pre_alloc_hook+0x59/0x300 [ 285.796250][ T9141] kmem_cache_alloc_lru+0x49/0x2e0 [ 285.796271][ T9141] ? __d_alloc+0x2e/0x6e0 [ 285.796297][ T9141] __d_alloc+0x2e/0x6e0 [ 285.796315][ T9141] ? d_alloc_pseudo+0xe/0x70 [ 285.796337][ T9141] d_alloc_pseudo+0x19/0x70 [ 285.796357][ T9141] alloc_file_pseudo+0xe0/0x200 [ 285.796380][ T9141] ? alloc_empty_file_noaccount+0x80/0x80 [ 285.796403][ T9141] ? _raw_spin_unlock+0x24/0x40 [ 285.796420][ T9141] ? alloc_fd+0x590/0x640 [ 285.796455][ T9141] anon_inode_getfd+0xc6/0x1b0 [ 285.796485][ T9141] __se_sys_timerfd_create+0x1f4/0x250 [ 285.796517][ T9141] do_syscall_64+0x4c/0xa0 [ 285.796540][ T9141] ? clear_bhb_loop+0x60/0xb0 [ 285.796561][ T9141] ? clear_bhb_loop+0x60/0xb0 [ 285.796585][ T9141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.796607][ T9141] RIP: 0033:0x7f83ae39e159 [ 285.796627][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.796646][ T9141] RSP: 002b:00007f83af291028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 285.796670][ T9141] RAX: ffffffffffffffda RBX: 00007f83ae625fa0 RCX: 00007f83ae39e159 [ 285.796685][ T9141] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000001 [ 285.796697][ T9141] RBP: 00007f83ae43506b R08: 0000000000000000 R09: 0000000000000000 [ 285.796710][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.796723][ T9141] R13: 00007f83ae626038 R14: 00007f83ae625fa0 R15: 00007ffc3bd384e8 [ 285.796755][ T9141] [ 285.875760][ T6484] cxacru 3-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 285.886143][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.900806][ T6484] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 285.906980][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.923068][ T6484] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 285.931172][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.931451][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.992970][ T6484] cxacru: probe of 3-1:1.0 failed with error -5 [ 286.056390][ T6484] usb 3-1: USB disconnect, device number 28 [ 286.079416][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.102961][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.113814][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.123746][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.134685][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.154509][ T9010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.174216][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.195926][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.202071][ T9143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.216597][ T9010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.230706][ T9010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.258138][ T9010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.290885][ T9010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.515375][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.536062][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.557530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.585224][ T9137] ceph: No mds server is up or the cluster is laggy [ 286.610678][ T9010] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 286.638876][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.676704][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.688400][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.705960][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.823190][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 286.941108][ T9160] loop2: detected capacity change from 0 to 1024 [ 287.441696][ T9168] loop6: detected capacity change from 0 to 128 [ 287.512048][ T9168] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 287.544990][ T9168] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.594094][ T9168] fscrypt (loop6, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 287.641569][ T9175] loop5: detected capacity change from 0 to 512 [ 287.730098][ T9175] EXT4-fs error (device loop5): __ext4_fill_super:5465: inode #2: comm syz.5.1635: casefold flag without casefold feature [ 287.804502][ T9175] EXT4-fs (loop5): get root inode failed [ 287.810394][ T9175] EXT4-fs (loop5): mount failed [ 287.888259][ T9010] EXT4-fs (loop6): unmounting filesystem. [ 288.280475][ T9197] loop4: detected capacity change from 0 to 4096 [ 288.345825][ T9197] ntfs3: loop4: Failed to load $Extend. [ 288.483085][ T27] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 288.551673][ T9207] loop8: detected capacity change from 0 to 7 [ 288.560509][ T9209] FAULT_INJECTION: forcing a failure. [ 288.560509][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 288.576032][ T9209] CPU: 0 PID: 9209 Comm: syz.4.1650 Not tainted syzkaller #0 [ 288.583487][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.593682][ T9209] Call Trace: [ 288.596992][ T9209] [ 288.599963][ T9209] dump_stack_lvl+0x188/0x24e [ 288.604696][ T9209] ? show_regs_print_info+0x12/0x12 [ 288.609937][ T9209] ? load_image+0x410/0x410 [ 288.614577][ T9209] ? __lock_acquire+0x7ea0/0x7ea0 [ 288.619647][ T9209] ? do_futex+0x310/0x320 [ 288.624024][ T9209] should_fail_ex+0x390/0x4c0 [ 288.628749][ T9209] should_failslab+0x5/0x20 [ 288.633284][ T9209] slab_pre_alloc_hook+0x59/0x300 [ 288.638369][ T9209] ? make_kuid+0x1d7/0x680 [ 288.642083][ T4269] Dev loop8: unable to read RDB block 7 [ 288.642901][ T9209] kmem_cache_alloc+0x56/0x2f0 [ 288.653351][ T9209] ? prepare_creds+0x3c/0x610 [ 288.658169][ T9209] prepare_creds+0x3c/0x610 [ 288.659450][ T4269] loop8: unable to read partition table [ 288.662704][ T9209] __sys_setuid+0x92/0x580 [ 288.672799][ T9209] ? lockdep_hardirqs_on+0x94/0x140 [ 288.674916][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.678040][ T9209] do_syscall_64+0x4c/0xa0 [ 288.692948][ T9209] ? clear_bhb_loop+0x60/0xb0 [ 288.697671][ T9209] ? clear_bhb_loop+0x60/0xb0 [ 288.702485][ T9209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.708508][ T9209] RIP: 0033:0x7f83ae39e159 [ 288.712961][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.732609][ T9209] RSP: 002b:00007f83af291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 288.741061][ T9209] RAX: ffffffffffffffda RBX: 00007f83ae625fa0 RCX: 00007f83ae39e159 [ 288.749052][ T9209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 288.757124][ T9209] RBP: 00007f83ae43506b R08: 0000000000000000 R09: 0000000000000000 [ 288.765114][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.773102][ T9209] R13: 00007f83ae626038 R14: 00007f83ae625fa0 R15: 00007ffc3bd384e8 [ 288.781189][ T9209] [ 288.784487][ T27] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 288.813561][ T4269] loop8: partition table beyond EOD, truncated [ 288.818999][ T27] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 288.843107][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.858799][ T9207] Dev loop8: unable to read RDB block 7 [ 288.864818][ T9207] loop8: unable to read partition table [ 288.884421][ T9207] loop8: partition table beyond EOD, truncated [ 288.903287][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 288.923196][ T9207] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 289.084151][ T27] ttusb-dec: probe of 6-1:1.0 failed with error -2 [ 289.190009][ T9218] loop4: detected capacity change from 0 to 128 [ 289.274203][ T9218] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 289.301013][ T4327] usb 6-1: USB disconnect, device number 24 [ 289.337885][ T9218] hpfs: filesystem error: improperly stopped [ 289.346568][ T9218] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 289.355476][ T9218] hpfs: You really don't want any checks? You are crazy... [ 289.362726][ T9218] hpfs: Code page index out of array [ 289.382751][ T9218] hpfs: code page support is disabled [ 289.393279][ T9218] hpfs: hpfs_map_4sectors(): unaligned read [ 289.416407][ T9218] hpfs: hpfs_map_4sectors(): unaligned read [ 289.422370][ T9218] hpfs: filesystem error: unable to find root dir [ 289.571976][ T9231] loop1: detected capacity change from 0 to 256 [ 289.632021][ T26] audit: type=1800 audit(1791035048.546:34): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1661" name="file1" dev="loop1" ino=1048665 res=0 errno=0 [ 289.691162][ T9229] loop2: detected capacity change from 0 to 8192 [ 289.748179][ T9229] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.975678][ T9239] loop1: detected capacity change from 0 to 1024 [ 290.370526][ T9253] loop5: detected capacity change from 0 to 128 [ 290.419510][ T9253] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 290.473118][ T9253] hpfs: filesystem error: improperly stopped [ 290.479444][ T9253] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 290.508428][ T9253] hpfs: You really don't want any checks? You are crazy... [ 290.511383][ T9256] bonding: bond0 is being deleted... [ 290.533279][ T9253] hpfs: Code page index out of array [ 290.543708][ T9253] hpfs: code page support is disabled [ 290.553543][ T9253] hpfs: hpfs_map_4sectors(): unaligned read [ 290.560929][ T9253] hpfs: hpfs_map_4sectors(): unaligned read [ 290.578724][ T9253] hpfs: filesystem error: unable to find root dir [ 290.630569][ T9253] hpfs: hpfs_map_4sectors(): unaligned read [ 290.893935][ T9256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.934563][ T9256] bond0 (unregistering): Released all slaves [ 290.990873][ T9254] loop1: detected capacity change from 0 to 32768 [ 291.153971][ T9254] XFS (loop1): Mounting V5 Filesystem [ 291.342080][ T9254] XFS (loop1): Ending clean mount [ 291.515489][ T4276] XFS (loop1): Unmounting Filesystem [ 291.563351][ T130] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 291.803321][ T130] usb 5-1: Using ep0 maxpacket: 8 [ 291.810820][ T130] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 291.828258][ T130] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.842918][ T130] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.850258][ T130] usb 5-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 291.860145][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.869469][ T9294] ubi0: attaching mtd0 [ 291.882366][ T9294] ubi0: scanning is finished [ 291.889296][ T130] usb 5-1: config 0 descriptor?? [ 291.900387][ T9294] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 291.938211][ T9297] loop5: detected capacity change from 0 to 1024 [ 291.954799][ T9297] EXT4-fs: Ignoring removed bh option [ 291.979978][ T9297] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 292.020238][ T9294] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 292.140857][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 292.315755][ T130] input: HID 0518:0002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0518:0002.001A/input/input42 [ 292.353643][ T9305] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1687'. [ 292.421060][ T130] ezkey 0003:0518:0002.001A: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.4-1/input0 [ 292.568405][ T130] usb 5-1: USB disconnect, device number 20 [ 292.695081][ T9311] fido_id[9311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 292.780769][ T9320] device syzkaller1 entered promiscuous mode [ 292.804161][ T9322] loop5: detected capacity change from 0 to 2048 [ 292.896005][ T9322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.098006][ T9324] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 293.139309][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.601597][ T4768] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 293.673284][ T4326] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 293.790648][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 293.797736][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 293.815104][ T130] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 293.833646][ T9347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.864386][ T4768] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 293.874872][ T4326] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.904095][ T4326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.923879][ T4326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.942000][ T4326] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 293.952767][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.971001][ T4326] usb 5-1: Product: syz [ 293.975382][ T4326] usb 5-1: Manufacturer: syz [ 293.980095][ T4326] usb 5-1: SerialNumber: syz [ 294.019374][ T4326] usb 5-1: selecting invalid altsetting 1 [ 294.034664][ T4326] usb 5-1: unit 6 not found! [ 294.076817][ T130] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.119279][ T130] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 294.140935][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.167216][ T130] usb 2-1: Product: syz [ 294.181642][ T130] usb 2-1: Manufacturer: syz [ 294.196856][ T130] usb 2-1: SerialNumber: syz [ 294.229658][ T130] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 294.374033][ T4768] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 294.663228][ T9337] ceph: No mds server is up or the cluster is laggy [ 294.833250][ T4326] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 294.878087][ T4326] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 294.895293][ T4326] usb 5-1: USB disconnect, device number 21 [ 294.953354][ T130] gspca_mr97310a: reg read [21] error -110 [ 294.959381][ T130] mr97310a: probe of 2-1:1.0 failed with error -110 [ 295.149913][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.175461][ T9374] overlayfs: failed to set xattr on upper [ 295.181992][ T9374] overlayfs: ...falling back to index=off,metacopy=off. [ 295.619171][ T4342] tipc: Subscription rejected, illegal request [ 295.879571][ T9394] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 296.522658][ T9407] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 296.585902][ T9407] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 296.617134][ T4326] usb 2-1: USB disconnect, device number 22 [ 296.893685][ T4327] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 297.095540][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.123028][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.140350][ T4327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.165417][ T4327] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.179883][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.209830][ T4327] usb 3-1: config 0 descriptor?? [ 297.256754][ T9440] Invalid argument reading file caps for ./file0 [ 297.363215][ T6484] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 297.437344][ T9446] device syzkaller1 entered promiscuous mode [ 297.448541][ T9449] sctp: [Deprecated]: syz.5.1747 (pid 9449) Use of int in max_burst socket option deprecated. [ 297.448541][ T9449] Use struct sctp_assoc_value instead [ 297.583273][ T6484] usb 5-1: Using ep0 maxpacket: 32 [ 297.595532][ T6484] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 297.637292][ T4327] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 297.653083][ T6484] usb 5-1: config 0 has no interface number 0 [ 297.661153][ T4327] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 297.673076][ T6484] usb 5-1: config 0 interface 184 has no altsetting 0 [ 297.696365][ T6484] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 297.714473][ T4327] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 297.731085][ T6484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.761735][ T6484] usb 5-1: Product: syz [ 297.767346][ T6484] usb 5-1: Manufacturer: syz [ 297.774051][ T6484] usb 5-1: SerialNumber: syz [ 297.797425][ T6484] usb 5-1: config 0 descriptor?? [ 297.849420][ T6484] smsc75xx v1.0.0 [ 297.937078][ T4768] usb 3-1: USB disconnect, device number 29 [ 298.028685][ T9454] fido_id[9454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 298.165530][ T9464] loop1: detected capacity change from 0 to 512 [ 298.187801][ T9464] EXT4-fs: Ignoring removed oldalloc option [ 298.274267][ T9464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.305085][ T9464] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.457029][ T6484] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 298.483082][ T6484] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 298.515668][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 298.714111][ T6484] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 298.744186][ T6484] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 298.780200][ T6484] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 298.831933][ T6484] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 298.861547][ T6484] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 298.924578][ T6484] usb 5-1: USB disconnect, device number 22 [ 299.009076][ T9481] loop2: detected capacity change from 0 to 32768 [ 299.072745][ T9481] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 299.107423][ T9481] JBD2: Ignoring recovery information on journal [ 299.274850][ T9481] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 299.430801][ T9502] loop6: detected capacity change from 0 to 1 [ 299.449622][ T4267] Dev loop6: unable to read RDB block 1 [ 299.457901][ T4267] loop6: unable to read partition table [ 299.468092][ T4267] loop6: partition table beyond EOD, truncated [ 299.507498][ T9505] MTD: Couldn't look up './file0': -15 [ 299.517600][ T9502] Dev loop6: unable to read RDB block 1 [ 299.531462][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 299.568413][ T9502] loop6: unable to read partition table [ 299.577732][ T9502] loop6: partition table beyond EOD, truncated [ 299.617554][ T9502] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.672151][ T9507] loop4: detected capacity change from 0 to 512 [ 299.673271][ T4326] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 299.684042][ T9507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.712649][ T9507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.732876][ T9507] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 299.762876][ T9509] device batadv_slave_1 entered promiscuous mode [ 299.777289][ T9508] device batadv_slave_1 left promiscuous mode [ 299.833297][ T9507] EXT4-fs (loop4): 1 truncate cleaned up [ 299.850794][ T9507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.903165][ T4326] usb 7-1: Using ep0 maxpacket: 32 [ 299.910406][ T4326] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 299.925826][ T4326] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 299.935443][ T4326] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 299.943866][ T4326] usb 7-1: Product: syz [ 299.948280][ T4326] usb 7-1: Manufacturer: syz [ 299.953104][ T4326] usb 7-1: SerialNumber: syz [ 299.969482][ T4326] usb 7-1: config 0 descriptor?? [ 299.975784][ T9500] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 299.987479][ T4326] hub 7-1:0.0: bad descriptor, ignoring hub [ 299.994032][ T4326] hub: probe of 7-1:0.0 failed with error -5 [ 300.055051][ T9514] loop2: detected capacity change from 0 to 512 [ 300.084693][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 300.211515][ T9514] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1774: bg 0: block 5: invalid block bitmap [ 300.241950][ T9514] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 300.296879][ T9519] loop4: detected capacity change from 0 to 1024 [ 300.316813][ T9514] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1774: invalid indirect mapped block 3 (level 2) [ 300.324268][ T9519] EXT4-fs: Ignoring removed orlov option [ 300.356165][ T9514] EXT4-fs (loop2): 1 orphan inode deleted [ 300.375072][ T9514] EXT4-fs (loop2): 1 truncate cleaned up [ 300.382369][ T9514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 300.433899][ T4326] usb 7-1: USB disconnect, device number 2 [ 300.489043][ T9519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.492231][ T26] audit: type=1800 audit(1791035059.406:35): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1774" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 300.601443][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 300.607691][ T9519] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 300.624842][ T9519] EXT4-fs error (device loop4): __ext4_new_inode:1293: comm syz.4.1775: failed to insert inode 12: doubly allocated? [ 300.715332][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 301.850411][ T9563] loop4: detected capacity change from 0 to 2048 [ 301.898690][ T9563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.972092][ T9566] loop2: detected capacity change from 0 to 1024 [ 301.998913][ T9563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 302.062674][ T9563] EXT4-fs (loop4): shut down requested (1) [ 302.068789][ T26] audit: type=1800 audit(1791035060.986:36): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1797" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 302.098591][ T26] audit: type=1800 audit(1791035060.986:37): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1797" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 302.138895][ T26] audit: type=1800 audit(1791035061.036:38): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1797" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 302.189340][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 302.353517][ T9573] loop4: detected capacity change from 0 to 128 [ 302.410310][ T9573] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 302.452712][ T9573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.596119][ T9585] loop5: detected capacity change from 0 to 64 [ 302.613108][ T9580] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 302.875397][ T9590] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 302.939435][ T9590] hpfs: filesystem error: improperly stopped [ 302.947158][ T9590] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 302.980340][ T9590] hpfs: You really don't want any checks? You are crazy... [ 303.035820][ T9590] hpfs: hpfs_map_sector(): read error [ 303.041271][ T9590] hpfs: code page support is disabled [ 303.063187][ T9590] hpfs: hpfs_map_4sectors(): unaligned read [ 303.069421][ T9590] hpfs: hpfs_map_4sectors(): unaligned read [ 303.086319][ T9590] hpfs: filesystem error: unable to find root dir [ 303.121891][ T9590] hpfs: hpfs_map_4sectors(): unaligned read [ 303.149394][ T9590] hpfs: hpfs_map_sector(): read error [ 303.453218][ T6484] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 303.590037][ T9616] set_capacity_and_notify: 1 callbacks suppressed [ 303.590054][ T9616] loop6: detected capacity change from 0 to 128 [ 303.651854][ T6484] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.682173][ T6484] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.738209][ T6484] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 303.757556][ T6484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.773091][ T6484] usb 6-1: Product: syz [ 303.783984][ T6484] usb 6-1: Manufacturer: syz [ 303.788721][ T6484] usb 6-1: SerialNumber: syz [ 303.841598][ T6484] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 303.866313][ T6484] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 303.913639][ T6484] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 304.098788][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.106435][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.113969][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.121969][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.129844][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.137990][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.146684][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 304.160759][ T4326] usb 6-1: USB disconnect, device number 25 [ 304.163630][ T9600] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -71 [ 304.203296][ T9600] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -19 [ 304.232493][ T9600] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -19 [ 304.290900][ T9600] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -19 [ 304.350404][ T4326] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 304.402865][ T4326] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 304.457357][ T4326] ti_usb_3410_5052 6-1:2.0: device disconnected [ 304.488685][ T9624] loop1: detected capacity change from 0 to 32768 [ 304.606225][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1829'. [ 304.624116][ T9644] netlink: 'syz.6.1829': attribute type 20 has an invalid length. [ 304.632414][ T9644] netlink: 'syz.6.1829': attribute type 21 has an invalid length. [ 304.685746][ T9646] loop2: detected capacity change from 0 to 512 [ 304.798988][ T9646] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1831: iget: bad i_size value: 38620345925642 [ 304.874084][ T9646] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1831: couldn't read orphan inode 15 (err -117) [ 305.048053][ T9646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.204728][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 305.426300][ T9651] loop6: detected capacity change from 0 to 32768 [ 305.439208][ T9649] loop4: detected capacity change from 0 to 32768 [ 305.516407][ T9649] XFS (loop4): Mounting V5 Filesystem [ 305.539414][ T9651] XFS (loop6): Mounting V5 Filesystem [ 305.548901][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 305.623265][ T4326] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 305.663704][ T9649] XFS (loop4): Ending clean mount [ 305.709189][ T9665] binder: 9663:9665 ioctl c0306201 200000001a80 returned -14 [ 305.767860][ T9651] XFS (loop6): Ending clean mount [ 305.789532][ T9649] XFS (loop4): User initiated shutdown received. [ 305.801646][ T9651] XFS (loop6): Quotacheck needed: Please wait. [ 305.835109][ T4326] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.866825][ T9649] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 305.893625][ T4326] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.907958][ T9651] XFS (loop6): Quotacheck: Done. [ 305.954489][ T9649] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 305.963488][ T4326] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.991124][ T4326] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 306.021713][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.045866][ T4326] usb 3-1: config 0 descriptor?? [ 306.061079][ T4285] XFS (loop4): Unmounting Filesystem [ 306.252262][ T9010] XFS (loop6): Unmounting Filesystem [ 306.429518][ T9703] loop1: detected capacity change from 0 to 128 [ 306.449732][ T9703] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 306.538182][ T26] audit: type=1800 audit(1791035065.456:39): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1847" name="bus" dev="loop1" ino=115 res=0 errno=0 [ 306.543323][ T4326] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf3 found [ 306.591354][ T9703] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 306.609838][ T4326] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf4 found [ 306.691792][ C1] hid-picolcd 0003:04D8:F002.001C: invalid size value (89) for picolcd raw event (0) [ 306.753378][ T6484] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 306.830185][ T9710] loop5: detected capacity change from 0 to 4096 [ 306.873715][ T9710] EXT4-fs (loop5): Test dummy encryption mode enabled [ 306.897441][ T9710] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 306.903541][ T4326] usb 3-1: USB disconnect, device number 30 [ 306.958072][ T6484] usb 5-1: Using ep0 maxpacket: 8 [ 306.970181][ T6484] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 306.974676][ T4768] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 306.989227][ T6484] usb 5-1: config 179 has no interface number 0 [ 307.002769][ T4768] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.043441][ T6484] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.069692][ T6484] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 307.084159][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 307.140702][ T6484] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.180054][ T9716] fido_id[9716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 307.193660][ T6484] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 307.193699][ T6484] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.193743][ T6484] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 307.193766][ T6484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.205907][ T9705] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 307.461308][ T9722] loop5: detected capacity change from 0 to 512 [ 307.538276][ T9722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.550610][ T4327] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input45 [ 307.610877][ T9722] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 307.726580][ T9724] fuse: Invalid user_id [ 307.756497][ T9722] EXT4-fs (loop5): orphan cleanup on readonly fs [ 307.806617][ T9722] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 307.853954][ T9722] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 307.964372][ T9722] EXT4-fs (loop5): 1 truncate cleaned up [ 307.970380][ T9722] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 307.986641][ T9722] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 308.008809][ T6484] usb 5-1: USB disconnect, device number 23 [ 308.014977][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.015036][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.027377][ T4768] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 308.061917][ T4424] EXT4-fs (loop5): unmounting filesystem. [ 308.252375][ T4768] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 308.281841][ T4768] usb 3-1: config 0 has no interface number 0 [ 308.301460][ T4768] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 308.320503][ T4768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.329073][ T4768] usb 3-1: Product: syz [ 308.334510][ T4768] usb 3-1: Manufacturer: syz [ 308.340093][ T4768] usb 3-1: SerialNumber: syz [ 308.352920][ T4768] usb 3-1: config 0 descriptor?? [ 308.575529][ T9755] loop6: detected capacity change from 0 to 512 [ 308.597042][ T4326] kernel read not supported for file /kmsg (pid: 4326 comm: kworker/1:3) [ 308.635693][ T9755] EXT4-fs: Ignoring removed orlov option [ 308.722137][ T9755] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 308.746744][ T9755] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.810057][ T9764] netlink: 'syz.4.1869': attribute type 7 has an invalid length. [ 308.818449][ T9764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1869'. [ 308.827713][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 308.900949][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1870'. [ 308.916662][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1870'. [ 308.960201][ T9010] EXT4-fs (loop6): unmounting filesystem. [ 308.994749][ T9768] loop5: detected capacity change from 0 to 164 [ 309.062797][ T9768] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 309.106908][ T9770] loop4: detected capacity change from 0 to 512 [ 309.157838][ T9770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 309.193462][ T4768] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 227 [ 309.241161][ T9770] EXT4-fs (loop4): 1 truncate cleaned up [ 309.278174][ T9770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 309.399205][ T4768] usb 3-1: USB disconnect, device number 31 [ 309.433137][ T9773] loop6: detected capacity change from 0 to 32768 [ 309.497647][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 309.532184][ T9773] XFS (loop6): Mounting V5 Filesystem [ 309.621654][ T9776] loop5: detected capacity change from 0 to 32768 [ 309.689005][ T9773] XFS (loop6): Ending clean mount [ 309.712693][ T9776] JBD2: Ignoring recovery information on journal [ 309.733991][ T26] audit: type=1800 audit(1791035068.656:40): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1872" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 309.874154][ T9776] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 309.874653][ T9010] XFS (loop6): Unmounting Filesystem [ 310.168539][ T9794] loop4: detected capacity change from 0 to 4096 [ 310.195305][ T4424] ocfs2: Unmounting device (7,5) on (node local) [ 310.348409][ T9794] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 310.392075][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1881'. [ 310.462412][ T9800] loop2: detected capacity change from 0 to 2048 [ 310.535574][ T9791] loop1: detected capacity change from 0 to 40427 [ 310.582012][ T9791] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 310.614268][ T9791] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 310.646310][ T9791] F2FS-fs (loop1): invalid crc value [ 310.659839][ T4285] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 310.663186][ T9791] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 310.676812][ T9800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.786303][ T9791] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.043194][ T9791] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 311.050349][ T9791] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 311.243708][ T9791] syz.1.1877: attempt to access beyond end of device [ 311.243708][ T9791] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 311.400886][ T9791] syz.1.1877: attempt to access beyond end of device [ 311.400886][ T9791] loop1: rw=2049, sector=53272, nr_sectors = 8 limit=40427 [ 311.546349][ T9827] loop2: detected capacity change from 0 to 128 [ 311.613352][ T9827] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 311.639434][ T4276] syz-executor: attempt to access beyond end of device [ 311.639434][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.806152][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1895'. [ 311.950344][ T9837] loop2: detected capacity change from 0 to 1024 [ 312.083822][ T9837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.092513][ T9837] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.198994][ T9848] loop5: detected capacity change from 0 to 7 [ 312.230213][ T9848] Dev loop5: unable to read RDB block 7 [ 312.237662][ T9837] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.1896: directory missing '..' [ 312.256500][ T9848] loop5: unable to read partition table [ 312.273347][ T9848] loop5: partition table beyond EOD, truncated [ 312.279949][ T9848] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.380000][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 312.751559][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1909'. [ 312.765178][ T9870] netlink: 'syz.6.1909': attribute type 20 has an invalid length. [ 312.773330][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1909'. [ 312.787380][ T9870] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.796501][ T9870] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.807085][ T9870] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.816108][ T9870] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.824943][ T4327] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 312.850554][ T26] audit: type=1800 audit(1791035071.766:41): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1907" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 313.021335][ T4327] usb 5-1: config index 0 descriptor too short (expected 50, got 32) [ 313.036229][ T4327] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.067368][ T4327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.098890][ T4327] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.120128][ T4327] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.178630][ T4327] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 313.213186][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.241782][ T4327] usb 5-1: Product: syz [ 313.251727][ T4327] usb 5-1: Manufacturer: syz [ 313.263748][ T9876] netlink: 83 bytes leftover after parsing attributes in process `syz.1.1911'. [ 313.275924][ T4327] usb 5-1: SerialNumber: syz [ 313.311909][ T4327] usb_debug 5-1:1.0: debug converter detected [ 313.350491][ T4327] usb 5-1: debug converter now attached to ttyUSB0 [ 313.529247][ T9862] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 313.586528][ T9881] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.629909][ T108] ================================================================== [ 313.638041][ T108] BUG: KASAN: use-after-free in jfs_lazycommit+0x776/0xa90 [ 313.645291][ T108] Read of size 4 at addr ffff88805d5f2294 by task jfsCommit/108 [ 313.653234][ T108] [ 313.655582][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 313.662885][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.672972][ T108] Call Trace: [ 313.676280][ T108] [ 313.679307][ T108] dump_stack_lvl+0x188/0x24e [ 313.684033][ T108] ? __lock_acquire+0x7ea0/0x7ea0 [ 313.689103][ T108] ? show_regs_print_info+0x12/0x12 [ 313.694339][ T108] ? load_image+0x410/0x410 [ 313.698918][ T108] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 313.704407][ T108] ? __virt_addr_valid+0x188/0x540 [ 313.709564][ T108] ? __virt_addr_valid+0x467/0x540 [ 313.714787][ T108] ? jfs_lazycommit+0x776/0xa90 [ 313.719695][ T108] print_report+0xa8/0x210 [ 313.724122][ T108] kasan_report+0x10b/0x140 [ 313.728655][ T108] ? jfs_lazycommit+0x776/0xa90 [ 313.733543][ T108] jfs_lazycommit+0x776/0xa90 [ 313.738232][ T108] ? txFreelock+0x5a0/0x5a0 [ 313.742769][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 313.748803][ T108] ? do_task_dead+0xd0/0xd0 [ 313.753332][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 313.759236][ T108] ? __kthread_parkme+0x71/0x1c0 [ 313.764188][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 313.769231][ T108] kthread+0x29d/0x330 [ 313.773327][ T108] ? txFreelock+0x5a0/0x5a0 [ 313.777866][ T108] ? kthread_blkcg+0xd0/0xd0 [ 313.782482][ T108] ret_from_fork+0x1f/0x30 [ 313.787020][ T108] [ 313.790059][ T108] [ 313.792386][ T108] Allocated by task 9866: [ 313.796727][ T108] kasan_set_track+0x4b/0x70 [ 313.801331][ T108] __kasan_kmalloc+0x8e/0xa0 [ 313.805940][ T108] jfs_fill_super+0xdc/0xaf0 [ 313.810542][ T108] mount_bdev+0x28a/0x3c0 [ 313.814877][ T108] legacy_get_tree+0xe6/0x180 [ 313.819560][ T108] vfs_get_tree+0x88/0x270 [ 313.823986][ T108] do_new_mount+0x247/0xa40 [ 313.828509][ T108] __se_sys_mount+0x2e3/0x3d0 [ 313.833284][ T108] do_syscall_64+0x4c/0xa0 [ 313.837794][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.843695][ T108] [ 313.846027][ T108] Freed by task 4277: [ 313.850010][ T108] kasan_set_track+0x4b/0x70 [ 313.854617][ T108] kasan_save_free_info+0x27/0x40 [ 313.859642][ T108] ____kasan_slab_free+0x126/0x1f0 [ 313.864789][ T108] slab_free_freelist_hook+0x133/0x1b0 [ 313.870260][ T108] __kmem_cache_free+0xb6/0x200 [ 313.875166][ T108] generic_shutdown_super+0x130/0x340 [ 313.880570][ T108] kill_block_super+0x7c/0xe0 [ 313.885265][ T108] deactivate_locked_super+0x93/0xf0 [ 313.890568][ T108] cleanup_mnt+0x471/0x4f0 [ 313.894994][ T108] task_work_run+0x1d0/0x260 [ 313.899594][ T108] exit_to_user_mode_loop+0xe6/0x110 [ 313.904913][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 313.910560][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 313.916474][ T108] do_syscall_64+0x58/0xa0 [ 313.921069][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.927055][ T108] [ 313.929381][ T108] The buggy address belongs to the object at ffff88805d5f2200 [ 313.929381][ T108] which belongs to the cache kmalloc-256 of size 256 [ 313.943650][ T108] The buggy address is located 148 bytes inside of [ 313.943650][ T108] 256-byte region [ffff88805d5f2200, ffff88805d5f2300) [ 313.957117][ T108] [ 313.959446][ T108] The buggy address belongs to the physical page: [ 313.965857][ T108] page:ffffea0001757c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d5f2 [ 313.976299][ T108] head:ffffea0001757c80 order:1 compound_mapcount:0 compound_pincount:0 [ 313.984626][ T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 313.992786][ T108] raw: 00fff00000010200 ffffea0001e8a900 dead000000000002 ffff888017441b40 [ 314.001377][ T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 314.010051][ T108] page dumped because: kasan: bad access detected [ 314.016462][ T108] page_owner tracks the page as allocated [ 314.022175][ T108] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9518, tgid 9516 (syz.1.1776), ts 301149264711, free_ts 300836054508 [ 314.044959][ T108] post_alloc_hook+0x173/0x1a0 [ 314.049749][ T108] get_page_from_freelist+0x206b/0x2180 [ 314.055305][ T108] __alloc_pages+0x1ec/0x4f0 [ 314.059942][ T108] alloc_slab_page+0x5d/0x180 [ 314.064628][ T108] new_slab+0x87/0x2d0 [ 314.068711][ T108] ___slab_alloc+0xbc5/0x1240 [ 314.073393][ T108] __kmem_cache_alloc_node+0x126/0x270 [ 314.078860][ T108] __kmalloc+0xa3/0x240 [ 314.083015][ T108] iter_file_splice_write+0x1a0/0xcf0 [ 314.088570][ T108] direct_splice_actor+0xe1/0x130 [ 314.093602][ T108] splice_direct_to_actor+0x4b8/0xbd0 [ 314.098995][ T108] do_splice_direct+0x1ce/0x2f0 [ 314.103943][ T108] do_sendfile+0x51b/0xe20 [ 314.108511][ T108] __se_sys_sendfile64+0x141/0x1a0 [ 314.113625][ T108] do_syscall_64+0x4c/0xa0 [ 314.118048][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.124030][ T108] page last free stack trace: [ 314.128711][ T108] free_unref_page_prepare+0x8e5/0x9e0 [ 314.134179][ T108] free_unref_page+0x2e/0x3f0 [ 314.138951][ T108] qlist_free_all+0x76/0xe0 [ 314.143460][ T108] kasan_quarantine_reduce+0x144/0x160 [ 314.148921][ T108] __kasan_slab_alloc+0x1e/0x80 [ 314.153775][ T108] slab_post_alloc_hook+0x4b/0x490 [ 314.158983][ T108] kmem_cache_alloc+0x18b/0x2f0 [ 314.163836][ T108] getname_flags+0xb7/0x500 [ 314.168338][ T108] __x64_sys_rename+0x5b/0x90 [ 314.173105][ T108] do_syscall_64+0x4c/0xa0 [ 314.177521][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.183422][ T108] [ 314.185743][ T108] Memory state around the buggy address: [ 314.191369][ T108] ffff88805d5f2180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.199866][ T108] ffff88805d5f2200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.208022][ T108] >ffff88805d5f2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.216089][ T108] ^ [ 314.220680][ T108] ffff88805d5f2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.228944][ T108] ffff88805d5f2380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.237009][ T108] ================================================================== [ 314.245068][ T108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.252349][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 314.259723][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.270132][ T108] Call Trace: [ 314.273417][ T108] [ 314.276360][ T108] dump_stack_lvl+0x188/0x24e [ 314.281143][ T108] ? memcpy+0x3c/0x60 [ 314.285224][ T108] ? show_regs_print_info+0x12/0x12 [ 314.290600][ T108] ? load_image+0x410/0x410 [ 314.295119][ T108] panic+0x2d3/0x710 [ 314.299025][ T108] ? __lock_acquire+0x7ea0/0x7ea0 [ 314.304059][ T108] ? bpf_jit_dump+0xd0/0xd0 [ 314.308571][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.314555][ T108] ? _raw_spin_unlock+0x40/0x40 [ 314.319505][ T108] check_panic_on_warn+0x80/0xa0 [ 314.324548][ T108] ? jfs_lazycommit+0x776/0xa90 [ 314.329509][ T108] end_report+0x66/0x110 [ 314.333945][ T108] kasan_report+0x118/0x140 [ 314.338457][ T108] ? jfs_lazycommit+0x776/0xa90 [ 314.343319][ T108] jfs_lazycommit+0x776/0xa90 [ 314.348007][ T108] ? txFreelock+0x5a0/0x5a0 [ 314.352605][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 314.358593][ T108] ? do_task_dead+0xd0/0xd0 [ 314.363114][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 314.369204][ T108] ? __kthread_parkme+0x71/0x1c0 [ 314.374255][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 314.379311][ T108] kthread+0x29d/0x330 [ 314.383381][ T108] ? txFreelock+0x5a0/0x5a0 [ 314.387896][ T108] ? kthread_blkcg+0xd0/0xd0 [ 314.392489][ T108] ret_from_fork+0x1f/0x30 [ 314.396923][ T108] [ 314.400065][ T108] Kernel Offset: disabled [ 314.404381][ T108] Rebooting in 86400 seconds..