last executing test programs: 3m9.033802946s ago: executing program 4 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffd, 0x4, @empty, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="5e69e657e8dc3ec09d98", 0xa, 0x24000000, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x99bcb88da02606f2, 0x0, 0x46) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x2, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 3m6.07363771s ago: executing program 4 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8) 2m50.328606258s ago: executing program 32 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8) 1m50.561634262s ago: executing program 3 (id=149): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040891}, 0x20004014) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000040)=0x81, 0x7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000439000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000557000/0x3000)=nil, 0x3000, 0x17) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001a0001002bbd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="040000041400030007000000fff45aef00000000000000001400010020"], 0x44}, 0x1, 0x0, 0x0, 0x40484c0}, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 1m45.858930128s ago: executing program 3 (id=160): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m42.348219148s ago: executing program 3 (id=167): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) close(0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) unshare(0x20000400) r4 = bpf$ITER_CREATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0x7}, 0x8) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b, 0x0, @val=@tracing={0x0, 0xbe3}}, 0x20) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}}, 0x18) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) sendmmsg(r5, &(0x7f00000017c0)=[{{&(0x7f00000000c0)=@can={0x1d, r6}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x6fa}, {0x0}], 0x2}}], 0x1, 0xf5) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x3d4c, &(0x7f0000000300)={0x0, 0x5d70, 0x2000, 0x7, 0x27f}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000140)=0x5e00000, 0x4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0, 0x81, 0xad, 0x81}]}) 1m38.650679496s ago: executing program 3 (id=177): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1e3) getdents(r0, 0xfffffffffffffffd, 0xbb) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x9) 1m34.951004868s ago: executing program 3 (id=185): socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.243998039s ago: executing program 3 (id=194): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x3c, 0x9a}) 35.766937304s ago: executing program 0 (id=307): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xbc, 0xe1}}}}, 0x11) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x218d81, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xee}, "afbc40cd8f81a0ae3c8ad9f84a67dabd001e1b3b1842084bf1ba2e4e30a50f4a1da58bab6f0911b0e36eedd5b58f81d8bde84592d25beda0597854b276b19f0e5c0b2765a7754ee3b1e81034e5daa7a2c948b7e481a54d5ab9127c5dd36fbef2ec818e127ad4aa5ecddd1cef700c9d10d2d344e680a1c50e2341e53e4c44cd36284326d83510b9883ef36d5cdaa387b62957766fb5f97b7be566c2276bc149f01d4ddd1fc896c7b7c7d8524be7044ad94e437bf765ad9ea408e3a04d2dcc5f7ce622d73304c0f359adeb5efc6854fb32b47728daa41f1953f159785e6ba004524d6248e61afd63a822743d777089"}, 0xf2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8e}, "81f3822d5d64e0779c43c6d854a55a84a5ff55634036f2c43ed1fe55f2c45f50235846d565c162a5fb579a4d5114ac91c7dfedb2b020baa115e7dc7b1df7f3e1623eb4eb1904fae089764290e77dd57e54b0948d6105496ebf10980f55b1dd55423959a84dd1f04bf5c4e2bd0fb07ac0946702e7e7d4b51e6dc767656d6d65fbc81264b6ef59982cf286e6651e09"}, 0x92) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000340)=""/78, 0x4e}, &(0x7f00000003c0), 0x10}, 0x20) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf0}, "2192c33ef811bab6625ddd25e8e3932ee4e60199a4f6d2df1eae4ea45a42e1eead179cbb737a8076f52c8c8e4b0dbe202fc5eca324130fa5dc11a587dd0f840c62fac0df249ffa56abf9316e492d2f4546880d3cdc07198caa2493cd19dba27a63be945ab0a6dedc19a9aa97e46da211d6bd8da7e6b5d19d577fce2ae8bad19ca1f90f5c5a6a6cc55be00355451d95d52297c0e1236b81890c3a1d4e2eb127e703757e963a154be432343b9d9023670a7772cc56d0f9915b7c61f33f8c1f99266af1072d56056b03711498cb43a3f32257e83d2a55ab8e9b6e525749d2ecde693786747b15571a085c5aa9404f3c900a"}, 0xf4) syz_emit_ethernet(0x83, &(0x7f0000000540)={@random="409c70be8b38", @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x7}, {0xc8b, 0x0, 0x1}], @ipv4=@igmp={{0xe, 0x4, 0x2, 0x6, 0x65, 0x67, 0x0, 0x6, 0x2, 0x0, @multicast2, @empty, {[@noop, @rr={0x7, 0x23, 0xbb, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast1]}]}}, {0x1e, 0x32, 0x0, @multicast1, "324226fc24521795d64f52c888f6343fa4c20ebea1c270a55f03b7699efec5cbf5eec0571b"}}}}}}, &(0x7f0000000600)={0x1, 0x1, [0xa92, 0x341, 0xb9, 0xd40]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000680)={0x200, 0x5, @value=0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002740)={0x10, 0x0, r4}, 0x10) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000027c0)={{r1}, 0x4, &(0x7f0000002780)=[0x200, 0x1, 0x32d, 0xae], 0x5, 0xa, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000002840), 0x8) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000028c0)={0x7, &(0x7f0000002880)=[{0x39ca, 0x4, 0xf, 0x401}, {0x4, 0x6, 0xa, 0x3}, {0x2831, 0x9, 0x80, 0x9}, {0xfc01, 0xd, 0x0, 0x3}, {0x9, 0x1, 0x9, 0x4}, {0x8001, 0x8, 0x40, 0x80}, {0x956f, 0x52, 0x5, 0x8}]}, 0x10) syz_emit_vhci(&(0x7f0000002900)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xa6, 0xc9}}}, 0x6) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002940)={0x5, 0x1, 0x5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000002980)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000002a00)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000002a80)={0x28, 0x1, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000002a40)}) syz_emit_vhci(&(0x7f0000002ac0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x89}, "71efcce7bf8abc9fc098914f105a3204a77fa8a68bf12fb17214b89e9d84a3007cb861488efbad661291a633c91b4c7d632c647ef0ab3143f94b1551d52ff7f57b3609c1afacba14c33c6c0921c7a8fc90f9601ca29b51f84003bdb352d01e74e694ad4effbebe0c7d782ed2126d5a3539ced7f2ddb182f6d71b2202ecdb0306bd8978bb4e0ec9a11c"}, 0x8d) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000002b80)) syz_emit_vhci(&(0x7f0000002c00)=@HCI_VENDOR_PKT, 0x2) socket$tipc(0x1e, 0x2, 0x0) 35.419781988s ago: executing program 0 (id=309): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) userfaultfd(0x80001) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) timer_create(0x3, 0x0, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffd35}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18}], 0x1, 0x448c4) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 34.282062862s ago: executing program 0 (id=311): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x4, 0x4, 0x0, 0x1003, 0xfe1c, 0x2ca7, "32a0a9770000e727156564d6a6bd00", 0x10, 0x2, 0x3, 0x3, 0x13, 0x5, 0x7f}) 33.634040899s ago: executing program 0 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x810, &(0x7f0000005b40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x7}}, {@notreelog}, {@nobarrier}, {@usebackuproot}, {@skip_balance}, {@acl}, {@user_subvol_rm}, {@flushoncommit}]}, 0x3, 0x5136, &(0x7f0000000340)="$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") syz_clone(0x6280000, &(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000005480)="e58d0edf80de6eef0ae2bb8abf149d13b56e2f31a6e27abf") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) (fail_nth: 1) 31.188582353s ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 24.436204891s ago: executing program 0 (id=325): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f00000000c0)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r6 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) 24.076961655s ago: executing program 33 (id=325): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f00000000c0)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r6 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) 5.3294802s ago: executing program 2 (id=346): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 5.274145103s ago: executing program 2 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0xdd) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="5c030000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x35c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp850,umask=00000000000000000000011,zero_size_dir,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',keep_last_dots,dmask=00000000000000000111742,\x00ocharset=macromanian,zero_size_dir,discard,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1536, &(0x7f0000006800)="$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") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) openat(0xffffffffffffffff, 0x0, 0x44281, 0x2e) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) 4.366843696s ago: executing program 1 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ff03005fcc60ce44271455ffa24700fb06"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ff03005fcc60ce44271455ffa24700fb06"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) 4.203010788s ago: executing program 1 (id=349): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="800100001700010000000000000000007f000001000000000000000000000000000004d600000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000080000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a0080205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000202"], 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, &(0x7f00000001c0)='=\n\x9bCF,\x012\xed\xa1Q\x83\xe9\n@\xdd\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03T\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xff\x01\x00\x00\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xc4B\xdf\x1d\xb1j\xa8T\xe1!\x11\x19Y\x06Jo\x9f\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00008ac000/0x1000)=nil, 0x1000, 0x600000d, 0x110030, r1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001380)={0x3, 0x0, &(0x7f00000000c0)=""/177, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/217, 0x1000}) 3.947659093s ago: executing program 1 (id=350): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x370, &(0x7f0000002980)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x89) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x6, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xd}}}, 0x24}}, 0x4000087) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000040) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x100aa, &(0x7f0000000600)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}, 0x22}, {@journal_async_commit}, {@errors_remount}, {@abort}]}, 0x2, 0x455, &(0x7f0000000fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f0000000140), 0x1, 0x47e, &(0x7f0000001f80)="$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") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r2, 0x40, 0x1}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x34, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0xfffe) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) unlink(&(0x7f0000000000)='./file0\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40000}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0xfffffffffffffffe, 0x0) r9 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000180)=0xc) 3.255292411s ago: executing program 2 (id=351): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000003c0)=ANY=[@ANYBLOB='volume=00000000000000001062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',noadinicb,rootdir=00000000000000000004,gid=forget,unhide,noadinicb,iocharset=cp861,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x5d409bc8, 0x200000000000009}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) (fail_nth: 1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f00008ac000/0x1000)=nil, 0x1000, 0x600000d, 0x110030, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x1) 1.997533532s ago: executing program 1 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) memfd_create(0x0, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1.958035701s ago: executing program 2 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x2b) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x30925) keyctl$set_timeout(0xf, r4, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x80000011}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 490.338588ms ago: executing program 1 (id=354): socket$inet(0x2, 0x3, 0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xf, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000002, 0x1) 420.935807ms ago: executing program 2 (id=355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 303.217111ms ago: executing program 2 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000000624"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) read(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000100)={0x22, ""/34}) memfd_create(0x0, 0x3) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0x3000, 0x201000, 0x8}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r6, r6) openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x10}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 0s ago: executing program 1 (id=357): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x3, 0x60c0, &(0x7f0000002100)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$eJzs3cFqE1EUxvFjU5s0pU0EERTUg250M7TxATRIC2JAqY2oC2FqJxoyJmUmVCJisxG3Pkdx6U5QX6AbcePeXREEN12II52ZtJM2bdM2TWL7/0GZO3Pux71N0nISSLLy4N3zUsE1CmZVBhIqAyJ1WRVJr41CJ8LjgD8ekqi6XB35/f38vYePbmdzuclp1anszLWMqo5d/PTi1ftLX6oj9z+MfYzLcvrxyq/Mj+Wh5bMrf2eeFV0tulquVNXU2Uqlas7als4V3ZKhete2TNfSYtm1nKZ6wa7Mz9fULM+NJucdy3XVLNe0ZNW0WtGqU1PzqVksq2EYOpqU422wjTn5pelpM7tt2Yt1dEc4dMOtLjpOtt66mF/qwp4AAECf2bn/D3r97fr/je5wL/3/md37f5Fo/58IF6H/74B609ku/T+OBMfJmsnw77cZ/T8AAAAAAAAAAAAAAAAAAAAAAP+DVc9LeZ6XWjuGl/zzuIgkgreA++c93iYOSfT+9yI/6/d/eL4pdr1H20WHRd64lxCx3y7kF/LBMahnC1IUWywZl5T88R8PoWA8dSs3Oa6+tHy2F8P84kI+JvFGviHdKn/h1ESQ1+b8SUlG189ISk63Xj/TMj8kVy5H8oak5OsTqYgtc/7jeiP/ekL15p3cpvywPw8AAAAAgKPA0HVbnr/7dX9CQrbWg3zk9QHP8xZ3en1g0/PrQTnXzkdUAgAAAACAA3NrL0umbVvOPgZxETlAvPMDzxPp/TZi0h+3RvPghoj0wTa6NUiISHBF9xP/uR5vK+W1MWcw/AaO/rh9dh/0+j8TAAAAgE7baPr3EPr25hB3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8dPu54E15m8pNQo7xCPLxbr+CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB95F8AAAD//6loFW8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x6ac00, 0x7) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x1, 0xb620, 0xa}) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0xb08008, &(0x7f0000000000)=ANY=[], 0x1, 0x170, &(0x7f00000001c0)="$eJzs2r9OwkAcB/AfoUrEzdGJBIMO0pZWcXByJG5ujgTu4OJVSGti4AWMk4km5+BLmPgEPgKjmy4OvsQZ4EL4FxWDaRO/n6Xf8Guvv7uSm64YtoISj4pEu+3bk/eNsBXkyv5BjZd4lYYqRJTrh57W9zbNeB3Ve5rsOTfEa+tjeM3vNNTxNReSeXG3BAAAAAAAAAAAAAAAAAAAAAAAP1TImpBtquCKC8lKY9Uob51VpWRhFFN7sSvkzBku4ko+9NfHn7zhdN0EoY7Cft2dfP7OhO2mkm/T6+tcBG0n6nSLIqg2WIOde55fdvdcd99zBmM50yMWHk1P1NNPrk3aGNXHzpu9zJw381MzEzTf39oU6uZy+m1Rp2u+/0LhUGu9+FPfhdSyB/zTkCaiBLSRpFCxfv2P+uchTYloYyyMtojVudumNffXJMquDK/1jJ9/5mKN2bWWrJviYK4ZWtKamTfRZCmuiQPA1z4DAAD//0MpOTQ=") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x106) kernel console output (not intermixed with test programs): 140][ T6064] loop2: detected capacity change from 0 to 256 [ 155.669926][ T6056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.855244][ T5749] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.878766][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.023554][ T5749] usb 4-1: Using ep0 maxpacket: 32 [ 156.163665][ T5749] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 156.163699][ T5749] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 156.163726][ T5749] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 156.163795][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.163827][ T5749] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.163855][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 156.163890][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 156.163916][ T5749] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 156.163944][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.163994][ T5749] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.164027][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.385761][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000 [ 157.720240][ T5749] usb 4-1: config 0 descriptor?? [ 157.723183][ T5728] r8152-cfgselector 1-1: No union descriptors [ 157.984148][ T6064] FAT-fs (loop2): Directory bread(block 64) failed [ 157.984195][ T6064] FAT-fs (loop2): Directory bread(block 65) failed [ 157.984298][ T6064] FAT-fs (loop2): Directory bread(block 66) failed [ 157.984323][ T6064] FAT-fs (loop2): Directory bread(block 67) failed [ 157.984420][ T6064] FAT-fs (loop2): Directory bread(block 68) failed [ 157.984443][ T6064] FAT-fs (loop2): Directory bread(block 69) failed [ 157.984540][ T6064] FAT-fs (loop2): Directory bread(block 70) failed [ 157.984563][ T6064] FAT-fs (loop2): Directory bread(block 71) failed [ 157.984672][ T6064] FAT-fs (loop2): Directory bread(block 72) failed [ 157.984695][ T6064] FAT-fs (loop2): Directory bread(block 73) failed [ 158.096129][ T5728] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 158.684156][ T6072] misc userio: Can't change port type on an already running userio instance [ 158.707870][ T5749] usb 4-1: USB disconnect, device number 2 [ 158.871185][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.013654][ T37] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.326840][ T37] usb 2-1: device descriptor read/64, error -71 [ 160.983384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.405989][ T37] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.519011][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.563485][ T37] usb 2-1: device descriptor read/64, error -71 [ 161.661570][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.662400][ T6103] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.700824][ T37] usb usb2-port1: attempt power cycle [ 161.923837][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.923998][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.962974][ T6108] netlink: 188 bytes leftover after parsing attributes in process `syz.0.76'. [ 162.653701][ T5807] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 162.803190][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.856413][ T5807] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 162.856449][ T5807] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.856482][ T5807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.856507][ T5807] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 162.856524][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.895568][ T5807] usb 1-1: config 0 descriptor?? [ 162.923218][ T6108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.168360][ T5807] usbhid 1-1:0.0: can't add hid device: -71 [ 163.168489][ T5807] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.378850][ T5807] usb 1-1: USB disconnect, device number 3 [ 164.881612][ T6135] loop9: detected capacity change from 0 to 524287936 [ 165.864223][ T6154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.90'. [ 165.864412][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.90'. [ 166.180787][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 166.180825][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.91'. [ 166.414179][ T6157] loop2: detected capacity change from 0 to 32768 [ 166.415629][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 166.415661][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.91'. [ 166.415804][ T6157] ocfs2: Unknown parameter 'coherency' [ 166.417778][ T6154] loop0: detected capacity change from 0 to 512 [ 166.897326][ T6154] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.90: missing EA_INODE flag [ 166.902601][ T6154] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 166.905207][ C1] EXT4-fs (loop0): initial error at time 1777766174: ext4_xattr_inode_iget:441: inode 12 [ 166.905250][ C1] EXT4-fs (loop0): last error at time 1777766174: ext4_xattr_inode_iget:441: inode 12 [ 167.158473][ T6154] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.90: error while reading EA inode 12 err=-117 [ 167.158512][ T6154] loop0: lost filesystem error report for type 5 error -117 [ 167.189361][ T6154] EXT4-fs (loop0): 1 orphan inode deleted [ 167.588461][ T6154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.856862][ T6167] loop1: detected capacity change from 0 to 131072 [ 168.858281][ T6167] xfs: Deprecated parameter 'ikeep' [ 168.858309][ T6167] XFS: ikeep mount option is deprecated. [ 169.025846][ T6167] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 169.083470][ T5735] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.276777][ T5735] usb 1-1: Using ep0 maxpacket: 32 [ 169.300341][ T5735] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 169.300371][ T5735] usb 1-1: config 0 has no interface number 0 [ 169.300417][ T5735] usb 1-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.300446][ T5735] usb 1-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 169.300474][ T5735] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 169.300502][ T5735] usb 1-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 169.300528][ T5735] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.300550][ T5735] usb 1-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 169.300574][ T5735] usb 1-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.416555][ T5735] usb 1-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 169.416589][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 169.416610][ T5735] usb 1-1: Product: syz [ 169.416625][ T5735] usb 1-1: Manufacturer: syz [ 169.416639][ T5735] usb 1-1: SerialNumber: syz [ 169.479470][ T5735] usb 1-1: config 0 descriptor?? [ 169.516618][ T5735] spcp8x5 1-1:0.110: SPCP8x5 converter detected [ 169.544182][ T6167] XFS (loop1): Starting recovery (logdev: internal) [ 169.594377][ T5735] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 169.653409][ T6167] XFS (loop1): Ending recovery (logdev: internal) [ 169.903467][ T6186] loop2: detected capacity change from 0 to 4096 [ 169.993711][ T6186] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 170.102343][ T5622] usb 1-1: USB disconnect, device number 4 [ 170.201020][ T5622] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 170.219142][ T5622] spcp8x5 1-1:0.110: device disconnected [ 170.434360][ T13] bridge_slave_1: left allmulticast mode [ 170.434518][ T13] bridge_slave_1: left promiscuous mode [ 170.506748][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.750605][ T5614] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 170.810199][ T13] bridge_slave_0: left allmulticast mode [ 170.810235][ T13] bridge_slave_0: left promiscuous mode [ 170.810675][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.985203][ T6186] ntfs3(loop2): ino=19, mi_enum_attr [ 170.991629][ T6186] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 171.030166][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.111950][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 171.643637][ T6213] tmpfs: Bad value for 'mpol' [ 176.625481][ T6233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 176.675407][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.825138][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.866249][ T13] bond0 (unregistering): Released all slaves [ 177.080087][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 178.843471][ T6253] FAULT_INJECTION: forcing a failure. [ 178.843471][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.843507][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.843531][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.843545][ T6253] Call Trace: [ 178.843553][ T6253] [ 178.843561][ T6253] dump_stack_lvl+0xe8/0x150 [ 178.843602][ T6253] should_fail_ex+0x46b/0x600 [ 178.843632][ T6253] _copy_to_user+0x31/0xb0 [ 178.843661][ T6253] simple_read_from_buffer+0xe1/0x170 [ 178.843689][ T6253] proc_fail_nth_read+0x1be/0x230 [ 178.843717][ T6253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.843745][ T6253] ? rw_verify_area+0x2ac/0x4e0 [ 178.843772][ T6253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.843799][ T6253] vfs_read+0x212/0xa80 [ 178.843834][ T6253] ? __pfx_vfs_read+0x10/0x10 [ 178.843864][ T6253] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.843898][ T6253] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.843929][ T6253] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.843963][ T6253] ? mutex_lock_nested+0x152/0x1d0 [ 178.843987][ T6253] ? fdget_pos+0x252/0x320 [ 178.844019][ T6253] ksys_read+0x156/0x270 [ 178.844050][ T6253] ? __pfx_ksys_read+0x10/0x10 [ 178.844087][ T6253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.844112][ T6253] do_syscall_64+0x15f/0xf80 [ 178.844145][ T6253] ? clear_bhb_loop+0x40/0x90 [ 178.844173][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.844195][ T6253] RIP: 0033:0x7f16c60bd60e [ 178.844215][ T6253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.844232][ T6253] RSP: 002b:00007f16c4334fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.844254][ T6253] RAX: ffffffffffffffda RBX: 00007f16c43356c0 RCX: 00007f16c60bd60e [ 178.844270][ T6253] RDX: 000000000000000f RSI: 00007f16c43350a0 RDI: 0000000000000004 [ 178.844283][ T6253] RBP: 00007f16c4335090 R08: 0000000000000000 R09: 0000000000000000 [ 178.844296][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.844306][ T6253] R13: 00007f16c6376128 R14: 00007f16c6376090 R15: 00007ffcf5e55258 [ 178.844339][ T6253] [ 179.142687][ T6254] loop2: detected capacity change from 0 to 2048 [ 179.594743][ T6254] loop2: p2 < > p3 < p5 > p4 [ 179.594778][ T6254] loop2: partition table partially beyond EOD, truncated [ 179.595040][ T6254] loop2: p2 start 4278190080 is beyond EOD, truncated [ 179.658166][ T6268] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.689775][ T6254] loop2: p4 size 8192 extends beyond EOD, truncated [ 179.712970][ T6254] loop2: p5 size 8192 extends beyond EOD, truncated [ 180.675056][ T6275] loop1: detected capacity change from 0 to 512 [ 180.747956][ T6275] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.747977][ T6275] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.857527][ T37] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.933248][ T6275] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.969310][ T6275] EXT4-fs (loop1): 1 truncate cleaned up [ 180.996626][ T6275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.083553][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 181.085961][ T37] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 181.085988][ T37] usb 1-1: config 2 has no interface number 0 [ 181.086034][ T37] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 181.086063][ T37] usb 1-1: config 2 interface 88 has no altsetting 0 [ 181.162106][ T37] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 181.162135][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.162155][ T37] usb 1-1: Product: syz [ 181.162169][ T37] usb 1-1: Manufacturer: syz [ 181.162184][ T37] usb 1-1: SerialNumber: syz [ 181.256866][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 181.258958][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 181.318378][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 181.546747][ T6268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.875597][ T6282] EXT4-fs (loop1): resizing filesystem from 256 to 1 blocks [ 181.875626][ T6282] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 182.562221][ T6268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.713948][ T6280] loop3: detected capacity change from 0 to 2048 [ 182.907524][ T6280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.958037][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.914755][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 184.200401][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 184.245009][ T37] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.245040][ T37] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 184.245591][ T37] asix 1-1:2.88: probe with driver asix failed with error -71 [ 184.303077][ T37] usb 1-1: USB disconnect, device number 5 [ 184.465456][ T6288] batman_adv: batadv0: Adding interface: macvtap1 [ 184.465474][ T6288] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.465504][ T6288] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 184.543813][ T6285] loop2: detected capacity change from 0 to 32768 [ 184.659099][ T6305] loop6: detected capacity change from 0 to 524288000 [ 184.745395][ T6285] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 184.832627][ T6285] XFS (loop2): Internal error hlen <= 0 || hlen > bufsize at line 2979 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x1a0/0x290 [ 184.832693][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.832719][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.832730][ T6285] Call Trace: [ 184.832739][ T6285] [ 184.832747][ T6285] dump_stack_lvl+0xe8/0x150 [ 184.832777][ T6285] xfs_corruption_error+0x122/0x170 [ 184.832802][ T6285] ? xlog_valid_rec_header+0x1a0/0x290 [ 184.832844][ T6285] xlog_valid_rec_header+0x205/0x290 [ 184.832872][ T6285] ? xlog_valid_rec_header+0x1a0/0x290 [ 184.832903][ T6285] xlog_do_recovery_pass+0x331/0xcd0 [ 184.832946][ T6285] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 184.832991][ T6285] ? kfree+0x1c5/0x6c0 [ 184.833022][ T6285] xlog_verify_head+0x136/0x440 [ 184.833061][ T6285] xlog_find_tail+0x5b4/0x830 [ 184.833095][ T6285] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 184.833137][ T6285] xlog_recover+0x4b/0x3e0 [ 184.833171][ T6285] xfs_log_mount+0x253/0x3e0 [ 184.833195][ T6285] xfs_mountfs+0xe70/0x22e0 [ 184.833231][ T6285] ? __pfx_xfs_mountfs+0x10/0x10 [ 184.833261][ T6285] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 184.833295][ T6285] xfs_fs_fill_super+0x11b5/0x1600 [ 184.833325][ T6285] get_tree_bdev_flags+0x431/0x4f0 [ 184.833354][ T6285] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 184.833378][ T6285] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 184.833417][ T6285] vfs_get_tree+0x92/0x2a0 [ 184.833446][ T6285] do_new_mount+0x341/0xd30 [ 184.833465][ T6285] ? apparmor_capable+0x126/0x170 [ 184.833598][ T6285] ? __pfx_do_new_mount+0x10/0x10 [ 184.833624][ T6285] ? ns_capable+0x89/0xe0 [ 184.833653][ T6285] ? user_path_at+0xd4/0x160 [ 184.833683][ T6285] ? user_path_at+0xd4/0x160 [ 184.833712][ T6285] __se_sys_mount+0x31d/0x420 [ 184.833740][ T6285] ? __pfx___se_sys_mount+0x10/0x10 [ 184.833781][ T6285] ? __x64_sys_mount+0x20/0xc0 [ 184.833800][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.833823][ T6285] do_syscall_64+0x15f/0xf80 [ 184.833855][ T6285] ? trace_irq_disable+0x3b/0x140 [ 184.833884][ T6285] ? clear_bhb_loop+0x40/0x90 [ 184.833922][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.833944][ T6285] RIP: 0033:0x7f0ed4ade04a [ 184.833964][ T6285] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.833982][ T6285] RSP: 002b:00007f0ed2d2de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.834005][ T6285] RAX: ffffffffffffffda RBX: 00007f0ed2d2dee0 RCX: 00007f0ed4ade04a [ 184.834021][ T6285] RDX: 0000200000000080 RSI: 0000200000009780 RDI: 00007f0ed2d2dea0 [ 184.834037][ T6285] RBP: 0000200000000080 R08: 00007f0ed2d2dee0 R09: 0000000000000041 [ 184.834051][ T6285] R10: 0000000000000041 R11: 0000000000000246 R12: 0000200000009780 [ 184.834065][ T6285] R13: 00007f0ed2d2dea0 R14: 000000000000976f R15: 0000200000000040 [ 184.834096][ T6285] [ 184.857466][ T6285] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 184.857611][ T6285] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 185.012592][ T6306] Invalid logical block size (255) [ 185.285716][ T6315] loop0: detected capacity change from 0 to 512 [ 185.320949][ T6315] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.322500][ T6315] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 185.386483][ T6285] XFS (loop2): Starting recovery (logdev: internal) [ 185.415826][ T6315] EXT4-fs: failed to create workqueue [ 185.415841][ T6315] EXT4-fs (loop0): mount failed [ 185.589737][ T6323] FAULT_INJECTION: forcing a failure. [ 185.589737][ T6323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.589775][ T6323] CPU: 1 UID: 0 PID: 6323 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.589799][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.589812][ T6323] Call Trace: [ 185.589820][ T6323] [ 185.589830][ T6323] dump_stack_lvl+0xe8/0x150 [ 185.589864][ T6323] should_fail_ex+0x46b/0x600 [ 185.589892][ T6323] _copy_from_user+0x2d/0xb0 [ 185.589921][ T6323] ___sys_sendmsg+0x1c6/0x360 [ 185.589954][ T6323] ? __lock_acquire+0x6b5/0x2d10 [ 185.589990][ T6323] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.590067][ T6323] ? __fget_files+0x2a/0x420 [ 185.590090][ T6323] ? __fget_files+0x3a6/0x420 [ 185.590122][ T6323] __x64_sys_sendmsg+0x1c3/0x2a0 [ 185.590156][ T6323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.590199][ T6323] ? __pfx_ksys_write+0x10/0x10 [ 185.590239][ T6323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.590263][ T6323] do_syscall_64+0x15f/0xf80 [ 185.590294][ T6323] ? trace_irq_disable+0x3b/0x140 [ 185.590322][ T6323] ? clear_bhb_loop+0x40/0x90 [ 185.590348][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.590370][ T6323] RIP: 0033:0x7ff19d09cdd9 [ 185.590389][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.590407][ T6323] RSP: 002b:00007ff19b2d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.590438][ T6323] RAX: ffffffffffffffda RBX: 00007ff19d316090 RCX: 00007ff19d09cdd9 [ 185.590454][ T6323] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 185.590467][ T6323] RBP: 00007ff19b2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 185.590480][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.590492][ T6323] R13: 00007ff19d316128 R14: 00007ff19d316090 R15: 00007fffd4595198 [ 185.590524][ T6323] [ 185.870537][ T6285] XFS (loop2): Ending recovery (logdev: internal) [ 186.133568][ T6325] loop0: detected capacity change from 0 to 512 [ 186.274190][ T38] audit: type=1800 audit(1777766194.095:2): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.121" name="file0" dev="tmpfs" ino=169 res=0 errno=0 [ 186.314983][ T6326] loop0: detected capacity change from 0 to 512 [ 186.322108][ T6326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.427441][ T6326] EXT4-fs (loop0): 1 truncate cleaned up [ 186.467760][ T6326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.568629][ T6326] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.121: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 186.593933][ T6322] veth0_vlan: entered allmulticast mode [ 186.679048][ T5616] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.743005][ T6326] EXT4-fs (loop0): Remounting filesystem read-only [ 186.743033][ T6326] EXT4-fs warning (device loop0): ext4_rename_delete:3739: inode #2: comm syz.0.121: Deleting old file: nlink 5, error=-117 [ 187.882145][ T6322] veth0_vlan: left allmulticast mode [ 188.073854][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.074184][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.074534][ T5980] bridge_slave_0: entered allmulticast mode [ 188.080166][ T5980] bridge_slave_0: entered promiscuous mode [ 188.174295][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.179449][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.179816][ T5980] bridge_slave_1: entered allmulticast mode [ 188.311108][ T5980] bridge_slave_1: entered promiscuous mode [ 188.435156][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.539868][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 188.569982][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 188.683452][ T5807] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 189.246684][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.260528][ T5807] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 189.260561][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.260582][ T5807] usb 4-1: Product: syz [ 189.260598][ T5807] usb 4-1: Manufacturer: syz [ 189.260613][ T5807] usb 4-1: SerialNumber: syz [ 189.545158][ T6347] loop2: detected capacity change from 0 to 164 [ 189.637599][ T6345] iso9660: Corrupted directory entry in block 1 of inode 1920 [ 189.726860][ T5807] usb 4-1: config 0 descriptor?? [ 189.751726][ T5807] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 189.751773][ T5807] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 189.882893][ T6351] loop1: detected capacity change from 0 to 2048 [ 189.904520][ T6351] UDF-fs: error (device loop1): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 189.904618][ T6351] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 191.905061][ T5622] usb 4-1: USB disconnect, device number 3 [ 193.534359][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 193.671985][ T6375] netlink: 256 bytes leftover after parsing attributes in process `syz.3.130'. [ 193.672008][ T6375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.130'. [ 193.732462][ T5749] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.784309][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011256800: rx timeout, send abort [ 194.086998][ T13] hsr_slave_0: left promiscuous mode [ 194.128879][ T6378] FAULT_INJECTION: forcing a failure. [ 194.128879][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.128986][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.129013][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.129027][ T6378] Call Trace: [ 194.129036][ T6378] [ 194.129045][ T6378] dump_stack_lvl+0xe8/0x150 [ 194.129084][ T6378] should_fail_ex+0x46b/0x600 [ 194.129115][ T6378] _copy_from_user+0x2d/0xb0 [ 194.129141][ T6378] do_ipv6_setsockopt+0x25c/0x3150 [ 194.129180][ T6378] ? get_pid_task+0x20/0x1f0 [ 194.129220][ T6378] ? __lock_acquire+0x6b5/0x2d10 [ 194.129254][ T6378] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 194.129282][ T6378] ? get_pid_task+0x20/0x1f0 [ 194.129311][ T6378] ? get_pid_task+0x20/0x1f0 [ 194.129353][ T6378] ? __lock_acquire+0x6b5/0x2d10 [ 194.129405][ T6378] ? aa_sk_perm+0x703/0x950 [ 194.129433][ T6378] ? __fget_files+0x2a/0x420 [ 194.129460][ T6378] ? __pfx_aa_sk_perm+0x10/0x10 [ 194.129490][ T6378] ? aa_sock_opt_perm+0x131/0x1f0 [ 194.129522][ T6378] ipv6_setsockopt+0x59/0x170 [ 194.129547][ T6378] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.129575][ T6378] do_sock_setsockopt+0x17c/0x1b0 [ 194.129609][ T6378] __x64_sys_setsockopt+0x143/0x1b0 [ 194.129641][ T6378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.129665][ T6378] do_syscall_64+0x15f/0xf80 [ 194.129697][ T6378] ? trace_irq_disable+0x3b/0x140 [ 194.129725][ T6378] ? clear_bhb_loop+0x40/0x90 [ 194.129752][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.129775][ T6378] RIP: 0033:0x7fe8ea3ccdd9 [ 194.129796][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.129814][ T6378] RSP: 002b:00007fe8e8626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.129837][ T6378] RAX: ffffffffffffffda RBX: 00007fe8ea645fa0 RCX: 00007fe8ea3ccdd9 [ 194.129852][ T6378] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004 [ 194.129864][ T6378] RBP: 00007fe8e8626090 R08: 0000000000000090 R09: 0000000000000000 [ 194.129877][ T6378] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 194.129890][ T6378] R13: 00007fe8ea646038 R14: 00007fe8ea645fa0 R15: 00007ffecb616468 [ 194.129922][ T6378] [ 194.286807][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011256800: abort rx timeout. Force session deactivation [ 194.292226][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011255000: rx timeout, send abort [ 194.308840][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888011255000: connection exists (fe ff). last cmd: 20 [ 194.552009][ T13] hsr_slave_1: left promiscuous mode [ 194.558482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036601c00: rx timeout, send abort [ 194.686425][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.699962][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.730960][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.747838][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.784516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bc1b000: rx timeout, send abort [ 194.784964][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bc1b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.857113][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.857144][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.058557][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036601c00: abort rx timeout. Force session deactivation [ 195.998133][ T13] veth1_macvtap: left promiscuous mode [ 196.007929][ T13] veth0_macvtap: left promiscuous mode [ 196.019382][ T13] veth1_vlan: left promiscuous mode [ 196.019991][ T13] veth0_vlan: left promiscuous mode [ 197.188028][ T6405] loop1: detected capacity change from 0 to 16 [ 197.310868][ T6405] erofs (device loop1): invalid ishare xattr prefix id 0 [ 197.548798][ T6411] loop1: detected capacity change from 0 to 128 [ 197.558496][ T6411] vfat: Unknown parameter '`uiet' [ 198.013801][ T6415] loop1: detected capacity change from 0 to 2048 [ 198.074179][ T6419] loop2: detected capacity change from 0 to 512 [ 198.149426][ T6415] loop1: p3 p4 < > [ 198.149705][ T6415] loop1: p3 start 11362048 is beyond EOD, truncated [ 198.183075][ T6419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002e018, mo2=0002] [ 198.183200][ T6419] System zones: 0-2, 18-18, 34-34 [ 198.383908][ T6419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 198.403384][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 198.403408][ C1] EXT4-fs (loop2): initial error at time 1777766206: ext4_mb_generate_buddy:1317 [ 198.403431][ C1] EXT4-fs (loop2): last error at time 1777766206: ext4_mb_generate_buddy:1317 [ 198.511082][ T6341] udevd[6341]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 198.655992][ T6419] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.140: corrupted inode contents [ 198.656019][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.691288][ T6419] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.140: mark_inode_dirty error [ 198.691326][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.746115][ T6419] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.140: corrupted inode contents [ 198.746144][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.859944][ T6419] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.140: mark_inode_dirty error [ 198.859971][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.860467][ T6419] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.140: corrupted inode contents [ 198.860496][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.869329][ T6419] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.140: mark_inode_dirty error [ 198.869424][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.989392][ T6419] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.140: corrupted inode contents [ 198.989432][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 199.042104][ T6419] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 199.042131][ T6419] loop2: lost filesystem error report for type 5 error -117 [ 199.056699][ T6419] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.140: corrupted inode contents [ 199.056804][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 199.073526][ T6419] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.140: mark_inode_dirty error [ 199.073623][ T6419] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 199.076628][ T6419] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 199.076726][ T6419] loop2: lost filesystem error report for type 5 error -117 [ 199.146791][ T6419] EXT4-fs (loop2): 1 truncate cleaned up [ 199.185321][ T6419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.185513][ T6419] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.227884][ T44] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 199.228014][ T44] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 199.425759][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.734968][ T13] team0 (unregistering): Port device team_slave_1 removed [ 199.814334][ T13] team0 (unregistering): Port device team_slave_0 removed [ 200.088770][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.250177][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 200.340357][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.748686][ T5980] team0: Port device team_slave_0 added [ 200.772966][ T5980] team0: Port device team_slave_1 added [ 200.840401][ T6459] FAULT_INJECTION: forcing a failure. [ 200.840401][ T6459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.840439][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.840464][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.840477][ T6459] Call Trace: [ 200.840486][ T6459] [ 200.840495][ T6459] dump_stack_lvl+0xe8/0x150 [ 200.840528][ T6459] should_fail_ex+0x46b/0x600 [ 200.840557][ T6459] _copy_to_user+0x31/0xb0 [ 200.840586][ T6459] simple_read_from_buffer+0xe1/0x170 [ 200.840616][ T6459] proc_fail_nth_read+0x1be/0x230 [ 200.840645][ T6459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.840681][ T6459] ? rw_verify_area+0x2ac/0x4e0 [ 200.840709][ T6459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.840735][ T6459] vfs_read+0x212/0xa80 [ 200.840773][ T6459] ? __pfx_vfs_read+0x10/0x10 [ 200.840804][ T6459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 200.840836][ T6459] ? lockdep_hardirqs_on+0x7a/0x110 [ 200.840869][ T6459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 200.840901][ T6459] ? mutex_lock_nested+0x152/0x1d0 [ 200.840925][ T6459] ? fdget_pos+0x252/0x320 [ 200.840957][ T6459] ksys_read+0x156/0x270 [ 200.840988][ T6459] ? __pfx_ksys_read+0x10/0x10 [ 200.841023][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.841047][ T6459] do_syscall_64+0x15f/0xf80 [ 200.841083][ T6459] ? trace_irq_disable+0x3b/0x140 [ 200.841113][ T6459] ? clear_bhb_loop+0x40/0x90 [ 200.841141][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.841163][ T6459] RIP: 0033:0x7fe8ea38d60e [ 200.841184][ T6459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.841202][ T6459] RSP: 002b:00007fe8e8604fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.841225][ T6459] RAX: ffffffffffffffda RBX: 00007fe8e86056c0 RCX: 00007fe8ea38d60e [ 200.841240][ T6459] RDX: 000000000000000f RSI: 00007fe8e86050a0 RDI: 0000000000000005 [ 200.841252][ T6459] RBP: 00007fe8e8605090 R08: 0000000000000000 R09: 0000000000000000 [ 200.841264][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.841276][ T6459] R13: 00007fe8ea646128 R14: 00007fe8ea646090 R15: 00007ffecb616468 [ 200.841309][ T6459] [ 201.428828][ T6464] netlink: 100 bytes leftover after parsing attributes in process `syz.2.153'. [ 201.454748][ T6464] netlink: 100 bytes leftover after parsing attributes in process `syz.2.153'. [ 201.989666][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.101710][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.550584][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.556001][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.559851][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.659412][ T6486] syz.1.157 uses obsolete (PF_INET,SOCK_PACKET) [ 204.071852][ T6479] loop0: detected capacity change from 0 to 16 [ 204.074924][ T6479] erofs: Unknown parameter 'Koacl' [ 204.329659][ T6495] FAULT_INJECTION: forcing a failure. [ 204.329659][ T6495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.329694][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.2.158 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.329719][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.329733][ T6495] Call Trace: [ 204.329741][ T6495] [ 204.329751][ T6495] dump_stack_lvl+0xe8/0x150 [ 204.329786][ T6495] should_fail_ex+0x46b/0x600 [ 204.329815][ T6495] _copy_to_user+0x31/0xb0 [ 204.329847][ T6495] simple_read_from_buffer+0xe1/0x170 [ 204.329876][ T6495] proc_fail_nth_read+0x1be/0x230 [ 204.329904][ T6495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.329932][ T6495] ? rw_verify_area+0x2ac/0x4e0 [ 204.329959][ T6495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.329985][ T6495] vfs_read+0x212/0xa80 [ 204.330020][ T6495] ? __pfx_vfs_read+0x10/0x10 [ 204.330060][ T6495] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.330093][ T6495] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.330126][ T6495] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.330159][ T6495] ? mutex_lock_nested+0x152/0x1d0 [ 204.330182][ T6495] ? fdget_pos+0x252/0x320 [ 204.330215][ T6495] ksys_read+0x156/0x270 [ 204.330246][ T6495] ? __pfx_ksys_read+0x10/0x10 [ 204.330282][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.330307][ T6495] do_syscall_64+0x15f/0xf80 [ 204.330337][ T6495] ? trace_irq_disable+0x3b/0x140 [ 204.330368][ T6495] ? clear_bhb_loop+0x40/0x90 [ 204.330396][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.330417][ T6495] RIP: 0033:0x7f0ed4a9d60e [ 204.330436][ T6495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.330454][ T6495] RSP: 002b:00007f0ed2d0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.330477][ T6495] RAX: ffffffffffffffda RBX: 00007f0ed2d0d6c0 RCX: 00007f0ed4a9d60e [ 204.330493][ T6495] RDX: 000000000000000f RSI: 00007f0ed2d0d0a0 RDI: 0000000000000004 [ 204.330506][ T6495] RBP: 00007f0ed2d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 204.330519][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.330530][ T6495] R13: 00007f0ed4d56128 R14: 00007f0ed4d56090 R15: 00007fff8780c378 [ 204.330565][ T6495] [ 204.808180][ T5619] Bluetooth: hci3: command tx timeout [ 206.653413][ T5742] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 206.825656][ T5742] usb 4-1: device descriptor read/64, error -71 [ 206.884042][ T5619] Bluetooth: hci3: command tx timeout [ 207.106561][ T5742] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 207.112709][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.283451][ T5742] usb 4-1: device descriptor read/64, error -71 [ 207.393993][ T5742] usb usb4-port1: attempt power cycle [ 207.418627][ T6526] netlink: 100 bytes leftover after parsing attributes in process `syz.2.164'. [ 207.436322][ T6526] netlink: 100 bytes leftover after parsing attributes in process `syz.2.164'. [ 207.757241][ T5742] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.773135][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 207.787110][ T5742] usb 4-1: device descriptor read/8, error -71 [ 207.811027][ T6518] loop0: detected capacity change from 0 to 32768 [ 207.960999][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 207.978721][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.979724][ T37] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 207.979750][ T37] usb 2-1: config 0 has no interface number 0 [ 208.012629][ T37] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 208.012660][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.012681][ T37] usb 2-1: Product: syz [ 208.012696][ T37] usb 2-1: Manufacturer: syz [ 208.012711][ T37] usb 2-1: SerialNumber: syz [ 208.068027][ T37] usb 2-1: config 0 descriptor?? [ 208.084048][ T5742] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.087510][ T6518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.163 (6518) [ 208.104507][ T5742] usb 4-1: device descriptor read/8, error -71 [ 208.139224][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.139264][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.139295][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.191514][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 208.191572][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 208.191598][ T10] usb 3-1: Product: syz [ 208.191617][ T10] usb 3-1: Manufacturer: syz [ 208.191635][ T10] usb 3-1: SerialNumber: syz [ 208.243408][ T5742] usb usb4-port1: unable to enumerate USB device [ 208.255384][ T13] bridge_slave_1: left allmulticast mode [ 208.255419][ T13] bridge_slave_1: left promiscuous mode [ 208.290395][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.308485][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 208.308745][ T37] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 208.443771][ T13] bridge_slave_0: left allmulticast mode [ 208.443808][ T13] bridge_slave_0: left promiscuous mode [ 208.444811][ T37] usb 2-1: USB disconnect, device number 5 [ 208.497837][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.936319][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.963679][ T5619] Bluetooth: hci3: command tx timeout [ 209.176489][ T10] usb 3-1: USB disconnect, device number 5 [ 209.219014][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 209.531244][ T10] usblp0: removed [ 209.617620][ T6543] FAULT_INJECTION: forcing a failure. [ 209.617620][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 209.617647][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.2.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.617665][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.617675][ T6543] Call Trace: [ 209.617681][ T6543] [ 209.617687][ T6543] dump_stack_lvl+0xe8/0x150 [ 209.617712][ T6543] should_fail_ex+0x46b/0x600 [ 209.617770][ T6543] should_failslab+0xa8/0x100 [ 209.617808][ T6543] __kmalloc_noprof+0xdf/0x7b0 [ 209.617835][ T6543] ? kfree+0x4d/0x6c0 [ 209.617857][ T6543] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 209.617893][ T6543] tomoyo_realpath_from_path+0xe3/0x5d0 [ 209.617917][ T6543] ? tomoyo_domain+0xd7/0x130 [ 209.617944][ T6543] ? tomoyo_path_number_perm+0x219/0x630 [ 209.617962][ T6543] tomoyo_path_number_perm+0x246/0x630 [ 209.617983][ T6543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.618001][ T6543] ? __lock_acquire+0x6b5/0x2d10 [ 209.618027][ T6543] ? do_raw_spin_lock+0x12b/0x2f0 [ 209.618070][ T6543] ? __fget_files+0x2a/0x420 [ 209.618089][ T6543] ? __fget_files+0x2a/0x420 [ 209.618104][ T6543] ? __fget_files+0x3a6/0x420 [ 209.618119][ T6543] ? __fget_files+0x2a/0x420 [ 209.618138][ T6543] security_file_ioctl+0xc3/0x2a0 [ 209.618157][ T6543] __se_sys_ioctl+0x47/0x170 [ 209.618179][ T6543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.618196][ T6543] do_syscall_64+0x15f/0xf80 [ 209.618219][ T6543] ? trace_irq_disable+0x3b/0x140 [ 209.618240][ T6543] ? clear_bhb_loop+0x40/0x90 [ 209.618260][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.618275][ T6543] RIP: 0033:0x7f0ed4adcdd9 [ 209.618290][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.618302][ T6543] RSP: 002b:00007f0ed2d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.618318][ T6543] RAX: ffffffffffffffda RBX: 00007f0ed4d55fa0 RCX: 00007f0ed4adcdd9 [ 209.618330][ T6543] RDX: 00002000000003c0 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 209.618340][ T6543] RBP: 00007f0ed2d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 209.618349][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.618358][ T6543] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 209.618382][ T6543] [ 209.618816][ T6543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.129036][ T6518] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.129074][ T6518] BTRFS info (device loop0): using crc32c checksum algorithm [ 210.165805][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.187802][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 210.196862][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 210.201319][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 210.203163][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 210.206046][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 210.207477][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 210.208997][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 210.210317][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 210.290381][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 210.293073][ T6518] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 210.360224][ T6518] BTRFS error (device loop0): open_ctree failed: -12 [ 210.376143][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.519952][ T13] bond0 (unregistering): Released all slaves [ 210.693541][ T6545] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 210.693793][ T6545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.245271][ T5619] Bluetooth: hci3: command tx timeout [ 212.332307][ T6578] netlink: 100 bytes leftover after parsing attributes in process `syz.0.175'. [ 212.370196][ T6579] netlink: 100 bytes leftover after parsing attributes in process `syz.0.175'. [ 212.390714][ T6577] FAULT_INJECTION: forcing a failure. [ 212.390714][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 212.390742][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.390760][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.390770][ T6577] Call Trace: [ 212.390775][ T6577] [ 212.390782][ T6577] dump_stack_lvl+0xe8/0x150 [ 212.390808][ T6577] should_fail_ex+0x46b/0x600 [ 212.390829][ T6577] should_failslab+0xa8/0x100 [ 212.390852][ T6577] __kmalloc_noprof+0xdf/0x7b0 [ 212.390872][ T6577] ? kfree+0x4d/0x6c0 [ 212.390888][ T6577] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.390915][ T6577] tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.390939][ T6577] ? tomoyo_domain+0xd7/0x130 [ 212.390966][ T6577] ? tomoyo_path_number_perm+0x219/0x630 [ 212.390984][ T6577] tomoyo_path_number_perm+0x246/0x630 [ 212.391005][ T6577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.391022][ T6577] ? __lock_acquire+0x6b5/0x2d10 [ 212.391049][ T6577] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.391092][ T6577] ? __fget_files+0x2a/0x420 [ 212.391111][ T6577] ? __fget_files+0x2a/0x420 [ 212.391126][ T6577] ? __fget_files+0x3a6/0x420 [ 212.391141][ T6577] ? __fget_files+0x2a/0x420 [ 212.391160][ T6577] security_file_ioctl+0xc3/0x2a0 [ 212.391179][ T6577] __se_sys_ioctl+0x47/0x170 [ 212.391201][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.391218][ T6577] do_syscall_64+0x15f/0xf80 [ 212.391242][ T6577] ? trace_irq_disable+0x3b/0x140 [ 212.391269][ T6577] ? clear_bhb_loop+0x40/0x90 [ 212.391289][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.391304][ T6577] RIP: 0033:0x7f0ed4adcdd9 [ 212.391318][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.391331][ T6577] RSP: 002b:00007f0ed2d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.391347][ T6577] RAX: ffffffffffffffda RBX: 00007f0ed4d55fa0 RCX: 00007f0ed4adcdd9 [ 212.391358][ T6577] RDX: 0000200000001280 RSI: 0000000000004c0a RDI: 0000000000000005 [ 212.391368][ T6577] RBP: 00007f0ed2d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 212.391377][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.391386][ T6577] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 212.391410][ T6577] [ 212.391416][ T6577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.038839][ T6593] FAULT_INJECTION: forcing a failure. [ 213.038839][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.038875][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.0.179 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.038897][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.038910][ T6593] Call Trace: [ 213.038918][ T6593] [ 213.038927][ T6593] dump_stack_lvl+0xe8/0x150 [ 213.038961][ T6593] should_fail_ex+0x46b/0x600 [ 213.038989][ T6593] _copy_from_user+0x2d/0xb0 [ 213.039017][ T6593] ___sys_sendmsg+0x1c6/0x360 [ 213.039049][ T6593] ? __lock_acquire+0x6b5/0x2d10 [ 213.039087][ T6593] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.039153][ T6593] ? __fget_files+0x2a/0x420 [ 213.039176][ T6593] ? __fget_files+0x3a6/0x420 [ 213.039208][ T6593] __x64_sys_sendmsg+0x1c3/0x2a0 [ 213.039244][ T6593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.039292][ T6593] ? __pfx_ksys_write+0x10/0x10 [ 213.039330][ T6593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.039355][ T6593] do_syscall_64+0x15f/0xf80 [ 213.039385][ T6593] ? trace_irq_disable+0x3b/0x140 [ 213.039413][ T6593] ? clear_bhb_loop+0x40/0x90 [ 213.039440][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.039463][ T6593] RIP: 0033:0x7f16c60fcdd9 [ 213.039492][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.039510][ T6593] RSP: 002b:00007f16c4356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.039532][ T6593] RAX: ffffffffffffffda RBX: 00007f16c6375fa0 RCX: 00007f16c60fcdd9 [ 213.039547][ T6593] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 213.039560][ T6593] RBP: 00007f16c4356090 R08: 0000000000000000 R09: 0000000000000000 [ 213.039573][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.039585][ T6593] R13: 00007f16c6376038 R14: 00007f16c6375fa0 R15: 00007ffcf5e55258 [ 213.039617][ T6593] [ 213.507167][ T6601] loop1: detected capacity change from 0 to 16 [ 213.521766][ T13] team0 (unregistering): Port device team_slave_1 removed [ 213.949443][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.069162][ T6601] erofs (device loop1): mounted with root inode @ nid 36. [ 214.456812][ T6601] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 214.536394][ T5619] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 214.644230][ T6603] syz.0.182 (6603) used greatest stack depth: 17792 bytes left [ 214.775344][ T6601] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 214.775380][ T6601] erofs (device loop1): read error -117 @ 1 of nid 89 [ 214.853572][ T38] audit: type=1800 audit(1777766222.685:3): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.181" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 215.584986][ T6584] warning: `syz.2.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.687383][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 216.765411][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 217.059550][ T6630] FAULT_INJECTION: forcing a failure. [ 217.059550][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.059589][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.059614][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.059628][ T6630] Call Trace: [ 217.059636][ T6630] [ 217.059645][ T6630] dump_stack_lvl+0xe8/0x150 [ 217.059680][ T6630] should_fail_ex+0x46b/0x600 [ 217.059710][ T6630] _copy_from_user+0x2d/0xb0 [ 217.059739][ T6630] ___sys_sendmsg+0x1c6/0x360 [ 217.059773][ T6630] ? __lock_acquire+0x6b5/0x2d10 [ 217.059810][ T6630] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.059878][ T6630] ? __fget_files+0x2a/0x420 [ 217.059902][ T6630] ? __fget_files+0x3a6/0x420 [ 217.059935][ T6630] __x64_sys_sendmsg+0x1c3/0x2a0 [ 217.059979][ T6630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.060022][ T6630] ? __pfx_ksys_write+0x10/0x10 [ 217.060060][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.060085][ T6630] do_syscall_64+0x15f/0xf80 [ 217.060116][ T6630] ? trace_irq_disable+0x3b/0x140 [ 217.060145][ T6630] ? clear_bhb_loop+0x40/0x90 [ 217.060172][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.060194][ T6630] RIP: 0033:0x7f16c60fcdd9 [ 217.060215][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.060233][ T6630] RSP: 002b:00007f16c4335028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.060264][ T6630] RAX: ffffffffffffffda RBX: 00007f16c6376090 RCX: 00007f16c60fcdd9 [ 217.060279][ T6630] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 217.060292][ T6630] RBP: 00007f16c4335090 R08: 0000000000000000 R09: 0000000000000000 [ 217.060304][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.060316][ T6630] R13: 00007f16c6376128 R14: 00007f16c6376090 R15: 00007ffcf5e55258 [ 217.060348][ T6630] [ 217.593508][ T5742] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.743555][ T5742] usb 2-1: Using ep0 maxpacket: 32 [ 217.771074][ T5742] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 217.771107][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.981665][ T5742] usb 2-1: config 0 descriptor?? [ 219.113767][ T5742] gspca_main: sunplus-2.14.0 probing 041e:400b [ 219.271708][ T6650] loop3: detected capacity change from 0 to 7 [ 219.370422][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.370648][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.370832][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.372850][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.373060][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.406845][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.407113][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.407242][ T6650] ldm_validate_partition_table(): Disk read failed. [ 219.407295][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.407531][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.469917][ T5742] gspca_sunplus: reg_r err -32 [ 219.470009][ T5742] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 219.493808][ T6650] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.494002][ T6650] Dev loop3: unable to read RDB block 0 [ 219.494429][ T6650] loop3: unable to read partition table [ 219.494575][ T6650] loop3: partition table beyond EOD, truncated [ 219.494627][ T6650] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 221.077964][ T822] usb 2-1: USB disconnect, device number 6 [ 221.258902][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.293090][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.307690][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.310834][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.354016][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.428813][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 221.431115][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 221.673443][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.673887][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.674235][ T6470] bridge_slave_0: entered allmulticast mode [ 221.807602][ T6470] bridge_slave_0: entered promiscuous mode [ 221.841679][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.841920][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.842196][ T6470] bridge_slave_1: entered allmulticast mode [ 221.880826][ T6470] bridge_slave_1: entered promiscuous mode [ 222.898603][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 222.898645][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 222.898664][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 223.367611][ T6728] mmap: syz.1.204 (6728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.529405][ T5619] Bluetooth: hci1: command tx timeout [ 224.666397][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.830169][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.932380][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.280564][ T6470] team0: Port device team_slave_0 added [ 225.318444][ T6470] team0: Port device team_slave_1 added [ 225.366000][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 225.526983][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.528546][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.528608][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 225.528633][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.580778][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 225.580808][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.580827][ T10] usb 3-1: Product: syz [ 225.580848][ T10] usb 3-1: Manufacturer: syz [ 225.580863][ T10] usb 3-1: SerialNumber: syz [ 225.660798][ T6752] vivid-002: disconnect [ 225.681333][ T10] usb 3-1: config 0 descriptor?? [ 225.701676][ T6747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.747084][ T10] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 225.767919][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.767936][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.767965][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.769440][ T6752] loop1: detected capacity change from 0 to 1024 [ 225.853344][ T5619] Bluetooth: hci1: command tx timeout [ 226.267414][ T6758] FAULT_INJECTION: forcing a failure. [ 226.267414][ T6758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.267454][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.0.209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.267498][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.267513][ T6758] Call Trace: [ 226.267521][ T6758] [ 226.267530][ T6758] dump_stack_lvl+0xe8/0x150 [ 226.267563][ T6758] should_fail_ex+0x46b/0x600 [ 226.267591][ T6758] _copy_from_user+0x2d/0xb0 [ 226.267619][ T6758] ___sys_sendmsg+0x1c6/0x360 [ 226.267648][ T6758] ? __lock_acquire+0x6b5/0x2d10 [ 226.267685][ T6758] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.267753][ T6758] ? __fget_files+0x2a/0x420 [ 226.267776][ T6758] ? __fget_files+0x3a6/0x420 [ 226.267808][ T6758] __x64_sys_sendmsg+0x1c3/0x2a0 [ 226.267842][ T6758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.267882][ T6758] ? __pfx_ksys_write+0x10/0x10 [ 226.267919][ T6758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.267942][ T6758] do_syscall_64+0x15f/0xf80 [ 226.267971][ T6758] ? trace_irq_disable+0x3b/0x140 [ 226.268001][ T6758] ? clear_bhb_loop+0x40/0x90 [ 226.268028][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.268060][ T6758] RIP: 0033:0x7f16c60fcdd9 [ 226.268081][ T6758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.268099][ T6758] RSP: 002b:00007f16c4356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.268122][ T6758] RAX: ffffffffffffffda RBX: 00007f16c6375fa0 RCX: 00007f16c60fcdd9 [ 226.268139][ T6758] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 226.268153][ T6758] RBP: 00007f16c4356090 R08: 0000000000000000 R09: 0000000000000000 [ 226.268167][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.268180][ T6758] R13: 00007f16c6376038 R14: 00007f16c6375fa0 R15: 00007ffcf5e55258 [ 226.268217][ T6758] [ 226.622929][ T6752] hfsplus: invalid file type 00355 for inode 2 [ 226.623114][ T6752] hfsplus: failed to load root directory [ 226.659837][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.727393][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 226.788389][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 226.872539][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.874498][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.874533][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.021646][ T6751] vivid-002: reconnect [ 227.467946][ T6769] loop1: detected capacity change from 0 to 1764 [ 227.724480][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.933728][ T5619] Bluetooth: hci1: command tx timeout [ 227.988396][ T37] usb 3-1: USB disconnect, device number 6 [ 228.271521][ T6470] hsr_slave_0: entered promiscuous mode [ 228.292209][ T6470] hsr_slave_1: entered promiscuous mode [ 228.309985][ T6470] debugfs: 'hsr0' already exists in 'hsr' [ 228.310016][ T6470] Cannot create hsr debugfs directory [ 228.389014][ T6788] FAULT_INJECTION: forcing a failure. [ 228.389014][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.389050][ T6788] CPU: 0 UID: 0 PID: 6788 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 228.389075][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.389098][ T6788] Call Trace: [ 228.389107][ T6788] [ 228.389115][ T6788] dump_stack_lvl+0xe8/0x150 [ 228.389152][ T6788] should_fail_ex+0x46b/0x600 [ 228.389180][ T6788] _copy_from_user+0x2d/0xb0 [ 228.389208][ T6788] ___sys_sendmsg+0x1c6/0x360 [ 228.389241][ T6788] ? __lock_acquire+0x6b5/0x2d10 [ 228.389277][ T6788] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.389343][ T6788] ? __fget_files+0x2a/0x420 [ 228.389365][ T6788] ? __fget_files+0x3a6/0x420 [ 228.389404][ T6788] __x64_sys_sendmsg+0x1c3/0x2a0 [ 228.389440][ T6788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.389483][ T6788] ? __pfx_ksys_write+0x10/0x10 [ 228.389520][ T6788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.389546][ T6788] do_syscall_64+0x15f/0xf80 [ 228.389578][ T6788] ? trace_irq_disable+0x3b/0x140 [ 228.389608][ T6788] ? clear_bhb_loop+0x40/0x90 [ 228.389635][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.389656][ T6788] RIP: 0033:0x7f16c60fcdd9 [ 228.389676][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.389694][ T6788] RSP: 002b:00007f16c4356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.389716][ T6788] RAX: ffffffffffffffda RBX: 00007f16c6375fa0 RCX: 00007f16c60fcdd9 [ 228.389731][ T6788] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.389743][ T6788] RBP: 00007f16c4356090 R08: 0000000000000000 R09: 0000000000000000 [ 228.389755][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.389765][ T6788] R13: 00007f16c6376038 R14: 00007f16c6375fa0 R15: 00007ffcf5e55258 [ 228.389799][ T6788] [ 228.554795][ T6789] FAULT_INJECTION: forcing a failure. [ 228.554795][ T6789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.554844][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.2.215 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 228.554868][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.554880][ T6789] Call Trace: [ 228.554888][ T6789] [ 228.554897][ T6789] dump_stack_lvl+0xe8/0x150 [ 228.554931][ T6789] should_fail_ex+0x46b/0x600 [ 228.554960][ T6789] _copy_from_user+0x2d/0xb0 [ 228.554988][ T6789] __sys_sendto+0x296/0x590 [ 228.555022][ T6789] ? __pfx___sys_sendto+0x10/0x10 [ 228.555074][ T6789] ? ksys_write+0x248/0x270 [ 228.555143][ T6789] ? __pfx_ksys_write+0x10/0x10 [ 228.555177][ T6789] __x64_sys_sendto+0xde/0x100 [ 228.555206][ T6789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.555230][ T6789] do_syscall_64+0x15f/0xf80 [ 228.555262][ T6789] ? trace_irq_disable+0x3b/0x140 [ 228.555289][ T6789] ? clear_bhb_loop+0x40/0x90 [ 228.555317][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.555339][ T6789] RIP: 0033:0x7f0ed4adcdd9 [ 228.555360][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.555378][ T6789] RSP: 002b:00007f0ed2d2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.555400][ T6789] RAX: ffffffffffffffda RBX: 00007f0ed4d55fa0 RCX: 00007f0ed4adcdd9 [ 228.555415][ T6789] RDX: 0000000000010608 RSI: 0000200000000180 RDI: 0000000000000003 [ 228.555429][ T6789] RBP: 00007f0ed2d2e090 R08: 0000200000000140 R09: 0000000000000014 [ 228.555442][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.555455][ T6789] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 228.555488][ T6789] [ 229.075286][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.557021][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 230.006005][ T5619] Bluetooth: hci1: command tx timeout [ 232.583584][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 232.634934][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.221'. [ 232.634967][ T6825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.221'. [ 232.697812][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.221'. [ 232.697880][ T6826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.221'. [ 232.776442][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.776476][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.776518][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.776543][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.177178][ T10] usb 1-1: usb_control_msg returned -32 [ 233.177234][ T10] usbtmc 1-1:16.0: can't read capabilities [ 233.587460][ T6833] FAULT_INJECTION: forcing a failure. [ 233.587460][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 233.587497][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.587520][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.587534][ T6833] Call Trace: [ 233.587542][ T6833] [ 233.587551][ T6833] dump_stack_lvl+0xe8/0x150 [ 233.587587][ T6833] should_fail_ex+0x46b/0x600 [ 233.587617][ T6833] should_failslab+0xa8/0x100 [ 233.587651][ T6833] __kmalloc_noprof+0xdf/0x7b0 [ 233.587679][ T6833] ? kfree+0x4d/0x6c0 [ 233.587701][ T6833] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 233.587739][ T6833] tomoyo_realpath_from_path+0xe3/0x5d0 [ 233.587772][ T6833] ? tomoyo_domain+0xd7/0x130 [ 233.587808][ T6833] ? tomoyo_path_number_perm+0x219/0x630 [ 233.587834][ T6833] tomoyo_path_number_perm+0x246/0x630 [ 233.587862][ T6833] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.587888][ T6833] ? __lock_acquire+0x6b5/0x2d10 [ 233.587926][ T6833] ? __seccomp_filter+0x3e9/0x1ef0 [ 233.587992][ T6833] ? __fget_files+0x2a/0x420 [ 233.588019][ T6833] ? __fget_files+0x2a/0x420 [ 233.588041][ T6833] ? __fget_files+0x3a6/0x420 [ 233.588064][ T6833] ? __fget_files+0x2a/0x420 [ 233.588092][ T6833] security_file_ioctl+0xc3/0x2a0 [ 233.588118][ T6833] __se_sys_ioctl+0x47/0x170 [ 233.588149][ T6833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.588174][ T6833] do_syscall_64+0x15f/0xf80 [ 233.588207][ T6833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.588230][ T6833] ? clear_bhb_loop+0x40/0x90 [ 233.588257][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.588281][ T6833] RIP: 0033:0x7f16c60fcdd9 [ 233.588301][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.588318][ T6833] RSP: 002b:00007f16c4335028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.588347][ T6833] RAX: ffffffffffffffda RBX: 00007f16c6376090 RCX: 00007f16c60fcdd9 [ 233.588368][ T6833] RDX: 0000200000000040 RSI: 00000000c0105b08 RDI: 0000000000000000 [ 233.588383][ T6833] RBP: 00007f16c4335090 R08: 0000000000000000 R09: 0000000000000000 [ 233.588395][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.588408][ T6833] R13: 00007f16c6376128 R14: 00007f16c6376090 R15: 00007ffcf5e55258 [ 233.588441][ T6833] [ 233.588548][ T6833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.949077][ T5749] usb 1-1: USB disconnect, device number 6 [ 233.963953][ T6833] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 233.969011][ T12] bridge_slave_1: left allmulticast mode [ 233.969373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.182998][ T12] bridge_slave_0: left allmulticast mode [ 234.183037][ T12] bridge_slave_0: left promiscuous mode [ 234.199744][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.341651][ T6836] loop1: detected capacity change from 0 to 2048 [ 234.404148][ T6836] loop1: p1 p2 [ 234.859135][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 235.008370][ T822] usb 2-1: device descriptor read/64, error -71 [ 235.284304][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.285698][ T822] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 235.437019][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.437055][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.437097][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 235.437120][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.487946][ T10] usb 3-1: config 0 descriptor?? [ 235.637378][ T822] usb 2-1: device descriptor read/64, error -71 [ 235.743991][ T822] usb usb2-port1: attempt power cycle [ 236.592401][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 236.592444][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 236.592473][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 236.592502][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 236.592530][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x4 [ 236.594514][ T822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.624599][ T822] usb 2-1: device descriptor read/8, error -71 [ 237.134214][ T822] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.698123][ T6836] 9p: Bad value for 'wfdno' [ 237.723125][ T822] usb 2-1: device descriptor read/8, error -71 [ 237.884505][ T822] usb usb2-port1: unable to enumerate USB device [ 237.905769][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.906380][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.908072][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.908438][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.951234][ T10] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 237.953673][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.956934][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.039901][ T6853] loop2: detected capacity change from 0 to 512 [ 238.075666][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.094041][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.095528][ T6853] netlink: 'syz.2.227': attribute type 17 has an invalid length. [ 238.095551][ T6853] netlink: 148 bytes leftover after parsing attributes in process `syz.2.227'. [ 238.133664][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.217026][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.256298][ T12] bond0 (unregistering): Released all slaves [ 238.481205][ T6853] netlink: 1 bytes leftover after parsing attributes in process `syz.2.227'. [ 238.602490][ T10] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 238.602541][ T10] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 238.823221][ T10] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71 [ 238.902122][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 238.902166][ T6874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.231'. [ 238.952530][ T10] usb 3-1: USB disconnect, device number 7 [ 238.966300][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 238.966337][ T6875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.231'. [ 239.341950][ T6877] loop1: detected capacity change from 0 to 256 [ 240.542773][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 240.798789][ T6879] IPv6: sit1: Disabled Multicast RS [ 244.910202][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 244.960066][ T6928] FAULT_INJECTION: forcing a failure. [ 244.960066][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 244.960095][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.960124][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.960141][ T6928] Call Trace: [ 244.960147][ T6928] [ 244.960154][ T6928] dump_stack_lvl+0xe8/0x150 [ 244.960179][ T6928] should_fail_ex+0x46b/0x600 [ 244.960201][ T6928] should_failslab+0xa8/0x100 [ 244.960225][ T6928] __kmalloc_noprof+0xdf/0x7b0 [ 244.960245][ T6928] ? kfree+0x4d/0x6c0 [ 244.960261][ T6928] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.960289][ T6928] tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.960318][ T6928] ? tomoyo_domain+0xd7/0x130 [ 244.960345][ T6928] ? tomoyo_path_number_perm+0x219/0x630 [ 244.960390][ T6928] tomoyo_path_number_perm+0x246/0x630 [ 244.960427][ T6928] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.960446][ T6928] ? __lock_acquire+0x6b5/0x2d10 [ 244.960472][ T6928] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.960521][ T6928] ? __fget_files+0x2a/0x420 [ 244.960540][ T6928] ? __fget_files+0x2a/0x420 [ 244.960556][ T6928] ? __fget_files+0x3a6/0x420 [ 244.960571][ T6928] ? __fget_files+0x2a/0x420 [ 244.960590][ T6928] security_file_ioctl+0xc3/0x2a0 [ 244.960610][ T6928] __se_sys_ioctl+0x47/0x170 [ 244.960642][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.960660][ T6928] do_syscall_64+0x15f/0xf80 [ 244.960683][ T6928] ? trace_irq_disable+0x3b/0x140 [ 244.960705][ T6928] ? clear_bhb_loop+0x40/0x90 [ 244.960725][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.960740][ T6928] RIP: 0033:0x7f0ed4adcdd9 [ 244.960755][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.960769][ T6928] RSP: 002b:00007f0ed2d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.960785][ T6928] RAX: ffffffffffffffda RBX: 00007f0ed4d56090 RCX: 00007f0ed4adcdd9 [ 244.960797][ T6928] RDX: 0000200000000080 RSI: 00000000400454dc RDI: 0000000000000003 [ 244.960807][ T6928] RBP: 00007f0ed2d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 244.960817][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.960826][ T6928] R13: 00007f0ed4d56128 R14: 00007f0ed4d56090 R15: 00007fff8780c378 [ 244.960851][ T6928] [ 244.979395][ T6928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.539326][ T6470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.569850][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.588602][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 246.869411][ T6948] FAULT_INJECTION: forcing a failure. [ 246.869411][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 246.869445][ T6948] CPU: 0 UID: 0 PID: 6948 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.869466][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.869477][ T6948] Call Trace: [ 246.869484][ T6948] [ 246.869504][ T6948] dump_stack_lvl+0xe8/0x150 [ 246.869533][ T6948] should_fail_ex+0x46b/0x600 [ 246.869556][ T6948] should_failslab+0xa8/0x100 [ 246.869583][ T6948] __kmalloc_noprof+0xdf/0x7b0 [ 246.869605][ T6948] ? kfree+0x4d/0x6c0 [ 246.869623][ T6948] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 246.869655][ T6948] tomoyo_realpath_from_path+0xe3/0x5d0 [ 246.869682][ T6948] ? tomoyo_domain+0xd7/0x130 [ 246.869712][ T6948] ? tomoyo_path_number_perm+0x219/0x630 [ 246.869734][ T6948] tomoyo_path_number_perm+0x246/0x630 [ 246.869758][ T6948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.869779][ T6948] ? __lock_acquire+0x6b5/0x2d10 [ 246.869808][ T6948] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.869858][ T6948] ? __fget_files+0x2a/0x420 [ 246.869879][ T6948] ? __fget_files+0x2a/0x420 [ 246.869896][ T6948] ? __fget_files+0x3a6/0x420 [ 246.869914][ T6948] ? __fget_files+0x2a/0x420 [ 246.869935][ T6948] security_file_ioctl+0xc3/0x2a0 [ 246.869958][ T6948] __se_sys_ioctl+0x47/0x170 [ 246.869982][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.870002][ T6948] do_syscall_64+0x15f/0xf80 [ 246.870028][ T6948] ? trace_irq_disable+0x3b/0x140 [ 246.870051][ T6948] ? clear_bhb_loop+0x40/0x90 [ 246.870074][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.870094][ T6948] RIP: 0033:0x7f0ed4adcdd9 [ 246.870117][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.870131][ T6948] RSP: 002b:00007f0ed2d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.870150][ T6948] RAX: ffffffffffffffda RBX: 00007f0ed4d55fa0 RCX: 00007f0ed4adcdd9 [ 246.870163][ T6948] RDX: 0000000000000000 RSI: 00000000c004510e RDI: 0000000000000003 [ 246.870173][ T6948] RBP: 00007f0ed2d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 246.870193][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.870203][ T6948] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 246.870229][ T6948] [ 246.870336][ T6948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.282545][ T6470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.335127][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.866866][ T6960] FAULT_INJECTION: forcing a failure. [ 248.866866][ T6960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.866980][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.2.250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.867015][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.867029][ T6960] Call Trace: [ 248.867038][ T6960] [ 248.867047][ T6960] dump_stack_lvl+0xe8/0x150 [ 248.867081][ T6960] should_fail_ex+0x46b/0x600 [ 248.867110][ T6960] _copy_to_user+0x31/0xb0 [ 248.867142][ T6960] simple_read_from_buffer+0xe1/0x170 [ 248.867172][ T6960] proc_fail_nth_read+0x1be/0x230 [ 248.867199][ T6960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.867228][ T6960] ? rw_verify_area+0x2ac/0x4e0 [ 248.867255][ T6960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.867282][ T6960] vfs_read+0x212/0xa80 [ 248.867323][ T6960] ? __pfx_vfs_read+0x10/0x10 [ 248.867354][ T6960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.867387][ T6960] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.867419][ T6960] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 248.867453][ T6960] ? mutex_lock_nested+0x152/0x1d0 [ 248.867479][ T6960] ? fdget_pos+0x252/0x320 [ 248.867513][ T6960] ksys_read+0x156/0x270 [ 248.867544][ T6960] ? __pfx_ksys_read+0x10/0x10 [ 248.867579][ T6960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.867604][ T6960] do_syscall_64+0x15f/0xf80 [ 248.867636][ T6960] ? trace_irq_disable+0x3b/0x140 [ 248.867671][ T6960] ? clear_bhb_loop+0x40/0x90 [ 248.867698][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.867721][ T6960] RIP: 0033:0x7f0ed4a9d60e [ 248.867741][ T6960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 248.867760][ T6960] RSP: 002b:00007f0ed2d2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.867784][ T6960] RAX: ffffffffffffffda RBX: 00007f0ed2d2e6c0 RCX: 00007f0ed4a9d60e [ 248.867800][ T6960] RDX: 000000000000000f RSI: 00007f0ed2d2e0a0 RDI: 0000000000000004 [ 248.867813][ T6960] RBP: 00007f0ed2d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.867825][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.867838][ T6960] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 248.867879][ T6960] [ 249.297124][ T6965] loop2: detected capacity change from 0 to 512 [ 249.298024][ T6965] EXT4-fs: Ignoring removed bh option [ 249.298050][ T6965] EXT4-fs: inline encryption not supported [ 249.302371][ T6965] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.345600][ T12] hsr_slave_0: left promiscuous mode [ 249.425083][ T12] hsr_slave_1: left promiscuous mode [ 249.426075][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.426095][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.480123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.480154][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.524510][ T6965] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 249.684303][ T6965] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.252: bg 0: block 248: padding at end of block bitmap is not set [ 249.684333][ T6965] loop2: lost filesystem error report for type 5 error -117 [ 249.687223][ T6965] Quota error (device loop2): write_blk: dquota write failed [ 249.687301][ T6965] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 249.687349][ T6965] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.252: Failed to acquire dquot type 1 [ 249.687366][ T6965] loop2: lost filesystem error report for type 5 error -28 [ 249.697702][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 249.697796][ C0] EXT4-fs (loop2): last error at time 1777766257: ext4_acquire_dquot:7034 [ 249.789483][ T12] veth1_macvtap: left promiscuous mode [ 249.789594][ T12] veth0_macvtap: left promiscuous mode [ 249.828342][ T12] veth1_vlan: left promiscuous mode [ 249.828498][ T12] veth0_vlan: left promiscuous mode [ 249.836394][ T6965] EXT4-fs (loop2): 1 truncate cleaned up [ 249.858324][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 250.291286][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 250.376552][ T69] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 250.376610][ T69] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 250.376631][ T69] loop2: lost filesystem error report for type 5 error -117 [ 250.786457][ T6989] loop2: detected capacity change from 0 to 2048 [ 250.870637][ T6989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.134161][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.204176][ T12] team0 (unregistering): Port device team_slave_0 removed [ 251.291717][ T6992] loop2: detected capacity change from 0 to 1024 [ 251.574761][ T6470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.685514][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.761129][ T6470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.812374][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.217149][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.217478][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.217897][ T6667] bridge_slave_0: entered allmulticast mode [ 252.256296][ T6667] bridge_slave_0: entered promiscuous mode [ 252.578719][ T7010] loop0: detected capacity change from 0 to 128 [ 252.615589][ T7012] FAULT_INJECTION: forcing a failure. [ 252.615589][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.615632][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.2.262 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.615658][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.615673][ T7012] Call Trace: [ 252.615682][ T7012] [ 252.615692][ T7012] dump_stack_lvl+0xe8/0x150 [ 252.615728][ T7012] should_fail_ex+0x46b/0x600 [ 252.615758][ T7012] _copy_to_user+0x31/0xb0 [ 252.615790][ T7012] simple_read_from_buffer+0xe1/0x170 [ 252.615821][ T7012] proc_fail_nth_read+0x1be/0x230 [ 252.615851][ T7012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.615879][ T7012] ? rw_verify_area+0x2ac/0x4e0 [ 252.615906][ T7012] ? tun_chr_write_iter+0xe6/0x210 [ 252.615932][ T7012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.615960][ T7012] vfs_read+0x212/0xa80 [ 252.615997][ T7012] ? __pfx_vfs_read+0x10/0x10 [ 252.616039][ T7012] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.616076][ T7012] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.616109][ T7012] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.616142][ T7012] ? mutex_lock_nested+0x152/0x1d0 [ 252.616166][ T7012] ? fdget_pos+0x252/0x320 [ 252.616201][ T7012] ksys_read+0x156/0x270 [ 252.616233][ T7012] ? __pfx_ksys_read+0x10/0x10 [ 252.616272][ T7012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.616297][ T7012] do_syscall_64+0x15f/0xf80 [ 252.616328][ T7012] ? trace_irq_disable+0x3b/0x140 [ 252.616357][ T7012] ? clear_bhb_loop+0x40/0x90 [ 252.616386][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.616409][ T7012] RIP: 0033:0x7f0ed4a9d60e [ 252.616430][ T7012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.616450][ T7012] RSP: 002b:00007f0ed2cebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.616473][ T7012] RAX: ffffffffffffffda RBX: 00007f0ed2cec6c0 RCX: 00007f0ed4a9d60e [ 252.616489][ T7012] RDX: 000000000000000f RSI: 00007f0ed2cec0a0 RDI: 0000000000000005 [ 252.616501][ T7012] RBP: 00007f0ed2cec090 R08: 0000000000000000 R09: 0000000000000000 [ 252.616515][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.616528][ T7012] R13: 00007f0ed4d56218 R14: 00007f0ed4d56180 R15: 00007fff8780c378 [ 252.616563][ T7012] [ 252.836441][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.837339][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.838422][ T6667] bridge_slave_1: entered allmulticast mode [ 253.805628][ T6667] bridge_slave_1: entered promiscuous mode [ 254.291729][ T7021] loop1: detected capacity change from 0 to 2048 [ 254.399144][ T7021] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 254.399181][ T7021] loop1: partition table partially beyond EOD, truncated [ 254.426982][ T7021] loop1: p1 start 385023 is beyond EOD, truncated [ 254.427012][ T7021] loop1: p2 start 4278190080 is beyond EOD, truncated [ 254.500996][ T7021] loop1: p4 start 1979908096 is beyond EOD, truncated [ 254.501026][ T7021] loop1: p5 start 385023 is beyond EOD, truncated [ 254.501045][ T7021] loop1: p6 start 1979908096 is beyond EOD, truncated [ 254.722212][ T6341] udevd[6341]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 254.864170][ T7028] loop1: detected capacity change from 0 to 2048 [ 254.895853][ T7028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.878898][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.095409][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095522][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.276774][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.775064][ T6667] team0: Port device team_slave_0 added [ 256.818030][ T6667] team0: Port device team_slave_1 added [ 257.277758][ T7050] loop0: detected capacity change from 0 to 512 [ 257.304062][ T7050] msdos: Unknown parameter 'nr [ 257.304062][ T7050] ' [ 258.272122][ T7056] loop1: detected capacity change from 0 to 8 [ 258.612099][ T7063] loop0: detected capacity change from 0 to 1024 [ 258.708155][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.708172][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.708195][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.692405][ T7068] netlink: 'syz.1.273': attribute type 30 has an invalid length. [ 259.770792][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.770812][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.770845][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.039576][ T7071] loop2: detected capacity change from 0 to 2048 [ 260.585823][ T6667] hsr_slave_0: entered promiscuous mode [ 260.591825][ T6667] hsr_slave_1: entered promiscuous mode [ 260.628389][ T6667] debugfs: 'hsr0' already exists in 'hsr' [ 260.628419][ T6667] Cannot create hsr debugfs directory [ 261.128946][ T7082] loop1: detected capacity change from 0 to 2048 [ 261.269322][ T7084] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.301148][ T7082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.718173][ T7071] FAULT_INJECTION: forcing a failure. [ 261.718173][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 261.718212][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.2.275 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 261.718238][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.718252][ T7071] Call Trace: [ 261.718261][ T7071] [ 261.718270][ T7071] dump_stack_lvl+0xe8/0x150 [ 261.718306][ T7071] should_fail_ex+0x46b/0x600 [ 261.718337][ T7071] should_failslab+0xa8/0x100 [ 261.718370][ T7071] __kmalloc_noprof+0xdf/0x7b0 [ 261.718398][ T7071] ? kfree+0x4d/0x6c0 [ 261.718420][ T7071] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 261.718458][ T7071] tomoyo_realpath_from_path+0xe3/0x5d0 [ 261.718494][ T7071] ? tomoyo_domain+0xd7/0x130 [ 261.718532][ T7071] ? tomoyo_path_number_perm+0x219/0x630 [ 261.718564][ T7071] tomoyo_path_number_perm+0x246/0x630 [ 261.718595][ T7071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.718621][ T7071] ? __lock_acquire+0x6b5/0x2d10 [ 261.718657][ T7071] ? do_raw_spin_lock+0x12b/0x2f0 [ 261.718719][ T7071] ? __fget_files+0x2a/0x420 [ 261.718748][ T7071] ? __fget_files+0x2a/0x420 [ 261.718771][ T7071] ? __fget_files+0x3a6/0x420 [ 261.718794][ T7071] ? __fget_files+0x2a/0x420 [ 261.718822][ T7071] security_file_ioctl+0xc3/0x2a0 [ 261.718850][ T7071] __se_sys_ioctl+0x47/0x170 [ 261.718880][ T7071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.718905][ T7071] do_syscall_64+0x15f/0xf80 [ 261.718937][ T7071] ? trace_irq_disable+0x3b/0x140 [ 261.718968][ T7071] ? clear_bhb_loop+0x40/0x90 [ 261.718996][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.719018][ T7071] RIP: 0033:0x7f0ed4adcdd9 [ 261.719039][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.719059][ T7071] RSP: 002b:00007f0ed2d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.719092][ T7071] RAX: ffffffffffffffda RBX: 00007f0ed4d55fa0 RCX: 00007f0ed4adcdd9 [ 261.719108][ T7071] RDX: 0000200000000640 RSI: 0000000040786e88 RDI: 0000000000000004 [ 261.719123][ T7071] RBP: 00007f0ed2d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 261.719136][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.719148][ T7071] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 261.719183][ T7071] [ 261.720705][ T7071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.948180][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 262.645333][ T7091] loop0: detected capacity change from 0 to 8 [ 262.802186][ T7091] SQUASHFS error: lzo decompression failed, data probably corrupt [ 262.802225][ T7091] SQUASHFS error: Failed to read block 0x91: -5 [ 262.802244][ T7091] SQUASHFS error: Unable to read metadata cache entry [8f] [ 262.802262][ T7091] SQUASHFS error: Unable to read inode 0x11f [ 263.221220][ T4931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.302161][ T4931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.411727][ T7104] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 263.411786][ T7104] CIFS mount error: No usable UNC path provided in device string! [ 263.411786][ T7104] [ 263.412081][ T7104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 263.651674][ T4931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.689384][ T4931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.710855][ T4931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.517494][ T7110] loop0: detected capacity change from 0 to 2048 [ 264.623740][ T7110] UDF-fs: error (device loop0): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 264.623874][ T7110] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 265.178085][ T4931] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 265.216578][ T4931] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 265.217449][ T4931] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 265.218421][ T4931] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 265.463038][ T5619] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 265.488335][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 265.821261][ T7136] loop1: detected capacity change from 0 to 2048 [ 265.897866][ T7136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.345030][ T5619] Bluetooth: hci5: command tx timeout [ 266.676485][ T7139] loop2: detected capacity change from 0 to 32768 [ 267.541416][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 267.893820][ T7127] veth1_to_bond: entered allmulticast mode [ 268.142256][ T7129] bond0: (slave bond_slave_1): Releasing backup interface [ 268.259035][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 268.416517][ T4931] Bluetooth: hci5: command tx timeout [ 268.511967][ T7161] loop0: detected capacity change from 0 to 512 [ 268.638922][ T7161] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 268.639076][ T7161] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 268.639142][ T7161] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.292: Failed to acquire dquot type 1 [ 268.639173][ T7161] loop0: lost filesystem error report for type 5 error -117 [ 268.647512][ C1] EXT4-fs (loop0): last error at time 1777766276: ext4_acquire_dquot:7034 [ 268.700369][ T7161] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 268.700863][ T7161] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 268.701026][ T7161] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.292: Failed to acquire dquot type 1 [ 268.701205][ T7161] loop0: lost filesystem error report for type 5 error -117 [ 269.062023][ T7161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.292: bg 0: block 248: padding at end of block bitmap is not set [ 269.062071][ T7161] loop0: lost filesystem error report for type 5 error -117 [ 269.124180][ T7161] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 269.124214][ T7161] loop0: lost filesystem error report for type 5 error -117 [ 269.224402][ T7161] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 269.224571][ T7161] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 269.224625][ T7161] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.292: Failed to acquire dquot type 1 [ 269.224655][ T7161] loop0: lost filesystem error report for type 5 error -117 [ 269.289594][ T7161] EXT4-fs (loop0): 1 orphan inode deleted [ 269.291843][ T7161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.291978][ T7161] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.360575][ T7148] loop1: detected capacity change from 0 to 32768 [ 269.541324][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.496639][ T4931] Bluetooth: hci5: command tx timeout [ 270.923883][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 270.923921][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.294'. [ 271.312628][ T4931] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 271.328610][ T4931] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 271.356316][ T4931] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 271.358047][ T4931] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 271.383219][ T4931] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 271.435591][ T4931] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 271.530330][ T7185] loop0: detected capacity change from 0 to 764 [ 271.680817][ T7185] Symlink component flag not implemented [ 271.743757][ T7185] Symlink component flag not implemented (116) [ 272.563736][ T4931] Bluetooth: hci5: command tx timeout [ 272.667317][ T7194] loop0: detected capacity change from 0 to 32768 [ 272.678249][ T7194] btrfs: Unknown parameter 'mask' [ 274.360214][ T7205] loop2: detected capacity change from 0 to 32768 [ 275.049467][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'. [ 275.049505][ T7222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'. [ 275.396245][ T4931] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 275.396509][ T4931] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 275.402689][ T4931] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 275.452209][ T4931] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 275.528735][ T4931] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 277.813501][ T4931] Bluetooth: hci0: command 0x0406 tx timeout [ 277.920202][ T7262] loop0: detected capacity change from 0 to 32768 [ 277.928687][ T7262] btrfs: Deprecated parameter 'usebackuproot' [ 277.928907][ T7262] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 277.965515][ T7262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.313 (7262) [ 278.005904][ T7262] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.005940][ T7262] BTRFS info (device loop0): using crc32c checksum algorithm [ 278.179244][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 278.179351][ T7262] BTRFS warning (device loop0): couldn't read tree root [ 278.179373][ T7262] BTRFS warning (device loop0): try to load backup roots slot 1 [ 278.179783][ T3400] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 278.179921][ T7262] BTRFS warning (device loop0): couldn't read tree root [ 278.179942][ T7262] BTRFS warning (device loop0): try to load backup roots slot 2 [ 278.181523][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 278.181647][ T7262] BTRFS warning (device loop0): couldn't read tree root [ 278.181667][ T7262] BTRFS warning (device loop0): try to load backup roots slot 3 [ 278.359852][ T7262] BTRFS info (device loop0): rebuilding free space tree [ 278.512991][ T6667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.715522][ T6667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.787925][ T7262] BTRFS info (device loop0): checking UUID tree [ 278.788530][ T7262] BTRFS info (device loop0): enabling ssd optimizations [ 278.788557][ T7262] BTRFS info (device loop0): turning off barriers [ 278.788574][ T7262] BTRFS info (device loop0): disabling tree log [ 278.788590][ T7262] BTRFS info (device loop0): turning on flush-on-commit [ 278.788607][ T7262] BTRFS info (device loop0): turning on async discard [ 278.788624][ T7262] BTRFS info (device loop0): enabling free space tree [ 278.788646][ T7262] BTRFS info (device loop0): force clearing of disk cache [ 278.788663][ T7262] BTRFS info (device loop0): trying to use backup root at mount time [ 279.072156][ T7262] FAULT_INJECTION: forcing a failure. [ 279.072156][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 279.072188][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.072208][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.072219][ T7262] Call Trace: [ 279.072226][ T7262] [ 279.072233][ T7262] dump_stack_lvl+0xe8/0x150 [ 279.072261][ T7262] should_fail_ex+0x46b/0x600 [ 279.072286][ T7262] should_failslab+0xa8/0x100 [ 279.072312][ T7262] kmem_cache_alloc_noprof+0x87/0x680 [ 279.072334][ T7262] ? do_getname+0x2e/0x250 [ 279.072364][ T7262] do_getname+0x2e/0x250 [ 279.072387][ T7262] ? __se_sys_mkdirat+0x18/0x150 [ 279.072411][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.072430][ T7262] __se_sys_mkdirat+0x24/0x150 [ 279.072453][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.072476][ T7262] do_syscall_64+0x15f/0xf80 [ 279.072501][ T7262] ? trace_irq_disable+0x3b/0x140 [ 279.072534][ T7262] ? clear_bhb_loop+0x40/0x90 [ 279.072555][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.072572][ T7262] RIP: 0033:0x7f16c60fbc47 [ 279.072589][ T7262] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.072604][ T7262] RSP: 002b:00007f16c4355e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 279.072623][ T7262] RAX: ffffffffffffffda RBX: 00007f16c4355ee0 RCX: 00007f16c60fbc47 [ 279.072636][ T7262] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 279.072647][ T7262] RBP: 0000200000000f40 R08: 0000200000000180 R09: 0000000000000000 [ 279.072659][ T7262] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 279.072670][ T7262] R13: 00007f16c4355ea0 R14: 0000000000000000 R15: 0000200000000280 [ 279.072695][ T7262] [ 280.138427][ T6667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.273392][ T6667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.565654][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 280.565688][ T7293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 281.811700][ T4931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.886741][ T4931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.901145][ T4931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.928858][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.963688][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.068327][ T7297] loop1: detected capacity change from 0 to 4096 [ 282.577323][ T7284] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.645855][ T152] bridge_slave_1: left allmulticast mode [ 282.645892][ T152] bridge_slave_1: left promiscuous mode [ 282.646209][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.830272][ T7284] syz.0.313 (7284) used greatest stack depth: 16416 bytes left [ 282.954167][ T152] bridge_slave_0: left allmulticast mode [ 282.954200][ T152] bridge_slave_0: left promiscuous mode [ 282.954446][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.733597][ T7315] loop1: detected capacity change from 0 to 4096 [ 284.176948][ T5619] Bluetooth: hci3: command tx timeout [ 284.414475][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.604385][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.715770][ T152] bond0 (unregistering): Released all slaves [ 286.243415][ T5619] Bluetooth: hci3: command tx timeout [ 287.161393][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.211563][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.239045][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.277326][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.278417][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.554146][ T7333] loop2: detected capacity change from 0 to 131072 [ 287.662296][ T7333] F2FS-fs (loop2): invalid crc value [ 288.327428][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.327919][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.328282][ T7093] bridge_slave_0: entered allmulticast mode [ 288.360420][ T7093] bridge_slave_0: entered promiscuous mode [ 288.375942][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.377866][ T5619] Bluetooth: hci3: command tx timeout [ 288.378461][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.380272][ T7093] bridge_slave_1: entered allmulticast mode [ 288.443142][ T7093] bridge_slave_1: entered promiscuous mode [ 288.722375][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.834923][ T7354] loop2: detected capacity change from 0 to 64 [ 288.972993][ T7351] loop1: detected capacity change from 0 to 40427 [ 289.000687][ T7351] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 289.000715][ T7351] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.011274][ T7351] F2FS-fs (loop1): invalid crc value [ 289.161851][ T7351] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 289.240948][ T7351] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.241334][ T7351] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.275068][ T152] hsr_slave_0: left promiscuous mode [ 289.577716][ T5619] Bluetooth: hci0: command tx timeout [ 289.625456][ T152] hsr_slave_1: left promiscuous mode [ 289.626205][ T7354] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 289.626950][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.629083][ T7354] FAULT_INJECTION: forcing a failure. [ 289.629083][ T7354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.629119][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.2.328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.629143][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.629158][ T7354] Call Trace: [ 289.629166][ T7354] [ 289.629175][ T7354] dump_stack_lvl+0xe8/0x150 [ 289.629209][ T7354] should_fail_ex+0x46b/0x600 [ 289.629239][ T7354] prepare_alloc_pages+0x22a/0x6b0 [ 289.629279][ T7354] __alloc_frozen_pages_noprof+0x12f/0x380 [ 289.629315][ T7354] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 289.629363][ T7354] ? __pfx_policy_nodemask+0x10/0x10 [ 289.629404][ T7354] alloc_pages_mpol+0xd1/0x380 [ 289.629439][ T7354] alloc_pages_noprof+0xd2/0x2f0 [ 289.629473][ T7354] folio_alloc_noprof+0x22/0xc0 [ 289.629506][ T7354] filemap_alloc_folio_noprof+0x111/0x4d0 [ 289.629545][ T7354] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 289.629575][ T7354] ? __filemap_get_folio_mpol+0x803/0xa50 [ 289.629614][ T7354] do_read_cache_folio+0x1c5/0x560 [ 289.629649][ T7354] ? __pfx_minix_read_folio+0x10/0x10 [ 289.629681][ T7354] minix_readdir+0x1f3/0x760 [ 289.629707][ T7354] ? down_read_killable+0x14c/0x220 [ 289.629749][ T7354] iterate_dir+0x3a5/0x580 [ 289.629788][ T7354] __se_sys_getdents64+0xf1/0x280 [ 289.629825][ T7354] ? __pfx___se_sys_getdents64+0x10/0x10 [ 289.629856][ T7354] ? ksys_write+0x248/0x270 [ 289.629883][ T7354] ? __pfx_filldir64+0x10/0x10 [ 289.629919][ T7354] ? __pfx_ksys_write+0x10/0x10 [ 289.629956][ T7354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.629981][ T7354] do_syscall_64+0x15f/0xf80 [ 289.630013][ T7354] ? trace_irq_disable+0x3b/0x140 [ 289.630044][ T7354] ? clear_bhb_loop+0x40/0x90 [ 289.630072][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.630095][ T7354] RIP: 0033:0x7f0ed4adcdd9 [ 289.630117][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.630137][ T7354] RSP: 002b:00007f0ed2d2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 289.630161][ T7354] RAX: ffffffffffffffda RBX: 00007f0ed4d55fa0 RCX: 00007f0ed4adcdd9 [ 289.630175][ T7354] RDX: 0000000000000083 RSI: 0000200000000200 RDI: 0000000000000004 [ 289.630189][ T7354] RBP: 00007f0ed2d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.630202][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.630214][ T7354] R13: 00007f0ed4d56038 R14: 00007f0ed4d55fa0 R15: 00007fff8780c378 [ 289.630247][ T7354] [ 290.546292][ T38] audit: type=1800 audit(1777766297.765:4): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.327" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 290.563587][ T5619] Bluetooth: hci3: command tx timeout [ 290.622170][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.609443][ T5619] Bluetooth: hci0: command tx timeout [ 292.211238][ T152] team0 (unregistering): Port device team_slave_1 removed [ 292.278856][ T1515] kworker/u8:15: attempt to access beyond end of device [ 292.278856][ T1515] loop1: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 292.299970][ T152] team0 (unregistering): Port device team_slave_0 removed [ 292.471713][ T1515] kworker/u8:15: attempt to access beyond end of device [ 292.471713][ T1515] loop1: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 292.501066][ T1515] kworker/u8:15: attempt to access beyond end of device [ 292.501066][ T1515] loop1: rw=1, sector=51200, nr_sectors = 904 limit=40427 [ 292.703543][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.828139][ T7369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 292.927267][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 293.108695][ T7388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.400371][ T7093] team0: Port device team_slave_0 added [ 293.469165][ T7093] team0: Port device team_slave_1 added [ 293.651602][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.651620][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.651644][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.683836][ T5619] Bluetooth: hci0: command tx timeout [ 293.761291][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.761318][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.761349][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.730175][ T7093] hsr_slave_0: entered promiscuous mode [ 295.740322][ T7093] hsr_slave_1: entered promiscuous mode [ 295.761149][ T7093] debugfs: 'hsr0' already exists in 'hsr' [ 295.761180][ T7093] Cannot create hsr debugfs directory [ 295.765113][ T5619] Bluetooth: hci0: command tx timeout [ 297.802187][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 297.892054][ T7432] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 298.308285][ T7432] loop2: detected capacity change from 0 to 32768 [ 299.027686][ T7432] JBD2: Ignoring recovery information on journal [ 299.275070][ T7432] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 300.161151][ T38] audit: type=1800 audit(1777766308.065:5): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.338" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 300.716824][ T5616] ocfs2: Unmounting device (7,2) on (node local) [ 301.405863][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 301.620484][ T10] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 301.620515][ T10] usb 3-1: config 0 has no interface number 0 [ 301.620568][ T10] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 301.620591][ T10] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 301.620617][ T10] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 301.620642][ T10] usb 3-1: config 0 interface 238 has no altsetting 0 [ 301.667912][ T10] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 301.667946][ T10] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 301.667969][ T10] usb 3-1: Product: syz [ 301.667984][ T10] usb 3-1: Manufacturer: syz [ 301.667999][ T10] usb 3-1: SerialNumber: syz [ 301.752440][ T10] usb 3-1: config 0 descriptor?? [ 301.861972][ T10] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 301.982955][ T5749] usb 3-1: USB disconnect, device number 8 [ 302.828469][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.828800][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.829229][ T7335] bridge_slave_0: entered allmulticast mode [ 302.869733][ T7335] bridge_slave_0: entered promiscuous mode [ 303.540944][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.541272][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.541519][ T7335] bridge_slave_1: entered allmulticast mode [ 303.567553][ T7335] bridge_slave_1: entered promiscuous mode [ 305.291265][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.291602][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.298953][ T7299] bridge_slave_0: entered allmulticast mode [ 305.322992][ T7299] bridge_slave_0: entered promiscuous mode [ 305.541661][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.608155][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.608396][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.608672][ T7299] bridge_slave_1: entered allmulticast mode [ 305.650500][ T7299] bridge_slave_1: entered promiscuous mode [ 305.766214][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.311486][ T7495] loop2: detected capacity change from 0 to 256 [ 306.392666][ T7495] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 306.497033][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.626870][ T7335] team0: Port device team_slave_0 added [ 306.694702][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.879426][ T7335] team0: Port device team_slave_1 added [ 306.880510][ T7500] netlink: 88 bytes leftover after parsing attributes in process `syz.1.349'. [ 307.153437][ T7504] loop1: detected capacity change from 0 to 256 [ 307.238011][ T7504] FAT-fs (loop1): Directory bread(block 64) failed [ 307.238051][ T7504] FAT-fs (loop1): Directory bread(block 65) failed [ 307.238158][ T7504] FAT-fs (loop1): Directory bread(block 66) failed [ 307.238186][ T7504] FAT-fs (loop1): Directory bread(block 67) failed [ 307.238310][ T7504] FAT-fs (loop1): Directory bread(block 68) failed [ 307.238335][ T7504] FAT-fs (loop1): Directory bread(block 69) failed [ 307.238439][ T7504] FAT-fs (loop1): Directory bread(block 70) failed [ 307.238464][ T7504] FAT-fs (loop1): Directory bread(block 71) failed [ 307.238572][ T7504] FAT-fs (loop1): Directory bread(block 72) failed [ 307.238598][ T7504] FAT-fs (loop1): Directory bread(block 73) failed [ 307.469771][ T7504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 307.532611][ T152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.012404][ T7509] loop2: detected capacity change from 0 to 2048 [ 308.100349][ T7509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.255624][ T7510] FAULT_INJECTION: forcing a failure. [ 308.255624][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 308.255725][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.2.351 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.255753][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.255780][ T7510] Call Trace: [ 308.255793][ T7510] [ 308.255803][ T7510] dump_stack_lvl+0xe8/0x150 [ 308.255840][ T7510] should_fail_ex+0x46b/0x600 [ 308.255870][ T7510] should_failslab+0xa8/0x100 [ 308.255902][ T7510] kmem_cache_alloc_noprof+0x87/0x680 [ 308.255930][ T7510] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.255974][ T7510] ? do_getname+0x2e/0x250 [ 308.256015][ T7510] do_getname+0x2e/0x250 [ 308.256049][ T7510] ? getname_flags+0x11/0x20 [ 308.256086][ T7510] do_sys_openat2+0xca/0x200 [ 308.256113][ T7510] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.256138][ T7510] ? ksys_write+0x248/0x270 [ 308.256170][ T7510] ? rcu_is_watching+0x15/0xb0 [ 308.256197][ T7510] __x64_sys_openat+0x138/0x170 [ 308.256225][ T7510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.256249][ T7510] do_syscall_64+0x15f/0xf80 [ 308.256282][ T7510] ? clear_bhb_loop+0x40/0x90 [ 308.256309][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.256332][ T7510] RIP: 0033:0x7f0ed4adcdd9 [ 308.256354][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.256374][ T7510] RSP: 002b:00007f0ed2d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.256399][ T7510] RAX: ffffffffffffffda RBX: 00007f0ed4d56090 RCX: 00007f0ed4adcdd9 [ 308.256417][ T7510] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 308.256433][ T7510] RBP: 00007f0ed2d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.256448][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.256462][ T7510] R13: 00007f0ed4d56128 R14: 00007f0ed4d56090 R15: 00007fff8780c378 [ 308.256495][ T7510] [ 309.215642][ T7299] team0: Port device team_slave_0 added [ 309.218151][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.218169][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.218200][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.023657][ T152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.316130][ T7530] loop1: detected capacity change from 0 to 32768 [ 311.331305][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 311.471213][ T7530] BUG at fs/jfs/jfs_dmap.c:3070 assert(n < 4) [ 311.471796][ T7530] ------------[ cut here ]------------ [ 311.471807][ T7530] kernel BUG at fs/jfs/jfs_dmap.c:3070! [ 311.471859][ T7530] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 311.471883][ T7530] CPU: 1 UID: 0 PID: 7530 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 311.471902][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.471915][ T7530] RIP: 0010:dbFindLeaf+0x51d/0x520 [ 311.471942][ T7530] Code: e9 4c ff ff ff e8 d3 92 6c fe 48 c7 c7 a0 61 8b 8b 48 c7 c6 e0 5e 8b 8b ba fe 0b 00 00 48 c7 c1 c0 6c 8b 8b e8 74 56 cf fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 [ 311.471957][ T7530] RSP: 0018:ffffc90003ca7aa8 EFLAGS: 00010246 [ 311.471971][ T7530] RAX: 000000000000002b RBX: 0000000000000000 RCX: 363ddf8d5ebb4e00 [ 311.471983][ T7530] RDX: ffffc90007663000 RSI: 0000000000001809 RDI: 000000000000180a [ 311.471993][ T7530] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 311.472003][ T7530] R10: dffffc0000000000 R11: fffff52000794f05 R12: 000000000000000a [ 311.472014][ T7530] R13: 0000000000000008 R14: 0000000000000005 R15: 0000000000000155 [ 311.472024][ T7530] FS: 00007fe8e86266c0(0000) GS:ffff88812602a000(0000) knlGS:0000000000000000 [ 311.472090][ T7530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.472112][ T7530] CR2: 000000110c2ee346 CR3: 00000000563ca000 CR4: 00000000003526f0 [ 311.472127][ T7530] Call Trace: [ 311.472134][ T7530] [ 311.472143][ T7530] dbAllocDmapLev+0x60/0x3c0 [ 311.472166][ T7530] dbAllocCtl+0x14a/0x9c0 [ 311.472190][ T7530] dbAllocAG+0xba1/0xf80 [ 311.472214][ T7530] dbDiscardAG+0x2da/0x8f0 [ 311.472237][ T7530] jfs_ioc_trim+0x429/0x690 [ 311.472264][ T7530] jfs_ioctl+0x291/0x3b0 [ 311.472283][ T7530] ? __fget_files+0x2a/0x420 [ 311.472300][ T7530] ? __pfx_jfs_ioctl+0x10/0x10 [ 311.472318][ T7530] ? __fget_files+0x2a/0x420 [ 311.472333][ T7530] ? __fget_files+0x2a/0x420 [ 311.472350][ T7530] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.472376][ T7530] ? __pfx_jfs_ioctl+0x10/0x10 [ 311.472394][ T7530] __se_sys_ioctl+0xff/0x170 [ 311.472415][ T7530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.472438][ T7530] do_syscall_64+0x15f/0xf80 [ 311.472466][ T7530] ? trace_irq_disable+0x3b/0x140 [ 311.472487][ T7530] ? clear_bhb_loop+0x40/0x90 [ 311.472505][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.472521][ T7530] RIP: 0033:0x7fe8ea3ccdd9 [ 311.472535][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.472549][ T7530] RSP: 002b:00007fe8e8626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.472564][ T7530] RAX: ffffffffffffffda RBX: 00007fe8ea645fa0 RCX: 00007fe8ea3ccdd9 [ 311.472576][ T7530] RDX: 0000200000000140 RSI: 00000000c0185879 RDI: 0000000000000005 [ 311.472586][ T7530] RBP: 00007fe8ea462d69 R08: 0000000000000000 R09: 0000000000000000 [ 311.472596][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.472605][ T7530] R13: 00007fe8ea646038 R14: 00007fe8ea645fa0 R15: 00007ffecb616468 [ 311.472623][ T7530] [ 311.472634][ T7530] Modules linked in: [ 311.472674][ T7530] ---[ end trace 0000000000000000 ]--- [ 311.472689][ T7530] RIP: 0010:dbFindLeaf+0x51d/0x520 [ 311.472713][ T7530] Code: e9 4c ff ff ff e8 d3 92 6c fe 48 c7 c7 a0 61 8b 8b 48 c7 c6 e0 5e 8b 8b ba fe 0b 00 00 48 c7 c1 c0 6c 8b 8b e8 74 56 cf fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 [ 311.472727][ T7530] RSP: 0018:ffffc90003ca7aa8 EFLAGS: 00010246 [ 311.472740][ T7530] RAX: 000000000000002b RBX: 0000000000000000 RCX: 363ddf8d5ebb4e00 [ 311.472750][ T7530] RDX: ffffc90007663000 RSI: 0000000000001809 RDI: 000000000000180a [ 311.472761][ T7530] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 311.472771][ T7530] R10: dffffc0000000000 R11: fffff52000794f05 R12: 000000000000000a [ 311.472782][ T7530] R13: 0000000000000008 R14: 0000000000000005 R15: 0000000000000155 [ 311.472791][ T7530] FS: 00007fe8e86266c0(0000) GS:ffff88812602a000(0000) knlGS:0000000000000000 [ 311.472806][ T7530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.472817][ T7530] CR2: 000000110c2ee346 CR3: 00000000563ca000 CR4: 00000000003526f0 [ 311.472834][ T7530] Kernel panic - not syncing: Fatal exception [ 311.473464][ T7530] Kernel Offset: disabled