last executing test programs: 1m10.345011417s ago: executing program 1 (id=207): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 1m6.009348509s ago: executing program 1 (id=220): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000017fd1fe593e6b808001e000103020000200000faff1c000000c660a2002188f37f300633baf3e220ba5c4a4019c87681bfb0364bf4e8106494f51b27fda9691709e8c979b65a5ddba1ec45078da761d037229b387046559b542aed5e70918f04a015b9f2d905dc6c418681bf9c84e68869a86cb72b01bf6a3a7d56cc0743167eb6c717e5442522253c1979bb30c582150869556a8efc0c20e0d5483e3720b817e16e6f4bab75ab"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006000000000000ff"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e27}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000340)="bb7ea9a491f7de4dfa83d873180c07d3ae5ba932a3b4c5d3b9b56d76619d4b93cf526efdafd4da858bd182f038d6d2de79d0b11345c1ef99a4d6f759b9b6164841fe719071cadc2f42dd0fb7f2825d5ee9450284d44060ebe80c445cb783b8a424047c7adc192f5e64548251432bf42036701948efb766d3ac2212d7971fa2358a70328609d3fffeb8eda9e7007bcdabe2d9ddc852da26109ee55d903a939f17d761dc", 0xa3}, {&(0x7f0000000000)="4c4fd349d03aaf1d1c8a28366dd322212df410957166801da0686cce1efffd39256eb8a1091c0e3c", 0x66}, {&(0x7f0000000440)="5defe0df068a286d58e54471e94b37d1b923c00c64e9aba26f8f85e6b96d67d7f125e3e092074f58eff6275f6c6f06cb3ac6fcca3aa258ebe27758e8d1e741a90cea1e9926b28e8287904ace3c84e7f563a3d563d23d24438b0bdffd14b1e3ff24bd90ee70535821a190ed99978898aa35de2938bb8f9b63c2d6caab0f82d7518abed752e0b538d1a6bbd3a62d09286a13f2253dd184e024d51b672346752cc86721f6e0", 0xa4}, {&(0x7f0000000500)="4e375da587e8df66a32db509d2de393e8302c46e73366a6552551ec6409a6b910bff5006093aa3dc913034409c5d835ed53e9e8c011bdd82f95dfa8eaabd9ecb2ff2da39bcba52a0f4ca76347cce8c32f870623b7a8e28da5ca2eabd7b172798994dfc010edacd6051e6fc1627eb0da24d846d35120fb2425e448cdc70fc50ec40e8a234e9626cecf2b17be43a0229d5a9c377b59cbd2eb2d1f43f3b7fb783b0a77c21c68cce9b446ca7f37a7b4d5981d91c1bd8806f0ec0ed378e36fb9e07034ffd6a3139cf5540f273376b18953af7c2e15c7d6084fa25dc04564e50264423bc610b113978", 0xe6}, {&(0x7f0000000600)="fa2f50cf312eafbbaa19d4dfad00b783144696d902a43e95914b7d046eda457f3665d1cabad9e5b7d028967b59c758375541fbcac278de157b5b7d248a7eac64c3e58f911dcaae6f1ab7428867998d2294b50880fc", 0x55}, {&(0x7f00000007c0)="1a9b550fbabf018775d7d7a8d91c0220b1441e64b0da88110d1265ebe3a139550b48fa5a1cc3b24a8f29f4907b15e0854235fc7ddb86b03a2eaf4ef14dfbac87aa15a7c9b1268aa33a4c2d05bd4b23351122525106ec952260849e0567f7396b1a2af7d33d259a80eff33d", 0x6b}], 0x6, 0x0, 0x0, 0x20048004}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1m4.723114722s ago: executing program 1 (id=224): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m3.474484903s ago: executing program 1 (id=228): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x6d1) (async) listen(r0, 0x6d1) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4112, 0x1010}, {&(0x7f0000000a80)=""/172, 0xac}], 0x3}, 0x10100) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001100)='./file1\x00', 0x1000040, &(0x7f0000001140)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp855,errors=remount-ro,utf8,fmask=00000000000000000000004,iocharset=koi8-ru,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303430302c646d61736b3d30303030303030303030303034303030303030303030302c616c6c6f775f7574696d653d3030303030303030303030303030303030521e303030312c00b5efd5a5c49860e6033d86a1062aa410763a35d6358f3ec56140261c6ce5becee4b76d651a129b77d4e52b37ca8fdc9a7a3d08e55f6bfc2fdd3440ba22085c942503c30e11081ad5fa75126938c97d581a5cce2f6488388f66fa7e0e33b5b36d"], 0x1, 0x1531, &(0x7f00000014c0)="$eJzs3AucTtXaAPDnWWvtMTTpbZLLsNZ6Nm9yWSZJckmSS5IkSZJbQtIkRxISQ25JQxKSy5BchpBcJiaN+/1+SUiSJkmS5Jas76c46ut0TqfvfPl+3zz/32//Zj3v2mvvZ7/Pu2fvvebyVechNRrVrNqAiOB/BH/+kgwAsQAwAACuAoAAAMrGl40/359TYvL/bCfsP+uBtMudAbucuP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zStwNW8ZN+F5/+zM77+/z+SVWrMZ2tKXdsFIOaPDuH6Z29c//+3gj+yEtc/e+P6Z1NxlzsB9n8Bn//ZQY7f7eH6Z29cf8ays8s9//y/v8h/2g+R7PAe/JPjZ4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/gKn/CUKAC62L3dejDHGGGOMMcYY+8/xOS53BowxxhhjjDHGGPvfhyBAgoIAYiAHxEJOyAUCAK6E3HAVROBqiIdrIA9cC3khH+SHApAABaEQaDBggSCEwlAEonAdFIXroRgUhxJQ8qdphUS4AUrDjVAGboKycDOUg1ugPFSAilAJboXKcBtUgduhKtwB1aA61ICacCfUgrugNtwNdeAeqAv3Qj24D+rD/dAAHoCG8CA0goegMTwMTaApNIPm0OJPjX8OusPz0AN6QjL0gt7wAvSBvtAP+sMAeBEGwkswCF6GFBgMQ+AVGAqvwjB4DYbDCBgJr8MoeANGwxgYC+MgFcbDBHgTJsJbMAkmwxSYCmkwDabD2zADZsIseAdmw7swB+bCPJgP6fAeLICFkAHvwyL4ADJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74EHbCR7ALdsOev9fv3xl/8hfjP4a90AUBAQUKVKgwBmMwFmMxF+bCOIzD3JgbIxjBeIzHPJgH82JezI/5MQETsBAWQoMGCQkLY2GMYhSLYlEshsWwBJZAhw4TMRFL441YBstgWSyL5bAclscKWAErYSWsjJWxClbBqlgVq2E1rIE18E68E3thbayNdbAO1sW6F6ensAE2wIbYEBthI2yMjbEJNsFm2AxbYAtsiS2xFbbCNtgG22JbbIftMAmTsD22xw7YATtiR+yEnbAzdsYu2BW7Zj2XA/B5fB57YjXRC3tjb+yDKTn6YX/sjy/iQHwJX8KXMQUH4xB8BV/BV3EYnsDhOAJH4kisLN7A0TgGSYzDVEzFCTgBJ+JEnISTcTJOxTSchtNxOs7AmTgT38HZ+C6+i3NxLs7HdEzHBbgQMzADF+FJzMTFuASX4jJcjstwJa7ClbgG1+IaXI/rcSNuxM24GbfiVtyO2/FDVAD4Ee7G3ZiCe3Ev7sN9uB/34wE8gFmYhQfxIB7CQ3gYD+MRPIJH8Vs8ht/icTyOJ/AknsJTeAbP4Fl8JuGLhh8WX50C4jwllIgRMSJWxIpcIpeIE3Eit8gtIiIi4kW8yCPyiLwir8gv8osEkSAKiULCCCNIhDEAIKIiKoqKoqKYKCZKiBLCCScSRaIoLUqLMqKMKCtuFuXELaK8qCBau0qikqgs2rgq4nZRVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU9cZ+oL3phP3xAnK9MIzEYG4sh2EQ0FfLCGdBSDMNWorVoIx4TI3A4thMtXZJ4UrQXo7GD+JsYg0+LTmIcdhbPii6iq+gmnhPdRSvXQ/QUk7CX6C2mYh/RV/QT/cUMrC7ewdk5a4iXRYoYLIaIV8R8fFUME6+J4WKEGCleF6PEG2K0GCPGinEiVYwXE8SbYqJ4S0wSk8UUMVWkiWliunhbzBAzxSzxjpgt3hVzxFwxT8wX6eI9sUAsFBnifbFIfCAyxWKxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFDfCh2io/ELrFb7BEfi73iE7FPfCr2i8/EAfG5yBJfiIPiS3FIfCUOi6/FEfGNOCq+FcfEd+K4+F6cECfFKXFanBE/iLPiR3FOeAESpZBSKhnIGJlDxsqcMpe8QsbJ4MK7e7WMl9fIPPJamVfmk/llAZkgC8pCUksjrSQZysKyiIzK62RReb0sJovLErKkdLKUTJQ3yNLyRllG3iTLyptlOXmLLC8ryIqykrxVVpa3SYj8vI9qsrqsIWvKO2Uy3CVry7tlHXmPrCvvlfXkfbK+vF82kA/IhvJB2Ug+JBvLh2UT2VQ2k81lC/mIbCkfla1ka9lGPibbysdlO/mETJJPyvbSX/iIPC07yWdkZ/ms7CK7ym7yR3lOetlD9pTQC2Rv+YLsI/vKfrK/HCBflAPlS3KQfFmmyMFyiHxFDpWvymHyNTlcjpAj5etylHxDjpZj5Fg5TqbK8XKCfFNOlG/JSXKynCKnyjQ5Tfa7sKVZUv7L8W/+cvz5S6+cJgf9tPeNcpPcLLfIrXKb3C53yA/lTrlT7pK75B65R+6Ve+U+uU/ul/vlAXlAZskseVAelIfkIXlYHpZH5BF5VH4rT8vv5HH5vTwhT8qT8rQ8I8/IsxfeA1CohJJKqUDFqBwqVuVUudQVKk5dqXKrq1REXa3i1TUqj7pW5VX5VH5VQCWogqqQ0sooq0iFqrAqoqLqOrzwgVElVEnlVCmVqG74d8aroup6VUwV/9X4i/kl/05+LVQL1VK1VK1UK9VGtVFtVVvVTrVTSSpJtVftVQfVQXVUHVUn1Ul1Vp1VF9VFdVPdVHfVXfVQPVSySla91Quqj+qr+qn+aoB6UQ1UA9UgNUilqBQ1RA1RQ9VQNUwNU8PVcDVSjVSj1Cg1Wo1WY9VYlapS1QQ1QU1UE9UkNUlNUVNUmkpT09V0NUPNULPULDVbzVZz1Bw1T81T6SpdLVALVIbKUIvUIpWpFqvFaqlaqpar5WqlWqlWq9VqrVqr1qv1KlNtUpvUFrVFbVPb1A61Q+1UO9UutUvtUXvUXrVX7VP71H61Xx1QB1SWylIH1UF1SB1Sh9VhdUQdUUfVUXVMHVPH1XF1Qp1Qp9QpdUadUWfVWXVOnVMQCBCBCFSggpggJogNYoNcQa4gLogLcge5g0gQCeKD+CBPcG2QN8gX5A8KBAlBwaBQoAMT2EBcKHo0uC4oGlwfFAuKByWCkoELSgWJwQ1B6eDGoExwU1A2uDkoF9wSlA8qBBWDSsGtQeXgtqBKcHtQNbgjqBZUD2oENYM7g1rBXUHt4O6gTnBPUDe4N6gX3BfUD+4PGgQPBA2DB4NGwUNB4+DhoEnQNGgWNA9a/Ee37/2JfI+6HrqnTta9dG/9gu6j++p+ur8eoF/UA/VLepB+WafowXqIfkUP1a/qYfo1PVyP0CP163qUfkOP1mP0WD1Op+rxeoJ+U0/Ub+lJerKeoqfqND1NT9dv6xl6pp6l39Gz9bt6jp6r5+n5Ol2/pxfohTpDv68X6Q90pl6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536A/1Tv2R3qV36z36Y71Xf6L36U/1fv2ZPqA/11n6C31Qf6kP6a/0Yf21PqK/0Uf1t/qY/k4f19/rE/qkPqVP6zP6B31W/6jPaX/+5v785d0oo0yMiTGxJtbkMrlMnIkzuU1uEzERE2/iTR6Tx+Q1eU1+k98kmARTyBQy55EhU9gUNlETNUVNUVPMFDMlTAnjjDOJJtGUNqVNGVPGlDVlTTlTzpQ35U1FU9Hcam41t5nbzO3mdnOHucNUN9VNTVPT1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MM9PMtDAtTEvT0rQyrUwb08a0NW1NO9POJJkk0960Nx1MB9PRdDSdTCfT2XQ2XUwX0810M91Nd9PD9DDJJtn0Nr1NH9PH9DP9zAAzwAw0A80gM8ikmBQzxAwxQ81QM8wMM8PNCDPy/I2qecOMNmPMWDPOpJpUM8FMMBPVhRPETDFpJs1MN9PNDDPDzDKzzGwz28wxc8w8M8+km3SzwCwwGSbDLDKLTKbJNEvMErPMLDMrzAqzyqwya8wasw7WmQ1mg9lkNpktZovZZraZHWaH2Wl2ml1ml9lj9pi9Zq/ZZ/aZ/Wa/OWAOmCyTZQ6ag+aQOWQOm8PmiDlijpqj5pg5Zo6b4+aEOWFOmVPmjMl34XrpTazNaXPZK2ycvdLmtlfZ/x7ntwVsgi1oC1lt89p8v4qNtbaYLW5L2JLW2VI20d7wm7i8rWAr2kr2VlvZ3mar/CauZe+yte3dto69x9a0d/4qrmvvtfXsQ7Y+IoBtahva5raRfcg2tg/bJrapbWab27b2cdvOPmGT7JO2vX3qN/ECu9CusqvtGrvW7rK77Sl72h6yX9kz9gfbw/a0A+yLdqB9yQ6yL9sUO/g38Uj7uh1l37Cj7Rg71o77TTzFTrVpdpqdbt+2M+zM38Tp9j0722bYOXaunWfn/xSfzynDvm8X2Q9spg1giV1ql9nldoVd+fdcl9r1doPdaHfaj+wWu9Vus9vtjos3wna33WM/tnvtJ/ag/dLut5/ZA/awzbJf/BSfP77D9mt7xH5jj9pv7TH7nT1uv7/4Cf3p2L+zP9pz1lsgJCBJigKKoRwUSzkpF11BcXQl5aarKEJXUzxdQ3noWspL+Sg/FaAEKkiFSJMhS0QhFaYiFKXr6GJ6JagkOSpFiXQDlaYbqQzdRGXpZipHt1B5qkAVqRLdSpXpNqpCt1NVuoOqUXWqQTXpTqpFd1Ftupvq0D1Ul+6lenQf1af7qQE9QA3pQWpED1FjepiaUFNqRs2pBT1CLelRakWtqQ09Rm3pcWpHT1ASPUnt6SnqQH+jjvQ0daJnqDM9S12oK3Wj56g7PU89qCclUy/qTS9QH+pL/ag/DaAXaSC9RIPoZUqhwTSEXqGh9CoNo9doOI2gkfQ6jaI3aDSNobE0jlJpPE2gN2kivUWTaDJNoamURtNoOr1NM2gmzaJ3aDa9S3NoLs2j+ZRO79ECWkgZ9D4tog8okxbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoA9pJ31Eu2g37aGPaS99QvvoU9pPn9EB+pyy6As6SF/SIfqKDtPXvid9Q0fpWzpG39Fx+p5O0Ek6RafpDP1AZ+lHOkeeIMRQhDJUYRDGhDnC2DBnmCu8IowLrwxzh1eFkfDqMD68JswTXhvmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeF1YNLw+LBYWD0uEJUMXlgoTwxvC0uGNYZnwprBseHNYLrwlLB9WCB+6p1J4a1g5vC2sEt4eVg3vCKuF1cMaYc3wzrBWeFdYO7w7rBPeE5YJ7w3rhfeF9cP7wwbhA2HD8MGwUfhQ2Dh8OGwSNg2bhc3DFuEjYcvw0bBV2DpsEz4Wtg0fD9uFT4RJ4ZNh+/Cpn/rvXfj7/clhr7B3+EL4Quj93XJedH40PfpedEF0YTQj+n50UfSDaGZ0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD9ErwvmYOcOiEk065wMW4HC7W5XS53BUuzl3pcrurXMRd7eLdNS6Pu9bldflcflfAJbiCrpDTzjjryIWusCviou46V9Rd74q54q6EK+mcK+USXXPXwrVwLd2jrpVr7dq4x9xj7nH3uHvCPeGedO3dU66D+5vr6J52ndwz7hn3rOviurpu7jnX3Y3P/fM5mex6u96uj+vj+rl+boAb4Aa6gW6QG+RSXIob4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3WpboKb4Ca6iW6Sm+SmuCkuzaW56W66m+FmuMozf97LHDfHzXPzXLpLdwvc+XvGDLfILXKZLtMtcUvcMrfMrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3ze1wO9xOt9Pt8lf9vFG31+1z+9x+t98dcJ+7LPeFO+i+dIfcV+6w+9odcd+4o+5bd8x95467790Jd9KdcqfdGfeDO+t+dOecd6mR8ZEJkTcjEyNvRSZFJkemRKZG0iLTItMjb0dmRGZGZkXeicyOvBuZE5kbmReZH0mPvBdZEFkYyYi8H1kU+SCSGVkcWRJZGlkWWR7xvuCW0Bf2RXzUX+eL+ut9MV/cl/AlvfOlfKK/wZf2N/oy/iZf1t/sy/lbfHlfwVf0D/smvqlv5pv7Fv4R39I/6lv51r6Nf8y39Y/7dv4Jn+Sf9O39U76D/5vv6J/2nfwzvrN/1nfxXX03/5zv7p/3PXxPn+x7+d7+Bd/H9/X9fH8/wL/oB/qX/CD/sk/xg/0Q/4of6l/1w/xrfrgf4UfGvO5HXXxEhnE+1Y/3E/ybfqJ/y0/yk/0UP9Wn+Wl+un/bz/Az/Sz/jp/t3/Vz/Fw/z8/36f49v8Av9Bn+fb/If+Az/eKLk5J+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfof/0O/0H/ldfrff4z/2e/0nfp//1O/3n/kD/nOf5b/wB/2X/pD/yh/2X/sj/hufEwCO+e/8cf+9P+FP+lP+tD/jf/Bn/Y/+HP/NGmOMMcbYHzL+UlP8uufn6fxe/2CM+MXKvQHgyq0Fsn7Zf/6Ocl3en9t9RULbCAA82bPzAxeXatWSk5MvrJspISgyF+DiT4LOi4FL8WJoA49DErSG0v8w/76i6xn6F9uP3gyQ6xdjYuFSfGn7nwJg8j/Y/iOPjVxQLjwV/0+2PxegWJFLY87fp16MF0Obn+ZXWkOZ38k/X8t/kX/Oz1IBWv1iTBxcii/lnwiPwlOQ9Ks1GWOMMcYYY4yxn/UVFTtefP68+Buf/+j5PEFdGpMDLsX/6vmcMcYYY4wxxhhjl9/TXbs98UhSUuuO/36jyp8ZhQDwx1ZuDH82MW78qYb3ABdfUX+4TL/bADjfkH/lUWz+S/aVcuHU+e9dy077AP5vlPLPN8b+/ZXL/I2JMcYYY4wx9h936e7/16+ry5UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0V/1fsch8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrn9VwAAAP//Fl713g==") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x18b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) (async) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) 1m2.520511697s ago: executing program 1 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') link(0x0, &(0x7f0000000100)='./file1\x00') 1m1.543913444s ago: executing program 1 (id=237): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2a42, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000001c0)={0x24, 0x14, 0xa186d2108035571b, 0x70bd29, 0x25dfdbfe, {0x10, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "7c07cc905afda6b5d1"}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x80c4, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 1m0.228643709s ago: executing program 32 (id=237): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2a42, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000001c0)={0x24, 0x14, 0xa186d2108035571b, 0x70bd29, 0x25dfdbfe, {0x10, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "7c07cc905afda6b5d1"}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x80c4, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 10.090956718s ago: executing program 0 (id=437): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000480), 0x4) 8.588171851s ago: executing program 6 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x200004}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x4}, {0x0, 0x3, 0x1, 0x7437ec78, 0x2, 0x53f9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0xffc, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0xb, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x7, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x1a3, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x6f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x7fff, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x7ffc, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xe}, {0x8, 0x6, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x80000009}, {0x9, 0x0, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x8}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x108, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffff3, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x7fd, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x1000, 0x9, 0x9, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x8}, {0x7ff, 0x9, 0x9, 0x6, 0x9, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 6.994292225s ago: executing program 0 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2c6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000103b"], 0x0) 6.827249006s ago: executing program 6 (id=461): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.755846112s ago: executing program 0 (id=462): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r0, 0x0, 0x0) 6.50511336s ago: executing program 0 (id=465): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r0) 5.319040903s ago: executing program 6 (id=477): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 4.944029247s ago: executing program 5 (id=480): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x8) r3 = fanotify_init(0x2, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) fanotify_mark(r3, 0x1, 0x1009, r0, 0x0) 4.274066482s ago: executing program 4 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 4.061862681s ago: executing program 4 (id=488): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2c6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000103b"], 0x0) 3.993318832s ago: executing program 5 (id=489): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a11fa81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='0123:abcd:,', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='off', 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) write(r4, &(0x7f0000000180)='on', 0x2) 3.919890707s ago: executing program 2 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='typec_fusb302 0x22\n\x00', 0x13) socket$inet6(0xa, 0x1, 0x0) 3.830697768s ago: executing program 4 (id=491): mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000003700)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x9, 0x100848, 0x4, 0x6, 0x7, 0x80000001, 0x0, 0x0, 0x40, 0x5}}, 0x50) 3.816161363s ago: executing program 3 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='blk', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) close(r1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 3.664074481s ago: executing program 0 (id=493): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaa0b000000aa000402"], 0x0) 3.509416787s ago: executing program 2 (id=494): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc0, 0x40, 0x4, 0x621}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x4, 0x8, 0xf7, 0x4, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x10, 0x9, 0x3}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 3.416282494s ago: executing program 4 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="e0", 0x1) 3.232281224s ago: executing program 3 (id=496): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000840)='3', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.076257519s ago: executing program 0 (id=497): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @void}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x71bd28, 0x25dfdbfe, {0xa, 0x10, 0x71}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}}) r5 = syz_usb_connect$uac3(0x5, 0x9c, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x28, &(0x7f0000000300)={0x5, 0xf, 0x28, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x3, 0x401, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x9ee1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x4, 0x6}]}, 0x6, [{0x8d, &(0x7f0000000380)=@string={0x8d, 0x3, "7f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec0b17a8aaddcc9233fedef48a31ada990959c3dbc087ddccfb323eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c"}}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xb, &(0x7f00000005c0)=@string={0xb, 0x3, "5a1c41342fec266888"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_disconnect(r5) write(r4, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 3.022629296s ago: executing program 4 (id=498): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) 2.920392018s ago: executing program 2 (id=499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0xb}, 0x1) sendto$inet6(r0, &(0x7f0000000080)='c', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2000, @loopback, 0xfffffffd}, 0x1c) 2.695882366s ago: executing program 5 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 2.621755363s ago: executing program 2 (id=501): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x8) r3 = fanotify_init(0x2, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) fanotify_mark(r3, 0x1, 0x1009, r0, 0x0) 2.457599675s ago: executing program 5 (id=502): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xfc, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0xb607, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.349043565s ago: executing program 5 (id=503): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2c6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000103b"], 0x0) 2.107444866s ago: executing program 5 (id=504): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) 1.975534666s ago: executing program 6 (id=505): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x254, 0x7d, 0x2, {{0x500, 0x11f, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e6, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x67, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x120, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff@\x00\xdb\xa0\xc2\xf7\xf0\x05\x00\x00\x00M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82\x18}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\x00'/288}}, 0x254) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.835220092s ago: executing program 6 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='typec_fusb302 0x22\n\x00', 0x13) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 1.613799808s ago: executing program 2 (id=507): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x8, 0x2, 0x4, 0x4, 0x81, {}, {0x5, 0x2, 0x7, 0xb, 0x5, 0x2, "1c1b778c"}, 0x7, 0x3, {0x0}}) 1.411788303s ago: executing program 6 (id=508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.396771392s ago: executing program 2 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, 0x0) stat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 964.51944ms ago: executing program 4 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) read$mtd(r0, &(0x7f00000003c0)=""/250, 0xfa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) 915.136592ms ago: executing program 3 (id=511): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) 713.346622ms ago: executing program 3 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 476.375429ms ago: executing program 3 (id=513): mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0xfffffffffffffd9a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 0s ago: executing program 3 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): [ 107.988897][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.988911][ T5935] Call Trace: [ 107.988921][ T5935] [ 107.988931][ T5935] dump_stack_lvl+0xe8/0x150 [ 107.988971][ T5935] should_fail_ex+0x40c/0x560 [ 107.989008][ T5935] _copy_from_user+0x2d/0xb0 [ 107.989032][ T5935] ___sys_sendmsg+0x1c6/0x360 [ 107.989062][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.989091][ T5935] ? __lock_acquire+0x683/0x2cf0 [ 107.989129][ T5935] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.989156][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.989191][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.989218][ T5935] ? kstrtouint+0x6e/0xe0 [ 107.989278][ T5935] ? __fget_files+0x2a/0x420 [ 107.989312][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.989339][ T5935] ? __fget_files+0x3a2/0x420 [ 107.989386][ T5935] __sys_sendmmsg+0x273/0x4d0 [ 107.989430][ T5935] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.989471][ T5935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.989519][ T5935] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.989547][ T5935] ? ksys_write+0x242/0x270 [ 107.989588][ T5935] ? __pfx_ksys_write+0x10/0x10 [ 107.989637][ T5935] __x64_sys_sendmmsg+0xa0/0xc0 [ 107.989667][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.989693][ T5935] do_syscall_64+0x174/0x580 [ 107.989723][ T5935] ? trace_irq_disable+0x3b/0x140 [ 107.989760][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.989785][ T5935] RIP: 0033:0x7ff89fb9e0d9 [ 107.989806][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.989825][ T5935] RSP: 002b:00007ff8a0a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.989849][ T5935] RAX: ffffffffffffffda RBX: 00007ff89fe25fa0 RCX: 00007ff89fb9e0d9 [ 107.989867][ T5935] RDX: 0000000000000001 RSI: 000020000000b040 RDI: 0000000000000005 [ 107.989882][ T5935] RBP: 00007ff8a0a40090 R08: 0000000000000000 R09: 0000000000000000 [ 107.989896][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.989911][ T5935] R13: 00007ff89fe26038 R14: 00007ff89fe25fa0 R15: 00007ffea82dc3e8 [ 107.989948][ T5935] [ 108.085146][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.233261][ T5938] exfat: Unknown parameter ' ( [ 108.233261][ T5938] ܉Br[ [ 108.233261][ T5938] <6 ءчXAEgڦj<<1t|e+ς*o<VaK' [ 108.303341][ T5608] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 108.334955][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 108.340902][ T5818] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 108.351334][ T5818] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 108.359594][ T5818] usb 4-1: config 2 has no interface number 0 [ 108.365917][ T5818] usb 4-1: config 2 interface 31 has no altsetting 0 [ 108.676951][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.713217][ T5818] usb 4-1: Product: syz [ 108.741230][ T5818] usb 4-1: Manufacturer: syz [ 108.974144][ T5818] usb 4-1: SerialNumber: syz [ 109.322414][ T5818] ch9200 4-1:2.31: probe with driver ch9200 failed with error -71 [ 109.430259][ T5818] usb 4-1: USB disconnect, device number 5 [ 109.540284][ T30] audit: type=1326 audit(1787060506.691:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89fb9e0d9 code=0x7ffc0000 [ 109.627768][ T30] audit: type=1326 audit(1787060506.691:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89fb9e0d9 code=0x7ffc0000 [ 109.688435][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.729068][ T30] audit: type=1326 audit(1787060506.781:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89fb9e0d9 code=0x7ffc0000 [ 109.760071][ T30] audit: type=1326 audit(1787060506.781:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89fb9e0d9 code=0x7ffc0000 [ 109.822127][ T30] audit: type=1326 audit(1787060506.781:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff89fb9e0d9 code=0x7ffc0000 [ 109.860091][ T5963] loop1: detected capacity change from 0 to 512 [ 109.871440][ T5963] EXT4-fs: Ignoring removed nobh option [ 109.885716][ T30] audit: type=1326 audit(1787060506.861:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89fb9e0d9 code=0x7ffc0000 [ 109.949187][ T5963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.978244][ T5963] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #11: block 1: comm syz.1.37: lblock 0 mapped to illegal pblock 1 (length 1) [ 109.994556][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 110.003917][ T30] audit: type=1326 audit(1787060506.861:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff89fb9de42 code=0x7ffc0000 [ 110.081619][ T5900] usb 3-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.40 [ 110.184467][ T5764] usbhid 5-1:0.0: can't add hid device: -71 [ 110.196334][ T5764] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 110.211395][ T5764] usb 5-1: USB disconnect, device number 3 [ 110.234486][ T5963] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.236653][ T5963] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.246527][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 110.246623][ C0] EXT4-fs (loop1): initial error at time 1787060507: ext4_map_blocks:793: inode 11: block 1 [ 110.246670][ C0] EXT4-fs (loop1): last error at time 1787060507: ext4_map_blocks:793: inode 11: block 1 [ 110.247662][ T5742] usb 6-1: USB disconnect, device number 2 [ 110.265213][ T5900] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.308617][ T30] audit: type=1326 audit(1787060506.881:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff89fb9ded7 code=0x7ffc0000 [ 110.349966][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.390993][ T5963] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.37: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 110.448720][ T5963] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.457103][ T30] audit: type=1326 audit(1787060506.881:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff89fb5add1 code=0x7ffc0000 [ 110.517467][ T5969] loop5: detected capacity change from 0 to 128 [ 110.534601][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 110.542374][ T5900] usb 3-1: config 1 interface 0 has no altsetting 0 [ 110.553728][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 110.555773][ T5963] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.37: ea_inode dec ref err=-117 [ 110.586496][ T5969] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 110.596609][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.612877][ T30] audit: type=1326 audit(1787060506.881:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.1.37" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff89fb9eec9 code=0x7ffc0000 [ 110.643983][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.677714][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.693011][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.702712][ T5969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.713676][ T24] usb 1-1: config 0 descriptor?? [ 110.758398][ T5900] usb 3-1: Product: syz [ 110.778869][ T5963] EXT4-fs (loop1): 1 orphan inode deleted [ 110.789759][ T5900] usb 3-1: Manufacturer: מּ‥䵖尶遖㷯懅㓑䋎믝ﮎ둆栬沾츦煕먙꯫昷⽙陹륩אַ폩輸⑮퓭급጗넘߬秸ヶꭖ胤ІὍ弹─ᔬ丽翏Ԕ糵ᶜᱚ䨢媴溝拌ⵆ둼절锃븋ἑ㜄쵰ઝ摶ⲿ⪌쪅⃎仹ָ뢊؅霋枨꘣륏芕䕍쌚뼮짰ఋ玑棫烘␢陖׹Ħ烨ᷧះ꘣籗 [ 110.864045][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.100073][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.794632][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 111.816018][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.837960][ T24] usb 1-1: USB disconnect, device number 2 [ 111.919606][ T5900] usb 3-1: SerialNumber: syz [ 112.381772][ T5900] usbhid 3-1:1.0: can't add hid device: -71 [ 112.408526][ T5900] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 112.465742][ T5900] usb 3-1: USB disconnect, device number 2 [ 112.747022][ T5987] capability: warning: `syz.4.44' uses 32-bit capabilities (legacy support in use) [ 112.788320][ T5986] loop5: detected capacity change from 0 to 1024 [ 112.819877][ T5986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.901723][ T5986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.112863][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 113.193351][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.565468][ T5607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.816672][ T6009] loop1: detected capacity change from 0 to 64 [ 114.030600][ T6009] hfs: request for non-existent node 131072 in B*Tree [ 114.038033][ T6009] hfs: request for non-existent node 131072 in B*Tree [ 114.075966][ T6009] 9p: Bad value for 'rfdno' [ 115.771268][ T6019] loop0: detected capacity change from 0 to 64 [ 115.953090][ T6019] hfs: request for non-existent node 131072 in B*Tree [ 115.959990][ T6019] hfs: request for non-existent node 131072 in B*Tree [ 116.369604][ T6024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.674159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.816041][ T6022] smb3: Unexpected value for 'rdma' [ 116.875285][ T6033] FAULT_INJECTION: forcing a failure. [ 116.875285][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.914187][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT(full) [ 116.914219][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.914234][ T6033] Call Trace: [ 116.914243][ T6033] [ 116.914252][ T6033] dump_stack_lvl+0xe8/0x150 [ 116.914293][ T6033] should_fail_ex+0x40c/0x560 [ 116.914329][ T6033] _copy_from_user+0x2d/0xb0 [ 116.914355][ T6033] get_timespec64+0x96/0x1b0 [ 116.914392][ T6033] ? __pfx_get_timespec64+0x10/0x10 [ 116.914439][ T6033] __x64_sys_recvmmsg+0x14b/0x250 [ 116.914477][ T6033] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 116.914520][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.914547][ T6033] do_syscall_64+0x174/0x580 [ 116.914578][ T6033] ? trace_irq_disable+0x3b/0x140 [ 116.914615][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.914640][ T6033] RIP: 0033:0x7f09e299e0d9 [ 116.914662][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.914681][ T6033] RSP: 002b:00007f09e38f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 116.914712][ T6033] RAX: ffffffffffffffda RBX: 00007f09e2c25fa0 RCX: 00007f09e299e0d9 [ 116.914730][ T6033] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 116.914747][ T6033] RBP: 00007f09e38f9090 R08: 0000200000003700 R09: 0000000000000000 [ 116.914763][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.914777][ T6033] R13: 00007f09e2c26038 R14: 00007f09e2c25fa0 R15: 00007ffd9c258ef8 [ 116.914815][ T6033] [ 118.274338][ T5900] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 119.124604][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 119.212483][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.281855][ T5900] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 119.325369][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.362838][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.597507][ T6061] loop4: detected capacity change from 0 to 32768 [ 119.626108][ T6065] FAULT_INJECTION: forcing a failure. [ 119.626108][ T6065] name failslab, interval 1, probability 0, space 0, times 1 [ 119.637113][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.663151][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.682347][ T6061] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.039453][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 120.039486][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.039500][ T6065] Call Trace: [ 120.039510][ T6065] [ 120.039521][ T6065] dump_stack_lvl+0xe8/0x150 [ 120.039561][ T6065] should_fail_ex+0x40c/0x560 [ 120.039599][ T6065] should_failslab+0xa8/0x100 [ 120.039642][ T6065] __kmalloc_cache_node_noprof+0xaa/0x630 [ 120.039678][ T6065] ? __get_vm_area_node+0x136/0x300 [ 120.039703][ T6065] ? __get_vm_area_node+0x136/0x300 [ 120.039738][ T6065] __get_vm_area_node+0x136/0x300 [ 120.039770][ T6065] __vmalloc_node_range_noprof+0x358/0x1730 [ 120.039802][ T6065] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.039839][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.039868][ T6065] ? __lock_acquire+0x683/0x2cf0 [ 120.039927][ T6065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.040008][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.040050][ T6065] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.040081][ T6065] __vmalloc_noprof+0xd2/0x120 [ 120.040109][ T6065] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.040146][ T6065] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.040178][ T6065] ? bpf_prog_alloc+0x2a/0x1a0 [ 120.040213][ T6065] bpf_prog_alloc+0x3c/0x1a0 [ 120.040248][ T6065] bpf_prog_load+0x7f8/0x1c00 [ 120.040296][ T6065] ? __pfx_bpf_prog_load+0x10/0x10 [ 120.040359][ T6065] __sys_bpf+0xd0d/0xd90 [ 120.040400][ T6065] ? __pfx___sys_bpf+0x10/0x10 [ 120.040445][ T6065] ? __fget_files+0x2a/0x420 [ 120.040500][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.040528][ T6065] ? ksys_write+0x242/0x270 [ 120.040570][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 120.040606][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.040642][ T6065] __x64_sys_bpf+0xba/0xd0 [ 120.040671][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.040698][ T6065] do_syscall_64+0x174/0x580 [ 120.040730][ T6065] ? trace_irq_disable+0x3b/0x140 [ 120.040767][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.040793][ T6065] RIP: 0033:0x7fbd3f39e0d9 [ 120.040815][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.040834][ T6065] RSP: 002b:00007fbd401e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.040859][ T6065] RAX: ffffffffffffffda RBX: 00007fbd3f625fa0 RCX: 00007fbd3f39e0d9 [ 120.040877][ T6065] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 120.040893][ T6065] RBP: 00007fbd401e4090 R08: 0000000000000000 R09: 0000000000000000 [ 120.040908][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.040922][ T6065] R13: 00007fbd3f626038 R14: 00007fbd3f625fa0 R15: 00007ffcb85222e8 [ 120.040965][ T6065] [ 120.058502][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.415310][ T6065] syz.0.66: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.530135][ T6061] XFS (loop4): Ending clean mount [ 120.572816][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 120.572849][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.572863][ T6065] Call Trace: [ 120.572873][ T6065] [ 120.572884][ T6065] dump_stack_lvl+0xe8/0x150 [ 120.572919][ T6065] warn_alloc+0x24c/0x270 [ 120.572948][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.572974][ T6065] ? __kasan_kmalloc+0x22/0xb0 [ 120.573008][ T6065] ? __pfx_warn_alloc+0x10/0x10 [ 120.573045][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.573069][ T6065] ? __get_vm_area_node+0x2af/0x300 [ 120.573100][ T6065] __vmalloc_node_range_noprof+0x37d/0x1730 [ 120.573130][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.573153][ T6065] ? __lock_acquire+0x683/0x2cf0 [ 120.573205][ T6065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.573233][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.573270][ T6065] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.573298][ T6065] __vmalloc_noprof+0xd2/0x120 [ 120.573323][ T6065] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.573355][ T6065] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 120.573383][ T6065] ? bpf_prog_alloc+0x2a/0x1a0 [ 120.573414][ T6065] bpf_prog_alloc+0x3c/0x1a0 [ 120.573453][ T6065] bpf_prog_load+0x7f8/0x1c00 [ 120.573501][ T6065] ? __pfx_bpf_prog_load+0x10/0x10 [ 120.573563][ T6065] __sys_bpf+0xd0d/0xd90 [ 120.573606][ T6065] ? __pfx___sys_bpf+0x10/0x10 [ 120.573642][ T6065] ? __fget_files+0x2a/0x420 [ 120.573687][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.573708][ T6065] ? ksys_write+0x242/0x270 [ 120.573739][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 120.573767][ T6065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.573804][ T6065] __x64_sys_bpf+0xba/0xd0 [ 120.573827][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.573847][ T6065] do_syscall_64+0x174/0x580 [ 120.573871][ T6065] ? trace_irq_disable+0x3b/0x140 [ 120.573908][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.573934][ T6065] RIP: 0033:0x7fbd3f39e0d9 [ 120.573956][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.573974][ T6065] RSP: 002b:00007fbd401e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.573995][ T6065] RAX: ffffffffffffffda RBX: 00007fbd3f625fa0 RCX: 00007fbd3f39e0d9 [ 120.574008][ T6065] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 120.574020][ T6065] RBP: 00007fbd401e4090 R08: 0000000000000000 R09: 0000000000000000 [ 120.574031][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.574041][ T6065] R13: 00007fbd3f626038 R14: 00007fbd3f625fa0 R15: 00007ffcb85222e8 [ 120.574076][ T6065] [ 120.858765][ T6065] Mem-Info: [ 120.861940][ T6065] active_anon:31320 inactive_anon:0 isolated_anon:0 [ 120.861940][ T6065] active_file:2 inactive_file:55580 isolated_file:0 [ 120.861940][ T6065] unevictable:0 dirty:512 writeback:0 [ 120.861940][ T6065] slab_reclaimable:10506 slab_unreclaimable:97816 [ 120.861940][ T6065] mapped:48121 shmem:25050 pagetables:1397 [ 120.861940][ T6065] sec_pagetables:0 bounce:0 [ 120.861940][ T6065] kernel_misc_reclaimable:0 [ 120.861940][ T6065] free:1272345 free_pcp:16259 free_cma:0 [ 120.908723][ T6065] Node 0 active_anon:125380kB inactive_anon:0kB active_file:8kB inactive_file:222116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192484kB dirty:2044kB writeback:0kB shmem:100200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12892kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 120.943494][ T6065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 120.979107][ T6065] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.009222][ T5900] usb 6-1: can't set config #16, error -71 [ 121.019456][ T6065] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 121.025279][ T6065] Node 0 DMA32 free:1132664kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:126680kB inactive_anon:0kB active_file:8kB inactive_file:222316kB unevictable:0kB writepending:2044kB zspages:0kB present:3129332kB managed:2548428kB mlocked:0kB bounce:0kB free_pcp:63624kB local_pcp:23252kB free_cma:0kB [ 121.059436][ T6065] lowmem_reserve[]: 0 0 0 0 0 [ 121.070602][ T5900] usb 6-1: USB disconnect, device number 3 [ 121.129178][ T6065] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:252kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.230047][ T5611] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 121.280241][ T6065] lowmem_reserve[]: 0 0 0 0 0 [ 121.335755][ T6065] Node 1 Normal free:3941740kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 121.457855][ T6065] lowmem_reserve[]: 0 0 0 0 0 [ 121.500527][ T6079] loop3: detected capacity change from 0 to 64 [ 121.511867][ T6065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.602046][ T6079] hfs: request for non-existent node 131072 in B*Tree [ 121.609659][ T6079] hfs: request for non-existent node 131072 in B*Tree [ 121.756352][ T6065] Node 0 DMA32: 1294*4kB (UME) 440*8kB (UME) 70*16kB (UE) 7*32kB (U) 4*64kB (UME) 2*128kB (UM) 3*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 272*4096kB (M) = 1132600kB [ 122.116456][ T6065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.286551][ T6065] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 6*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3941740kB [ 122.566770][ T6065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.739457][ T6065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.787888][ T6065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.849209][ T6065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.893849][ T6065] 82840 total pagecache pages [ 122.953919][ T6065] 0 pages in swap cache [ 122.985791][ T6065] Free swap = 124996kB [ 122.998942][ T6065] Total swap = 124996kB [ 123.011707][ T6065] 2097051 pages RAM [ 123.046365][ T6065] 0 pages HighMem/MovableOnly [ 123.069135][ T6065] 428266 pages reserved [ 123.097247][ T6065] 0 pages cma reserved [ 123.907861][ T6091] netlink: 64 bytes leftover after parsing attributes in process `syz.4.74'. [ 123.961189][ T6091] netlink: 56 bytes leftover after parsing attributes in process `syz.4.74'. [ 125.357598][ T6108] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 125.437243][ T6112] loop3: detected capacity change from 0 to 128 [ 125.461180][ T6112] minix: Unknown parameter ' [ 125.461180][ T6112] ' [ 125.494340][ T5826] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 125.836599][ T5826] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 125.879222][ T5826] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 125.905452][ T5826] usb 1-1: config 0 has no interfaces? [ 126.065271][ T5826] usb 1-1: config 0 has no interfaces? [ 126.079031][ T6110] loop5: detected capacity change from 0 to 4096 [ 126.104182][ T5826] usb 1-1: config 0 has no interfaces? [ 126.129707][ T5826] usb 1-1: config 0 has no interfaces? [ 126.150846][ T5826] usb 1-1: config 0 has no interfaces? [ 126.176718][ T5826] usb 1-1: config 0 has no interfaces? [ 126.243011][ T5826] usb 1-1: config 0 has no interfaces? [ 126.332439][ T5826] usb 1-1: config 0 has no interfaces? [ 126.536439][ T5826] usb 1-1: New USB device strings: Mfr=252, Product=255, SerialNumber=255 [ 126.587391][ T5826] usb 1-1: Product: syz [ 126.599047][ T5826] usb 1-1: Manufacturer: syz [ 126.624123][ T5826] usb 1-1: SerialNumber: syz [ 126.660287][ T5826] usb 1-1: config 0 descriptor?? [ 126.776729][ T6091] loop4: detected capacity change from 0 to 32768 [ 126.844715][ T6091] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 126.874774][ T6091] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 126.876493][ T6091] XFS (loop4): log mount failed [ 127.009218][ T5900] usb 1-1: USB disconnect, device number 3 [ 127.018145][ T6126] loop1: detected capacity change from 0 to 2048 [ 127.225094][ T6132] vlan0: entered promiscuous mode [ 127.272639][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 127.596317][ T6143] xt_hashlimit: max too large, truncated to 1048576 [ 127.614854][ T6143] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.84: inline data xattr refers to an external xattr inode [ 128.081759][ T6143] EXT4-fs (loop1): Remounting filesystem read-only [ 128.276738][ T6147] loop4: detected capacity change from 0 to 2048 [ 128.349640][ T6147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.460616][ T6152] loop5: detected capacity change from 0 to 256 [ 128.467090][ T978] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.479320][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 128.624220][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.639072][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 128.765654][ T978] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 128.776622][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.788075][ T978] usb 1-1: config 0 descriptor?? [ 128.811284][ T978] gspca_main: sq930x-2.14.0 probing 041e:403c [ 128.827497][ T6156] loop4: detected capacity change from 0 to 512 [ 128.834184][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 128.841076][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.852334][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.864750][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.877913][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.914410][ T6156] EXT4-fs: Ignoring removed i_version option [ 128.923833][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.942678][ T6156] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 128.955290][ T9] usb 4-1: config 0 descriptor?? [ 129.152817][ T6161] loop2: detected capacity change from 0 to 2037 [ 129.599755][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'. [ 129.790448][ T6166] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 129.804223][ T978] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 129.811169][ T978] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 129.811914][ T6161] loop2: p1 p4 [ 129.811914][ T6161] p1: [ 129.822091][ T978] usb 1-1: USB disconnect, device number 4 [ 129.919502][ T9] microsoft 0003:045E:07DA.0001: item 0 4 0 9 parsing failed [ 129.927349][ T6161] loop2: p1 size 2047 extends beyond EOD, truncated [ 129.935491][ T9] microsoft 0003:045E:07DA.0001: parse failed [ 129.942055][ T9] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 129.968161][ T6161] loop2: p4 size 589824 extends beyond EOD, truncated [ 130.470677][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'. [ 130.531917][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.559273][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.583454][ T6180] loop0: detected capacity change from 0 to 256 [ 130.607360][ T6180] exfat: Deprecated parameter 'namecase' [ 130.641780][ T6180] exfat: Deprecated parameter 'utf8' [ 130.697939][ T6172] loop4: detected capacity change from 0 to 4096 [ 130.731519][ T6180] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 130.820203][ T6172] ntfs3(loop4): Failed to load $Extend (-22). [ 130.837470][ T6172] ntfs3(loop4): Failed to initialize $Extend. [ 130.888420][ T6177] netlink: 'syz.0.100': attribute type 5 has an invalid length. [ 130.904250][ T6177] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.100'. [ 131.225868][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 131.225934][ T30] audit: type=1800 audit(1787060528.321:137): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.97" name="file0" dev="loop4" ino=0 res=0 errno=0 [ 131.586332][ T6186] loop5: detected capacity change from 0 to 4096 [ 131.598157][ T5742] usb 4-1: USB disconnect, device number 6 [ 131.826110][ T6194] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.171357][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.195974][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.356277][ T6206] UBIFS error (pid: 6206): cannot open "ubi:0", error -19 [ 134.454569][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 134.489389][ T6206] UBIFS error (pid: 6206): cannot open "ubi:0", error -19 [ 134.716954][ T6213] FAULT_INJECTION: forcing a failure. [ 134.716954][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 134.739308][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.1.110 Not tainted syzkaller #0 PREEMPT(full) [ 134.739340][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.739354][ T6213] Call Trace: [ 134.739363][ T6213] [ 134.739373][ T6213] dump_stack_lvl+0xe8/0x150 [ 134.739413][ T6213] should_fail_ex+0x40c/0x560 [ 134.739448][ T6213] ? vmemdup_user+0x2b/0xd0 [ 134.739488][ T6213] should_failslab+0xa8/0x100 [ 134.739528][ T6213] __kvmalloc_node_noprof+0x176/0x860 [ 134.739567][ T6213] ? __fget_files+0x2a/0x420 [ 134.739601][ T6213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.739632][ T6213] ? vmemdup_user+0x2b/0xd0 [ 134.739675][ T6213] vmemdup_user+0x2b/0xd0 [ 134.739711][ T6213] map_lookup_elem+0x3c6/0x9b0 [ 134.739745][ T6213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.739781][ T6213] __sys_bpf+0x87c/0xd90 [ 134.739823][ T6213] ? __pfx___sys_bpf+0x10/0x10 [ 134.739869][ T6213] ? __fget_files+0x2a/0x420 [ 134.739930][ T6213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.739959][ T6213] ? ksys_write+0x242/0x270 [ 134.740002][ T6213] ? __pfx_ksys_write+0x10/0x10 [ 134.740048][ T6213] __x64_sys_bpf+0xba/0xd0 [ 134.740078][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.740106][ T6213] do_syscall_64+0x174/0x580 [ 134.740138][ T6213] ? trace_irq_disable+0x3b/0x140 [ 134.740175][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.740201][ T6213] RIP: 0033:0x7ff89fb9e0d9 [ 134.740223][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.740242][ T6213] RSP: 002b:00007ff8a0a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.740267][ T6213] RAX: ffffffffffffffda RBX: 00007ff89fe25fa0 RCX: 00007ff89fb9e0d9 [ 134.740286][ T6213] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000001 [ 134.740302][ T6213] RBP: 00007ff8a0a40090 R08: 0000000000000000 R09: 0000000000000000 [ 134.740317][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.740332][ T6213] R13: 00007ff89fe26038 R14: 00007ff89fe25fa0 R15: 00007ffea82dc3e8 [ 134.740370][ T6213] [ 135.402418][ T6216] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 136.133113][ T6221] loop2: detected capacity change from 0 to 32768 [ 136.175865][ T6221] JBD2: Ignoring recovery information on journal [ 136.255956][ T6221] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 136.275620][ T30] audit: type=1326 audit(1787060533.431:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d6a99e0d9 code=0x0 [ 136.341365][ T30] audit: type=1326 audit(1787060533.491:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.2.113" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6a99e0d9 code=0x0 [ 136.609559][ T6238] fuse: Bad value for 'fd' [ 137.497458][ T6237] loop1: detected capacity change from 0 to 131072 [ 137.527743][ T6237] F2FS-fs (loop1): Test dummy encryption mode enabled [ 137.608091][ T6237] F2FS-fs (loop1): invalid crc value [ 137.701480][ T6237] F2FS-fs (loop1): access invalid blkaddr:0 [ 137.707473][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.1.117 Not tainted syzkaller #0 PREEMPT(full) [ 137.707494][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.707505][ T6237] Call Trace: [ 137.707513][ T6237] [ 137.707520][ T6237] dump_stack_lvl+0xe8/0x150 [ 137.707551][ T6237] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 137.707584][ T6237] sanity_check_extent_cache+0x1a3/0x620 [ 137.707612][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.707634][ T6237] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 137.707658][ T6237] f2fs_iget+0x41fc/0x6230 [ 137.707704][ T6237] f2fs_fill_super+0x4edb/0x77f0 [ 137.707775][ T6237] get_tree_bdev_flags+0x430/0x4f0 [ 137.707795][ T6237] ? __pfx_f2fs_fill_super+0x10/0x10 [ 137.707821][ T6237] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 137.707841][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.707865][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.707890][ T6237] vfs_get_tree+0x92/0x2a0 [ 137.707918][ T6237] do_new_mount+0x319/0xdc0 [ 137.707943][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.707969][ T6237] ? __pfx_do_new_mount+0x10/0x10 [ 137.707996][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.708017][ T6237] ? ns_capable+0x89/0xe0 [ 137.708039][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.708061][ T6237] ? path_mount+0x647/0x1050 [ 137.708089][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.708110][ T6237] ? user_path_at+0xd4/0x160 [ 137.708142][ T6237] __se_sys_mount+0x31d/0x420 [ 137.708174][ T6237] ? __pfx___se_sys_mount+0x10/0x10 [ 137.708198][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.708226][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.708247][ T6237] ? __x64_sys_mount+0x20/0xc0 [ 137.708273][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.708293][ T6237] do_syscall_64+0x174/0x580 [ 137.708317][ T6237] ? trace_irq_disable+0x3b/0x140 [ 137.708345][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.708364][ T6237] RIP: 0033:0x7ff89fb9f34a [ 137.708381][ T6237] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.708396][ T6237] RSP: 002b:00007ff8a0a3fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.708415][ T6237] RAX: ffffffffffffffda RBX: 00007ff8a0a3fee0 RCX: 00007ff89fb9f34a [ 137.708428][ T6237] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007ff8a0a3fea0 [ 137.708441][ T6237] RBP: 0000200000000100 R08: 00007ff8a0a3fee0 R09: 0000000000000010 [ 137.708453][ T6237] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600 [ 137.708465][ T6237] R13: 00007ff8a0a3fea0 R14: 00000000000105d6 R15: 00002000000003c0 [ 137.708493][ T6237] [ 137.709825][ T6237] loop1: lost filesystem error report for type 5 error -117 [ 137.855053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 137.859128][ T6237] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 138.007755][ T6237] loop1: lost filesystem error report for type 5 error -117 [ 138.007775][ T6237] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 138.015711][ T6237] F2FS-fs (loop1): Failed to read root inode [ 138.126758][ T5609] ocfs2: Unmounting device (7,2) on (node local) [ 138.207359][ T6251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.249711][ T6251] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 138.837871][ T6250] loop0: detected capacity change from 0 to 4096 [ 139.701112][ T6250] ntfs3: Invalid value for umask. [ 140.011862][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 140.450681][ T6266] loop5: detected capacity change from 0 to 32768 [ 140.594152][ T6266] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 140.637539][ T6269] loop1: detected capacity change from 0 to 4096 [ 140.924735][ T6269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.033706][ T6275] netlink: 'syz.5.124': attribute type 12 has an invalid length. [ 141.042503][ T6275] netlink: 'syz.5.124': attribute type 29 has an invalid length. [ 141.050968][ T6275] netlink: 'syz.5.124': attribute type 7 has an invalid length. [ 141.058672][ T6275] netlink: 'syz.5.124': attribute type 37 has an invalid length. [ 141.066619][ T6275] netlink: 80 bytes leftover after parsing attributes in process `syz.5.124'. [ 143.920042][ T6284] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 144.659599][ T6291] loop2: detected capacity change from 0 to 32768 [ 144.675787][ T5607] ocfs2: Unmounting device (7,5) on (node local) [ 144.719480][ T6291] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 144.950326][ T6291] XFS (loop2): Ending clean mount [ 144.971976][ T6302] jffs2: notice: (6302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.006827][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.403227][ T6310] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 145.432182][ T6310] CIFS: Attempting to mount //127.0.0.1/share [ 146.949882][ T5609] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 146.988497][ T6310] CIFS: VFS: Error connecting to socket. Aborting operation. [ 147.047349][ T6310] CIFS: VFS: cifs_mount failed w/return code = -4 [ 147.245668][ T5615] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.456221][ T5615] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 147.472469][ T6330] loop4: detected capacity change from 0 to 4096 [ 147.472816][ T5615] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.488291][ T6330] ntfs3: Invalid value for umask. [ 147.534215][ T5615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.609370][ T5615] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 148.505797][ T6350] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 148.692356][ T6355] jffs2: notice: (6355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.741408][ T6353] loop4: detected capacity change from 0 to 2048 [ 148.795338][ T6353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.949860][ T2352] usb 4-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 148.983836][ T2352] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 149.237577][ T1161] Bluetooth: hci6: Frame reassembly failed (-84) [ 150.345297][ T6372] loop5: detected capacity change from 0 to 64 [ 150.996795][ T6368] hfs: request for non-existent node 131072 in B*Tree [ 151.003652][ T6368] hfs: request for non-existent node 131072 in B*Tree [ 151.038797][ T6368] 9p: Bad value for 'rfdno' [ 151.298532][ T5616] Bluetooth: hci6: command 0x1003 tx timeout [ 151.400478][ T5632] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 151.887111][ T6319] [U]  [ 151.922956][ T5826] usb 4-1: USB disconnect, device number 7 [ 154.573197][ T6386] loop2: detected capacity change from 0 to 4096 [ 154.580375][ T6386] ntfs3: Invalid value for umask. [ 155.438856][ T6401] jffs2: notice: (6401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.533349][ T6404] loop0: detected capacity change from 0 to 1024 [ 155.639254][ T6404] UBIFS error (pid: 6404): cannot open "c:::", error -22 [ 156.962613][ T6430] FAULT_INJECTION: forcing a failure. [ 156.962613][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.988068][ T6429] loop0: detected capacity change from 0 to 1024 [ 157.005165][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz.1.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.005203][ T6430] Tainted: [L]=SOFTLOCKUP [ 157.005212][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.005226][ T6430] Call Trace: [ 157.005235][ T6430] [ 157.005245][ T6430] dump_stack_lvl+0xe8/0x150 [ 157.005286][ T6430] should_fail_ex+0x40c/0x560 [ 157.005325][ T6430] strncpy_from_user+0x36/0x2c0 [ 157.005360][ T6430] do_getname+0x77/0x250 [ 157.005394][ T6430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.005422][ T6430] __se_sys_link+0x2b/0x2c0 [ 157.005455][ T6430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.005482][ T6430] do_syscall_64+0x174/0x580 [ 157.005513][ T6430] ? trace_irq_disable+0x3b/0x140 [ 157.005552][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.005581][ T6430] RIP: 0033:0x7ff89fb9e0d9 [ 157.005604][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.005623][ T6430] RSP: 002b:00007ff8a0a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 157.005648][ T6430] RAX: ffffffffffffffda RBX: 00007ff89fe26090 RCX: 00007ff89fb9e0d9 [ 157.005666][ T6430] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 157.005683][ T6430] RBP: 00007ff8a0a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.005698][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.005712][ T6430] R13: 00007ff89fe26128 R14: 00007ff89fe26090 R15: 00007ffea82dc3e8 [ 157.005751][ T6430] [ 157.170825][ T6429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.211014][ T6429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.244534][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 157.416079][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 157.430253][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 157.443071][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.462835][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.474014][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.485156][ T6421] FAULT_INJECTION: forcing a failure. [ 157.485156][ T6421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.507246][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.4.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.507279][ T6421] Tainted: [L]=SOFTLOCKUP [ 157.507287][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.507300][ T6421] Call Trace: [ 157.507309][ T6421] [ 157.507319][ T6421] dump_stack_lvl+0xe8/0x150 [ 157.507358][ T6421] should_fail_ex+0x40c/0x560 [ 157.507395][ T6421] _copy_to_user+0x31/0xb0 [ 157.507420][ T6421] simple_read_from_buffer+0xe1/0x170 [ 157.507467][ T6421] proc_fail_nth_read+0x1bb/0x230 [ 157.507491][ T6421] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.507523][ T6421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.507551][ T6421] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.507577][ T6421] ? rw_verify_area+0x24a/0x4c0 [ 157.507614][ T6421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.507637][ T6421] vfs_read+0x213/0xa80 [ 157.507682][ T6421] ? __pfx_vfs_read+0x10/0x10 [ 157.507721][ T6421] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.507748][ T6421] ? _copy_from_user+0x94/0xb0 [ 157.507770][ T6421] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.507797][ T6421] ? __sys_connect+0x33c/0x460 [ 157.507825][ T6421] ? __pfx___sys_connect+0x10/0x10 [ 157.507851][ T6421] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.507882][ T6421] ksys_read+0x150/0x270 [ 157.507921][ T6421] ? __pfx_ksys_read+0x10/0x10 [ 157.507965][ T6421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.507991][ T6421] do_syscall_64+0x174/0x580 [ 157.508020][ T6421] ? trace_irq_disable+0x3b/0x140 [ 157.508056][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.508079][ T6421] RIP: 0033:0x7f64b7f5e90e [ 157.508100][ T6421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.508119][ T6421] RSP: 002b:00007f64b61f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.508141][ T6421] RAX: ffffffffffffffda RBX: 00007f64b61f66c0 RCX: 00007f64b7f5e90e [ 157.508157][ T6421] RDX: 000000000000000f RSI: 00007f64b61f60a0 RDI: 0000000000000006 [ 157.508172][ T6421] RBP: 00007f64b61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.508189][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.508202][ T6421] R13: 00007f64b8226038 R14: 00007f64b8225fa0 R15: 00007ffdf28087b8 [ 157.508237][ T6421] [ 157.513196][ T24] usb 6-1: config 0 descriptor?? [ 158.011349][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 158.218299][ T5818] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.260056][ T6459] jffs2: notice: (6459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.427729][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 158.499436][ T5742] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 158.534520][ T5818] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 158.598157][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.712201][ T5742] usb 3-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice= 0.40 [ 158.936194][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.947270][ T24] gspca_vc032x: reg_r err -110 [ 159.017880][ T24] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 159.058139][ T5742] usb 3-1: Product: syz [ 159.090749][ T5742] usb 3-1: Manufacturer: ⓑ䭀᥎桵駐㨲䯺ꊄੳ桹帔勯ꮀ떽翙鳱㠕窗斧鐩瑘龝癱穄쨯㶂㦌롭ꖐ௲칡鸙 [ 159.139218][ T5818] usb 1-1: config 0 descriptor?? [ 159.165487][ T5742] usb 3-1: SerialNumber: syz [ 159.480815][ T6454] UDC core: g1: couldn't find an available UDC or it's busy [ 159.587040][ T5818] logitech 0003:046D:C623.0002: unknown main item tag 0x6 [ 159.607703][ T5818] logitech 0003:046D:C623.0002: unknown main item tag 0x7 [ 159.624956][ T5818] logitech 0003:046D:C623.0002: unknown main item tag 0x0 [ 159.662163][ T5818] logitech 0003:046D:C623.0002: unknown global tag 0xe [ 159.931470][ T5818] logitech 0003:046D:C623.0002: item 0 0 1 14 parsing failed [ 160.237621][ T5818] logitech 0003:046D:C623.0002: parse failed [ 160.358606][ T6452] bond0: entered promiscuous mode [ 160.376679][ T5742] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.387071][ T6452] bond_slave_0: entered promiscuous mode [ 160.387195][ T5818] logitech 0003:046D:C623.0002: probe with driver logitech failed with error -22 [ 160.411075][ T5742] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 160.421829][ T6452] bond_slave_1: entered promiscuous mode [ 160.432744][ T5742] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.440423][ T5742] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 160.453330][ T5742] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.111370][ T6452] batadv0: entered promiscuous mode [ 161.215615][ T6452] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.371899][ T6452] bond0: left promiscuous mode [ 161.421349][ T29] usb 6-1: USB disconnect, device number 5 [ 161.433298][ T6452] bond_slave_0: left promiscuous mode [ 161.711830][ T6452] bond_slave_1: left promiscuous mode [ 162.101118][ T6485] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 162.199576][ T6452] batadv0: left promiscuous mode [ 163.172811][ T6482] loop1: detected capacity change from 0 to 4096 [ 163.211921][ T6482] ntfs3: Invalid value for umask. [ 163.248597][ T6496] binder: 6495:6496 ioctl c018620c 200000000240 returned -22 [ 163.272735][ T5742] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 163.549128][ T6501] FAULT_INJECTION: forcing a failure. [ 163.549128][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 163.562970][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.2.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.563006][ T6501] Tainted: [L]=SOFTLOCKUP [ 163.563015][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 163.563030][ T6501] Call Trace: [ 163.563039][ T6501] [ 163.563049][ T6501] dump_stack_lvl+0xe8/0x150 [ 163.563090][ T6501] should_fail_ex+0x40c/0x560 [ 163.563129][ T6501] should_failslab+0xa8/0x100 [ 163.563169][ T6501] __kmalloc_cache_noprof+0xa8/0x660 [ 163.563204][ T6501] ? virtio_transport_do_socket_init+0x57/0x2f0 [ 163.563244][ T6501] ? virtio_transport_do_socket_init+0x57/0x2f0 [ 163.563292][ T6501] virtio_transport_do_socket_init+0x57/0x2f0 [ 163.563335][ T6501] vsock_assign_transport+0x699/0x9c0 [ 163.563383][ T6501] vsock_connect+0x5a3/0xd40 [ 163.563417][ T6501] ? aa_sk_perm+0x6d5/0x900 [ 163.563457][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563499][ T6501] ? __pfx_vsock_connect+0x10/0x10 [ 163.563529][ T6501] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.563569][ T6501] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.563595][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563624][ T6501] ? hook_socket_connect+0x1f1/0x470 [ 163.563651][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563684][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563712][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563746][ T6501] __sys_connect+0x323/0x460 [ 163.563773][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.563806][ T6501] ? __pfx___sys_connect+0x10/0x10 [ 163.563847][ T6501] ? __pfx_ksys_write+0x10/0x10 [ 163.563893][ T6501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.563921][ T6501] __x64_sys_connect+0x7a/0x90 [ 163.563949][ T6501] do_syscall_64+0x174/0x580 [ 163.563982][ T6501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.564017][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.564048][ T6501] RIP: 0033:0x7f0d6a99e0d9 [ 163.564074][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.564095][ T6501] RSP: 002b:00007f0d6b872028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 163.564120][ T6501] RAX: ffffffffffffffda RBX: 00007f0d6ac26090 RCX: 00007f0d6a99e0d9 [ 163.564138][ T6501] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000006 [ 163.564154][ T6501] RBP: 00007f0d6b872090 R08: 0000000000000000 R09: 0000000000000000 [ 163.564170][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.564184][ T6501] R13: 00007f0d6ac26128 R14: 00007f0d6ac26090 R15: 00007ffe7afcd1a8 [ 163.564223][ T6501] [ 164.284615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 164.694250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 165.221013][ T5742] usb 3-1: USB disconnect, device number 3 [ 165.296932][ T24] usb 1-1: USB disconnect, device number 5 [ 165.355395][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.622166][ T6514] loop1: detected capacity change from 0 to 1024 [ 165.649123][ T6514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.711366][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.992579][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.243871][ T6529] loop1: detected capacity change from 0 to 512 [ 166.411850][ T6531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.107406][ T6529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.204: bg 0: block 5: invalid block bitmap [ 167.232382][ T6529] loop1: lost filesystem error report for type 5 error -117 [ 167.234516][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 167.249205][ C1] EXT4-fs (loop1): initial error at time 1787060564: ext4_validate_block_bitmap:432 [ 167.258634][ C1] EXT4-fs (loop1): last error at time 1787060564: ext4_validate_block_bitmap:432 [ 167.410088][ T6529] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 167.435076][ T6529] loop1: lost filesystem error report for type 5 error -117 [ 167.505673][ T6529] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.204: invalid indirect mapped block 3 (level 2) [ 167.555770][ T6529] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.577733][ T6529] EXT4-fs (loop1): 1 orphan inode deleted [ 167.644469][ T6529] EXT4-fs (loop1): 1 truncate cleaned up [ 167.693013][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.113697][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.307481][ T6540] FAULT_INJECTION: forcing a failure. [ 168.307481][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 168.364414][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.0.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.364452][ T6540] Tainted: [L]=SOFTLOCKUP [ 168.364460][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.364482][ T6540] Call Trace: [ 168.364491][ T6540] [ 168.364501][ T6540] dump_stack_lvl+0xe8/0x150 [ 168.364541][ T6540] should_fail_ex+0x40c/0x560 [ 168.364579][ T6540] should_failslab+0xa8/0x100 [ 168.364622][ T6540] __kmalloc_noprof+0xfe/0x720 [ 168.364656][ T6540] ? tomoyo_encode+0x2ad/0x570 [ 168.364682][ T6540] ? tomoyo_encode+0x2ad/0x570 [ 168.364718][ T6540] tomoyo_encode+0x2ad/0x570 [ 168.364756][ T6540] tomoyo_realpath_from_path+0x5fa/0x640 [ 168.364797][ T6540] ? tomoyo_path_number_perm+0x219/0x5f0 [ 168.364836][ T6540] tomoyo_path_number_perm+0x246/0x5f0 [ 168.364878][ T6540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.364914][ T6540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.364944][ T6540] ? __lock_acquire+0x683/0x2cf0 [ 168.364995][ T6540] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.365023][ T6540] ? hook_file_ioctl+0x1f0/0x5f0 [ 168.365086][ T6540] ? __fget_files+0x2a/0x420 [ 168.365126][ T6540] ? __fget_files+0x2a/0x420 [ 168.365160][ T6540] ? __fget_files+0x3a2/0x420 [ 168.365195][ T6540] ? __fget_files+0x2a/0x420 [ 168.365236][ T6540] security_file_ioctl+0xc3/0x2a0 [ 168.365275][ T6540] __se_sys_ioctl+0x47/0x170 [ 168.365302][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.365329][ T6540] do_syscall_64+0x174/0x580 [ 168.365360][ T6540] ? trace_irq_disable+0x3b/0x140 [ 168.365398][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.365424][ T6540] RIP: 0033:0x7fbd3f39e0d9 [ 168.365446][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.365471][ T6540] RSP: 002b:00007fbd401e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.365497][ T6540] RAX: ffffffffffffffda RBX: 00007fbd3f625fa0 RCX: 00007fbd3f39e0d9 [ 168.365515][ T6540] RDX: 00002000000000c0 RSI: 000000004024700a RDI: 0000000000000003 [ 168.365531][ T6540] RBP: 00007fbd401e4090 R08: 0000000000000000 R09: 0000000000000000 [ 168.365547][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.365561][ T6540] R13: 00007fbd3f626038 R14: 00007fbd3f625fa0 R15: 00007ffcb85222e8 [ 168.365600][ T6540] [ 168.365836][ T6540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.693396][ T6545] loop5: detected capacity change from 0 to 512 [ 168.802930][ T6545] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.878984][ T6549] loop3: detected capacity change from 0 to 128 [ 168.926973][ T6545] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.209: inode has both inline data and extents flags [ 168.949693][ T6549] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 168.962198][ T6549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.971378][ T6546] loop2: detected capacity change from 0 to 32768 [ 168.982743][ T6545] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.984072][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 168.999642][ C0] EXT4-fs (loop5): initial error at time 1787060566: ext4_orphan_get:1399: inode 15 [ 169.009081][ C0] EXT4-fs (loop5): last error at time 1787060566: ext4_orphan_get:1399: inode 15 [ 169.020643][ T6546] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.196 (6546) [ 169.038897][ T6545] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.209: couldn't read orphan inode 15 (err -117) [ 169.052744][ T6546] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 169.063248][ T6546] BTRFS info (device loop2): using crc32c checksum algorithm [ 169.071085][ T6546] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 169.132643][ T6545] loop5: lost filesystem error report for type 5 error -117 [ 169.140384][ T6545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.270943][ T6546] BTRFS info (device loop2): rebuilding free space tree [ 169.273908][ T6545] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 169.329157][ T6546] BTRFS info (device loop2): disabling free space tree [ 169.336655][ T6546] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.347717][ T6546] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.367876][ T6546] BTRFS info (device loop2): enabling ssd optimizations [ 169.375459][ T6546] BTRFS info (device loop2): turning on async discard [ 169.382225][ T6546] BTRFS info (device loop2): enabling disk space caching [ 169.389307][ T6546] BTRFS info (device loop2): force clearing of disk cache [ 169.397601][ T6546] BTRFS info (device loop2): use zstd compression, level 3 [ 169.756636][ T6570] vlan0: left promiscuous mode [ 169.787115][ T6546] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.798115][ T6546] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.831013][ T6546] overlayfs: d_ino too big (., ino=4611686018427388161, xinobits=3) [ 169.839255][ T6546] overlayfs: d_ino too big (.., ino=4611686018427388160, xinobits=3) [ 169.850007][ T6546] overlayfs: d_ino too big (30, ino=9223372036854775995, xinobits=3) [ 169.859314][ T6546] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 169.868311][ T6546] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 169.878976][ T6546] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 169.887547][ T6546] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 170.390077][ T6576] FAULT_INJECTION: forcing a failure. [ 170.390077][ T6576] name failslab, interval 1, probability 0, space 0, times 0 [ 170.402942][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: syz.0.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.402982][ T6576] Tainted: [L]=SOFTLOCKUP [ 170.402990][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.403004][ T6576] Call Trace: [ 170.403013][ T6576] [ 170.403023][ T6576] dump_stack_lvl+0xe8/0x150 [ 170.403063][ T6576] should_fail_ex+0x40c/0x560 [ 170.403101][ T6576] should_failslab+0xa8/0x100 [ 170.403139][ T6576] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 170.403170][ T6576] ? do_getname+0x2e/0x250 [ 170.403200][ T6576] ? do_getname+0x2e/0x250 [ 170.403238][ T6576] do_getname+0x2e/0x250 [ 170.403267][ T6576] ? getname_flags+0x11/0x20 [ 170.403301][ T6576] do_sys_openat2+0xcc/0x200 [ 170.403333][ T6576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.403361][ T6576] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.403393][ T6576] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.403434][ T6576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.403465][ T6576] __x64_sys_openat+0x138/0x170 [ 170.403501][ T6576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.403527][ T6576] do_syscall_64+0x174/0x580 [ 170.403559][ T6576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.403593][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.403618][ T6576] RIP: 0033:0x7fbd3f39e0d9 [ 170.403639][ T6576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.403659][ T6576] RSP: 002b:00007fbd401a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.403684][ T6576] RAX: ffffffffffffffda RBX: 00007fbd3f626180 RCX: 00007fbd3f39e0d9 [ 170.403702][ T6576] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 170.403718][ T6576] RBP: 00007fbd401a2090 R08: 0000000000000000 R09: 0000000000000000 [ 170.403734][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.403748][ T6576] R13: 00007fbd3f626218 R14: 00007fbd3f626180 R15: 00007ffcb85222e8 [ 170.403786][ T6576] [ 170.847734][ T5607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.900880][ T6546] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 171.340298][ T6583] loop0: detected capacity change from 0 to 128 [ 171.879082][ T6584] jffs2: notice: (6584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 172.262249][ T6584] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 172.603118][ T6596] program syz.1.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.051612][ T6605] loop5: detected capacity change from 0 to 2048 [ 173.059274][ T6605] EXT4-fs: quotafile must be on filesystem root [ 173.205793][ T6608] FAULT_INJECTION: forcing a failure. [ 173.205793][ T6608] name failslab, interval 1, probability 0, space 0, times 0 [ 173.345725][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.0.223 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.345763][ T6608] Tainted: [L]=SOFTLOCKUP [ 173.345772][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.345786][ T6608] Call Trace: [ 173.345795][ T6608] [ 173.345805][ T6608] dump_stack_lvl+0xe8/0x150 [ 173.345846][ T6608] should_fail_ex+0x40c/0x560 [ 173.345884][ T6608] should_failslab+0xa8/0x100 [ 173.345939][ T6608] __kmalloc_noprof+0xfe/0x720 [ 173.345977][ T6608] ? tomoyo_encode+0x2ad/0x570 [ 173.346004][ T6608] ? tomoyo_encode+0x2ad/0x570 [ 173.346039][ T6608] tomoyo_encode+0x2ad/0x570 [ 173.346073][ T6608] tomoyo_realpath_from_path+0x5fa/0x640 [ 173.346114][ T6608] ? tomoyo_path_number_perm+0x219/0x5f0 [ 173.346153][ T6608] tomoyo_path_number_perm+0x246/0x5f0 [ 173.346194][ T6608] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.346230][ T6608] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.346258][ T6608] ? __lock_acquire+0x683/0x2cf0 [ 173.346312][ T6608] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.346340][ T6608] ? hook_file_ioctl+0x1f0/0x5f0 [ 173.346402][ T6608] ? __fget_files+0x2a/0x420 [ 173.346442][ T6608] ? __fget_files+0x2a/0x420 [ 173.346475][ T6608] ? __fget_files+0x3a2/0x420 [ 173.346510][ T6608] ? __fget_files+0x2a/0x420 [ 173.346550][ T6608] security_file_ioctl+0xc3/0x2a0 [ 173.346588][ T6608] __se_sys_ioctl+0x47/0x170 [ 173.346615][ T6608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.346642][ T6608] do_syscall_64+0x174/0x580 [ 173.346675][ T6608] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.346709][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.346734][ T6608] RIP: 0033:0x7fbd3f39e0d9 [ 173.346756][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.346775][ T6608] RSP: 002b:00007fbd401e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.346800][ T6608] RAX: ffffffffffffffda RBX: 00007fbd3f625fa0 RCX: 00007fbd3f39e0d9 [ 173.346818][ T6608] RDX: 0000200000000040 RSI: 00000000c0045103 RDI: 0000000000000003 [ 173.346834][ T6608] RBP: 00007fbd401e4090 R08: 0000000000000000 R09: 0000000000000000 [ 173.346849][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.346864][ T6608] R13: 00007fbd3f626038 R14: 00007fbd3f625fa0 R15: 00007ffcb85222e8 [ 173.346902][ T6608] [ 173.377268][ T6608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.380068][ T6629] loop1: detected capacity change from 0 to 256 [ 175.403838][ T6629] exfat: Deprecated parameter 'utf8' [ 175.444178][ T6629] exfat: Deprecated parameter 'utf8' [ 175.462007][ T6629] exfat: Deprecated parameter 'utf8' [ 175.559320][ T6629] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 176.944759][ T6652] loop5: detected capacity change from 0 to 2048 [ 176.952051][ T6652] nilfs2: Unknown parameter '/dev/video#' [ 177.735555][ T6656] syz.5.238 uses obsolete (PF_INET,SOCK_PACKET) [ 177.750222][ T47] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.033028][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.246175][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.660584][ T6650] loop3: detected capacity change from 0 to 32768 [ 178.974442][ T6650] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 179.012102][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.027337][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.037204][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.048412][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.049424][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.067035][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.150965][ T6650] XFS (loop3): Ending clean mount [ 179.353546][ T6650] XFS (loop3): Quotacheck needed: Please wait. [ 179.502122][ T6687] FAULT_INJECTION: forcing a failure. [ 179.502122][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.569203][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.5.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.569241][ T6687] Tainted: [L]=SOFTLOCKUP [ 179.569250][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.569264][ T6687] Call Trace: [ 179.569273][ T6687] [ 179.569282][ T6687] dump_stack_lvl+0xe8/0x150 [ 179.569322][ T6687] should_fail_ex+0x40c/0x560 [ 179.569359][ T6687] _copy_from_user+0x2d/0xb0 [ 179.569384][ T6687] snd_pcm_oss_write2+0x227/0x440 [ 179.569426][ T6687] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 179.569465][ T6687] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 179.569505][ T6687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.569534][ T6687] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 179.569579][ T6687] snd_pcm_oss_write+0x65e/0xb40 [ 179.569633][ T6687] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 179.569668][ T6687] vfs_write+0x296/0xba0 [ 179.569718][ T6687] ? __pfx_vfs_write+0x10/0x10 [ 179.569755][ T6687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.569788][ T6687] ? __fget_files+0x2a/0x420 [ 179.569827][ T6687] ? __fget_files+0x2a/0x420 [ 179.569860][ T6687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.569889][ T6687] ? __fget_files+0x3a2/0x420 [ 179.569923][ T6687] ? __fget_files+0x2a/0x420 [ 179.569971][ T6687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.570005][ T6687] ksys_write+0x150/0x270 [ 179.570045][ T6687] ? __pfx_ksys_write+0x10/0x10 [ 179.570093][ T6687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.570121][ T6687] do_syscall_64+0x174/0x580 [ 179.570152][ T6687] ? trace_irq_disable+0x3b/0x140 [ 179.570189][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.570214][ T6687] RIP: 0033:0x7efd67b9e0d9 [ 179.570236][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.570255][ T6687] RSP: 002b:00007efd68a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.570280][ T6687] RAX: ffffffffffffffda RBX: 00007efd67e25fa0 RCX: 00007efd67b9e0d9 [ 179.570298][ T6687] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 179.570314][ T6687] RBP: 00007efd68a03090 R08: 0000000000000000 R09: 0000000000000000 [ 179.570329][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.570343][ T6687] R13: 00007efd67e26038 R14: 00007efd67e25fa0 R15: 00007ffd030648b8 [ 179.570382][ T6687] [ 179.594356][ T6650] XFS (loop3): Quotacheck: Done. [ 179.945944][ T47] bridge_slave_1: left allmulticast mode [ 179.958274][ T5610] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 179.968050][ T47] bridge_slave_1: left promiscuous mode [ 179.977007][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.012594][ T6696] loop2: detected capacity change from 0 to 128 [ 180.023917][ T47] bridge_slave_0: left allmulticast mode [ 180.029736][ T47] bridge_slave_0: left promiscuous mode [ 180.047199][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.083169][ T6696] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 180.091915][ T6684] loop4: detected capacity change from 0 to 32768 [ 180.102283][ T6696] hpfs: filesystem error: improperly stopped [ 180.199073][ T6696] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 180.238745][ T6684] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: non-device mode 0100644 with i_rdev 8796093022210 [ 180.240157][ T6696] hpfs: You really don't want any checks? You are crazy... [ 180.257005][ T6684] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 180.276469][ T6684] OCFS2: File system is now read-only. [ 180.281959][ T6684] (syz.4.243,6684,0):ocfs2_read_locked_inode:633 ERROR: status = -30 [ 180.290891][ T6684] (syz.4.243,6684,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30 [ 180.300345][ T6684] (syz.4.243,6684,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=9, slot=0 [ 180.311615][ T6684] (syz.4.243,6684,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 180.320400][ T6684] (syz.4.243,6684,0):ocfs2_mount_volume:1757 ERROR: status = -30 [ 180.343155][ T6684] (syz.4.243,6684,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 180.356925][ T6696] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 180.422321][ T6696] hpfs: code page support is disabled [ 180.427149][ T6699] jffs2: notice: (6699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.441930][ T6696] hpfs: hpfs_map_4sectors(): unaligned read [ 180.461790][ T6696] hpfs: hpfs_map_4sectors(): unaligned read [ 180.491134][ T6696] hpfs: filesystem error: unable to find root dir [ 180.636893][ T6696] hpfs: hpfs_map_4sectors(): unaligned read [ 180.678035][ T6696] hpfs: hpfs_map_sector(): read error [ 180.754405][ T6707] hpfs: hpfs_map_4sectors(): unaligned read [ 180.789164][ T6707] hpfs: hpfs_map_4sectors(): unaligned read [ 180.837123][ T30] audit: type=1326 audit(1787060577.981:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 180.936449][ T978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.956404][ T30] audit: type=1326 audit(1787060577.981:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.051678][ T6709] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 181.068467][ T30] audit: type=1326 audit(1787060577.981:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.120698][ T30] audit: type=1326 audit(1787060577.981:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.148195][ T5632] Bluetooth: hci4: command tx timeout [ 181.155003][ T30] audit: type=1326 audit(1787060577.981:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.181293][ T30] audit: type=1326 audit(1787060577.981:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.207600][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 181.212925][ T30] audit: type=1326 audit(1787060577.981:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.213353][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.238929][ T978] usb 5-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.40 [ 181.262848][ T30] audit: type=1326 audit(1787060577.981:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.274861][ T978] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.292951][ T30] audit: type=1326 audit(1787060577.981:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.319970][ T978] usb 5-1: config 1 interface 0 has no altsetting 0 [ 181.331977][ T30] audit: type=1326 audit(1787060577.981:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.3.248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e299e0d9 code=0x7ffc0000 [ 181.341542][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.367077][ T978] usb 5-1: Product: syz [ 181.367078][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.380854][ T978] usb 5-1: Manufacturer: מּ‥䵖尶遖㷯懅㓑䋎믝ﮎ둆栬沾츦煕먙꯫昷⽙陹륩אַ폩輸⑮퓭급጗넘߬秸ヶꭖ胤ІὍ弹─ᔬ丽翏Ԕ糵ᶜᱚ䨢媴溝拌ⵆ둼절锃븋ἑ㜄쵰ઝ摶ⲿ⪌쪅⃎仹ָ뢊؅霋枨꘣륏芕䕍쌚뼮짰ఋ玑棫烘␢陖׹Ħ烨ᷧះ꘣籗 [ 181.382185][ T47] bond0 (unregistering): Released all slaves [ 181.412396][ T978] usb 5-1: SerialNumber: syz [ 182.071445][ T6724] loop5: detected capacity change from 0 to 1024 [ 182.112457][ T6724] EXT4-fs: Ignoring removed bh option [ 182.167221][ T978] usbhid 5-1:1.0: can't add hid device: -71 [ 182.181472][ T6724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.192188][ T978] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 182.347914][ T978] usb 5-1: USB disconnect, device number 4 [ 182.498217][ T5607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.592340][ T47] hsr_slave_0: left promiscuous mode [ 182.630601][ T47] hsr_slave_1: left promiscuous mode [ 182.653428][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.696917][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.855675][ T6744] loop2: detected capacity change from 0 to 128 [ 183.204344][ T5632] Bluetooth: hci4: command tx timeout [ 183.252826][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.437421][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.957573][ T47] veth1_macvtap: left promiscuous mode [ 183.966951][ T47] veth0_macvtap: left promiscuous mode [ 183.987718][ T47] veth1_vlan: left promiscuous mode [ 183.999440][ T47] veth0_vlan: left promiscuous mode [ 185.174132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 185.896162][ T5632] Bluetooth: hci4: command tx timeout [ 185.901697][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 185.901714][ T30] audit: type=1326 audit(1787060581.981:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6a99e0d9 code=0x7fc00000 [ 186.081352][ T30] audit: type=1800 audit(1787060582.071:297): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.257" name="bmaControls" dev="configfs" ino=11824 res=0 errno=0 [ 186.162680][ T30] audit: type=1326 audit(1787060582.451:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d6a93f459 code=0x7fc00000 [ 186.357244][ T6766] jffs2: notice: (6766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.519131][ T6770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.263'. [ 186.643732][ T47] team0 (unregistering): Port device team_slave_1 removed [ 186.697869][ T47] team0 (unregistering): Port device team_slave_0 removed [ 187.301198][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.903457][ T6788] loop5: detected capacity change from 0 to 164 [ 187.925042][ T5632] Bluetooth: hci4: command tx timeout [ 188.793567][ T6788] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 188.918293][ T6777] loop4: detected capacity change from 0 to 32768 [ 189.164281][ T6804] loop2: detected capacity change from 0 to 64 [ 189.505759][ T6804] hfs: request for non-existent node 131072 in B*Tree [ 189.512731][ T6804] hfs: request for non-existent node 131072 in B*Tree [ 189.692146][ T6804] 9p: Bad value for 'rfdno' [ 190.665995][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.688193][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.696130][ T6671] bridge_slave_0: entered allmulticast mode [ 190.706196][ T6671] bridge_slave_0: entered promiscuous mode [ 190.716596][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.723866][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.731776][ T6671] bridge_slave_1: entered allmulticast mode [ 190.775646][ T6671] bridge_slave_1: entered promiscuous mode [ 192.444581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.467561][ T30] audit: type=1326 audit(1787060588.581:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b7f9e0d9 code=0x7fc00000 [ 192.595870][ T30] audit: type=1800 audit(1787060588.591:300): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.270" name="bmaControls" dev="configfs" ino=11918 res=0 errno=0 [ 192.701627][ T6828] Illegal XDP return value 6828 on prog (id 49) dev N/A, expect packet loss! [ 192.712647][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.735695][ T30] audit: type=1326 audit(1787060589.151:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64b7f3f459 code=0x7fc00000 [ 192.785258][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.803582][ T6831] loop5: detected capacity change from 0 to 1024 [ 192.891874][ T6831] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 192.995117][ T6671] team0: Port device team_slave_0 added [ 193.026447][ T6671] team0: Port device team_slave_1 added [ 193.228020][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.255521][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.372816][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.439631][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.465742][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.526792][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.533419][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.567020][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.832339][ T6846] jffs2: notice: (6846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.927745][ T6671] hsr_slave_0: entered promiscuous mode [ 193.955252][ T6671] hsr_slave_1: entered promiscuous mode [ 193.985367][ T6671] debugfs: 'hsr0' already exists in 'hsr' [ 193.999872][ T6671] Cannot create hsr debugfs directory [ 194.031008][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 194.050803][ T6847] loop0: detected capacity change from 0 to 4096 [ 194.133068][ T6852] loop5: detected capacity change from 0 to 8 [ 194.252160][ T6852] netlink: 'syz.5.277': attribute type 8 has an invalid length. [ 194.285459][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.277'. [ 194.359373][ T6852] bond0: entered promiscuous mode [ 194.387041][ T6852] bond_slave_0: entered promiscuous mode [ 194.416555][ T6852] bond_slave_1: entered promiscuous mode [ 194.461489][ T6852] gretap0: entered promiscuous mode [ 194.496722][ T6852] team0: entered promiscuous mode [ 194.559981][ T6852] team_slave_0: entered promiscuous mode [ 194.572453][ T978] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 194.604427][ T6852] team_slave_1: entered promiscuous mode [ 195.020430][ T978] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 195.143464][ T6852] hsr1: entered promiscuous mode [ 195.186421][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 195.252718][ T978] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 195.304683][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 1024, setting to 64 [ 195.331274][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.475780][ T978] usb 6-1: config 0 descriptor?? [ 195.503978][ T978] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 195.761771][ T6867] FAULT_INJECTION: forcing a failure. [ 195.761771][ T6867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.797285][ T978] usb 6-1: USB disconnect, device number 6 [ 195.830432][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.4.273 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.830468][ T6867] Tainted: [L]=SOFTLOCKUP [ 195.830478][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 195.830492][ T6867] Call Trace: [ 195.830501][ T6867] [ 195.830511][ T6867] dump_stack_lvl+0xe8/0x150 [ 195.830551][ T6867] should_fail_ex+0x40c/0x560 [ 195.830590][ T6867] _copy_to_user+0x31/0xb0 [ 195.830617][ T6867] simple_read_from_buffer+0xe1/0x170 [ 195.830661][ T6867] proc_fail_nth_read+0x1bb/0x230 [ 195.830686][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.830720][ T6867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.830749][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.830777][ T6867] ? rw_verify_area+0x24a/0x4c0 [ 195.830817][ T6867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.830843][ T6867] vfs_read+0x213/0xa80 [ 195.830886][ T6867] ? __pfx___mutex_lock+0x10/0x10 [ 195.830920][ T6867] ? __pfx_vfs_read+0x10/0x10 [ 195.830960][ T6867] ? __fget_files+0x2a/0x420 [ 195.831005][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.831034][ T6867] ? __fget_files+0x3a2/0x420 [ 195.831068][ T6867] ? __fget_files+0x2a/0x420 [ 195.831107][ T6867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.831141][ T6867] ksys_read+0x150/0x270 [ 195.831182][ T6867] ? __pfx_ksys_read+0x10/0x10 [ 195.831230][ T6867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.831257][ T6867] do_syscall_64+0x174/0x580 [ 195.831288][ T6867] ? trace_irq_disable+0x3b/0x140 [ 195.831325][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.831349][ T6867] RIP: 0033:0x7f64b7f5e90e [ 195.831372][ T6867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.831390][ T6867] RSP: 002b:00007f64b61f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.831412][ T6867] RAX: ffffffffffffffda RBX: 00007f64b61f66c0 RCX: 00007f64b7f5e90e [ 195.831427][ T6867] RDX: 000000000000000f RSI: 00007f64b61f60a0 RDI: 0000000000000004 [ 195.831439][ T6867] RBP: 00007f64b61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.831455][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.831467][ T6867] R13: 00007f64b8226038 R14: 00007f64b8225fa0 R15: 00007ffdf28087b8 [ 195.831500][ T6867] [ 195.869598][ T6860] loop3: detected capacity change from 0 to 32768 [ 196.089218][ T6671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.144112][ T6671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.212363][ T6671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.352811][ T6860] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 196.362448][ T6671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.410643][ T6881] loop4: detected capacity change from 0 to 2048 [ 196.430181][ T6671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.489120][ T6860] XFS (loop3): Ending clean mount [ 196.490125][ T6671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.518188][ T6671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.520123][ T6881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.552129][ T6671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.573760][ T6860] XFS (loop3): Quotacheck needed: Please wait. [ 196.576051][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 196.824533][ T6860] XFS (loop3): Quotacheck: Done. [ 196.855359][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.740581][ T5610] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 197.844742][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.914199][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.999513][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.006697][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.336319][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.343609][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.523269][ T6919] loop5: detected capacity change from 0 to 512 [ 198.610524][ T6919] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 198.651975][ T6919] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.441979][ T6918] loop4: detected capacity change from 0 to 32768 [ 199.501200][ T6918] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.535042][ T6918] XFS (loop4): Ending clean mount [ 199.612963][ T6918] XFS (loop4): Quotacheck needed: Please wait. [ 199.627549][ T6919] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.124523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.534187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.731896][ T6919] EXT4-fs (loop5): 1 truncate cleaned up [ 200.860122][ T6919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.923681][ T6918] XFS (loop4): Quotacheck: Done. [ 200.929092][ T6918] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.219049][ T6953] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.292'. [ 201.342834][ T6949] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.292'. [ 201.450286][ T6951] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.292'. [ 202.574417][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 202.626393][ T5607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.647640][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.836567][ T6978] loop4: detected capacity change from 0 to 64 [ 203.069806][ T6978] hfs: request for non-existent node 131072 in B*Tree [ 203.076736][ T6978] hfs: request for non-existent node 131072 in B*Tree [ 203.119088][ T6978] 9p: Bad value for 'rfdno' [ 203.758292][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 204.231478][ T6985] netlink: 68 bytes leftover after parsing attributes in process `syz.5.296'. [ 204.453288][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.649413][ T978] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 204.869394][ T6999] netlink: 84 bytes leftover after parsing attributes in process `syz.0.300'. [ 205.654210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.739493][ T978] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 205.765850][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 205.782427][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 206.242709][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.639094][ T7015] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.304'. [ 206.766624][ T7008] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.304'. [ 207.036686][ T978] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 207.105354][ T978] usb 5-1: USB disconnect, device number 5 [ 207.468864][ T7027] gadgetfs: bound to dummy_udc driver [ 207.819718][ T978] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 207.982466][ C0] gadgetfs: connected [ 207.987817][ T978] gadgetfs: disconnected [ 208.257799][ C0] gadgetfs: connected [ 208.292614][ T7022] gadgetfs: suspended from state 3 [ 208.298108][ T7022] gadgetfs: disconnected [ 208.306840][ T978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 208.371161][ T6671] veth0_vlan: entered promiscuous mode [ 208.438392][ T978] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 208.468328][ T6671] veth1_vlan: entered promiscuous mode [ 208.495651][ T978] usb 1-1: can't read configurations, error -71 [ 209.630870][ T6671] veth0_macvtap: entered promiscuous mode [ 209.745386][ T6671] veth1_macvtap: entered promiscuous mode [ 209.791484][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.810637][ T7048] FAULT_INJECTION: forcing a failure. [ 209.810637][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.825246][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.2.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.825281][ T7048] Tainted: [L]=SOFTLOCKUP [ 209.825290][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.825305][ T7048] Call Trace: [ 209.825314][ T7048] [ 209.825323][ T7048] dump_stack_lvl+0xe8/0x150 [ 209.825363][ T7048] should_fail_ex+0x40c/0x560 [ 209.825401][ T7048] _copy_from_user+0x2d/0xb0 [ 209.825425][ T7048] __copy_msghdr+0x390/0x590 [ 209.825463][ T7048] ___sys_sendmsg+0x213/0x360 [ 209.825491][ T7048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.825520][ T7048] ? __lock_acquire+0x683/0x2cf0 [ 209.825559][ T7048] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.825588][ T7048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.825624][ T7048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.825653][ T7048] ? kstrtouint+0x6e/0xe0 [ 209.825715][ T7048] ? __fget_files+0x2a/0x420 [ 209.825749][ T7048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.825781][ T7048] ? __fget_files+0x3a2/0x420 [ 209.825830][ T7048] __sys_sendmmsg+0x273/0x4d0 [ 209.825869][ T7048] ? __pfx___sys_sendmmsg+0x10/0x10 [ 209.825911][ T7048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.825976][ T7048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.826005][ T7048] ? ksys_write+0x242/0x270 [ 209.826052][ T7048] ? __pfx_ksys_write+0x10/0x10 [ 209.826098][ T7048] __x64_sys_sendmmsg+0xa0/0xc0 [ 209.826130][ T7048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.826157][ T7048] do_syscall_64+0x174/0x580 [ 209.826188][ T7048] ? trace_irq_disable+0x3b/0x140 [ 209.826230][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.826255][ T7048] RIP: 0033:0x7f0d6a99e0d9 [ 209.826277][ T7048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.826297][ T7048] RSP: 002b:00007f0d6b893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.826323][ T7048] RAX: ffffffffffffffda RBX: 00007f0d6ac25fa0 RCX: 00007f0d6a99e0d9 [ 209.826342][ T7048] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000005 [ 209.826358][ T7048] RBP: 00007f0d6b893090 R08: 0000000000000000 R09: 0000000000000000 [ 209.826374][ T7048] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 209.826390][ T7048] R13: 00007f0d6ac26038 R14: 00007f0d6ac25fa0 R15: 00007ffe7afcd1a8 [ 209.826429][ T7048] [ 209.887585][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.269313][ T7062] loop2: detected capacity change from 0 to 128 [ 210.514265][ T47] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.525850][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 210.548865][ T47] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.573296][ T47] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.582856][ T47] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.807181][ T5818] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 210.879204][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 210.918646][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.995097][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.025867][ T5818] usb 6-1: config 0 descriptor?? [ 211.088162][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.136019][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.290150][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.344881][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.611360][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 211.611398][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 211.617506][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 211.623544][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 211.634407][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.825499][ T4924] Bluetooth: hci1: unexpected event for opcode 0x080d [ 211.895452][ T7100] loop6: detected capacity change from 0 to 256 [ 212.061416][ T7103] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 212.071906][ T7103] FAT-fs (loop6): Filesystem has been set read-only [ 213.066449][ T5818] usbhid 6-1:0.0: can't add hid device: -71 [ 213.067777][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 213.175011][ T5818] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 213.216441][ T5818] usb 6-1: USB disconnect, device number 7 [ 213.254922][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.456357][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.495566][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.545680][ T29] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 213.582186][ T7126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.585356][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.650101][ T29] usb 3-1: Product: syz [ 213.656974][ T29] usb 3-1: Manufacturer: syz [ 213.674138][ T29] usb 3-1: SerialNumber: syz [ 213.688220][ T29] cdc_mbim 3-1:1.0: skipping garbage [ 213.745254][ T978] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 213.899730][ T7112] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 213.928287][ T978] usb 7-1: Using ep0 maxpacket: 32 [ 213.942083][ T978] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.974879][ T978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 214.019806][ T2352] pvrusb2: request_firmware fatal error with code=-110 [ 214.022337][ T978] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.028668][ T2352] pvrusb2: Failure uploading firmware1 [ 214.028769][ T2352] pvrusb2: Device initialization was not successful. [ 214.028781][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 214.028794][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 214.032467][ T5826] pvrusb2: Device being rendered inoperable [ 214.096647][ T978] usb 7-1: Product: syz [ 214.109341][ T978] usb 7-1: Manufacturer: syz [ 214.119562][ T978] usb 7-1: SerialNumber: syz [ 214.142714][ T978] usb 7-1: config 0 descriptor?? [ 214.165225][ T7122] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 214.176929][ T978] hub 7-1:0.0: bad descriptor, ignoring hub [ 214.190253][ T978] hub 7-1:0.0: probe with driver hub failed with error -5 [ 214.550661][ T7112] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 214.574673][ T29] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 214.616563][ T29] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 214.663903][ T7140] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 214.706311][ T29] wwan wwan0: port wwan0mbim0 attached [ 214.782260][ T30] audit: type=1800 audit(1787060611.931:302): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.339" name="idProduct" dev="configfs" ino=14339 res=0 errno=0 [ 214.820830][ T29] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e6:29:d7:c5:59:9b [ 214.881283][ T30] audit: type=1800 audit(1787060611.961:303): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.339" name="product" dev="configfs" ino=14340 res=0 errno=0 [ 214.895020][ T29] usb 3-1: USB disconnect, device number 4 [ 214.915296][ T978] usb 7-1: USB disconnect, device number 2 [ 215.001317][ T30] audit: type=1800 audit(1787060611.961:304): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.339" name="configuration" dev="configfs" ino=14341 res=0 errno=0 [ 215.001432][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.010206][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.081320][ T29] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 215.147258][ T7149] misc userio: Invalid payload size [ 215.224174][ T978] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 215.250448][ T29] wwan wwan0: port wwan0mbim0 disconnected [ 215.436318][ T978] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.517128][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 215.542027][ T978] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.560185][ T978] usb 7-1: Product: syz [ 215.566916][ T978] usb 7-1: Manufacturer: syz [ 215.585965][ T978] usb 7-1: SerialNumber: syz [ 215.653398][ T978] usb 7-1: config 0 descriptor?? [ 215.702952][ T7136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 215.724150][ T978] hub 7-1:0.0: bad descriptor, ignoring hub [ 215.730265][ T978] hub 7-1:0.0: probe with driver hub failed with error -5 [ 215.771804][ T4924] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 215.848443][ T4924] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 215.859044][ T4924] Bluetooth: hci1: Injecting HCI hardware error event [ 215.869498][ T50] Bluetooth: hci1: hardware error 0x00 [ 215.964920][ T978] usb 7-1: USB disconnect, device number 3 [ 216.074347][ T7161] CIFS: Attempting to mount //127.0.0.1/share [ 216.550991][ T30] audit: type=1800 audit(1787060613.701:305): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.353" name="manufacturer" dev="configfs" ino=13694 res=0 errno=0 [ 216.876867][ T7161] CIFS: VFS: Error connecting to socket. Aborting operation. [ 216.899697][ T7161] CIFS: VFS: cifs_mount failed w/return code = -4 [ 216.928366][ T30] audit: type=1800 audit(1787060614.071:306): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.355" name="idVendor" dev="configfs" ino=14409 res=0 errno=0 [ 217.030829][ T30] audit: type=1800 audit(1787060614.081:307): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.355" name="idProduct" dev="configfs" ino=14410 res=0 errno=0 [ 217.103625][ T30] audit: type=1800 audit(1787060614.081:308): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.355" name="product" dev="configfs" ino=14411 res=0 errno=0 [ 217.204702][ T30] audit: type=1800 audit(1787060614.121:309): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.355" name="configuration" dev="configfs" ino=14412 res=0 errno=0 [ 217.723886][ T7197] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 217.783154][ T7199] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 217.987812][ T7199] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 218.010122][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 218.214660][ T7211] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 218.237646][ T5742] hid-multitouch 0005:0457:0009.0003: unknown main item tag 0x0 [ 218.292334][ T7211] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x67 [ 218.362091][ T5742] hid-multitouch 0005:0457:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 219.695897][ T50] Bluetooth: hci3: hardware error 0x07 [ 220.180482][ T7268] netlink: 'syz.2.383': attribute type 12 has an invalid length. [ 220.364079][ T7273] netlink: 'syz.5.384': attribute type 1 has an invalid length. [ 220.583117][ T30] audit: type=1800 audit(1787060617.731:310): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.382" name="zoned" dev="configfs" ino=14553 res=0 errno=0 [ 220.648747][ T30] audit: type=1800 audit(1787060617.781:311): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.382" name="power" dev="configfs" ino=14559 res=0 errno=0 [ 220.768914][ T7273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.021728][ T7278] bridge1: entered promiscuous mode [ 221.140042][ T7278] bond1: (slave bridge1): making interface the new active one [ 221.203953][ T7278] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 221.635988][ T7294] binder: 7293:7294 ioctl c0306201 2000000004c0 returned -14 [ 221.642043][ T7099] Set syz1 is full, maxelem 65536 reached [ 221.657102][ T7297] netlink: 'syz.3.388': attribute type 4 has an invalid length. [ 221.845450][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 221.857512][ T7269] null_blk: disk nullb2 created [ 221.969092][ T7308] Trying to write to read-only block-device nullb0 [ 222.624972][ T7332] : renamed from vlan0 (while UP) [ 222.674252][ T50] Bluetooth: hci2: unexpected event for opcode 0x080d [ 222.703178][ T7337] Bluetooth: MGMT ver 1.23 [ 223.030492][ T7349] jffs2: notice: (7349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.200797][ T7353] syzkaller0: entered promiscuous mode [ 223.258055][ T7353] syzkaller0: entered allmulticast mode [ 223.964206][ T30] audit: type=1800 audit(1787060621.121:312): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.409" name="zoned" dev="configfs" ino=14714 res=0 errno=0 [ 224.041589][ T7378] null_blk: nullb1: using native zone append [ 224.100701][ T30] audit: type=1800 audit(1787060621.161:313): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.409" name="zone_nr_conv" dev="configfs" ino=14715 res=0 errno=0 [ 224.223796][ T30] audit: type=1800 audit(1787060621.171:314): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.409" name="power" dev="configfs" ino=14716 res=0 errno=0 [ 224.286542][ T7370] syzkaller0: entered promiscuous mode [ 224.320515][ T7370] syzkaller0: entered allmulticast mode [ 224.550884][ T7378] null_blk: disk nullb1 created [ 224.644328][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 224.658985][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 224.661621][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.413'. [ 224.669385][ T4924] Bluetooth: hci4: hardware error 0x00 [ 224.723008][ T5612] IPVS: starting estimator thread 0... [ 224.844559][ T7393] IPVS: using max 28 ests per chain, 67200 per kthread [ 224.887903][ T7400] No source specified [ 225.299252][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 226.297273][ T7415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.319475][ T7415] block device autoloading is deprecated and will be removed. [ 226.466238][ T7417] binder: 7416:7417 ioctl c0306201 2000000004c0 returned -14 [ 226.729312][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 226.738104][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 226.759684][ T5616] Bluetooth: hci2: hardware error 0x00 [ 226.814223][ T4924] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 227.359805][ T7392] tipc: Started in network mode [ 227.367974][ T7392] tipc: Node identity ac1414aa, cluster identity 4711 [ 227.378409][ T7392] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.406925][ T7392] tipc: Enabled bearer , priority 10 [ 227.440742][ T7412] bridge_slave_1: left allmulticast mode [ 227.455199][ T7412] bridge_slave_1: left promiscuous mode [ 227.476014][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.515875][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.529389][ T7412] bridge_slave_0: left allmulticast mode [ 227.563346][ T7412] bridge_slave_0: left promiscuous mode [ 227.596069][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.654923][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.796303][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.891674][ T7431] syzkaller0: entered promiscuous mode [ 227.900067][ T7431] syzkaller0: entered allmulticast mode [ 227.934106][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.074120][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.188162][ T7454] binder: 7453:7454 ioctl c0306201 2000000004c0 returned -14 [ 228.222410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.354153][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.394976][ T7456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.889225][ T5616] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 229.209633][ T4924] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 229.914697][ T7488] binder: 7486:7488 ioctl c0306201 2000000004c0 returned -14 [ 231.166639][ T7520] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 231.174654][ T7520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.454'. [ 231.411952][ T29] tipc: Node number set to 2886997162 [ 231.464109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.654644][ T7530] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 231.734120][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.314164][ T29] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.436885][ T7565] program syz.5.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.489917][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 232.509336][ T29] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 232.533825][ T29] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 232.578060][ T29] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 232.643955][ T29] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.686686][ T29] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 232.719756][ T7571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.754894][ T7573] 9pnet_virtio: no channels available for device syz [ 232.775282][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.790340][ T29] usb 1-1: Product: syz [ 232.800502][ T29] usb 1-1: Manufacturer: syz [ 232.811225][ T29] usb 1-1: SerialNumber: syz [ 232.857810][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 232.866452][ T7578] block nbd2: NBD_DISCONNECT [ 232.948866][ T30] audit: type=1326 audit(1787060630.101:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.473" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6a99e0d9 code=0x0 [ 232.967689][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input12 [ 233.079080][ T7583] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 233.134955][ T29] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 233.185839][ T29] (id 0x00) [ 233.284198][ C1] net_ratelimit: 1 callbacks suppressed [ 233.284220][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.348366][ T29] rc_core: IR keymap rc-imon-pad not found [ 233.371082][ T29] Registered IR keymap rc-empty [ 233.386716][ T29] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 233.415647][ T29] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 233.430962][ T30] audit: type=1800 audit(1787060630.571:316): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.479" name="configuration" dev="configfs" ino=15546 res=0 errno=0 [ 233.483065][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 233.540819][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input13 [ 233.573949][ T29] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:8> initialized [ 233.833668][ T7551] imon:vfd_write: invalid payload size [ 233.863271][ T7551] imon:display_open: display port is already open [ 233.925373][ T5742] usb 1-1: USB disconnect, device number 8 [ 234.053232][ T6624] Bluetooth: hci6: Frame reassembly failed (-84) [ 234.324198][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.665689][ T7629] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 234.887932][ T7630] smpboot: CPU 1 is now offline [ 235.334260][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.538292][ T7636] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 235.734603][ T978] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.884595][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 235.894528][ T5900] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 235.914154][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 235.922577][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.958221][ T978] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 235.975270][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 236.006059][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.022531][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 236.054130][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 236.059468][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 236.076018][ T5900] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.085224][ T5616] Bluetooth: hci6: command 0x1003 tx timeout [ 236.095908][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 236.107985][ T4924] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 236.117672][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.132544][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.141841][ T5900] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 236.149536][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.160811][ T5900] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.174158][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.185628][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.199292][ T5900] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 236.211300][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.223810][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.232118][ T9] usb 1-1: Product: У [ 236.238802][ T9] usb 1-1: SerialNumber: H [ 236.249043][ T5900] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.263385][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.284658][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.311793][ T5900] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 236.320221][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.353258][ T5900] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.388396][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.404404][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.426872][ T5900] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.445852][ T978] usb 4-1: GET_CAPABILITIES returned 0 [ 236.455224][ T978] usbtmc 4-1:16.0: can't read capabilities [ 236.484987][ T9] gspca_main: ov519-2.14.0 probing 041e:4064 [ 236.509336][ T9] ov519 1-1:1.0: reg_w 5a failed -71 [ 236.528690][ T5900] usb 5-1: string descriptor 0 read error: -22 [ 236.540981][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.613681][ T5900] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 236.682283][ T7653] vhci_hcd vhci_hcd.0: remove, state 4 [ 236.719225][ T7653] usb usb34: USB disconnect, device number 1 [ 236.760474][ T7684] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 236.763528][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 236.810292][ T7650] usbtmc 4-1:16.0: Unable to send data, error -71 [ 236.857888][ T5826] usb 4-1: USB disconnect, device number 8 [ 236.873002][ T29] usb 5-1: USB disconnect, device number 6 [ 237.151404][ T255] vhci_hcd vhci_hcd.0: stop threads [ 237.186823][ T255] vhci_hcd vhci_hcd.0: release socket [ 237.199155][ T255] vhci_hcd vhci_hcd.0: disconnect device [ 237.231110][ T255] vhci_hcd vhci_hcd.0: stop threads [ 237.243014][ T255] vhci_hcd vhci_hcd.0: release socket [ 237.257755][ T255] vhci_hcd vhci_hcd.0: disconnect device [ 237.275239][ T6624] vhci_hcd vhci_hcd.0: stop threads [ 237.291855][ T6624] vhci_hcd vhci_hcd.0: release socket [ 237.313734][ T6624] vhci_hcd vhci_hcd.0: disconnect device [ 237.331792][ T6624] vhci_hcd vhci_hcd.0: stop threads [ 237.347135][ T6624] vhci_hcd vhci_hcd.0: release socket [ 237.363350][ T6624] vhci_hcd vhci_hcd.0: disconnect device [ 237.389793][ T6624] vhci_hcd vhci_hcd.0: stop threads [ 237.408663][ T6624] vhci_hcd vhci_hcd.0: release socket [ 237.426421][ T6624] vhci_hcd vhci_hcd.0: disconnect device [ 237.444108][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.445558][ T6624] vhci_hcd vhci_hcd.0: stop threads [ 237.491471][ T6624] vhci_hcd vhci_hcd.0: release socket [ 237.497162][ T5826] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 237.520993][ T6624] vhci_hcd vhci_hcd.0: disconnect device [ 237.542903][ T6624] vhci_hcd vhci_hcd.0: stop threads [ 237.554463][ T6624] vhci_hcd vhci_hcd.0: release socket [ 237.568689][ T6624] vhci_hcd vhci_hcd.0: disconnect device [ 237.581083][ T6624] vhci_hcd vhci_hcd.0: stop threads [ 237.606091][ T6624] vhci_hcd vhci_hcd.0: release socket [ 237.631185][ T6624] vhci_hcd vhci_hcd.0: disconnect device [ 237.653113][ T7653] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 237.670120][ T7705] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 237.694295][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 237.716466][ T5826] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 237.748674][ T5826] usb 7-1: config 0 has no interfaces? [ 237.762646][ T7653] vhci_hcd vhci_hcd.0: remove, state 4 [ 237.778424][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.791867][ T7653] usb usb33: USB disconnect, device number 1 [ 237.853922][ T5826] usb 7-1: config 0 descriptor?? [ 238.131094][ T5826] usb 7-1: USB disconnect, device number 4 [ 238.197739][ T6653] vhci_hcd vhci_hcd.0: stop threads [ 238.230694][ T6653] vhci_hcd vhci_hcd.0: release socket [ 238.247949][ T7720] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 238.267399][ T6653] vhci_hcd vhci_hcd.0: disconnect device [ 238.289285][ T6653] vhci_hcd vhci_hcd.0: stop threads [ 238.302363][ T6653] vhci_hcd vhci_hcd.0: release socket [ 238.325691][ T6653] vhci_hcd vhci_hcd.0: disconnect device [ 238.350875][ T7705] dvmrp0: entered allmulticast mode [ 238.353424][ T6653] vhci_hcd vhci_hcd.0: stop threads [ 238.392740][ T6653] vhci_hcd vhci_hcd.0: release socket [ 238.412978][ T6653] vhci_hcd vhci_hcd.0: disconnect device [ 238.461534][ T6653] vhci_hcd vhci_hcd.0: stop threads [ 238.475965][ T6653] vhci_hcd vhci_hcd.0: release socket [ 238.484125][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.518145][ T6653] vhci_hcd vhci_hcd.0: disconnect device [ 238.541907][ T6653] vhci_hcd vhci_hcd.0: stop threads [ 238.554405][ T7653] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 238.569400][ T6653] vhci_hcd vhci_hcd.0: release socket [ 238.588212][ T6653] vhci_hcd vhci_hcd.0: disconnect device [ 238.618290][ T6653] vhci_hcd vhci_hcd.0: stop threads [ 238.638433][ T6653] ================================================================== [ 238.646516][ T6653] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection+0x1d4/0x650 [ 238.655026][ T6653] Read of size 8 at addr ffff88802a3790c0 by task kworker/u8:14/6653 [ 238.663070][ T6653] [ 238.665402][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.665428][ T6653] Tainted: [L]=SOFTLOCKUP [ 238.665435][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 238.665447][ T6653] Workqueue: usbip_event event_handler [ 238.665472][ T6653] Call Trace: [ 238.665480][ T6653] [ 238.665488][ T6653] dump_stack_lvl+0xe8/0x150 [ 238.665515][ T6653] print_address_description+0x55/0x1e0 [ 238.665540][ T6653] ? vhci_shutdown_connection+0x1d4/0x650 [ 238.665564][ T6653] print_report+0x58/0x70 [ 238.665586][ T6653] kasan_report+0x117/0x150 [ 238.665614][ T6653] ? vhci_shutdown_connection+0x1d4/0x650 [ 238.665644][ T6653] vhci_shutdown_connection+0x1d4/0x650 [ 238.665672][ T6653] event_handler+0x2a4/0x4b0 [ 238.665695][ T6653] ? process_scheduled_works+0xa20/0x14e0 [ 238.665715][ T6653] process_scheduled_works+0xa8e/0x14e0 [ 238.665750][ T6653] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.665772][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.665793][ T6653] ? assign_work+0x3cf/0x5d0 [ 238.665815][ T6653] worker_thread+0xa47/0xfb0 [ 238.665836][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.665862][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.665883][ T6653] ? __kthread_parkme+0x71/0x1f0 [ 238.665910][ T6653] kthread+0x388/0x470 [ 238.665935][ T6653] ? __pfx_worker_thread+0x10/0x10 [ 238.665954][ T6653] ? __pfx_kthread+0x10/0x10 [ 238.665991][ T6653] ret_from_fork+0x514/0xb70 [ 238.666019][ T6653] ? __pfx_ret_from_fork+0x10/0x10 [ 238.666044][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.666065][ T6653] ? __switch_to+0xc89/0x1420 [ 238.666097][ T6653] ? __pfx_kthread+0x10/0x10 [ 238.666123][ T6653] ret_from_fork_asm+0x1a/0x30 [ 238.666158][ T6653] [ 238.666165][ T6653] [ 238.839283][ T6653] Allocated by task 1: [ 238.843322][ T6653] kasan_save_track+0x3e/0x80 [ 238.847986][ T6653] __kasan_kmalloc+0x93/0xb0 [ 238.852561][ T6653] __kmalloc_noprof+0x375/0x720 [ 238.857392][ T6653] __usb_create_hcd+0x67/0x900 [ 238.862136][ T6653] vhci_hcd_probe+0x104/0x3e0 [ 238.866801][ T6653] platform_probe+0xf9/0x190 [ 238.871372][ T6653] really_probe+0x254/0xae0 [ 238.875856][ T6653] __driver_probe_device+0x1e8/0x360 [ 238.881124][ T6653] driver_probe_device+0x4f/0x240 [ 238.886134][ T6653] __device_attach_driver+0x270/0x410 [ 238.891509][ T6653] bus_for_each_drv+0x258/0x2f0 [ 238.896347][ T6653] __device_attach+0x2c4/0x450 [ 238.901096][ T6653] device_initial_probe+0xa1/0xd0 [ 238.906098][ T6653] bus_probe_device+0x12a/0x220 [ 238.910934][ T6653] device_add+0x7d7/0xb80 [ 238.915240][ T6653] platform_device_add+0x4bd/0x860 [ 238.920327][ T6653] platform_device_register_full+0x62d/0x710 [ 238.926284][ T6653] vhci_hcd_init+0x227/0x360 [ 238.930857][ T6653] do_one_initcall+0x250/0x870 [ 238.935604][ T6653] do_initcall_level+0x10a/0x1a0 [ 238.940522][ T6653] do_initcalls+0x59/0xa0 [ 238.944829][ T6653] kernel_init_freeable+0x29d/0x3e0 [ 238.950006][ T6653] kernel_init+0x22/0x1d0 [ 238.954320][ T6653] ret_from_fork+0x514/0xb70 [ 238.958894][ T6653] ret_from_fork_asm+0x1a/0x30 [ 238.963653][ T6653] [ 238.965957][ T6653] Freed by task 7653: [ 238.969920][ T6653] kasan_save_track+0x3e/0x80 [ 238.974580][ T6653] kasan_save_free_info+0x40/0x50 [ 238.979585][ T6653] __kasan_slab_free+0x5c/0x80 [ 238.984331][ T6653] kfree+0x1c5/0x640 [ 238.988204][ T6653] vhci_hcd_remove+0xe4/0x110 [ 238.992872][ T6653] device_release_driver_internal+0x48b/0x880 [ 238.998923][ T6653] unbind_store+0x1a1/0x1d0 [ 239.003406][ T6653] kernfs_fop_write_iter+0x3a4/0x540 [ 239.008673][ T6653] vfs_write+0x612/0xba0 [ 239.012900][ T6653] ksys_write+0x150/0x270 [ 239.017213][ T6653] do_syscall_64+0x174/0x580 [ 239.021806][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.027677][ T6653] [ 239.029972][ T6653] Last potentially related work creation: [ 239.035656][ T6653] kasan_save_stack+0x3e/0x60 [ 239.040316][ T6653] kasan_record_aux_stack+0xbd/0xd0 [ 239.045489][ T6653] insert_work+0x3d/0x330 [ 239.049796][ T6653] __queue_work+0xcd8/0x10a0 [ 239.054372][ T6653] queue_work_on+0x106/0x1d0 [ 239.058941][ T6653] unlink1+0x344/0x3e0 [ 239.062987][ T6653] usb_hcd_unlink_urb+0xe6/0x1e0 [ 239.067904][ T6653] usb_kill_urb+0x10b/0x2f0 [ 239.072390][ T6653] hub_quiesce+0x211/0x330 [ 239.076782][ T6653] hub_suspend+0x904/0xad0 [ 239.081366][ T6653] usb_suspend_both+0x285/0x1040 [ 239.086305][ T6653] usb_runtime_suspend+0x58/0x110 [ 239.091326][ T6653] __rpm_callback+0x2c7/0x950 [ 239.095993][ T6653] rpm_suspend+0x8a0/0x17b0 [ 239.100593][ T6653] __pm_runtime_suspend+0x12f/0x1a0 [ 239.105798][ T6653] usb_new_device+0xaee/0x1690 [ 239.110547][ T6653] register_root_hub+0x250/0x5c0 [ 239.115466][ T6653] usb_add_hcd+0xac7/0xf80 [ 239.119865][ T6653] vhci_hcd_probe+0x141/0x3e0 [ 239.124526][ T6653] platform_probe+0xf9/0x190 [ 239.129101][ T6653] really_probe+0x254/0xae0 [ 239.133584][ T6653] __driver_probe_device+0x1e8/0x360 [ 239.138850][ T6653] driver_probe_device+0x4f/0x240 [ 239.143857][ T6653] __device_attach_driver+0x270/0x410 [ 239.149214][ T6653] bus_for_each_drv+0x258/0x2f0 [ 239.154058][ T6653] __device_attach+0x2c4/0x450 [ 239.158810][ T6653] device_initial_probe+0xa1/0xd0 [ 239.163813][ T6653] bus_probe_device+0x12a/0x220 [ 239.168662][ T6653] device_add+0x7d7/0xb80 [ 239.172981][ T6653] platform_device_add+0x4bd/0x860 [ 239.178070][ T6653] platform_device_register_full+0x62d/0x710 [ 239.184038][ T6653] vhci_hcd_init+0x227/0x360 [ 239.188642][ T6653] do_one_initcall+0x250/0x870 [ 239.193389][ T6653] do_initcall_level+0x10a/0x1a0 [ 239.198305][ T6653] do_initcalls+0x59/0xa0 [ 239.202615][ T6653] kernel_init_freeable+0x29d/0x3e0 [ 239.207793][ T6653] kernel_init+0x22/0x1d0 [ 239.212110][ T6653] ret_from_fork+0x514/0xb70 [ 239.216682][ T6653] ret_from_fork_asm+0x1a/0x30 [ 239.221432][ T6653] [ 239.223728][ T6653] Second to last potentially related work creation: [ 239.230280][ T6653] kasan_save_stack+0x3e/0x60 [ 239.234941][ T6653] kasan_record_aux_stack+0xbd/0xd0 [ 239.240117][ T6653] insert_work+0x3d/0x330 [ 239.244444][ T6653] __queue_work+0xcd8/0x10a0 [ 239.249031][ T6653] queue_work_on+0x106/0x1d0 [ 239.253601][ T6653] usb_hcd_submit_urb+0xa3b/0x1b60 [ 239.258692][ T6653] usb_start_wait_urb+0x13f/0x5b0 [ 239.263716][ T6653] usb_control_msg+0x234/0x3e0 [ 239.268464][ T6653] hub_ext_port_status+0x114/0x810 [ 239.273558][ T6653] hub_activate+0x740/0x1b20 [ 239.278122][ T6653] process_scheduled_works+0xa8e/0x14e0 [ 239.283646][ T6653] worker_thread+0xa47/0xfb0 [ 239.288214][ T6653] kthread+0x388/0x470 [ 239.292267][ T6653] ret_from_fork+0x514/0xb70 [ 239.296841][ T6653] ret_from_fork_asm+0x1a/0x30 [ 239.301592][ T6653] [ 239.303888][ T6653] The buggy address belongs to the object at ffff88802a378000 [ 239.303888][ T6653] which belongs to the cache kmalloc-8k of size 8192 [ 239.317931][ T6653] The buggy address is located 4288 bytes inside of [ 239.317931][ T6653] freed 8192-byte region [ffff88802a378000, ffff88802a37a000) [ 239.331880][ T6653] [ 239.334195][ T6653] The buggy address belongs to the physical page: [ 239.340580][ T6653] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a378 [ 239.349492][ T6653] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 239.357968][ T6653] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 239.365487][ T6653] page_type: f5(slab) [ 239.369457][ T6653] raw: 00fff00000000040 ffff88801b003280 dead000000000122 0000000000000000 [ 239.378020][ T6653] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 239.386587][ T6653] head: 00fff00000000040 ffff88801b003280 dead000000000122 0000000000000000 [ 239.395251][ T6653] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 239.403899][ T6653] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 239.412566][ T6653] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 239.421234][ T6653] page dumped because: kasan: bad access detected [ 239.427621][ T6653] page_owner tracks the page as allocated [ 239.433304][ T6653] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7302418113, free_ts 0 [ 239.452904][ T6653] post_alloc_hook+0x1f9/0x250 [ 239.457661][ T6653] get_page_from_freelist+0x21fa/0x2270 [ 239.463198][ T6653] __alloc_frozen_pages_noprof+0x18d/0x380 [ 239.468991][ T6653] allocate_slab+0x79/0x5e0 [ 239.473478][ T6653] refill_objects+0x2d5/0x350 [ 239.478137][ T6653] __pcs_replace_empty_main+0x2bf/0x6b0 [ 239.483670][ T6653] __kmalloc_cache_noprof+0x3a7/0x660 [ 239.489023][ T6653] dummy_hcd_init+0x3e2/0xd00 [ 239.493686][ T6653] do_one_initcall+0x250/0x870 [ 239.498435][ T6653] do_initcall_level+0x10a/0x1a0 [ 239.503352][ T6653] do_initcalls+0x59/0xa0 [ 239.507660][ T6653] kernel_init_freeable+0x29d/0x3e0 [ 239.512842][ T6653] kernel_init+0x22/0x1d0 [ 239.517158][ T6653] ret_from_fork+0x514/0xb70 [ 239.521730][ T6653] ret_from_fork_asm+0x1a/0x30 [ 239.526477][ T6653] page_owner free stack trace missing [ 239.531815][ T6653] [ 239.534115][ T6653] Memory state around the buggy address: [ 239.539718][ T6653] ffff88802a378f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.547754][ T6653] ffff88802a379000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.555788][ T6653] >ffff88802a379080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.563819][ T6653] ^ [ 239.569991][ T6653] ffff88802a379100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.578083][ T6653] ffff88802a379180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.586117][ T6653] ================================================================== [ 239.597371][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.654311][ T6653] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 239.661537][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.672650][ T6653] Tainted: [L]=SOFTLOCKUP [ 239.676958][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 239.686995][ T6653] Workqueue: usbip_event event_handler [ 239.692448][ T6653] Call Trace: [ 239.695708][ T6653] [ 239.698618][ T6653] vpanic+0x56c/0xa60 [ 239.702595][ T6653] ? __pfx_vpanic+0x10/0x10 [ 239.707090][ T6653] ? __pfx___schedule+0x10/0x10 [ 239.711955][ T6653] panic+0xc5/0xd0 [ 239.715690][ T6653] ? __pfx_panic+0x10/0x10 [ 239.720115][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.725836][ T6653] ? preempt_schedule_common+0x82/0xd0 [ 239.731289][ T6653] ? vhci_shutdown_connection+0x1d4/0x650 [ 239.737005][ T6653] check_panic_on_warn+0x89/0xb0 [ 239.741944][ T6653] ? vhci_shutdown_connection+0x1d4/0x650 [ 239.747658][ T6653] end_report+0x73/0x170 [ 239.751900][ T6653] ? vhci_shutdown_connection+0x1d4/0x650 [ 239.757618][ T6653] kasan_report+0x128/0x150 [ 239.762124][ T6653] ? vhci_shutdown_connection+0x1d4/0x650 [ 239.767846][ T6653] vhci_shutdown_connection+0x1d4/0x650 [ 239.773395][ T6653] event_handler+0x2a4/0x4b0 [ 239.777979][ T6653] ? process_scheduled_works+0xa20/0x14e0 [ 239.783686][ T6653] process_scheduled_works+0xa8e/0x14e0 [ 239.789246][ T6653] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.795219][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.800842][ T6653] ? assign_work+0x3cf/0x5d0 [ 239.805425][ T6653] worker_thread+0xa47/0xfb0 [ 239.810014][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.815674][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.821298][ T6653] ? __kthread_parkme+0x71/0x1f0 [ 239.826233][ T6653] kthread+0x388/0x470 [ 239.830299][ T6653] ? __pfx_worker_thread+0x10/0x10 [ 239.835485][ T6653] ? __pfx_kthread+0x10/0x10 [ 239.840076][ T6653] ret_from_fork+0x514/0xb70 [ 239.844663][ T6653] ? __pfx_ret_from_fork+0x10/0x10 [ 239.849774][ T6653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.855396][ T6653] ? __switch_to+0xc89/0x1420 [ 239.860077][ T6653] ? __pfx_kthread+0x10/0x10 [ 239.864663][ T6653] ret_from_fork_asm+0x1a/0x30 [ 239.869440][ T6653] [ 239.872660][ T6653] Kernel Offset: disabled [ 239.876966][ T6653] Rebooting in 86400 seconds..