last executing test programs: 11.648161067s ago: executing program 2 (id=376): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="143cede28499", @ANYRES64=r1], 0xb2) 10.915776225s ago: executing program 0 (id=380): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2482000000000000100012800400010076746900040002807619997bd66f33c232e7b870d62cc2b51d5fe9fa81ae8abc1832d24261a6e2bb6be2f8560b0cc163d6c05d7cc36788222bf1521c"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000d00)={{}, 0x0, 0xc, @unused=[0x3, 0x1, 0x8, 0x3ff], @devid=r1}) r2 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x40, 0x23, 0x7, {0x7, 0x8, "c60f8a95f1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.626239822s ago: executing program 3 (id=381): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) 9.513785669s ago: executing program 2 (id=385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.04407113s ago: executing program 1 (id=387): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @msi={0x8020000, 0x9, 0x1009250, 0x5}}]}) r2 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 8.934703203s ago: executing program 2 (id=388): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000840)=""/167, 0xa7}, {0x0}], 0x2) close(r1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 8.885914504s ago: executing program 1 (id=389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x5e}, {0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x24000040, 0x0, 0x0) 8.739467978s ago: executing program 1 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}}, 0x1c}}, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x200108a4}, 0x40000) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(r3, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x50680, 0xd0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) pipe2$watch_queue(&(0x7f0000000140), 0x80) 8.22551385s ago: executing program 2 (id=391): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) 7.989692076s ago: executing program 0 (id=392): syz_mount_image$fuse(0x0, 0x0, 0x100688d, 0x0, 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=") syz_open_procfs(r1, &(0x7f0000000040)='numa_maps\x00') 7.368043161s ago: executing program 4 (id=393): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 6.939295552s ago: executing program 3 (id=394): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x101080, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000280)='highspeed\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) 5.638707353s ago: executing program 0 (id=395): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000200)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@acl}, {@compress_force}, {@nossd}, {@barrier}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x67, 0x37, 0x74, 0x65, 0x36, 0x38]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x4000, 0x1000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 5.559299215s ago: executing program 1 (id=396): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.534666786s ago: executing program 3 (id=397): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) syz_io_uring_setup(0x2129, &(0x7f0000000140)={0x0, 0x4848, 0x10806, 0x1}, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f0000000100)) 4.852110792s ago: executing program 4 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a080000bbbbbbbbbbbb0180c200000088a804008100400086dd"], 0xa6) 4.53537265s ago: executing program 3 (id=399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 4.448625052s ago: executing program 4 (id=400): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 4.339094475s ago: executing program 2 (id=401): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.223158887s ago: executing program 4 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000880)=@vmx={0x8, 0x0, 0x2080, {0x5000, 0xd000, {0x4ba81ab5cc67adff}, 0x0, 0x8000000000000001}, {"f315a0edea910d2dbcb7f56c612fdafc799d4c7ecd6ee96bca20c6184a7b194e3fc3c538972a9408d4c9a33682bf8be7d1a5659f121df2067e2217576154f497612c3e118bfe29ba69176d38a90a300c98e155cd230643b6145f9add3803d57d77fefd5bf41be2971e73c1e85641fd8e83153db9baeae7c6de89f045b6468b83e42849610d14979153b5b7bea9ef7babf28d07e13269a1960ac4f9c8f7de228f241e29346351601d6fd225491e85b661301e850c83f0e8e70a3b2e80f6222ca211dd30c0a6dab605ef4a9da789b154e581b23d9b5209b39045ba74356297cb9e76d91f7bcb29fe3ee5a303ac393603924d75f49eadcc6677dcfd1f515ea01a2fa0ace3a96ec2e846552e420a0990d45c88d287c3b463baa1bfd1a9d6e2c18307e7c4cf55b05298414abaf9004b301d9ce7dc093e4f3689d11504493f5b5736767f612828eaae6420ac8681b0302cfcf4177851d14fc9c0335d3410cc58d59743e5980a4994cdbeb61afe64c30f20060a6915fd5a08be3286a3c56763f6685a64aed805126966a31220dc5c33043cd1f3c9505ae9b071b6c624c67d823eff41ab2826c9cb7a132a049bb7a5cc6c8168e6a13b80c9917c1b9c794d8ca89e238d7e55bdac0b275df523d591e5cfc6618656af16cef31703f810a6ce158d07a6b38816d1963b3f57e03cf41f774cd5657c1ab6901c51b5b019b3a38b4f1eee44f5c36854755a892ce3341f2c9b75fa1d1ac49973b3181b33957658de20e22be04de44a01920c7d997cd65445ba7ac1b524b70e19d36ba40194f6900f25f9de4b853ee9a6f12f45bf5483cc95cea9549f63bb7b35a7b8665daa1237459aec1ad79cf00ab8663c635df77cea53a072fc33d111e03117d8b87d3988d6e017af3f296e45cd2f4d95849cc6065047fbea2282502c0a137818305b6d21353833be88f8d333200762e5e7d92c20dd91fe268d6f0cda8d7df4ecd2beca3e643595decf41ffdfe49f9674e573143a0f3a35e2ea9cb11194927666f60f23d3adc6d69c1651e56b7ff977dc07af944cc55e8dbe7d8351a6151db2c8a5e0eeeb00ede86e2bf8f4a138e0c47fa215cd8885c8d56da4a4a526e2ed60f84a7114ee704ead919726bf2ba2ca3359f3d23884c0f586aa9480c6cf97879de4163129c290c87b1c128c539b912e949e95a2407a9a93bb5f30e1ddd2b4de449ffcab373081ebe62c4a6ecf03675fde167b4fa40041794fa47def3425c2917c1aa01dfeb64d94298334803ab9d5af86c72b51be8343d0e162df5dc55622d76e9dcb0e6ddc0b9a87564259f9cf8e333c62c6957c19a7b7e864eb85edebac72d9b1afa80d8954ee5e57fc25b2f17397c788ba9075e43cc9f9a5fed64c68f4e2f99e3317fab8ff779e2c4b450160e999a5e0cc992244b00af9dad8e745afbbd9e2284ebe75b81242e1cbbdbe2f7accdee92ddccfe58aa2a6ba55ef93de96dcb8a955fcbeb147d6127174903223fbe48ef988563f95e97f551d73f31e7d6f4271bd4b5cebe3df53d5838d504708dda02dc3dc3cf76e1ee2081551818ea60a2bad7f494fae55e306e9b2aaa326a446272938ceccdfe0565d1c61e049653369771a78fa4911c5fdde615c7b85cbd37f26559efab31df452fb070eeb38593748d2a81b2ac9c0474f9369cabfad649baffc1406b35c20913a71d944dbf6a514740435eba3c071a7b35e42a4023c8875f8a312ae3c0ea624f8dcf5615a8acd3793228a708006f3194cc5537838ce6c1c199842777e3bfa1e4afffb61c1ae9c710c7361b1d63c39ba587ce4c982d3ac1b66b71ebfca017ade534a10696e3ac999bcf8c1cbbbeca60e49c037848a97ee73c235732d8ec910f8c1820cf55b104143b88e5bf4f0977a1343af56f233c5d889fc68ba4dc5faf037a83de0940010a2ee1dfa53f669bc2ae26e0ccb764149762fdfeaf02c225f1c37dbacdc56574e494d873487228240e0cd50a50aaef9060990d633ab746ccc829586f3650bf0fb4b9a6b06c439b52bdddf841b762421788cf4c8776647b0cc093be1e34ec9fba18b374f8d40b3025e9351132657068e4ac6a97cd4e34c67f26472e92daee622f170ad388a1f2d4e5a0c5c728c067895dac4870c42a8529bd1c4775c1ca6b5579593c23ef106e0438ca8d629e48652a31aa76b003fb0c4786bb853620f6548b408c097c7d890cf6e720e043241a8676594edbb0c54bf49854c618b4a13b9dc8261e35768a42e1261a6c3c8f838203841a012a12c51333bc189b9bec34ea930ca1b0b8844d54be29c836fa94aeb1eab52bf3f1cbafce481d238a2b58514c62066d4270c0c98944629e011630eee1d50e789724431152e0f78c1d5c94da6c27ea1178378d347f1f6d057b061e95c77f25c3803283b98caa075ac99fcc18d30c7a6af1f962076f6b0965e22ed42cb95f86c2246d15e79c60e80e23eeaae3087374ff37e2f20974ddd9578b861504a89296bedc5f0d48d2919e16b4e5f587a9bf1b1ee120d59b55ed31b5b19140ac6e76663bc3143bf53f7b93c631ee24703286248492e1c70362b5484ea136bb2a5b467843c7db93ada86ccde149707e128a203f133cb80dd97c43f4f7965ad509e8bf2abef7dfdefaa1bac4d5bc40ec8f39ae1e6dd121e158e030a77fb44123ba7172c047637713f639416e31661c3f35a548de61c59fb147bc79f6d7947ec75bd9851b85548ea417fc5230f39d9d2e51ae4796129cc2ad38c0a1ea7f2d41979a398f6447aa07fe18d95b6f0c18f589fc9f07703ff2621238e8f335da08f08088c0371101cdffe8110a2190fb396fe991e22ed47b66fcd05e69b484e60b08f8fb9df813e59845462cb0bb9aa180e3e55b6567a24b78730f698c6de45bf4ad37acf9ebc6a3ee3db84bffd0ea02596faf7598fe308eef481d1ff06fa18d0b431089f09b7ad0ef3abf054829246e85cfc98608bd659f5e9b6435a07d526ea710993e7a138ddb6bad8c386ea5f1114f0c2caf754e3883fb2bceef68a5f38f531eef34f453efb8e49125dc6527c752f4ea621a0efcb34c50efe4acf320289f21b94049bc2ba21d3d76650d4c54cecce0491ff2f9a1bb29bacb08f6f9126c9d302d10b0652251973cbf97c07c8cba861b1986722d462124f02e5552c6f313a606ada44bd754237431be11d070f616cff56151ccfad6a463828eb961557ccf92017a4edb76e0976bafba1e233f6140a242afd3552388099c2d1579c53c2db115a7af79acca8b3b328e0c2c9c0393c8adfbb0c60aa97446c89d504517b70946dc312d8c68d52fc054ebf53fa970e87dc57bb636290d759ab2b3e14423e31180afe4aad472289f7c41fe5bd436c74e840744aca842fd95227f0c3148d215905bb2a28fb88b25eb7a0b982710fe6afc7c257d879f11cb18e872aaaba48881ad667899b004bd6087408b27e49d8d09c111720fafcbda79eb4eded54b4fd141415c5517c55308b21450a2f999c5bab1cde818ee1cbc5a5e739022c91e18780113fc6ec73ed407e4fd8d949c14148ea4353489b235d35994a5b5e913e305de4a77ddbb3ebcbd2b52065bf8e22696a5c386605d2f3fdbfd130d03343e5ce2eec529d07df3ea4a1cd497cfb3a42b2e5310ab39ca1b319c08a43acb2da4a035158f496dd1ae7c398641ca8614b885614f4947f4703c1abf7e87a9ab2751cc53996e05de88de64b1d411215b23080a0e04df7db30193c9f639e9daeaf4b50dc560a4bbaa88b48c49922ec43900acb48d48b2ff92a52242054189566a5943a547016e1c8987788e118fbd45e9d7bd69b0eca1b61bec3853360d7ad6269f168c2a3e0a5c2fb892a8ee35edf7c6aa8c5173be774252ab614464d846ea984bcec8892e50a55d4b37cd51a0ae3e3c74b3eefa7d9fd876f1593958e304a839de7480b117bedcc46643028f9f7536b2f35f78f042331934bdf45eafb6dd0d2016c3fb1d9fb83023a08a4fe0311f64a43fe3c61d5f6b8fafeb877a5c675305bccfe2097df55634413077bf7d635cc7befcebc680b61ba6095332f049346ce62e089371e6b6bc08ea05fa8ae6266f2f154ae17fef82fabeb81128a1b9e55c2abd884881cf4a2290836aa10d76b0c5150d78f0e199d8f47d5996397a86f306758cd650e1cc3441f9cbd3d2bebada7149bb565e835ec7f9dbd1f54daeb72f0557f8adb8f18d93fe2265f0870cd56eacf71824fafac2e18c9e6374653aebdbdb1066c2ebc533994ed2f4f52b29cf8ab3b0e63072dfb6f42adccacac2c6df1cb996b0e71068777c2b064100a15de6c96a452361c3121dcad8c04ec4060edcf98ab415883eaf4a31939f7e5c83575761cb3da029b089a5cf6da05901cd369a4eb4bf976d4dfc4e2e6357fe772a5b724164d0aa58e40698122a8abe03765b09121912b0c2efe1a4cb2df951381ff01b9b3ab8ef103f3a17ba4d2c661945c677f93362534397c45eb4bcdb2cac0b62be9e7d1bde51a376d4eff55c5a9e9c4d161afb8042b21926072912525ef8127300c8bd9c9a455bc231158c466a07ee822d32841c711d12a22cbccdc854a06a0f72c840508b00b7c7066d01b133f9ca8d46bf3987ebdd22b06b779d271717f0aedd1a9014210387690de688e1881747207b58e12e1a39e5c9e11500a4643358d4569c52a36e7e50d145193236e27953e76b619f90e449fded5028270888e17ce444cae1416ea1e9b25dc173e63adf90e82f9e4c63896ee239b80664baeb80cf1ed7488cf1345b4c3879ddf6da5947a0733e86f9aebf2ed9951e46eefef0f11605ea7e58dc06003bd033d7e462a75586cfa6f8986acfa30b4cd9dfea60dce05935f7976dd7924709b523ba446cc6b42657da11a439ebc06b116c2b14369cd25e19b062e2aa7d2e7899dc22cf1bb591e85ba76dbeeb952db74288fd1e764c6492d4b88c619967528d0235276b85e98d5223e4cee30de8c382770128fd952be507313e0bd446f0ecbebc895fe4f6cd509287a1e3902cea71f553ad4fd054b55ad5f20aec929c7468bd3481daf0e2a9a1e20ff36be45b51277fde65434b9837798639460858b7b5df34b0dedcb68a8cee2c58c01fdb48144a671d4baca478db56096072e34f32a3fc4e993dd2e33f85be57ae3b90df4de854b3b3b4a4e437eafa95973ca8cc1d007230f76ff7173dc3070ff2ff75326e6444bf8601c76752bf2abcde2172263884703cb11c37803372aa16f374bc46f534e04347d3971232d3e11fa8a93ef24e82cfc6f33396b5d24a132d572bc985a37d5d001d650a1c2053c58203e6e2269dfbc467defcc629749f822b0acdfbeec4dcff26ebc6e1f29821e4f010b261eac16f8c3a5756f6855833b8221d4c298c16f91a02c5d59bb243feefc3a3406f702a623644366939864a6ca3ecf3348f0913b9970ad9f15fa3559303a154c843cc6f5c08ee763b77047f91f1f6cce87f904484d88f90387c03cda28d9cf9736023fc5babb364f3d49e2c90128674b95411696c89c62fbe3e874772de92be3a8e444dbc3925f8dcf6ebc6b13ed200f8dc49a056fe6f811f86ffa01f3ffb44bdd0b6a1004e070d5785bd92325012dc7c7de5afa776b9f4b780e26bc431b8fe3c01ad7b408128bd25ca716b7a74545e2f92edb17d6c64e53a2285a6c3501917d574959ba3b92d43f5596cc385da85390c8f4cf631071131aee736f654e8c822a22bc3810be6b44aa60b4eb94c484cca3256abd681caada6827b3d122a81c1d2803ed3f93571b3eee8a4b767d5e73b7b10ff4b05581978cd3377afd2aeff78a57f9618606636993ff15", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.221796887s ago: executing program 0 (id=403): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f0000000380)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) 4.035911392s ago: executing program 3 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}}, 0x1c}}, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x114, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x100, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x200108a4}, 0x40000) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(r3, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x50680, 0xd0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) pipe2$watch_queue(&(0x7f0000000140), 0x80) 3.181544873s ago: executing program 4 (id=405): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x17c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/124, 0x20}], 0x3f) 2.990775278s ago: executing program 4 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}}, 0x1c}}, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x200108a4}, 0x40000) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(r3, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x50680, 0xd0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) pipe2$watch_queue(&(0x7f0000000140), 0x80) 1.552016352s ago: executing program 1 (id=407): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x101080, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000280)='highspeed\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) 979.551557ms ago: executing program 2 (id=408): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r1, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) capset(&(0x7f0000000080)={0x20080522}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 107.396637ms ago: executing program 3 (id=409): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x2, 0x4, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 51.471819ms ago: executing program 0 (id=410): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0x1a, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 20.44736ms ago: executing program 0 (id=411): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000940)=""/196, 0xc4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000840)={0x1, {&(0x7f0000000440)=""/182, 0xb6, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000640)=""/171, 0xfffffe7a, 0x0, 0x3, 0x3}}, 0x48) 0s ago: executing program 1 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): d crc value [ 77.834695][ T4453] loop0: detected capacity change from 0 to 1024 [ 77.931325][ T4420] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.029163][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 78.059690][ T4453] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.063900][ T4420] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.118920][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,grpjquota=,grpid,quota,. Quota mode: writeback. [ 78.130175][ T4420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 78.142031][ T26] audit: type=1800 audit(1787594041.430:3): pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 78.191311][ T4446] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.256666][ T4446] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.49: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 78.338902][ T4420] attempt to access beyond end of device [ 78.338902][ T4420] loop2: rw=2051, want=45064, limit=40427 [ 78.374943][ T4446] EXT4-fs (loop4): Remounting filesystem read-only [ 78.384611][ T4446] EXT4-fs error (device loop4): ext4_evict_inode:295: comm syz.4.49: couldn't truncate inode 15 (err -117) [ 78.413883][ T4420] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 78.430680][ T4446] EXT4-fs (loop4): Remounting filesystem read-only [ 78.527292][ T4191] attempt to access beyond end of device [ 78.527292][ T4191] loop2: rw=2051, want=65536, limit=40427 [ 78.544700][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.555550][ T4191] F2FS-fs (loop2): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 78.639864][ T4479] loop0: detected capacity change from 0 to 2048 [ 78.751569][ T4479] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 78.797201][ T4479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.845564][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 78.976213][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.984059][ T4226] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 79.004258][ T4226] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 79.024489][ T4226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 79.050663][ T4226] usb 2-1: config 1 has no interface number 0 [ 79.056913][ T4226] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.084242][ T4226] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 79.097730][ T4226] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 79.107612][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.173479][ T4226] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 79.248607][ T4486] loop3: detected capacity change from 0 to 32768 [ 79.311649][ T4259] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.384125][ T4226] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 79.415099][ T4486] XFS (loop3): Mounting V5 Filesystem [ 79.561657][ T4486] XFS (loop3): Ending clean mount [ 79.581603][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.591077][ T4259] usb 3-1: Using ep0 maxpacket: 8 [ 79.606405][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.615317][ T7] usb 5-1: Product: syz [ 79.619525][ T7] usb 5-1: Manufacturer: syz [ 79.624516][ T7] usb 5-1: SerialNumber: syz [ 79.705881][ T4195] XFS (loop3): Unmounting Filesystem [ 79.715685][ T4509] loop0: detected capacity change from 0 to 512 [ 79.730933][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 79.752662][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.777326][ T4259] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.802243][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 79.817456][ T4259] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 79.847256][ T4509] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 79.864323][ T4509] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.63: invalid indirect mapped block 8 (level 2) [ 79.884675][ T4259] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 79.894577][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.909011][ T4509] EXT4-fs (loop0): 1 truncate cleaned up [ 79.915075][ T4259] usb 3-1: config 0 descriptor?? [ 79.920285][ T4509] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x00000000000000a6,journal_dev=0x0000000000009676,jqfmt=vfsv0,data_err=ignore,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4,errors=continue. Quota mode: writeback. [ 79.951317][ T4509] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.63: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 80.018774][ T4194] Bluetooth: hci5: urb ffff8880256b6800 submission failed (90) [ 80.209386][ T4515] loop3: detected capacity change from 0 to 1024 [ 80.259257][ T7] usb 3-1: USB disconnect, device number 3 [ 80.380152][ T4259] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.401838][ T4226] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 80.500738][ T4260] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 80.630138][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.820479][ T4259] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.886019][ T4522] loop2: detected capacity change from 0 to 64 [ 80.924882][ T4187] usb 5-1: USB disconnect, device number 3 [ 80.991600][ T4228] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 81.011499][ T4259] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 81.017486][ T4228] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 81.034451][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.043098][ T4259] usb 1-1: Product: syz [ 81.047295][ T4259] usb 1-1: Manufacturer: syz [ 81.056376][ T4259] usb 1-1: SerialNumber: syz [ 81.102472][ T4259] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 81.210171][ T4228] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 81.219295][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.243370][ T4228] usb 4-1: Product: syz [ 81.248777][ T4526] jffs2: notice: (4526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.266827][ T21] usb 2-1: USB disconnect, device number 4 [ 81.273101][ T4228] usb 4-1: Manufacturer: syz [ 81.277739][ T4228] usb 4-1: SerialNumber: syz [ 81.284901][ T21] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 81.520065][ T4260] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 81.540067][ T4259] gspca_mr97310a: reg write [19] error -71 [ 81.546074][ T4259] mr97310a: probe of 1-1:1.0 failed with error -71 [ 82.561401][ T4228] usb 4-1: failed to execute ARPC: -110 [ 82.573366][ T4228] usb 4-1: failed to set connected state for cport 0: -110 [ 82.725389][ T4228] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 82.910450][ T4228] usb 4-1: failed to send ARPC request 3: -71 [ 83.054343][ T4228] usb 4-1: failed to execute ARPC: -71 [ 83.164683][ T4260] ath9k_htc: Failed to initialize the device [ 85.356109][ T4187] usb 5-1: ath9k_htc: USB layer deinitialized [ 85.445417][ T4259] usb 1-1: USB disconnect, device number 2 [ 85.927765][ T4228] usb 4-1: failed to clear cport 0: -71 [ 86.480672][ T4548] loop3: detected capacity change from 0 to 64 [ 86.562919][ T1323] cfg80211: failed to load regulatory.db [ 86.829453][ T4228] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 86.872154][ T4228] es2_ap_driver: probe of 4-1:1.0 failed with error -110 [ 86.889397][ T4228] usb 4-1: USB disconnect, device number 2 [ 87.033587][ T4559] netlink: 48 bytes leftover after parsing attributes in process `syz.4.79'. [ 87.290131][ T4260] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.380293][ T4259] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.585686][ T4570] jffs2: notice: (4570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.612183][ T26] audit: type=1400 audit(1787594050.890:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="p" pid=4567 comm="syz.1.92" [ 87.710445][ T4260] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 87.718599][ T4260] usb 1-1: config 0 has no interface number 0 [ 87.733534][ T4260] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.830386][ T4259] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.950172][ T4260] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 88.180070][ T1323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.730691][ T1323] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 88.757179][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.822154][ T1323] usb 4-1: Product: syz [ 88.849193][ T1323] usb 4-1: Manufacturer: syz [ 88.880912][ T1323] usb 4-1: SerialNumber: syz [ 88.975825][ T1323] usb 4-1: config 0 descriptor?? [ 89.090767][ T1323] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 89.410449][ T1323] (null): failure setting delay to 10us [ 89.416332][ T1323] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 89.551841][ T1323] usb 4-1: USB disconnect, device number 3 [ 90.401833][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.531330][ T4259] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.783817][ T4260] usb 1-1: Product: syz [ 90.790230][ T4260] usb 1-1: Manufacturer: syz [ 90.797360][ T4260] usb 1-1: SerialNumber: syz [ 90.805910][ T4260] usb 1-1: config 0 descriptor?? [ 90.840243][ T4260] usb 1-1: can't set config #0, error -71 [ 90.847085][ T4259] usb 3-1: string descriptor 0 read error: -71 [ 90.856765][ T4259] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.866240][ T4260] usb 1-1: USB disconnect, device number 3 [ 90.880031][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.920125][ T4259] usb 3-1: can't set config #1, error -71 [ 90.928525][ T4259] usb 3-1: USB disconnect, device number 4 [ 91.229133][ T4596] loop1: detected capacity change from 0 to 512 [ 91.260162][ T4225] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 91.297713][ T4601] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.297713][ T4601] The task syz.2.94 (4601) triggered the difference, watch for misbehavior. [ 91.334538][ T4596] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 91.356638][ T4596] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.390137][ T4260] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.518399][ T4607] loop1: detected capacity change from 0 to 512 [ 91.544174][ T4607] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.555698][ T4607] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.600131][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.708474][ T4611] loop1: detected capacity change from 0 to 1024 [ 91.720631][ T4225] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.733992][ T4611] EXT4-fs (loop1): Ignoring removed bh option [ 91.755213][ T4611] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 91.784386][ T4225] usb 4-1: not running at top speed; connect to a high speed hub [ 91.807402][ T4611] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.821980][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.840253][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 91.900221][ T4225] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 91.909361][ T4225] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.920084][ T4225] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.990639][ T4260] usb 1-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 92.004486][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 92.020897][ T4260] usb 1-1: Product: syz [ 92.025297][ T4260] usb 1-1: Manufacturer: syz [ 92.090327][ T4225] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 92.130652][ T4228] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 92.169537][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.237347][ T4228] usb 5-1: Product: syz [ 92.263845][ T4228] usb 5-1: Manufacturer: syz [ 92.297307][ T4228] usb 5-1: SerialNumber: syz [ 92.385110][ T4228] usb 5-1: config 0 descriptor?? [ 92.483291][ T4228] gspca_main: se401-2.14.0 probing 047d:5003 [ 92.900487][ T4228] gspca_se401: ExtraFeatures: 255 [ 92.911679][ T4228] gspca_se401: Frame size: 0x65535 bayer [ 92.962382][ T4228] gspca_se401: Frame size: 0x0 1/16th janggu [ 93.009085][ T4228] gspca_se401: Frame size: 12x0 bayer [ 93.142394][ T4228] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 93.370713][ T4228] usb 5-1: USB disconnect, device number 4 [ 94.527190][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.530134][ T4260] usb 1-1: can't set config #1, error -71 [ 94.554866][ T4225] usb 4-1: Product: syz [ 95.025716][ T4225] usb 4-1: Manufacturer: syz [ 95.030510][ T4225] usb 4-1: SerialNumber: syz [ 95.050213][ T4260] usb 1-1: USB disconnect, device number 4 [ 95.060698][ T4225] usb 4-1: can't set config #1, error -71 [ 95.069331][ T4225] usb 4-1: USB disconnect, device number 4 [ 95.102156][ T4627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.176498][ T4629] FAULT_INJECTION: forcing a failure. [ 95.176498][ T4629] name fail_futex, interval 1, probability 0, space 0, times 1 [ 95.210062][ T4629] CPU: 0 PID: 4629 Comm: syz.0.106 Not tainted syzkaller #0 [ 95.217434][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.227628][ T4629] Call Trace: [ 95.230943][ T4629] [ 95.233904][ T4629] dump_stack_lvl+0x188/0x250 [ 95.238652][ T4629] ? show_regs_print_info+0x20/0x20 [ 95.243892][ T4629] ? load_image+0x410/0x410 [ 95.248449][ T4629] ? mark_lock+0x94/0x320 [ 95.252819][ T4629] ? __lock_acquire+0x1305/0x7b50 [ 95.257903][ T4629] should_fail+0x383/0x4b0 [ 95.262361][ T4629] get_futex_key+0x1a1/0x12d0 [ 95.267099][ T4629] ? futex_wait_restart+0x250/0x250 [ 95.272346][ T4629] futex_wait_setup+0x4b/0x520 [ 95.277154][ T4629] ? __lock_acquire+0x7b50/0x7b50 [ 95.282219][ T4629] futex_wait+0x22f/0x680 [ 95.286594][ T4629] ? do_futex+0x12b0/0x12b0 [ 95.291156][ T4629] ? verify_lock_unused+0x140/0x140 [ 95.296418][ T4629] ? verify_lock_unused+0x140/0x140 [ 95.301659][ T4629] do_futex+0xdc2/0x12b0 [ 95.305940][ T4629] ? vfs_write+0xaa6/0xd70 [ 95.310421][ T4629] ? futex_exit_release+0x1c0/0x1c0 [ 95.315663][ T4629] ? __context_tracking_exit+0x4c/0x80 [ 95.321172][ T4629] __se_sys_futex+0x389/0x420 [ 95.325889][ T4629] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.331902][ T4629] ? __x64_sys_futex+0xf0/0xf0 [ 95.336714][ T4629] ? __x64_sys_futex+0x1d/0xf0 [ 95.341512][ T4629] do_syscall_64+0x4c/0xa0 [ 95.345958][ T4629] ? clear_bhb_loop+0x30/0x80 [ 95.350664][ T4629] ? clear_bhb_loop+0x30/0x80 [ 95.355383][ T4629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.361329][ T4629] RIP: 0033:0x7f95f27ea0d9 [ 95.365781][ T4629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.385691][ T4629] RSP: 002b:00007f95f0a420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.394150][ T4629] RAX: ffffffffffffffda RBX: 00007f95f2a71fa8 RCX: 00007f95f27ea0d9 [ 95.402244][ T4629] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f95f2a71fa8 [ 95.410267][ T4629] RBP: 00007f95f2a71fa0 R08: 0000000000000000 R09: 0000000000000000 [ 95.418303][ T4629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.426311][ T4629] R13: 00007f95f2a72038 R14: 00007ffc462f2100 R15: 00007ffc462f21e8 [ 95.434341][ T4629] [ 95.551026][ T4635] loop3: detected capacity change from 0 to 4096 [ 95.600101][ T4259] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.610128][ T4546] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.654760][ T4638] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.766889][ T4640] jffs2: notice: (4640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.834878][ T4622] loop2: detected capacity change from 0 to 32768 [ 95.860027][ T4259] usb 5-1: Using ep0 maxpacket: 8 [ 95.970224][ T4546] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 95.979858][ T4546] usb 2-1: config 0 has no interface number 0 [ 95.986711][ T4259] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 95.996701][ T4546] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 96.027121][ T4259] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.047783][ T4546] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.058322][ T4259] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.076526][ T4546] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.088148][ T4259] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.108933][ T4259] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.140091][ T4259] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.159590][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.240631][ T4637] loop0: detected capacity change from 0 to 40427 [ 96.284678][ T4637] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 96.290669][ T4546] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 96.296227][ T4637] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.304779][ T4546] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 96.317707][ T4546] usb 2-1: Product: syz [ 96.321980][ T4546] usb 2-1: Manufacturer: syz [ 96.326594][ T4546] usb 2-1: SerialNumber: syz [ 96.331458][ T4260] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 96.345757][ T4637] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 96.353897][ T4546] usb 2-1: config 0 descriptor?? [ 96.359587][ T4637] F2FS-fs (loop0): invalid crc value [ 96.367230][ T4637] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 96.392597][ T4546] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 96.413634][ T4546] xpad: probe of 2-1:0.237 failed with error -5 [ 96.467718][ T4637] F2FS-fs (loop0): Start checkpoint disabled! [ 96.510098][ T4225] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.521090][ T4637] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.537383][ T4637] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 96.605922][ T4546] usb 2-1: USB disconnect, device number 5 [ 96.690115][ T4260] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 96.699635][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.710000][ T4260] usb 4-1: config 0 descriptor?? [ 96.752105][ T4260] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 96.884385][ T4225] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 96.894961][ T4225] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.905829][ T4225] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.915719][ T4225] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 96.960313][ T4260] gp8psk: usb in 128 operation failed. [ 97.010306][ T4225] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 97.021122][ T4225] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.031704][ T4225] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.042357][ T4225] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 97.060229][ T4653] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 97.069022][ T4259] usb 5-1: USB disconnect, device number 5 [ 97.210142][ T4225] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 97.219360][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.227741][ T4260] gp8psk: FW Version = 115.179.157 (0x73b39d) Build 2061/179/161 [ 97.235925][ T4225] usb 3-1: Product: syz [ 97.240171][ T4225] usb 3-1: Manufacturer: syz [ 97.244878][ T4225] usb 3-1: SerialNumber: syz [ 97.249995][ T4546] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.301581][ T4225] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 97.313668][ T4225] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 97.327436][ T4225] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 97.443494][ T4260] gp8psk: usb in 149 operation failed. [ 97.450096][ T4363] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.458364][ T4260] gp8psk: failed to get FPGA version [ 97.480869][ T4260] gp8psk: usb in 138 operation failed. [ 97.486986][ T4260] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 97.498826][ T4260] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 97.516695][ T4260] usb 4-1: USB disconnect, device number 5 [ 97.554851][ T4645] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 97.569743][ T4259] usb 3-1: USB disconnect, device number 5 [ 97.581596][ T4259] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 97.619875][ T4259] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 97.640183][ T4546] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.654061][ T4546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.666169][ T4259] ti_usb_3410_5052 3-1:2.0: device disconnected [ 97.678016][ T4546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.690707][ T4546] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.703866][ T4363] usb 2-1: Using ep0 maxpacket: 8 [ 97.780469][ T4546] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.790153][ T4546] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.798262][ T4546] usb 1-1: Manufacturer: syz [ 97.804829][ T4546] usb 1-1: config 0 descriptor?? [ 97.820567][ T4363] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.831997][ T4363] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.842472][ T4363] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.855893][ T4363] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.876688][ T4363] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.885864][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.910181][ T4228] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.150108][ T4363] usb 2-1: GET_CAPABILITIES returned 0 [ 98.155774][ T4363] usbtmc 2-1:16.0: can't read capabilities [ 98.184250][ T4659] loop3: detected capacity change from 0 to 32768 [ 98.211204][ T4659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.119 (4659) [ 98.287467][ T4659] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 98.297410][ T4546] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 98.307050][ T4659] BTRFS info (device loop3): metadata ratio 65537 [ 98.314090][ T4659] BTRFS info (device loop3): turning on sync discard [ 98.319468][ T4546] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 98.330281][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.341327][ T4659] BTRFS info (device loop3): using free space tree [ 98.347858][ T4659] BTRFS info (device loop3): has skinny extents [ 98.370018][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.390358][ T4228] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.393618][ T4546] appleir 0003:05AC:8243.0002: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 98.403986][ T4655] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 98.450052][ T4228] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.459153][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.479953][ T4228] usb 5-1: config 0 descriptor?? [ 98.500425][ T4546] usb 1-1: USB disconnect, device number 5 [ 98.502846][ T4227] usb 2-1: USB disconnect, device number 6 [ 98.631091][ T4670] fido_id[4670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.718524][ T4659] BTRFS info (device loop3): enabling ssd optimizations [ 99.017438][ T4228] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 99.029872][ T4228] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 99.095606][ T4692] jffs2: notice: (4692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.293331][ T4456] usb 5-1: USB disconnect, device number 6 [ 99.396299][ T4701] loop3: detected capacity change from 0 to 1024 [ 99.478295][ T4701] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 100.042385][ T4718] netlink: 11 bytes leftover after parsing attributes in process `syz.4.135'. [ 100.150009][ T4259] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.201466][ T4723] jffs2: notice: (4723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.221886][ T4703] loop0: detected capacity change from 0 to 32768 [ 100.323257][ T4703] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.373539][ T4710] loop3: detected capacity change from 0 to 32768 [ 100.464412][ T4710] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.131 (4710) [ 100.520095][ T4259] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.570032][ T4363] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 100.902646][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 101.145341][ T4178] udevd[4178]: incorrect btrfs checksum on /dev/loop3 [ 101.660212][ T4363] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 101.955728][ T4178] udevd[4178]: incorrect btrfs checksum on /dev/loop3 [ 102.998963][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.411552][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.423432][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.435464][ T4259] usb 3-1: config 0 descriptor?? [ 103.441075][ T4363] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.454904][ T4363] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.464482][ T4259] usb 3-1: can't set config #0, error -71 [ 103.470568][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.482007][ T4259] usb 3-1: USB disconnect, device number 6 [ 103.494338][ T4363] usb 2-1: config 0 descriptor?? [ 103.514750][ T4363] usb 2-1: can't set config #0, error -71 [ 103.522113][ T4363] usb 2-1: USB disconnect, device number 7 [ 103.616662][ T4741] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 103.652406][ T4741] 9pnet_virtio: no channels available for device 127.0.0.1 [ 103.664550][ T4710] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 103.680408][ T4710] BTRFS error (device loop3): superblock checksum mismatch [ 103.731097][ T4710] BTRFS error (device loop3): open_ctree failed: -22 [ 103.777133][ T4744] loop4: detected capacity change from 0 to 512 [ 103.855195][ T4745] 9pnet: p9_fd_create_tcp (4745): problem connecting socket to 127.0.0.1 [ 103.957697][ T4744] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 104.020235][ T4744] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.084973][ T26] audit: type=1800 audit(1787594067.360:5): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.144" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 104.174344][ T4739] loop1: detected capacity change from 0 to 32768 [ 104.220474][ T4739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.143 (4739) [ 104.295272][ T4739] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 104.310377][ T4739] BTRFS info (device loop1): using free space tree [ 104.317489][ T4739] BTRFS info (device loop1): has skinny extents [ 104.378384][ T4760] loop3: detected capacity change from 0 to 128 [ 104.408236][ T4762] loop2: detected capacity change from 0 to 1024 [ 104.563393][ T4760] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 104.590295][ T4760] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.686218][ T4739] BTRFS info (device loop1): enabling ssd optimizations [ 104.838929][ T4782] loop4: detected capacity change from 0 to 4096 [ 104.949803][ T4782] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 105.007164][ T4782] EXT4-fs (loop4): Test dummy encryption mode enabled [ 105.188563][ T4782] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 105.363061][ T4802] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 105.386437][ T4802] 9pnet_virtio: no channels available for device 127.0.0.1 [ 105.727600][ T4782] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 105.873239][ T4787] loop2: detected capacity change from 0 to 32768 [ 105.989231][ T4787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.151 (4787) [ 106.050530][ T4787] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 106.090330][ T4787] BTRFS info (device loop2): metadata ratio 0 [ 106.096477][ T4787] BTRFS info (device loop2): turning on sync discard [ 106.121232][ T4818] device syzkaller1 entered promiscuous mode [ 106.124670][ T4787] BTRFS info (device loop2): using free space tree [ 106.158967][ T4787] BTRFS info (device loop2): has skinny extents [ 106.300210][ T21] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 106.481152][ T4787] BTRFS info (device loop2): enabling ssd optimizations [ 106.524190][ T26] audit: type=1800 audit(1787594069.800:6): pid=4787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 106.557185][ T4787] BTRFS error (device loop2): unable to set label with more than 255 bytes [ 106.658263][ T4853] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 106.673754][ T4853] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.770462][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.783575][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.798020][ T21] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 106.807611][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.850628][ T21] usb 5-1: config 0 descriptor?? [ 106.895439][ T21] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 106.903031][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 106.923542][ T4858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.170'. [ 106.938720][ T21] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 106.971094][ T21] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 106.990104][ T21] usb 5-1: media controller created [ 106.996944][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.037126][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 107.043845][ T21] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.101674][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 107.140372][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 107.147474][ T21] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 107.176920][ T21] usb 5-1: USB disconnect, device number 7 [ 107.217795][ T4860] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.313103][ T21] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 107.338646][ T4865] Illegal XDP return value 5, expect packet loss! [ 107.471213][ T4874] 9pnet: p9_fd_create_tcp (4874): problem connecting socket to 127.0.0.1 [ 107.520048][ T4862] Bluetooth: hci5: command 0x1003 tx timeout [ 107.527362][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 107.950156][ T4870] loop0: detected capacity change from 0 to 32768 [ 108.065018][ T4870] XFS (loop0): Mounting V5 Filesystem [ 108.132604][ T4870] XFS (loop0): Ending clean mount [ 108.269125][ T4880] loop4: detected capacity change from 0 to 32768 [ 108.451504][ T26] audit: type=1800 audit(1787594071.730:7): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.174" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 108.531133][ T4193] XFS (loop0): Unmounting Filesystem [ 108.567914][ T4890] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 108.621635][ T4890] 9pnet_virtio: no channels available for device 127.0.0.1 [ 109.107857][ T4907] loop0: detected capacity change from 0 to 1764 [ 109.460092][ T4260] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.645131][ C0] Unknown status report in ack skb [ 109.651880][ T4925] capability: warning: `syz.0.181' uses 32-bit capabilities (legacy support in use) [ 109.831109][ T4260] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 109.859615][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.924180][ T4260] usb 3-1: config 0 descriptor?? [ 109.972355][ T4260] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 110.110319][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 110.116833][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 110.126965][ T4192] block nbd1: Receive control failed (result -32) [ 110.150415][ T4920] block nbd1: shutting down sockets [ 110.254349][ T4931] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 110.281121][ T4931] 9pnet_virtio: no channels available for device 127.0.0.1 [ 110.410135][ T4260] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 110.662894][ T4950] loop1: detected capacity change from 0 to 4096 [ 110.714286][ T4954] 9pnet: p9_fd_create_tcp (4954): problem connecting socket to 127.0.0.1 [ 110.739300][ T4955] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.785046][ T4950] NILFS (loop1): error -2 reading inode: ino=835371204608 [ 110.830218][ T4260] gspca_cpia1: usb_control_msg 02, error -71 [ 110.836275][ T4260] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 110.863843][ T4260] usb 3-1: USB disconnect, device number 7 [ 110.883330][ T4958] loop4: detected capacity change from 0 to 128 [ 110.945637][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 110.983270][ T4958] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.207376][ T4962] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 111.226830][ T4962] 9pnet_virtio: no channels available for device 127.0.0.1 [ 111.466222][ T4968] loop1: detected capacity change from 0 to 256 [ 111.505494][ T4972] loop0: detected capacity change from 0 to 128 [ 111.519234][ T4968] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.543359][ T4968] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 111.560098][ T4260] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.574111][ T4968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 111.588796][ T4972] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 111.652367][ T4972] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 111.770259][ T4796] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.927502][ T4260] usb 5-1: config index 0 descriptor too short (expected 1372, got 92) [ 111.936660][ T4260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.010041][ T4796] usb 3-1: Using ep0 maxpacket: 16 [ 112.100183][ T4260] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.109382][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.117813][ T4260] usb 5-1: Product: syz [ 112.122127][ T4260] usb 5-1: Manufacturer: syz [ 112.126753][ T4260] usb 5-1: SerialNumber: syz [ 112.131547][ T4796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.143094][ T4796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.155032][ T4796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 112.173524][ T4361] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 112.181177][ T4796] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 112.191532][ T4796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.200562][ T4259] Bluetooth: hci5: command 0x1009 tx timeout [ 112.208287][ T4796] usb 3-1: config 0 descriptor?? [ 112.220214][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.490104][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 112.610203][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.624738][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.634589][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 112.647270][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.657265][ T21] usb 1-1: config 0 descriptor?? [ 112.672105][ T4796] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 112.679246][ T4796] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 112.686863][ T4796] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 112.694198][ T4796] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 112.701751][ T4796] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 112.709290][ T4796] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 112.724132][ T4796] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 112.780164][ T4361] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.792859][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.805419][ T4361] usb 2-1: Product: syz [ 112.809628][ T4361] usb 2-1: Manufacturer: syz [ 112.817877][ T4361] usb 2-1: SerialNumber: syz [ 112.835677][ T4361] usb 2-1: config 0 descriptor?? [ 112.943241][ T4259] usb 3-1: USB disconnect, device number 8 [ 113.050169][ T4260] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 113.070289][ T4260] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 113.090233][ T4361] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.120451][ T4260] cdc_ncm 5-1:1.0: bind() failure [ 113.126206][ T4978] loop0: detected capacity change from 0 to 16 [ 113.133349][ T4260] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 113.140740][ T4260] cdc_ncm 5-1:1.1: bind() failure [ 113.161843][ T4978] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 113.178641][ T4260] usb 5-1: USB disconnect, device number 8 [ 113.201859][ T21] apple 0003:05AC:024B.0005: unknown global tag 0xe [ 113.208754][ T21] apple 0003:05AC:024B.0005: item 0 1 1 14 parsing failed [ 113.220007][ T21] apple 0003:05AC:024B.0005: parse failed [ 113.225915][ T21] apple: probe of 0003:05AC:024B.0005 failed with error -22 [ 113.418537][ T4260] usb 1-1: USB disconnect, device number 6 [ 113.640337][ T4361] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 113.657502][ T4361] usb 2-1: USB disconnect, device number 8 [ 113.685080][ T4985] loop4: detected capacity change from 0 to 1764 [ 113.760211][ T4861] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 114.277961][ T4991] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 114.378775][ T4995] loop1: detected capacity change from 0 to 512 [ 114.433538][ T4995] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.447325][ T4995] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.454694][ T4995] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 114.460970][ T4861] usb 3-1: not running at top speed; connect to a high speed hub [ 114.470490][ T4995] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.487629][ T4995] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 114.498901][ T4995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.221: bg 0: block 40: padding at end of block bitmap is not set [ 114.530721][ T4995] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 114.554190][ T4995] EXT4-fs (loop1): 1 truncate cleaned up [ 114.569973][ T4995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.573879][ T4861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.601134][ T4995] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.621086][ T4861] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 114.635752][ T4861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.670948][ T21] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 114.695086][ T4861] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 114.715495][ T4861] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 114.725843][ T4861] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 114.735124][ T4861] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 114.743466][ T4861] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 114.752776][ T4861] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 114.764005][ T4861] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 114.772173][ T4861] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 114.781389][ T4861] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 114.890702][ T5002] loop1: detected capacity change from 0 to 1024 [ 114.916277][ T5002] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 114.932713][ T5002] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 114.957749][ T5002] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.978332][ T5002] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 114.987009][ T5002] System zones: 0-1, 3-36 [ 115.002128][ T5002] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 115.066295][ T5002] capability: warning: `syz.1.224' uses deprecated v2 capabilities in a way that may be insecure [ 115.077172][ T21] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.102874][ T21] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 115.109068][ T4259] usb 3-1: USB disconnect, device number 9 [ 115.128848][ T4259] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 115.138202][ T21] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 115.138263][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.190906][ T4259] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 115.204294][ T4259] keyspan 3-1:1.0: device disconnected [ 115.300487][ T5000] loop4: detected capacity change from 0 to 32768 [ 115.320360][ T21] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 115.340022][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.358841][ T21] usb 1-1: Product: syz [ 115.368984][ T21] usb 1-1: Manufacturer: syz [ 115.379140][ T21] usb 1-1: SerialNumber: syz [ 115.397487][ T26] audit: type=1800 audit(1787594078.670:8): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.223" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 115.415629][ T21] usb 1-1: config 0 descriptor?? [ 115.450429][ T4997] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.477874][ T26] audit: type=1800 audit(1787594078.730:9): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.223" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 115.674473][ T4997] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.692630][ T21] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 115.749032][ T5008] loop4: detected capacity change from 0 to 8192 [ 115.828777][ T5008] loop4: p1 < > p3 < > p4 [ 115.846884][ T5008] loop4: partition table partially beyond EOD, truncated [ 115.897702][ T5008] loop4: p1 start 4294967295 is beyond EOD, truncated [ 115.949661][ T5008] loop4: p4 start 33554432 is beyond EOD, truncated [ 115.992095][ T5006] loop1: detected capacity change from 0 to 40427 [ 116.000635][ T4361] usb 1-1: USB disconnect, device number 7 [ 116.009605][ T5013] loop2: detected capacity change from 0 to 512 [ 116.075996][ T5006] F2FS-fs (loop1): invalid crc value [ 116.084778][ T5013] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.110096][ T4260] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.139755][ T5006] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 116.159248][ T5013] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.228: inode has both inline data and extents flags [ 116.192975][ T5018] loop3: detected capacity change from 0 to 1764 [ 116.210422][ T5013] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.228: couldn't read orphan inode 15 (err -117) [ 116.224341][ T5013] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 116.508706][ T5006] F2FS-fs (loop1): Start checkpoint disabled! [ 116.601551][ C0] Unknown status report in ack skb [ 116.616857][ T5006] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7 [ 116.681364][ T4260] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 116.794905][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.069210][ T4260] usb 5-1: Product: syz [ 117.110796][ T4260] usb 5-1: Manufacturer: syz [ 117.115456][ T4260] usb 5-1: SerialNumber: syz [ 117.306772][ T4534] attempt to access beyond end of device [ 117.306772][ T4534] loop1: rw=2049, want=45104, limit=40427 [ 117.377481][ T5026] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 117.460575][ T5030] 9pnet: p9_fd_create_tcp (5030): problem connecting socket to 127.0.0.1 [ 118.191080][ T5029] loop0: detected capacity change from 0 to 1764 [ 118.311611][ T5035] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.531338][ T4260] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 118.590599][ T4260] usb 5-1: USB disconnect, device number 9 [ 118.629158][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.923252][ T5048] loop3: detected capacity change from 0 to 2048 [ 119.009052][ T5048] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.092449][ T5048] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 119.126096][ T5048] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 119.149106][ T5048] UDF-fs: Scanning with blocksize 512 failed [ 119.165501][ T5048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.198418][ T26] audit: type=1800 audit(1787594082.470:10): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="file1" dev="loop3" ino=838 res=0 errno=0 [ 119.327629][ T5034] loop2: detected capacity change from 0 to 32768 [ 119.391093][ T5053] loop3: detected capacity change from 0 to 1764 [ 119.430066][ T4260] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.820558][ T4260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.852659][ C0] Unknown status report in ack skb [ 119.967767][ T4260] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.258275][ T5045] loop1: detected capacity change from 0 to 32768 [ 120.266394][ T4260] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.285929][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.350841][ T4260] usb 5-1: SerialNumber: syz [ 120.372922][ T5045] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 120.622160][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 120.667450][ T5062] cgroup: fork rejected by pids controller in /syz2 [ 120.753122][ T4260] usb 5-1: 0:2 : does not exist [ 120.762943][ T5065] loop3: detected capacity change from 0 to 128 [ 120.860390][ T4260] usb 5-1: USB disconnect, device number 10 [ 120.880367][ T5065] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.949471][ T5065] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.057136][ T5070] loop1: detected capacity change from 0 to 1764 [ 121.246809][ T5074] 9pnet: p9_fd_create_tcp (5074): problem connecting socket to 127.0.0.1 [ 122.300282][ T4260] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.610321][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 122.677429][ T4532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.740380][ T4260] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 122.748710][ T4260] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.800275][ T4260] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.825678][ T4260] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.846008][ T4260] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.866611][ T4260] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.885457][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.899411][ T4361] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.935627][ C1] Unknown status report in ack skb [ 123.137834][ T4532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.183698][ T4361] usb 5-1: Using ep0 maxpacket: 32 [ 123.190759][ T4260] usb 4-1: usb_control_msg returned -32 [ 123.198252][ T4260] usbtmc 4-1:16.0: can't read capabilities [ 124.240495][ T5102] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 124.424852][ T4449] usb 4-1: USB disconnect, device number 6 [ 125.120164][ T4456] Bluetooth: hci2: command 0x0409 tx timeout [ 125.175238][ T4532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.739088][ T4532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.000221][ T4361] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.201474][ T4361] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 126.219484][ T4361] usb 5-1: can't read configurations, error -71 [ 126.390166][ T4862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.700170][ T4862] usb 1-1: Using ep0 maxpacket: 8 [ 126.871453][ T4862] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 127.002561][ T5113] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 127.032287][ T4862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.135000][ T4862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.168172][ T4862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 127.218774][ T4862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 127.251921][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 127.269497][ T4862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.303276][ T4862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.331567][ T4862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.356026][ T4449] Bluetooth: hci2: command 0x041b tx timeout [ 127.620115][ T4862] usb 1-1: GET_CAPABILITIES returned 0 [ 127.625748][ T4862] usbtmc 1-1:16.0: can't read capabilities [ 127.678081][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.711733][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.904939][ T5093] device bridge_slave_0 entered promiscuous mode [ 128.317947][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.353642][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.505751][ T5093] device bridge_slave_1 entered promiscuous mode [ 129.070242][ T5140] loop1: detected capacity change from 0 to 1764 [ 129.889952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.899973][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.909950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.919952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.929951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.939952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.949951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.960370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.969973][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 129.979954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 130.227573][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.486364][ T4862] usb 1-1: USB disconnect, device number 8 [ 130.493112][ T4861] Bluetooth: hci2: command 0x040f tx timeout [ 130.532499][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.707362][ T5162] loop3: detected capacity change from 0 to 512 [ 130.794258][ T5093] team0: Port device team_slave_0 added [ 130.826491][ T5093] team0: Port device team_slave_1 added [ 130.898373][ T5162] EXT4-fs (loop3): Ignoring removed bh option [ 130.932542][ T5169] device bridge1 entered promiscuous mode [ 130.993184][ T5162] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 131.022179][ T5169] team0: Port device bridge1 added [ 131.029788][ T5162] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 131.060208][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 131.061691][ T5162] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.267: Corrupt directory, running e2fsck is recommended [ 131.109188][ T5162] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 131.118937][ T5162] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.267: corrupted in-inode xattr [ 131.136378][ T5176] bridge0: port 3(team0) entered blocking state [ 131.144933][ T5176] bridge0: port 3(team0) entered disabled state [ 131.151701][ T5162] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.267: couldn't read orphan inode 15 (err -117) [ 131.180633][ T5162] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 131.191859][ T5176] device team0 entered promiscuous mode [ 131.220128][ T5176] device team_slave_0 entered promiscuous mode [ 131.228837][ T5176] device team_slave_1 entered promiscuous mode [ 131.239384][ T5176] bridge0: port 3(team0) entered blocking state [ 131.246108][ T5176] bridge0: port 3(team0) entered forwarding state [ 131.266430][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.280047][ T4259] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.288609][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.318881][ T5162] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 131.350023][ T5162] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 131.351083][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.392154][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.406311][ T5162] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.267: Corrupt directory, running e2fsck is recommended [ 131.430667][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.460026][ T5180] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 131.477747][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.492033][ T5180] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 131.513329][ T5180] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.267: Corrupt directory, running e2fsck is recommended [ 131.527983][ T5184] syz.0.272 uses obsolete (PF_INET,SOCK_PACKET) [ 131.538442][ T5183] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 131.550105][ T4259] usb 5-1: Using ep0 maxpacket: 16 [ 131.559572][ T5183] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 131.590863][ T5183] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.267: Corrupt directory, running e2fsck is recommended [ 131.634169][ T5162] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 131.670316][ T4259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.681896][ T5162] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.267: path /41/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 131.714886][ T4259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.733963][ T4259] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 131.759508][ T5162] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 22: comm syz.3.267: path /41/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 131.788892][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.825371][ T4259] usb 5-1: config 0 descriptor?? [ 131.842180][ T5093] device hsr_slave_0 entered promiscuous mode [ 131.873567][ T5093] device hsr_slave_1 entered promiscuous mode [ 131.895834][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.920034][ T5093] Cannot create hsr debugfs directory [ 132.035068][ T5177] loop1: detected capacity change from 0 to 32768 [ 132.206423][ T5177] XFS (loop1): Mounting V5 Filesystem [ 132.283003][ T5173] loop4: detected capacity change from 0 to 16 [ 132.323426][ T5173] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 132.338213][ T4532] device hsr_slave_0 left promiscuous mode [ 132.358974][ T4532] device hsr_slave_1 left promiscuous mode [ 132.391887][ T4259] apple 0003:05AC:024B.0006: unknown global tag 0xe [ 132.398542][ T4259] apple 0003:05AC:024B.0006: item 0 1 1 14 parsing failed [ 132.410829][ T4259] apple 0003:05AC:024B.0006: parse failed [ 132.416695][ T4259] apple: probe of 0003:05AC:024B.0006 failed with error -22 [ 132.448469][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.481600][ T4532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.521637][ T5177] XFS (loop1): Ending clean mount [ 132.544372][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.559996][ T4532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.567982][ T4532] device bridge_slave_1 left promiscuous mode [ 132.579677][ T4862] Bluetooth: hci2: command 0x0419 tx timeout [ 132.587735][ T5177] XFS (loop1): Quotacheck needed: Please wait. [ 132.620735][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.628247][ T4259] usb 5-1: USB disconnect, device number 13 [ 132.642032][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648423][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.733914][ T5177] XFS (loop1): Quotacheck: Done. [ 133.061904][ T4532] device bridge_slave_0 left promiscuous mode [ 133.163281][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.262016][ T4532] device veth1_macvtap left promiscuous mode [ 134.368176][ T4184] XFS (loop1): Unmounting Filesystem [ 134.456738][ T4532] device veth0_macvtap left promiscuous mode [ 134.619190][ T4532] device veth1_vlan left promiscuous mode [ 134.749690][ T4532] device veth0_vlan left promiscuous mode [ 134.765600][ T5225] loop3: detected capacity change from 0 to 128 [ 135.217038][ T5225] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 135.516082][ T5225] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.878595][ T5237] loop1: detected capacity change from 0 to 512 [ 135.929494][ T5237] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.978103][ T5237] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.991355][ T5243] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 136.016199][ T5237] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.279: Allocating blocks 41-42 which overlap fs metadata [ 136.054394][ T5237] Quota error (device loop1): write_blk: dquota write failed [ 136.083631][ T5237] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 136.103509][ T5237] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.279: Failed to acquire dquot type 0 [ 136.133144][ T5237] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 136.166097][ T5237] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.279: corrupted inode contents [ 136.206882][ T5237] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.279: mark_inode_dirty error [ 136.229233][ T5237] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.279: corrupted inode contents [ 136.303379][ T5237] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.279: mark_inode_dirty error [ 136.317210][ T5237] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.279: corrupted inode contents [ 136.334220][ T5237] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 136.351875][ T5237] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.279: corrupted inode contents [ 136.364732][ T5237] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.279: mark_inode_dirty error [ 136.376557][ T5237] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 136.385322][ T5249] block nbd4: NBD_DISCONNECT [ 136.389482][ T5249] block nbd4: Disconnected due to user request. [ 136.398307][ T5249] block nbd4: shutting down sockets [ 136.401186][ T5237] EXT4-fs (loop1): 1 truncate cleaned up [ 136.410626][ T5237] EXT4-fs (loop1): pa ffff8880753d4700: logic 1, phys. 41, len 23 [ 136.418942][ T5237] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 136.462765][ T5237] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 136.566274][ T4532] team0 (unregistering): Port device team_slave_1 removed [ 136.604821][ T4532] team0 (unregistering): Port device team_slave_0 removed [ 136.617674][ T5251] loop4: detected capacity change from 0 to 2048 [ 136.649868][ T4532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.666744][ T4532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.752244][ T5254] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.904355][ T4532] bond0 (unregistering): Released all slaves [ 137.431675][ T5280] loop1: detected capacity change from 0 to 512 [ 137.550283][ T4861] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.559266][ T5280] EXT4-fs (loop1): Ignoring removed bh option [ 137.580197][ T5280] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.610030][ T5280] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 137.621025][ T5280] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.293: Corrupt directory, running e2fsck is recommended [ 137.637684][ T5280] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 137.646383][ T5280] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.293: corrupted in-inode xattr [ 137.659719][ T5280] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.293: couldn't read orphan inode 15 (err -117) [ 137.674112][ T5280] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 137.700223][ T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 137.719201][ T5280] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.784773][ T5280] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 137.842521][ T5280] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.293: Corrupt directory, running e2fsck is recommended [ 137.868031][ T5288] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.910135][ T4861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.916475][ T5288] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 137.936509][ T4861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.993673][ T5288] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.293: Corrupt directory, running e2fsck is recommended [ 138.007114][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 138.037503][ T5291] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 138.051118][ T4861] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.071379][ T4861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.079427][ T4861] usb 1-1: SerialNumber: syz [ 138.113078][ T5291] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 138.140076][ T13] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 138.149273][ T13] usb 5-1: config 0 has no interface number 0 [ 138.170182][ T13] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 138.191303][ T5291] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.293: Corrupt directory, running e2fsck is recommended [ 138.200183][ T13] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 138.231057][ T5275] loop3: detected capacity change from 0 to 32768 [ 138.267585][ T5275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (5275) [ 138.316983][ T5275] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 138.357348][ T5275] BTRFS info (device loop3): using free space tree [ 138.382473][ T5275] BTRFS info (device loop3): has skinny extents [ 138.412714][ T4861] usb 1-1: 0:2 : does not exist [ 138.440174][ T13] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 138.459681][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.468865][ T13] usb 5-1: Product: syz [ 138.486170][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.488423][ T13] usb 5-1: Manufacturer: syz [ 138.497844][ T13] usb 5-1: SerialNumber: syz [ 138.504805][ T13] usb 5-1: config 0 descriptor?? [ 138.536300][ T5277] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.540700][ T4861] usb 1-1: USB disconnect, device number 9 [ 138.550207][ T5277] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.596889][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.628860][ T5310] loop1: detected capacity change from 0 to 512 [ 138.638637][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.699474][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.730716][ T5310] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,nodioread_nolock,noquota,dioread_lock,stripe=0x0000000000000002,grpid,,errors=continue. Quota mode: writeback. [ 138.760108][ T5275] BTRFS info (device loop3): enabling ssd optimizations [ 138.777158][ T5277] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.818302][ T5310] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.840122][ T5277] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.080724][ T13] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.138753][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.181882][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.197638][ T5324] loop0: detected capacity change from 0 to 1024 [ 139.215933][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.267207][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.300324][ T5324] EXT4-fs (loop0): Ignoring removed oldalloc option [ 139.333520][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.342250][ T5324] EXT4-fs (loop0): Ignoring removed oldalloc option [ 139.370702][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.384971][ T5324] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.435127][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.442298][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.487216][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.532996][ T5324] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nobarrier,,errors=continue. Quota mode: none. [ 139.572604][ T26] audit: type=1804 audit(1787594102.850:11): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.295" name="/newroot/71/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 139.607467][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.645168][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.709375][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.718745][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.777526][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.807754][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.825372][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.912837][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.941429][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.960368][ T13] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 139.987797][ T13] asix: probe of 5-1:0.34 failed with error -71 [ 139.994910][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.022837][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.069179][ T13] usb 5-1: USB disconnect, device number 14 [ 140.094376][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.125350][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.193676][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.271270][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.329917][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.379737][ T5356] loop3: detected capacity change from 0 to 256 [ 141.334821][ T5356] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.345635][ T5356] FAT-fs (loop3): Filesystem has been set read-only [ 141.352480][ T5356] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.362654][ T5356] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.376530][ T5356] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 141.386770][ T26] audit: type=1800 audit(1787594104.650:12): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.300" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 143.553179][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.564220][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.573222][ T5382] netlink: 'syz.3.306': attribute type 29 has an invalid length. [ 143.601499][ T5381] loop1: detected capacity change from 0 to 1024 [ 143.619449][ T5382] netlink: 'syz.3.306': attribute type 3 has an invalid length. [ 143.633459][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.640600][ T5382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.306'. [ 143.710333][ T5381] EXT4-fs (loop1): Ignoring removed bh option [ 143.716483][ T5381] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.758261][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.786153][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.859116][ T5381] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x000000000000007e,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 143.884614][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.897067][ T5342] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.914882][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.926637][ T5391] loop3: detected capacity change from 0 to 128 [ 143.964512][ T5394] loop0: detected capacity change from 0 to 64 [ 143.979072][ T5093] device veth0_vlan entered promiscuous mode [ 144.008403][ T5391] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 144.023906][ T26] audit: type=1800 audit(1787594107.310:13): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.304" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 144.036626][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.068284][ T5391] hpfs: filesystem error: improperly stopped [ 144.075416][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.089200][ T5391] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 144.106181][ T5093] device veth1_vlan entered promiscuous mode [ 144.130494][ T5391] hpfs: You really don't want any checks? You are crazy... [ 144.208411][ T5391] hpfs: Code page index out of array [ 144.233360][ T5391] hpfs: code page support is disabled [ 144.252986][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.263117][ T5391] hpfs: hpfs_map_4sectors(): unaligned read [ 144.272704][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.283205][ T5391] hpfs: hpfs_map_4sectors(): unaligned read [ 144.290473][ T5342] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 144.303296][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.312088][ T5342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.325758][ T5391] hpfs: filesystem error: unable to find root dir [ 144.344526][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.390619][ T5342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.420244][ T5342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.435553][ T5093] device veth0_macvtap entered promiscuous mode [ 144.452311][ T5093] device veth1_macvtap entered promiscuous mode [ 144.460186][ T5342] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.469258][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.486006][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.511051][ T5342] usb 5-1: config 0 descriptor?? [ 144.516604][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.526827][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.537941][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.548391][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.563288][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.578195][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.594815][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.625072][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.645647][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.674555][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.687179][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.697723][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.707605][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.728359][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.738371][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.748857][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.801304][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.808716][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.820612][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.875066][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.910739][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.940392][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.990467][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.009610][ T5405] loop0: detected capacity change from 0 to 4096 [ 145.015314][ T5342] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 145.059417][ T5413] loop3: detected capacity change from 0 to 128 [ 145.066314][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.082411][ T5342] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 145.096152][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.116078][ T5342] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 145.136129][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.145432][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.199225][ T5405] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 145.214238][ T5413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.260128][ T5413] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.322603][ T4361] usb 5-1: USB disconnect, device number 15 [ 145.624192][ T5151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.638250][ T5151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.720764][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.815611][ T26] audit: type=1800 audit(1787594109.090:14): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.311" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 145.829890][ T5429] fido_id[5429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 145.860581][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.868436][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.935260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.041366][ T5454] FAULT_INJECTION: forcing a failure. [ 149.041366][ T5454] name failslab, interval 1, probability 100, space 0, times 1 [ 149.041378][ T3557] FAULT_INJECTION: forcing a failure. [ 149.041378][ T3557] name failslab, interval 1, probability 100, space 0, times 1 [ 149.055511][ T5449] FAULT_INJECTION: forcing a failure. [ 149.055511][ T5449] name failslab, interval 1, probability 100, space 0, times 1 [ 149.072500][ C0] FAULT_INJECTION: forcing a failure. [ 149.072500][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 149.080973][ C1] FAULT_INJECTION: forcing a failure. [ 149.080973][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 149.094008][ C0] CPU: 0 PID: 5452 Comm: sed Not tainted syzkaller #0 [ 149.113274][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.123342][ C0] Call Trace: [ 149.126649][ C0] [ 149.129503][ C0] dump_stack_lvl+0x188/0x250 [ 149.134230][ C0] ? show_regs_print_info+0x20/0x20 [ 149.139442][ C0] ? load_image+0x410/0x410 [ 149.143958][ C0] ? mark_lock+0x94/0x320 [ 149.148306][ C0] ? prandom_u32+0x217/0x250 [ 149.152915][ C0] should_fail+0x383/0x4b0 [ 149.157347][ C0] should_failslab+0x5/0x20 [ 149.161859][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 149.166812][ C0] __kmalloc_node_track_caller+0x68/0x3a0 [ 149.172541][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 149.177579][ C0] ? __napi_alloc_skb+0x151/0x2d0 [ 149.182613][ C0] __alloc_skb+0x22c/0x750 [ 149.187046][ C0] __napi_alloc_skb+0x151/0x2d0 [ 149.191912][ C0] page_to_skb+0x279/0xce0 [ 149.196358][ C0] receive_buf+0x14d0/0x5900 [ 149.200978][ C0] ? virtnet_poll_tx+0x4d0/0x4d0 [ 149.205933][ C0] ? detach_buf_split+0x8a6/0xab0 [ 149.211107][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 149.216153][ C0] ? free_old_xmit_skbs+0x252/0x2b0 [ 149.221367][ C0] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 149.226849][ C0] virtnet_poll+0x5ce/0xfb0 [ 149.231381][ C0] ? refill_work+0x220/0x220 [ 149.236033][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.242058][ C0] ? lock_chain_count+0x20/0x20 [ 149.246943][ C0] __napi_poll+0xbb/0x430 [ 149.251323][ C0] net_rx_action+0x522/0xa80 [ 149.255939][ C0] ? net_tx_action+0x880/0x880 [ 149.260804][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.266831][ C0] ? lock_chain_count+0x20/0x20 [ 149.271710][ C0] handle_softirqs+0x336/0x830 [ 149.276490][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 149.281351][ C0] ? do_softirq+0x210/0x210 [ 149.285887][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 149.291111][ C0] __irq_exit_rcu+0x13b/0x230 [ 149.295820][ C0] ? irq_exit_rcu+0x20/0x20 [ 149.300333][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 149.305559][ C0] irq_exit_rcu+0x5/0x20 [ 149.309817][ C0] common_interrupt+0xb5/0xd0 [ 149.314513][ C0] [ 149.317476][ C0] [ 149.320462][ C0] asm_common_interrupt+0x22/0x40 [ 149.331673][ C0] RIP: 0010:memset+0x2b/0x40 [ 149.336331][ C0] Code: 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 12 ef ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b <41> 5e 5d e9 2d be 50 02 31 c0 5b 41 5e 5d c3 66 0f 1f 44 00 00 41 [ 149.355952][ C0] RSP: 0018:ffffc9000406f5b8 EFLAGS: 00000202 [ 149.362041][ C0] RAX: 0000000000000001 RBX: ffffc9000406f668 RCX: ffffffff81351823 [ 149.370134][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000406f6b8 [ 149.378143][ C0] RBP: 0000000000000000 R08: ffffc9000406f6c7 R09: 1ffff9200080ded8 [ 149.386130][ C0] R10: dffffc0000000000 R11: fffff5200080ded9 R12: 1ffffffff1c1f58a [ 149.394117][ C0] R13: 1ffffffff1c1f58a R14: ffffc9000406f6b8 R15: ffffffff8e0fac52 [ 149.402113][ C0] ? unwind_next_frame+0x9e3/0x1cf0 [ 149.407341][ C0] unwind_next_frame+0x9e3/0x1cf0 [ 149.412384][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 149.417829][ C0] ? stack_trace_save+0xf0/0xf0 [ 149.422803][ C0] arch_stack_walk+0x10c/0x140 [ 149.427769][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 149.433341][ C0] ? kmem_cache_free+0x8f/0x210 [ 149.438215][ C0] stack_trace_save+0xa6/0xf0 [ 149.442915][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 149.448049][ C0] ? release_firmware_map_entry+0x190/0x190 [ 149.453966][ C0] ? kmem_cache_free+0x8f/0x210 [ 149.458832][ C0] ? memset+0x1e/0x40 [ 149.462852][ C0] kasan_set_track+0x4b/0x70 [ 149.467459][ C0] ? kasan_set_track+0x4b/0x70 [ 149.472233][ C0] ? kasan_set_free_info+0x1f/0x40 [ 149.477357][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 149.482607][ C0] kasan_set_free_info+0x1f/0x40 [ 149.487562][ C0] ____kasan_slab_free+0xd5/0x110 [ 149.492627][ C0] slab_free_freelist_hook+0xec/0x170 [ 149.498104][ C0] ? exit_mmap+0x502/0x640 [ 149.502534][ C0] kmem_cache_free+0x8f/0x210 [ 149.507233][ C0] exit_mmap+0x502/0x640 [ 149.511499][ C0] ? vm_brk+0x20/0x20 [ 149.515503][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 149.520716][ C0] __mmput+0x115/0x390 [ 149.524801][ C0] exit_mm+0x632/0x7b0 [ 149.528882][ C0] ? perf_pmu_migrate_context+0xb70/0xb70 [ 149.534621][ C0] ? do_exit+0x2110/0x2110 [ 149.539149][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 149.544646][ C0] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 149.550146][ C0] ? tty_audit_exit+0x149/0x1f0 [ 149.555027][ C0] do_exit+0x5b8/0x2110 [ 149.559305][ C0] ? put_task_struct+0x80/0x80 [ 149.564092][ C0] ? lock_chain_count+0x20/0x20 [ 149.568970][ C0] do_group_exit+0x12c/0x2f0 [ 149.573601][ C0] __x64_sys_exit_group+0x3b/0x40 [ 149.578644][ C0] do_syscall_64+0x4c/0xa0 [ 149.583077][ C0] ? clear_bhb_loop+0x30/0x80 [ 149.587788][ C0] ? clear_bhb_loop+0x30/0x80 [ 149.592488][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.598417][ C0] RIP: 0033:0x7f8f4b3b26c5 [ 149.602850][ C0] Code: Unable to access opcode bytes at RIP 0x7f8f4b3b269b. [ 149.610223][ C0] RSP: 002b:00007fffa0b04068 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 149.618653][ C0] RAX: ffffffffffffffda RBX: 00007f8f4b4b3fe8 RCX: 00007f8f4b3b26c5 [ 149.626646][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 149.634626][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 149.642615][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 149.650601][ C0] R13: 0000000000000000 R14: 00007f8f4b4b2680 R15: 00007f8f4b4b4000 [ 149.658598][ C0] [ 149.661653][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 149.668966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.679039][ C1] Call Trace: [ 149.682338][ C1] [ 149.685293][ C1] dump_stack_lvl+0x188/0x250 [ 149.690030][ C1] ? show_regs_print_info+0x20/0x20 [ 149.695259][ C1] ? load_image+0x410/0x410 [ 149.699765][ C1] ? prandom_u32+0x217/0x250 [ 149.704362][ C1] should_fail+0x383/0x4b0 [ 149.708796][ C1] should_failslab+0x5/0x20 [ 149.713426][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 149.718385][ C1] __kmalloc_node_track_caller+0x68/0x3a0 [ 149.724114][ C1] ? __napi_alloc_skb+0x151/0x2d0 [ 149.729170][ C1] ? __napi_alloc_skb+0x151/0x2d0 [ 149.734222][ C1] __alloc_skb+0x22c/0x750 [ 149.738670][ C1] __napi_alloc_skb+0x151/0x2d0 [ 149.743554][ C1] page_to_skb+0x279/0xce0 [ 149.748022][ C1] receive_buf+0x14d0/0x5900 [ 149.752690][ C1] ? virtnet_poll_tx+0x4d0/0x4d0 [ 149.757657][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 149.762730][ C1] ? detach_buf_split+0x8a6/0xab0 [ 149.767808][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 149.772880][ C1] ? free_old_xmit_skbs+0x252/0x2b0 [ 149.778084][ C1] ? virtqueue_get_buf_ctx+0x6aa/0xe50 [ 149.783549][ C1] virtnet_poll+0x5ce/0xfb0 [ 149.788076][ C1] ? refill_work+0x220/0x220 [ 149.792665][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.798690][ C1] ? lock_chain_count+0x20/0x20 [ 149.803691][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.814054][ C1] __napi_poll+0xbb/0x430 [ 149.820818][ C1] net_rx_action+0x522/0xa80 [ 149.826234][ C1] ? net_tx_action+0x880/0x880 [ 149.831004][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.836995][ C1] ? lock_chain_count+0x20/0x20 [ 149.841868][ C1] handle_softirqs+0x336/0x830 [ 149.846653][ C1] ? run_ksoftirqd+0xa4/0x100 [ 149.851346][ C1] ? do_softirq+0x210/0x210 [ 149.855851][ C1] ? run_ksoftirqd+0x81/0x100 [ 149.860545][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.865767][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 149.871057][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.876280][ C1] run_ksoftirqd+0xa4/0x100 [ 149.880957][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 149.886187][ C1] smpboot_thread_fn+0x520/0x990 [ 149.891144][ C1] kthread+0x42e/0x520 [ 149.895215][ C1] ? cpu_report_death+0x180/0x180 [ 149.900266][ C1] ? kthread_blkcg+0xd0/0xd0 [ 149.904877][ C1] ret_from_fork+0x1f/0x30 [ 149.909364][ C1] [ 149.961583][ T5454] CPU: 0 PID: 5454 Comm: syz.1.321 Not tainted syzkaller #0 [ 149.968953][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.979043][ T5454] Call Trace: [ 149.982348][ T5454] [ 149.985308][ T5454] dump_stack_lvl+0x188/0x250 [ 149.990045][ T5454] ? show_regs_print_info+0x20/0x20 [ 149.995279][ T5454] ? load_image+0x410/0x410 [ 149.999816][ T5454] ? prandom_u32+0x217/0x250 [ 150.004449][ T5454] should_fail+0x383/0x4b0 [ 150.008904][ T5454] should_failslab+0x5/0x20 [ 150.013441][ T5454] slab_pre_alloc_hook+0x51/0xc0 [ 150.018418][ T5454] kmem_cache_alloc_trace+0x47/0x290 [ 150.023773][ T5454] ? __se_sys_mount+0x157/0x3d0 [ 150.028662][ T5454] __se_sys_mount+0x157/0x3d0 [ 150.033385][ T5454] ? __x64_sys_mount+0xc0/0xc0 [ 150.038189][ T5454] ? lockdep_hardirqs_on+0x94/0x140 [ 150.043434][ T5454] ? __x64_sys_mount+0x1c/0xc0 [ 150.048323][ T5454] do_syscall_64+0x4c/0xa0 [ 150.052772][ T5454] ? clear_bhb_loop+0x30/0x80 [ 150.057486][ T5454] ? clear_bhb_loop+0x30/0x80 [ 150.062197][ T5454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.068127][ T5454] RIP: 0033:0x7fc8ade230d9 [ 150.072568][ T5454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.092207][ T5454] RSP: 002b:00007fc8ac07b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.100659][ T5454] RAX: ffffffffffffffda RBX: 00007fc8ae0aafa0 RCX: 00007fc8ade230d9 [ 150.108666][ T5454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.116680][ T5454] RBP: 00007fc8adeba024 R08: 0000200000000640 R09: 0000000000000000 [ 150.124828][ T5454] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 150.132848][ T5454] R13: 00007fc8ae0ab038 R14: 00007fc8ae0aafa0 R15: 00007ffebfd9ea48 [ 150.140879][ T5454] [ 150.149462][ T5449] CPU: 0 PID: 5449 Comm: syz.0.319 Not tainted syzkaller #0 [ 150.156803][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.166891][ T5449] Call Trace: [ 150.170219][ T5449] [ 150.173222][ T5449] dump_stack_lvl+0x188/0x250 [ 150.177954][ T5449] ? show_regs_print_info+0x20/0x20 [ 150.183201][ T5449] ? load_image+0x410/0x410 [ 150.187752][ T5449] ? prandom_u32+0x217/0x250 [ 150.192391][ T5449] should_fail+0x383/0x4b0 [ 150.196866][ T5449] should_failslab+0x5/0x20 [ 150.201416][ T5449] slab_pre_alloc_hook+0x51/0xc0 [ 150.206410][ T5449] kmem_cache_alloc_node+0x47/0x2c0 [ 150.211654][ T5449] ? __alloc_skb+0xf4/0x750 [ 150.216219][ T5449] __alloc_skb+0xf4/0x750 [ 150.220589][ T5449] ? sctp_tsnmap_num_gabs+0x7d/0x440 [ 150.225927][ T5449] _sctp_make_chunk+0x5b/0x430 [ 150.230747][ T5449] sctp_make_sack+0x174/0xe30 [ 150.235501][ T5449] ? lockdep_hardirqs_on+0x94/0x140 [ 150.240840][ T5449] ? sctp_make_datafrag_empty+0x520/0x520 [ 150.246620][ T5449] ? rcu_is_watching+0x11/0xa0 [ 150.251431][ T5449] ? kmem_cache_free+0x14c/0x210 [ 150.256414][ T5449] ? consume_skb+0xb5/0x100 [ 150.260962][ T5449] sctp_assoc_rwnd_increase+0x38b/0x810 [ 150.266552][ T5449] sctp_ulpevent_free+0x20d/0x4f0 [ 150.272056][ T5449] sctp_queue_purge_ulpevents+0x9e/0x120 [ 150.277728][ T5449] sctp_close+0x13f/0x890 [ 150.282231][ T5449] ? __sctp_write_space+0x500/0x500 [ 150.287531][ T5449] ? rwsem_write_trylock+0x135/0x1c0 [ 150.292876][ T5449] ? clear_nonspinnable+0x60/0x60 [ 150.297947][ T5449] ? ip_mc_drop_socket+0x25f/0x270 [ 150.303290][ T5449] inet_release+0x139/0x180 [ 150.307836][ T5449] sock_close+0xbf/0x210 [ 150.312118][ T5449] ? sock_mmap+0x90/0x90 [ 150.316390][ T5449] __fput+0x212/0x8c0 [ 150.320427][ T5449] task_work_run+0x125/0x1a0 [ 150.325075][ T5449] get_signal+0x123e/0x12e0 [ 150.329612][ T5449] ? kick_process+0xd4/0x140 [ 150.334245][ T5449] arch_do_signal_or_restart+0xe6/0x12a0 [ 150.339947][ T5449] ? fput_many+0x15c/0x1a0 [ 150.344416][ T5449] ? __ia32_sys_getpeername+0x80/0x80 [ 150.349844][ T5449] ? get_sigframe_size+0x10/0x10 [ 150.354844][ T5449] ? exit_to_user_mode_loop+0x3b/0x130 [ 150.360341][ T5449] exit_to_user_mode_loop+0x9e/0x130 [ 150.365677][ T5449] exit_to_user_mode_prepare+0xee/0x180 [ 150.371256][ T5449] syscall_exit_to_user_mode+0x16/0x40 [ 150.376834][ T5449] do_syscall_64+0x58/0xa0 [ 150.381278][ T5449] ? clear_bhb_loop+0x30/0x80 [ 150.385985][ T5449] ? clear_bhb_loop+0x30/0x80 [ 150.390693][ T5449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.396617][ T5449] RIP: 0033:0x7f95f27ea0d9 [ 150.401066][ T5449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.420699][ T5449] RSP: 002b:00007f95f0a42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 150.429150][ T5449] RAX: 000000000000cf88 RBX: 00007f95f2a71fa0 RCX: 00007f95f27ea0d9 [ 150.437152][ T5449] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000004 [ 150.445160][ T5449] RBP: 00007f95f2881024 R08: 000020000005ffe4 R09: 000000000000001c [ 150.453165][ T5449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.461161][ T5449] R13: 00007f95f2a72038 R14: 00007f95f2a71fa0 R15: 00007ffc462f21e8 [ 150.469185][ T5449] [ 150.489962][ T3557] CPU: 0 PID: 3557 Comm: udevd Not tainted syzkaller #0 [ 150.496955][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.507043][ T3557] Call Trace: [ 150.510348][ T3557] [ 150.513304][ T3557] dump_stack_lvl+0x188/0x250 [ 150.518026][ T3557] ? show_regs_print_info+0x20/0x20 [ 150.523266][ T3557] ? load_image+0x410/0x410 [ 150.527806][ T3557] ? prandom_u32+0x217/0x250 [ 150.532437][ T3557] should_fail+0x383/0x4b0 [ 150.536890][ T3557] should_failslab+0x5/0x20 [ 150.541418][ T3557] slab_pre_alloc_hook+0x51/0xc0 [ 150.546395][ T3557] __kmalloc+0x6b/0x340 [ 150.550582][ T3557] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 150.556327][ T3557] ? __lock_acquire+0x13dc/0x7b50 [ 150.561380][ T3557] tomoyo_realpath_from_path+0xed/0x5e0 [ 150.566970][ T3557] tomoyo_path_perm+0x23f/0x5d0 [ 150.571878][ T3557] ? tomoyo_path_permission+0x3a0/0x3a0 [ 150.577492][ T3557] ? __might_sleep+0xf0/0xf0 [ 150.582118][ T3557] ? __might_fault+0xb7/0x110 [ 150.586832][ T3557] security_inode_getattr+0xcf/0x120 [ 150.592159][ T3557] vfs_getattr+0x26/0x3a0 [ 150.596540][ T3557] __x64_sys_newfstat+0x137/0x210 [ 150.601595][ T3557] ? __context_tracking_exit+0x4c/0x80 [ 150.607084][ T3557] ? __ia32_sys_newfstatat+0x200/0x200 [ 150.612587][ T3557] ? lock_chain_count+0x20/0x20 [ 150.617485][ T3557] ? lockdep_hardirqs_on+0x94/0x140 [ 150.622728][ T3557] do_syscall_64+0x4c/0xa0 [ 150.627173][ T3557] ? clear_bhb_loop+0x30/0x80 [ 150.631874][ T3557] ? clear_bhb_loop+0x30/0x80 [ 150.636578][ T3557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.642499][ T3557] RIP: 0033:0x7ff9189fbad7 [ 150.646943][ T3557] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 150.666572][ T3557] RSP: 002b:00007fff9056b608 EFLAGS: 00000202 ORIG_RAX: 0000000000000005 [ 150.675017][ T3557] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007ff9189fbad7 [ 150.683019][ T3557] RDX: 0000000000090800 RSI: 00007fff9056b610 RDI: 000000000000000e [ 150.691015][ T3557] RBP: 00007fff9056b610 R08: 0000000000000000 R09: 0000000000000001 [ 150.699006][ T3557] R10: 0000000000000000 R11: 0000000000000202 R12: 00005619404d67b0 [ 150.707086][ T3557] R13: 00000000000000fe R14: 0000561909b93be0 R15: 00007fff9056b970 [ 150.715093][ T3557] [ 150.755836][ T3557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.637956][ T5486] loop1: detected capacity change from 0 to 32768 [ 151.816674][ T5486] XFS (loop1): Mounting V5 Filesystem [ 151.896788][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 151.906098][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 151.978218][ T5475] loop3: detected capacity change from 0 to 32768 [ 151.990784][ T5529] loop2: detected capacity change from 0 to 512 [ 152.076115][ T5475] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.327 (5475) [ 152.139746][ T5486] XFS (loop1): Ending clean mount [ 152.185791][ T5529] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.339: inode has both inline data and extents flags [ 152.432111][ T5529] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.339: couldn't read orphan inode 15 (err -117) [ 152.469696][ T5475] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 152.638252][ T5475] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 152.653067][ T5529] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 152.826338][ T5475] BTRFS info (device loop3): use zstd compression, level 3 [ 153.059022][ T5475] BTRFS info (device loop3): using free space tree [ 153.220962][ T5475] BTRFS info (device loop3): has skinny extents [ 153.482626][ T26] audit: type=1804 audit(1787594116.750:15): pid=5529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.339" name="/newroot/8/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 153.708742][ T5542] process 'syz.4.340' launched './file0' with NULL argv: empty string added [ 154.396139][ T5475] BTRFS error (device loop3): open_ctree failed: -12 [ 154.539820][ T4862] Bluetooth: hci2: command 0x0401 tx timeout [ 154.893862][ T4408] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4408) [ 155.061702][ T4184] XFS (loop1): Unmounting Filesystem [ 155.530060][ T4229] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.809986][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 155.930310][ T4229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.942996][ T4229] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 155.953944][ T5589] loop4: detected capacity change from 0 to 7 [ 155.975333][ T4177] Dev loop4: unable to read RDB block 7 [ 155.983216][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.991608][ T4177] loop4: unable to read partition table [ 156.103749][ T4177] loop4: partition table beyond EOD, truncated [ 156.118602][ T4229] usb 3-1: config 0 descriptor?? [ 156.762455][ T4229] kye 0003:0458:5019.0008: ignoring exceeding usage max [ 156.927529][ T4229] kye 0003:0458:5019.0008: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 157.023870][ T4229] kye 0003:0458:5019.0008: tablet-enabling feature report not found [ 157.096971][ T5589] Dev loop4: unable to read RDB block 7 [ 157.112345][ T4229] kye 0003:0458:5019.0008: tablet enabling failed [ 157.135146][ T5589] loop4: unable to read partition table [ 157.189644][ T5589] loop4: partition table beyond EOD, truncated [ 157.350349][ T5589] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.452453][ T4229] usb 3-1: USB disconnect, device number 10 [ 159.047462][ T5593] fido_id[5593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 159.263733][ T5605] loop0: detected capacity change from 0 to 8192 [ 159.336965][ T5605] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.700062][ T4862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.893409][ T5598] loop2: detected capacity change from 0 to 32768 [ 159.924322][ T5598] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.355 (5598) [ 159.930370][ T5562] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.995576][ T5598] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 160.037213][ T5598] BTRFS info (device loop2): turning on sync discard [ 160.066458][ T5598] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.077110][ T4862] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.098874][ T4862] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 160.112540][ T5598] BTRFS info (device loop2): use zstd compression, level 3 [ 160.122679][ T5598] BTRFS info (device loop2): turning on async discard [ 160.130626][ T5598] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 160.147459][ T26] audit: type=1800 audit(1787594123.430:16): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.367" name="bmaControls" dev="configfs" ino=38921 res=0 errno=0 [ 160.150130][ T5598] BTRFS info (device loop2): trying to use backup root at mount time [ 160.220068][ T5598] BTRFS info (device loop2): enabling auto defrag [ 160.228811][ T5562] usb 5-1: Using ep0 maxpacket: 8 [ 160.235724][ T5598] BTRFS info (device loop2): using free space tree [ 160.242953][ T5598] BTRFS info (device loop2): has skinny extents [ 160.291343][ T4862] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.315762][ T4862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.331108][ T4862] usb 4-1: Product: syz [ 160.335796][ T4862] usb 4-1: Manufacturer: syz [ 160.341308][ T4862] usb 4-1: SerialNumber: syz [ 160.395707][ T5562] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.411562][ T4862] cdc_mbim 4-1:1.0: skipping garbage [ 160.434683][ T5653] loop1: detected capacity change from 0 to 1764 [ 160.455834][ T4224] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 160.468849][ T5598] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 160.477412][ T4538] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 160.490496][ T5562] usb 5-1: config 4 interface 0 has no altsetting 0 [ 160.497393][ T5598] BTRFS warning (device loop2): couldn't read tree root [ 160.500307][ T5342] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.507560][ T5598] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 160.522729][ T5598] BTRFS warning (device loop2): couldn't read tree root [ 160.549355][ T5598] BTRFS info (device loop2): enabling ssd optimizations [ 160.557277][ T5598] BTRFS info (device loop2): clearing free space tree [ 160.579599][ T5598] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.597242][ T5598] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.641004][ T5620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.681430][ T5598] BTRFS info (device loop2): creating free space tree [ 160.689262][ T5598] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.728412][ T5598] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.796580][ T5342] usb 1-1: Using ep0 maxpacket: 32 [ 160.981254][ T5342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.077225][ T5342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 161.351143][ T5620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.376546][ T5342] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 161.400035][ T5342] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 161.410493][ T4862] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 161.441928][ T4862] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 161.456415][ T5342] usb 1-1: Product: syz [ 161.463926][ T5342] usb 1-1: Manufacturer: syz [ 161.501157][ T5342] usb 1-1: config 0 descriptor?? [ 161.531737][ T5634] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 161.546808][ T4862] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fa:d0:e1:12:ef:0a [ 161.603829][ T5562] usb 5-1: string descriptor 0 read error: -22 [ 161.634347][ T5562] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 161.674247][ T5562] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 161.762608][ T5562] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 161.791046][ T5562] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.816063][ T5562] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 161.829214][ T5562] usb 5-1: media controller created [ 161.905473][ T5562] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.000155][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.007426][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.019329][ T5342] hid-generic 0003:25DD:F3D2.0009: hiddev1,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 162.040088][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.046821][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.080394][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.081466][ T5668] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.087126][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.109963][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.116705][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.139946][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.146689][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.170021][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.176749][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.199961][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.206692][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.230007][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.237548][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.260059][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.266801][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.284239][ T4225] usb 1-1: USB disconnect, device number 10 [ 162.290343][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 162.290368][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 162.330033][ T1107] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.512951][ T3850] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 162.580155][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 162.723090][ T5701] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 162.723090][ T5701] program syz.2.376 not setting count and/or reply_len properly [ 162.860355][ T1107] usb 2-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 162.882242][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.911426][ T1107] usb 2-1: Product: syz [ 162.926960][ T1107] usb 2-1: Manufacturer: syz [ 162.947857][ T1107] usb 2-1: SerialNumber: syz [ 163.082468][ T5342] usb 4-1: USB disconnect, device number 7 [ 163.106974][ T5342] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 163.166508][ T5562] usb 5-1: USB disconnect, device number 16 [ 163.300610][ T1107] usb 2-1: BAAD HEADSET c_chmask mismatch [ 163.381475][ T1107] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 163.411238][ T1107] usb 2-1: selecting invalid altsetting 1 [ 163.432287][ T1107] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 163.438974][ T1107] usb 2-1: unable to init card! (ret=-5) [ 163.463871][ T1107] snd-usb-caiaq: probe of 2-1:1.0 failed with error -5 [ 163.525046][ T1107] usb 2-1: selecting invalid altsetting 1 [ 163.541233][ T1107] snd-usb-caiaq 2-1:1.1: can't set alt interface. [ 163.547981][ T1107] usb 2-1: unable to init card! (ret=-5) [ 163.564019][ T1107] snd-usb-caiaq: probe of 2-1:1.1 failed with error -5 [ 163.585740][ T1107] usb 2-1: selecting invalid altsetting 1 [ 163.598290][ T1107] snd-usb-caiaq 2-1:1.2: can't set alt interface. [ 163.613834][ T1107] usb 2-1: unable to init card! (ret=-5) [ 163.624485][ T1107] snd-usb-caiaq: probe of 2-1:1.2 failed with error -5 [ 163.640134][ T4229] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.676604][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.697539][ T1107] usb 2-1: USB disconnect, device number 9 [ 164.090376][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.210216][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.245265][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.550265][ T4229] usb 1-1: string descriptor 0 read error: -22 [ 164.561008][ T4229] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 164.610877][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.702102][ T4229] usb 1-1: selecting invalid altsetting 1 [ 164.727849][ T4229] usb 1-1: unit 3 not found! [ 164.761879][ T5743] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 164.812628][ T5731] loop4: detected capacity change from 0 to 32768 [ 164.841293][ T5731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.382 (5731) [ 164.889538][ T5731] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 164.910236][ T4229] usb 1-1: unit 82 not found! [ 164.915008][ T4229] usb 1-1: unit 28 not found! [ 164.932821][ T5731] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.956202][ T5731] BTRFS info (device loop4): trying to use backup root at mount time [ 164.976179][ T4229] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 165.020399][ T5731] BTRFS info (device loop4): setting nodatasum [ 165.030228][ T5746] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 165.057044][ T5731] BTRFS info (device loop4): enabling ssd optimizations [ 165.073080][ T5746] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 165.081996][ T5731] BTRFS info (device loop4): using spread ssd allocation scheme [ 165.089740][ T5731] BTRFS info (device loop4): turning on flush-on-commit [ 165.112806][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.134804][ T5731] BTRFS info (device loop4): force zlib compression, level 3 [ 165.144626][ T5731] BTRFS info (device loop4): using free space tree [ 165.180051][ T5731] BTRFS info (device loop4): has skinny extents [ 165.203864][ T4229] usb 1-1: USB disconnect, device number 11 [ 165.479250][ T26] audit: type=1800 audit(1787594128.750:17): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.382" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 165.590177][ T5771] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -6 0 [ 167.400207][ T5562] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.050463][ T5562] usb 3-1: config 0 has no interfaces? [ 168.056326][ T5562] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 168.252833][ T5562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.622834][ T5562] usb 3-1: config 0 descriptor?? [ 168.952407][ T5342] usb 3-1: USB disconnect, device number 11 [ 169.137923][ T5813] loop0: detected capacity change from 0 to 32768 [ 169.152984][ T5823] loop3: detected capacity change from 0 to 512 [ 169.194711][ T5813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.395 (5813) [ 169.298360][ T5823] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.397: iget: bad i_size value: 38620345925642 [ 169.320631][ T5823] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.397: couldn't read orphan inode 15 (err -117) [ 169.369991][ T5818] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.378055][ T5823] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.390926][ T5813] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.430925][ T5813] BTRFS info (device loop0): metadata ratio 2 [ 169.437102][ T5813] BTRFS info (device loop0): force zlib compression, level 3 [ 169.449079][ T5813] BTRFS info (device loop0): enabling auto defrag [ 169.456978][ T5813] BTRFS info (device loop0): max_inline at 0 [ 169.484891][ T5813] BTRFS info (device loop0): using free space tree [ 169.496351][ T5834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.397: bg 0: block 5: invalid block bitmap [ 169.520140][ T5813] BTRFS info (device loop0): has skinny extents [ 169.539563][ T5833] device syzkaller1 entered promiscuous mode [ 169.554834][ T5834] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 164 with error 28 [ 169.569142][ T5834] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.569142][ T5834] [ 169.580889][ T5834] EXT4-fs (loop3): Total free blocks count 0 [ 169.587007][ T5834] EXT4-fs (loop3): Free/Dirty block details [ 169.593223][ T5834] EXT4-fs (loop3): free_blocks=0 [ 169.598857][ T5834] EXT4-fs (loop3): dirty_blocks=164 [ 169.614414][ T5834] EXT4-fs (loop3): Block reservation details [ 169.622691][ T5834] EXT4-fs (loop3): i_reserved_data_blocks=164 [ 169.812866][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 169.822815][ T5818] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 169.832937][ T5818] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 169.842337][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.919451][ T5818] usb 2-1: probing VID:PID(0424:012C) [ 169.931629][ T5818] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 169.938143][ T5818] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 169.944877][ T26] audit: type=1800 audit(1787594133.220:18): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.395" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 170.000046][ T5818] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 170.006446][ T5818] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 170.043097][ T5818] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 170.284953][ T4177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4177) [ 170.311258][ T5818] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 170.340534][ T4363] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.399650][ T5879] overlayfs: failed to set xattr on upper [ 170.448536][ T5879] overlayfs: ...falling back to index=off,metacopy=off. [ 170.492018][ T5879] overlayfs: failed to resolve './file0': -2 [ 170.550138][ T5818] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 171.630045][ T4363] usb 3-1: Using ep0 maxpacket: 32 [ 173.381545][ T4363] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 173.426103][ T4363] usb 3-1: can't read configurations, error -71 [ 174.150061][ T5818] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 174.191348][ T5818] usb 2-1: USB disconnect, device number 10 [ 174.236934][ T5818] USB vub300 remote SDIO host controller[0] now disconnected [ 174.960145][ C0] [ 174.970044][ C0] ================================ [ 174.975152][ C0] WARNING: inconsistent lock state [ 174.980302][ C0] syzkaller #0 Not tainted [ 174.984757][ C0] -------------------------------- [ 174.989882][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 174.996745][ C0] syz.2.408/5906 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 175.003003][ C0] ffff888078240710 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xfa/0x210 [ 175.014161][ C0] {SOFTIRQ-ON-W} state was registered at: [ 175.019865][ C0] lock_acquire+0x19e/0x400 [ 175.024493][ C0] __flush_work+0x116/0x210 [ 175.029074][ C0] __cancel_work_timer+0x3f4/0x560 [ 175.034276][ C0] mmc_stop_host+0xd5/0x460 [ 175.038869][ C0] mmc_remove_host+0x11/0x60 [ 175.043545][ C0] vub300_disconnect+0x14b/0x2e0 [ 175.048565][ C0] usb_unbind_interface+0x203/0x870 [ 175.053846][ C0] device_release_driver_internal+0x487/0x710 [ 175.060012][ C0] bus_remove_device+0x2dd/0x400 [ 175.065046][ C0] device_del+0x63f/0xa80 [ 175.069469][ C0] usb_disable_device+0x3e7/0x8a0 [ 175.074574][ C0] usb_disconnect+0x33c/0x8a0 [ 175.079332][ C0] hub_event+0x1d64/0x5260 [ 175.083835][ C0] process_one_work+0x867/0xff0 [ 175.088783][ C0] worker_thread+0xd93/0x12a0 [ 175.093550][ C0] kthread+0x42e/0x520 [ 175.097704][ C0] ret_from_fork+0x1f/0x30 [ 175.102212][ C0] irq event stamp: 162524 [ 175.106529][ C0] hardirqs last enabled at (162524): [] __cancel_work_timer+0x36a/0x560 [ 175.116503][ C0] hardirqs last disabled at (162523): [] try_to_grab_pending+0xfb/0x820 [ 175.126387][ C0] softirqs last enabled at (159982): [] __irq_exit_rcu+0x13b/0x230 [ 175.135929][ C0] softirqs last disabled at (162459): [] __irq_exit_rcu+0x13b/0x230 [ 175.145482][ C0] [ 175.145482][ C0] other info that might help us debug this: [ 175.153540][ C0] Possible unsafe locking scenario: [ 175.153540][ C0] [ 175.161000][ C0] CPU0 [ 175.164271][ C0] ---- [ 175.167538][ C0] lock((work_completion)(&(&host->detect)->work)); [ 175.174223][ C0] [ 175.177664][ C0] lock((work_completion)(&(&host->detect)->work)); [ 175.184501][ C0] [ 175.184501][ C0] *** DEADLOCK *** [ 175.184501][ C0] [ 175.192720][ C0] 2 locks held by syz.2.408/5906: [ 175.197748][ C0] #0: ffff88805dd9c5a0 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x1f8/0xd50 [ 175.207404][ C0] #1: ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 175.217853][ C0] [ 175.217853][ C0] stack backtrace: [ 175.223734][ C0] CPU: 0 PID: 5906 Comm: syz.2.408 Not tainted syzkaller #0 [ 175.231032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.241098][ C0] Call Trace: [ 175.244395][ C0] [ 175.247238][ C0] dump_stack_lvl+0x188/0x250 [ 175.251916][ C0] ? show_regs_print_info+0x20/0x20 [ 175.257116][ C0] ? unwind_get_return_address+0x49/0x80 [ 175.262751][ C0] valid_state+0x13b/0x1d0 [ 175.267165][ C0] mark_lock_irq+0xa9/0x900 [ 175.271683][ C0] ? stack_trace_save+0xa6/0xf0 [ 175.276534][ C0] ? save_trace+0xad0/0xad0 [ 175.281041][ C0] ? save_trace+0x5a/0xad0 [ 175.285467][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 175.290517][ C0] mark_lock+0x208/0x320 [ 175.294764][ C0] __lock_acquire+0xc63/0x7b50 [ 175.299531][ C0] ? verify_lock_unused+0x140/0x140 [ 175.304733][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.310715][ C0] ? verify_lock_unused+0x140/0x140 [ 175.315995][ C0] ? __rwlock_init+0x140/0x140 [ 175.320760][ C0] ? debug_object_assert_init+0x1e8/0x2f0 [ 175.326501][ C0] lock_acquire+0x19e/0x400 [ 175.331010][ C0] ? __flush_work+0xfa/0x210 [ 175.335598][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 175.341484][ C0] ? read_lock_is_recursive+0x10/0x10 [ 175.346877][ C0] ? kobject_put+0x25c/0x450 [ 175.351465][ C0] ? call_timer_fn+0x17b/0x540 [ 175.356230][ C0] ? __run_timers+0x56c/0x810 [ 175.360919][ C0] ? run_timer_softirq+0x63/0xf0 [ 175.365871][ C0] __flush_work+0x116/0x210 [ 175.370481][ C0] ? __flush_work+0xfa/0x210 [ 175.375079][ C0] ? flush_work+0x20/0x20 [ 175.379404][ C0] ? __timer_delete+0x6c/0x220 [ 175.384177][ C0] ? mark_lock+0x94/0x320 [ 175.388617][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.394595][ C0] ? lock_chain_count+0x20/0x20 [ 175.399443][ C0] ? kasan_quarantine_put+0x39/0x210 [ 175.404724][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 175.410011][ C0] ? __cancel_work_timer+0x36a/0x560 [ 175.415301][ C0] __cancel_work_timer+0x3f4/0x560 [ 175.420508][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 175.426052][ C0] ? cancel_work_sync+0x20/0x20 [ 175.430898][ C0] ? kobject_put+0x25c/0x450 [ 175.435491][ C0] ? kfree+0xef/0x2a0 [ 175.439474][ C0] ? kobject_put+0x41d/0x450 [ 175.444071][ C0] ? kref_get+0x70/0x70 [ 175.448220][ C0] mmc_free_host+0x15/0x30 [ 175.452650][ C0] call_timer_fn+0x17b/0x540 [ 175.457254][ C0] ? kref_get+0x70/0x70 [ 175.461410][ C0] ? __run_timers+0x810/0x810 [ 175.466083][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 175.471273][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 175.476466][ C0] ? kref_get+0x70/0x70 [ 175.480617][ C0] __run_timers+0x56c/0x810 [ 175.485124][ C0] ? detach_timer+0x2b0/0x2b0 [ 175.489797][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.495788][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 175.500635][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 175.506873][ C0] run_timer_softirq+0x63/0xf0 [ 175.511632][ C0] handle_softirqs+0x336/0x830 [ 175.516391][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 175.521236][ C0] ? do_softirq+0x210/0x210 [ 175.525734][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 175.530843][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 175.536040][ C0] __irq_exit_rcu+0x13b/0x230 [ 175.540806][ C0] ? irq_exit_rcu+0x20/0x20 [ 175.545308][ C0] irq_exit_rcu+0x5/0x20 [ 175.549545][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 175.555180][ C0] [ 175.558125][ C0] [ 175.561051][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 175.567028][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 175.573530][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ef 90 88 f7 65 8b 05 60 b8 38 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 175.593151][ C0] RSP: 0018:ffffc9000305f5e0 EFLAGS: 00000206 [ 175.599236][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 90d0dfaed0634200 [ 175.607203][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 175.615198][ C0] RBP: ffffc9000305f670 R08: ffffffff901ef177 R09: 1ffffffff203de2e [ 175.623165][ C0] R10: dffffc0000000000 R11: fffffbfff203de2f R12: dffffc0000000000 [ 175.631218][ C0] R13: 0000000000000000 R14: ffff88805dd9c6c0 R15: 1ffff9200060bebc [ 175.639208][ C0] ? _raw_spin_unlock+0x40/0x40 [ 175.644057][ C0] ? __wake_up_common+0x28e/0x4d0 [ 175.649085][ C0] __wake_up_sync_key+0x128/0x190 [ 175.654111][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 175.660109][ C0] ? sock_load_diag_module+0x130/0x130 [ 175.665566][ C0] __unix_dgram_recvmsg+0x4b1/0xd50 [ 175.670762][ C0] ? unix_unhash+0x10/0x10 [ 175.675183][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 175.680200][ C0] ? unix_dgram_sendmsg+0x19c0/0x19c0 [ 175.685570][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 175.690341][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 175.695367][ C0] ? import_iovec+0x6f/0xa0 [ 175.699876][ C0] ___sys_recvmsg+0x213/0x5c0 [ 175.704584][ C0] ? __sys_recvmsg+0x280/0x280 [ 175.709350][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 175.714377][ C0] ? __might_fault+0xb3/0x110 [ 175.719048][ C0] do_recvmmsg+0x360/0x7f0 [ 175.723463][ C0] ? __sys_recvmmsg+0x290/0x290 [ 175.728318][ C0] ? __context_tracking_exit+0x4c/0x80 [ 175.733769][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 175.738822][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 175.743846][ C0] ? do_recvmmsg+0x7f0/0x7f0 [ 175.748451][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 175.753652][ C0] do_syscall_64+0x4c/0xa0 [ 175.758064][ C0] ? clear_bhb_loop+0x30/0x80 [ 175.762737][ C0] ? clear_bhb_loop+0x30/0x80 [ 175.767413][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.773340][ C0] RIP: 0033:0x7f3bbbffa0d9 [ 175.777753][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.797352][ C0] RSP: 002b:00007f3bba231028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 175.805759][ C0] RAX: ffffffffffffffda RBX: 00007f3bbc282090 RCX: 00007f3bbbffa0d9 [ 175.813725][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 175.821692][ C0] RBP: 00007f3bbc091024 R08: 0000000000000000 R09: 0000000000000000 [ 175.829658][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 175.837628][ C0] R13: 00007f3bbc282128 R14: 00007f3bbc282090 R15: 00007ffc899c1da8 [ 175.845602][ C0] [ 175.848721][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3031 [ 175.857747][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5906, name: syz.2.408 [ 175.866689][ C0] INFO: lockdep is turned off. [ 175.871459][ C0] Preemption disabled at: [ 175.871465][ C0] [<0000000000000000>] 0x0 [ 175.880198][ C0] CPU: 0 PID: 5906 Comm: syz.2.408 Not tainted syzkaller #0 [ 175.887488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.897552][ C0] Call Trace: [ 175.900834][ C0] [ 175.903701][ C0] dump_stack_lvl+0x188/0x250 [ 175.908380][ C0] ? lock_chain_count+0x20/0x20 [ 175.913223][ C0] ? show_regs_print_info+0x20/0x20 [ 175.918501][ C0] ? load_image+0x410/0x410 [ 175.923021][ C0] ? asm_common_interrupt+0x22/0x40 [ 175.928214][ C0] ___might_sleep+0x493/0x610 [ 175.932907][ C0] ? __might_sleep+0xf0/0xf0 [ 175.937493][ C0] ? lock_release+0xb5/0x8a0 [ 175.942080][ C0] ? __flush_work+0x11a/0x210 [ 175.946768][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 175.952656][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 175.957674][ C0] ? kobject_put+0x25c/0x450 [ 175.962263][ C0] start_flush_work+0x2e/0x830 [ 175.967040][ C0] __flush_work+0x148/0x210 [ 175.971552][ C0] ? flush_work+0x20/0x20 [ 175.975882][ C0] ? lock_chain_count+0x20/0x20 [ 175.980750][ C0] ? kasan_quarantine_put+0x39/0x210 [ 175.986031][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 175.991314][ C0] ? __cancel_work_timer+0x36a/0x560 [ 175.996611][ C0] __cancel_work_timer+0x3f4/0x560 [ 176.001716][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 176.007256][ C0] ? cancel_work_sync+0x20/0x20 [ 176.012097][ C0] ? kobject_put+0x25c/0x450 [ 176.016697][ C0] ? kfree+0xef/0x2a0 [ 176.020672][ C0] ? kobject_put+0x41d/0x450 [ 176.025278][ C0] ? kref_get+0x70/0x70 [ 176.029428][ C0] mmc_free_host+0x15/0x30 [ 176.033859][ C0] call_timer_fn+0x17b/0x540 [ 176.038444][ C0] ? kref_get+0x70/0x70 [ 176.042594][ C0] ? __run_timers+0x810/0x810 [ 176.047268][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 176.052462][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 176.057658][ C0] ? kref_get+0x70/0x70 [ 176.061836][ C0] __run_timers+0x56c/0x810 [ 176.066359][ C0] ? detach_timer+0x2b0/0x2b0 [ 176.071046][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.077026][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 176.081872][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 176.088109][ C0] run_timer_softirq+0x63/0xf0 [ 176.092872][ C0] handle_softirqs+0x336/0x830 [ 176.097634][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 176.102484][ C0] ? do_softirq+0x210/0x210 [ 176.106998][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 176.112108][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 176.117306][ C0] __irq_exit_rcu+0x13b/0x230 [ 176.121976][ C0] ? irq_exit_rcu+0x20/0x20 [ 176.126477][ C0] irq_exit_rcu+0x5/0x20 [ 176.130715][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 176.136362][ C0] [ 176.139306][ C0] [ 176.142232][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 176.148480][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 176.154993][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ef 90 88 f7 65 8b 05 60 b8 38 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 176.174605][ C0] RSP: 0018:ffffc9000305f5e0 EFLAGS: 00000206 [ 176.180676][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 90d0dfaed0634200 [ 176.188747][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 176.196723][ C0] RBP: ffffc9000305f670 R08: ffffffff901ef177 R09: 1ffffffff203de2e [ 176.204706][ C0] R10: dffffc0000000000 R11: fffffbfff203de2f R12: dffffc0000000000 [ 176.212768][ C0] R13: 0000000000000000 R14: ffff88805dd9c6c0 R15: 1ffff9200060bebc [ 176.220749][ C0] ? _raw_spin_unlock+0x40/0x40 [ 176.225602][ C0] ? __wake_up_common+0x28e/0x4d0 [ 176.230628][ C0] __wake_up_sync_key+0x128/0x190 [ 176.235676][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 176.241680][ C0] ? sock_load_diag_module+0x130/0x130 [ 176.247142][ C0] __unix_dgram_recvmsg+0x4b1/0xd50 [ 176.252343][ C0] ? unix_unhash+0x10/0x10 [ 176.256782][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 176.261812][ C0] ? unix_dgram_sendmsg+0x19c0/0x19c0 [ 176.267223][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 176.272342][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 176.277368][ C0] ? import_iovec+0x6f/0xa0 [ 176.281867][ C0] ___sys_recvmsg+0x213/0x5c0 [ 176.286542][ C0] ? __sys_recvmsg+0x280/0x280 [ 176.291307][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 176.296335][ C0] ? __might_fault+0xb3/0x110 [ 176.301032][ C0] do_recvmmsg+0x360/0x7f0 [ 176.305449][ C0] ? __sys_recvmmsg+0x290/0x290 [ 176.310295][ C0] ? __context_tracking_exit+0x4c/0x80 [ 176.315754][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 176.320775][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 176.325795][ C0] ? do_recvmmsg+0x7f0/0x7f0 [ 176.330378][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 176.335567][ C0] do_syscall_64+0x4c/0xa0 [ 176.339976][ C0] ? clear_bhb_loop+0x30/0x80 [ 176.344646][ C0] ? clear_bhb_loop+0x30/0x80 [ 176.349316][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.355205][ C0] RIP: 0033:0x7f3bbbffa0d9 [ 176.359615][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.379228][ C0] RSP: 002b:00007f3bba231028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.387645][ C0] RAX: ffffffffffffffda RBX: 00007f3bbc282090 RCX: 00007f3bbbffa0d9 [ 176.395613][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 176.403580][ C0] RBP: 00007f3bbc091024 R08: 0000000000000000 R09: 0000000000000000 [ 176.411544][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 176.419508][ C0] R13: 00007f3bbc282128 R14: 00007f3bbc282090 R15: 00007ffc899c1da8 [ 176.427488][ C0] [ 176.430528][ C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffc90003058000, but annotated. [ 176.440193][ C0] ------------[ cut here ]------------ [ 176.445645][ C0] WARNING: CPU: 0 PID: 5906 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80 [ 176.455190][ C0] Modules linked in: [ 176.459078][ C0] CPU: 0 PID: 5906 Comm: syz.2.408 Tainted: G W syzkaller #0 [ 176.467739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.477790][ C0] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 176.483679][ C0] Code: a6 23 73 12 48 c7 c1 c0 4a 7a 8a 48 c7 c7 20 4b 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ba cd c8 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d d2 22 73 12 00 4c 89 6c 24 28 0f 84 23 [ 176.503285][ C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00010046 [ 176.509347][ C0] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 90d0dfaed0634200 [ 176.517331][ C0] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 176.525296][ C0] RBP: ffffc90000007950 R08: ffffc90000007307 R09: 1ffff92000000e60 [ 176.533265][ C0] R10: dffffc0000000000 R11: fffff52000000e61 R12: f8f8f8f8f8f8f8f8 [ 176.541233][ C0] R13: ffffc900000079a0 R14: ffff888021923ba0 R15: ffff88801fca53f0 [ 176.549199][ C0] FS: 00007f3bba2316c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 176.558146][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.564722][ C0] CR2: 0000200000307030 CR3: 0000000062083000 CR4: 00000000003526f0 [ 176.572687][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 176.580675][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.588639][ C0] Call Trace: [ 176.591920][ C0] [ 176.594782][ C0] ? lockdep_init_map_type+0x98/0x900 [ 176.600158][ C0] ? debug_object_init+0x10/0x10 [ 176.605106][ C0] ? lockdep_softirqs_off+0x430/0x430 [ 176.610474][ C0] ? rcu_is_watching+0x11/0xa0 [ 176.615232][ C0] ? __might_sleep+0xf0/0xf0 [ 176.619811][ C0] ? lock_release+0xb5/0x8a0 [ 176.624422][ C0] ? __init_swait_queue_head+0xa4/0x140 [ 176.629972][ C0] __synchronize_srcu+0x229/0x350 [ 176.635003][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 176.640722][ C0] ? _raw_spin_unlock+0x40/0x40 [ 176.645583][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 176.651123][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 176.656148][ C0] wakeup_source_unregister+0x112/0x190 [ 176.661691][ C0] mmc_host_classdev_release+0x43/0xf0 [ 176.667144][ C0] ? mmc_free_host+0x30/0x30 [ 176.671727][ C0] device_release+0x92/0x1c0 [ 176.676312][ C0] kobject_put+0x217/0x450 [ 176.680749][ C0] ? kref_get+0x70/0x70 [ 176.684923][ C0] call_timer_fn+0x17b/0x540 [ 176.689512][ C0] ? kref_get+0x70/0x70 [ 176.693658][ C0] ? __run_timers+0x810/0x810 [ 176.698334][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 176.703524][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 176.708721][ C0] ? kref_get+0x70/0x70 [ 176.712870][ C0] __run_timers+0x56c/0x810 [ 176.717372][ C0] ? detach_timer+0x2b0/0x2b0 [ 176.722050][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.728030][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 176.732874][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 176.739133][ C0] run_timer_softirq+0x63/0xf0 [ 176.743905][ C0] handle_softirqs+0x336/0x830 [ 176.748671][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 176.753537][ C0] ? do_softirq+0x210/0x210 [ 176.758051][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 176.763174][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 176.768375][ C0] __irq_exit_rcu+0x13b/0x230 [ 176.773050][ C0] ? irq_exit_rcu+0x20/0x20 [ 176.777671][ C0] irq_exit_rcu+0x5/0x20 [ 176.781911][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 176.787634][ C0] [ 176.790559][ C0] [ 176.793494][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 176.799511][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 176.806031][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ef 90 88 f7 65 8b 05 60 b8 38 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 176.825881][ C0] RSP: 0018:ffffc9000305f5e0 EFLAGS: 00000206 [ 176.831958][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 90d0dfaed0634200 [ 176.839939][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 176.847924][ C0] RBP: ffffc9000305f670 R08: ffffffff901ef177 R09: 1ffffffff203de2e [ 176.855895][ C0] R10: dffffc0000000000 R11: fffffbfff203de2f R12: dffffc0000000000 [ 176.863867][ C0] R13: 0000000000000000 R14: ffff88805dd9c6c0 R15: 1ffff9200060bebc [ 176.871932][ C0] ? _raw_spin_unlock+0x40/0x40 [ 176.876784][ C0] ? __wake_up_common+0x28e/0x4d0 [ 176.881810][ C0] __wake_up_sync_key+0x128/0x190 [ 176.886835][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 176.892810][ C0] ? sock_load_diag_module+0x130/0x130 [ 176.898266][ C0] __unix_dgram_recvmsg+0x4b1/0xd50 [ 176.903464][ C0] ? unix_unhash+0x10/0x10 [ 176.907883][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 176.912927][ C0] ? unix_dgram_sendmsg+0x19c0/0x19c0 [ 176.918310][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 176.923105][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 176.928131][ C0] ? import_iovec+0x6f/0xa0 [ 176.932630][ C0] ___sys_recvmsg+0x213/0x5c0 [ 176.937307][ C0] ? __sys_recvmsg+0x280/0x280 [ 176.942077][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 176.947103][ C0] ? __might_fault+0xb3/0x110 [ 176.951777][ C0] do_recvmmsg+0x360/0x7f0 [ 176.956193][ C0] ? __sys_recvmmsg+0x290/0x290 [ 176.961043][ C0] ? __context_tracking_exit+0x4c/0x80 [ 176.966516][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 176.971552][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 176.976575][ C0] ? do_recvmmsg+0x7f0/0x7f0 [ 176.981162][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 176.986367][ C0] do_syscall_64+0x4c/0xa0 [ 176.990773][ C0] ? clear_bhb_loop+0x30/0x80 [ 176.995471][ C0] ? clear_bhb_loop+0x30/0x80 [ 177.000175][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.006076][ C0] RIP: 0033:0x7f3bbbffa0d9 [ 177.010498][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.030100][ C0] RSP: 002b:00007f3bba231028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.038521][ C0] RAX: ffffffffffffffda RBX: 00007f3bbc282090 RCX: 00007f3bbbffa0d9 [ 177.046489][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 177.054459][ C0] RBP: 00007f3bbc091024 R08: 0000000000000000 R09: 0000000000000000 [ 177.062471][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 177.070442][ C0] R13: 00007f3bbc282128 R14: 00007f3bbc282090 R15: 00007ffc899c1da8 [ 177.078416][ C0] [ 177.081449][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.088720][ C0] CPU: 0 PID: 5906 Comm: syz.2.408 Tainted: G W syzkaller #0 [ 177.097383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.107428][ C0] Call Trace: [ 177.110699][ C0] [ 177.113534][ C0] dump_stack_lvl+0x188/0x250 [ 177.118205][ C0] ? show_regs_print_info+0x20/0x20 [ 177.123407][ C0] ? load_image+0x410/0x410 [ 177.127913][ C0] panic+0x2f8/0x850 [ 177.131927][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 177.136468][ C0] ? __debug_object_init+0x4c0/0xc80 [ 177.141766][ C0] __warn+0x248/0x2b0 [ 177.145750][ C0] ? __debug_object_init+0x4c0/0xc80 [ 177.151033][ C0] report_bug+0x1b9/0x2e0 [ 177.155363][ C0] handle_bug+0x3a/0x70 [ 177.159519][ C0] exc_invalid_op+0x16/0x40 [ 177.164029][ C0] asm_exc_invalid_op+0x16/0x20 [ 177.168888][ C0] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 177.174811][ C0] Code: a6 23 73 12 48 c7 c1 c0 4a 7a 8a 48 c7 c7 20 4b 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ba cd c8 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d d2 22 73 12 00 4c 89 6c 24 28 0f 84 23 [ 177.194435][ C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00010046 [ 177.200535][ C0] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 90d0dfaed0634200 [ 177.208504][ C0] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 177.216470][ C0] RBP: ffffc90000007950 R08: ffffc90000007307 R09: 1ffff92000000e60 [ 177.224442][ C0] R10: dffffc0000000000 R11: fffff52000000e61 R12: f8f8f8f8f8f8f8f8 [ 177.232409][ C0] R13: ffffc900000079a0 R14: ffff888021923ba0 R15: ffff88801fca53f0 [ 177.240394][ C0] ? lockdep_init_map_type+0x98/0x900 [ 177.245781][ C0] ? debug_object_init+0x10/0x10 [ 177.250733][ C0] ? lockdep_softirqs_off+0x430/0x430 [ 177.256130][ C0] ? rcu_is_watching+0x11/0xa0 [ 177.260984][ C0] ? __might_sleep+0xf0/0xf0 [ 177.265576][ C0] ? lock_release+0xb5/0x8a0 [ 177.270169][ C0] ? __init_swait_queue_head+0xa4/0x140 [ 177.275735][ C0] __synchronize_srcu+0x229/0x350 [ 177.280770][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 177.286501][ C0] ? _raw_spin_unlock+0x40/0x40 [ 177.291360][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 177.296909][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 177.301938][ C0] wakeup_source_unregister+0x112/0x190 [ 177.307493][ C0] mmc_host_classdev_release+0x43/0xf0 [ 177.312972][ C0] ? mmc_free_host+0x30/0x30 [ 177.317573][ C0] device_release+0x92/0x1c0 [ 177.322176][ C0] kobject_put+0x217/0x450 [ 177.326615][ C0] ? kref_get+0x70/0x70 [ 177.330779][ C0] call_timer_fn+0x17b/0x540 [ 177.335372][ C0] ? kref_get+0x70/0x70 [ 177.339568][ C0] ? __run_timers+0x810/0x810 [ 177.344256][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 177.349451][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 177.354648][ C0] ? kref_get+0x70/0x70 [ 177.358803][ C0] __run_timers+0x56c/0x810 [ 177.363312][ C0] ? detach_timer+0x2b0/0x2b0 [ 177.367987][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.373968][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 177.378820][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 177.385078][ C0] run_timer_softirq+0x63/0xf0 [ 177.389838][ C0] handle_softirqs+0x336/0x830 [ 177.394599][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 177.399448][ C0] ? do_softirq+0x210/0x210 [ 177.403963][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 177.409074][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 177.414304][ C0] __irq_exit_rcu+0x13b/0x230 [ 177.418977][ C0] ? irq_exit_rcu+0x20/0x20 [ 177.423482][ C0] irq_exit_rcu+0x5/0x20 [ 177.427720][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 177.433354][ C0] [ 177.436301][ C0] [ 177.439243][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 177.445219][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 177.451716][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ef 90 88 f7 65 8b 05 60 b8 38 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 177.471445][ C0] RSP: 0018:ffffc9000305f5e0 EFLAGS: 00000206 [ 177.477514][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 90d0dfaed0634200 [ 177.485485][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 177.493473][ C0] RBP: ffffc9000305f670 R08: ffffffff901ef177 R09: 1ffffffff203de2e [ 177.501447][ C0] R10: dffffc0000000000 R11: fffffbfff203de2f R12: dffffc0000000000 [ 177.509442][ C0] R13: 0000000000000000 R14: ffff88805dd9c6c0 R15: 1ffff9200060bebc [ 177.517435][ C0] ? _raw_spin_unlock+0x40/0x40 [ 177.522314][ C0] ? __wake_up_common+0x28e/0x4d0 [ 177.527338][ C0] __wake_up_sync_key+0x128/0x190 [ 177.532390][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 177.538385][ C0] ? sock_load_diag_module+0x130/0x130 [ 177.543862][ C0] __unix_dgram_recvmsg+0x4b1/0xd50 [ 177.549057][ C0] ? unix_unhash+0x10/0x10 [ 177.553469][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 177.558488][ C0] ? unix_dgram_sendmsg+0x19c0/0x19c0 [ 177.563858][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 177.568623][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 177.573646][ C0] ? import_iovec+0x6f/0xa0 [ 177.578139][ C0] ___sys_recvmsg+0x213/0x5c0 [ 177.582817][ C0] ? __sys_recvmsg+0x280/0x280 [ 177.587585][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 177.592604][ C0] ? __might_fault+0xb3/0x110 [ 177.597294][ C0] do_recvmmsg+0x360/0x7f0 [ 177.601704][ C0] ? __sys_recvmmsg+0x290/0x290 [ 177.606551][ C0] ? __context_tracking_exit+0x4c/0x80 [ 177.612017][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 177.617038][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 177.622077][ C0] ? do_recvmmsg+0x7f0/0x7f0 [ 177.626659][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 177.631850][ C0] do_syscall_64+0x4c/0xa0 [ 177.636281][ C0] ? clear_bhb_loop+0x30/0x80 [ 177.640961][ C0] ? clear_bhb_loop+0x30/0x80 [ 177.645648][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.651537][ C0] RIP: 0033:0x7f3bbbffa0d9 [ 177.655968][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.675569][ C0] RSP: 002b:00007f3bba231028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.683992][ C0] RAX: ffffffffffffffda RBX: 00007f3bbc282090 RCX: 00007f3bbbffa0d9 [ 177.691974][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 177.699939][ C0] RBP: 00007f3bbc091024 R08: 0000000000000000 R09: 0000000000000000 [ 177.707930][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 177.715891][ C0] R13: 00007f3bbc282128 R14: 00007f3bbc282090 R15: 00007ffc899c1da8 [ 177.723862][ C0] [ 177.727212][ C0] Kernel Offset: disabled [ 177.731547][ C0] Rebooting in 86400 seconds..