last executing test programs: 1m46.489494332s ago: executing program 5 (id=864): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000004079000318400001020301090224000101ff50060904000f01030102ff09217fff570122b10f09058103"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m44.127361707s ago: executing program 5 (id=879): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42140, 0xfb) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3820c4b, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) 1m43.697849096s ago: executing program 5 (id=881): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m43.578094093s ago: executing program 5 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m43.420434776s ago: executing program 5 (id=884): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) 1m42.92962131s ago: executing program 5 (id=888): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m42.250945371s ago: executing program 32 (id=888): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m31.453332664s ago: executing program 1 (id=951): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x10, 0x1, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 1m27.92584414s ago: executing program 1 (id=959): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x9, 0x4) write(r0, 0x0, 0x0) 1m27.461088714s ago: executing program 1 (id=963): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1m27.31688964s ago: executing program 1 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m27.150047164s ago: executing program 1 (id=966): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xb8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7^\xf1K\xac\x99\x83\xdb\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xc2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd81a\x92\xbc\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\x00\x00\x00', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 1m26.453811546s ago: executing program 1 (id=970): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.914221978s ago: executing program 33 (id=970): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.914338462s ago: executing program 4 (id=1269): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$cont(0x1f, r0, 0xa, 0xf) move_pages(r0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 15.908303851s ago: executing program 4 (id=1279): mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 15.390451619s ago: executing program 6 (id=1283): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x700000e, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40400) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 13.761590109s ago: executing program 6 (id=1285): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 13.760068599s ago: executing program 7 (id=1286): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12.269707835s ago: executing program 4 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 11.94296971s ago: executing program 7 (id=1293): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11.229682593s ago: executing program 6 (id=1295): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 9.467972566s ago: executing program 0 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x5c, 0x65a) 9.435045707s ago: executing program 3 (id=1300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') lchown(&(0x7f0000000000)='./mnt/file1\x00', 0x0, 0x0) 8.856305926s ago: executing program 3 (id=1302): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 8.261538501s ago: executing program 3 (id=1303): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 8.223164823s ago: executing program 0 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 8.138380914s ago: executing program 7 (id=1305): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000500)=ANY=[@ANYBLOB='utf8,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1534, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 7.421052594s ago: executing program 6 (id=1306): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fcntl$setstatus(r0, 0x4, 0x43800) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"}) 7.418017077s ago: executing program 2 (id=1318): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.245899648s ago: executing program 7 (id=1307): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f000059a000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) 5.141688464s ago: executing program 0 (id=1308): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 5.14146205s ago: executing program 3 (id=1309): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x28f, &(0x7f00000009c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108843, 0x190) mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001420, 0xffffffff) creat(&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x0) 5.138694876s ago: executing program 6 (id=1310): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_usb_connect(0x0, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.068685696s ago: executing program 4 (id=1311): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091bb0ff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.468357671s ago: executing program 7 (id=1312): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x40800, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./dev/gnss0\x00', 0x121000, 0x42) close(r0) 3.467719677s ago: executing program 3 (id=1313): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 3.218100279s ago: executing program 0 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) 2.752081447s ago: executing program 0 (id=1315): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, '\x00', @auto="f260b25d38461bc098e47b88b28603ff"}) 2.04184699s ago: executing program 4 (id=1316): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000700)=""/73, 0x49}], 0x1, 0x5, 0xffe) 1.976011812s ago: executing program 2 (id=1317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.885951698s ago: executing program 0 (id=1319): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 1.528547135s ago: executing program 2 (id=1320): connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch', 0x24) open(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x202, 0x40) 923.067429ms ago: executing program 2 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000142, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x4, 0x1, 0x3, 0x2}}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 763.263757ms ago: executing program 3 (id=1322): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008810}, 0x4000840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 660.040427ms ago: executing program 6 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 433.048751ms ago: executing program 2 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 146.259711ms ago: executing program 2 (id=1325): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f000059a000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) 14.501349ms ago: executing program 7 (id=1326): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 0s ago: executing program 4 (id=1327): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) kernel console output (not intermixed with test programs): o altsetting 0 [ 225.488173][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.488213][ T5843] usb 3-1: Product: syz [ 225.488241][ T5843] usb 3-1: Manufacturer: syz [ 225.488267][ T5843] usb 3-1: SerialNumber: syz [ 225.562202][ T5843] usb 3-1: config 0 descriptor?? [ 225.660441][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.669031][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.954009][ T1213] uclogic 0003:5543:0064.000A: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.3-1/input0 [ 226.159853][ T5724] usb 4-1: USB disconnect, device number 9 [ 226.212501][ T5843] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 226.212553][ T5843] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.429171][ T8308] loop0: detected capacity change from 0 to 16 [ 226.470103][ T8308] erofs (device loop0): mounted with root inode @ nid 36. [ 226.470114][ T5843] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 226.470161][ T5843] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 226.470197][ T5843] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 226.470539][ T5843] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 226.542898][ T9] usb 2-1: USB disconnect, device number 12 [ 226.559129][ T5843] usb 3-1: USB disconnect, device number 9 [ 226.983381][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.134831][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 227.137054][ T980] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.138405][ T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.169375][ T980] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.169419][ T980] usb 5-1: Product: syz [ 227.169447][ T980] usb 5-1: Manufacturer: syz [ 227.169474][ T980] usb 5-1: SerialNumber: syz [ 227.205121][ T980] usb 5-1: config 0 descriptor?? [ 227.206028][ T8312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.540792][ T8330] loop7: detected capacity change from 0 to 16384 [ 227.942781][ C1] I/O error, dev loop7, sector 7424 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 227.945333][ C1] I/O error, dev loop7, sector 7424 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.945541][ C1] Buffer I/O error on dev loop7, logical block 928, async page read [ 227.949488][ T8335] loop7: detected capacity change from 16384 to 0 [ 228.366883][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 229.413565][ T980] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 229.588396][ T980] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 229.591399][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.591453][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.591528][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.640730][ T5843] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 229.661608][ T980] usb 6-1: config 0 descriptor?? [ 229.804781][ T5843] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 229.805849][ T5843] usb 4-1: config 0 has no interfaces? [ 229.805927][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.838625][ T5843] usb 4-1: config 0 descriptor?? [ 229.870278][ T5843] usb 5-1: USB disconnect, device number 8 [ 230.100589][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.115576][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.143612][ T5751] usb 4-1: USB disconnect, device number 10 [ 230.186039][ T980] hid_parser_main: 886 callbacks suppressed [ 230.186073][ T980] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 230.186193][ T980] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 230.230560][ T980] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000B/input/input16 [ 230.382414][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.389639][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.420201][ T980] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 230.501048][ T980] usb 6-1: USB disconnect, device number 13 [ 230.653464][ T5751] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.770586][ T8386] fido_id[8386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 230.803289][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 230.805210][ T5751] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 230.807242][ T5751] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.807281][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 230.815928][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.815969][ T5751] usb 4-1: Product: syz [ 230.815995][ T5751] usb 4-1: Manufacturer: syz [ 230.816022][ T5751] usb 4-1: SerialNumber: syz [ 230.830211][ T5751] usb 4-1: config 0 descriptor?? [ 230.952977][ T5751] viperboard 4-1:0.0: version 0.00 found at bus 004 address 011 [ 231.009576][ T5751] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 231.009628][ T5751] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 231.749356][ T8402] loop2: detected capacity change from 0 to 40427 [ 231.763696][ T8402] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 231.763733][ T8402] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.805751][ T8402] F2FS-fs (loop2): invalid crc value [ 231.863297][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 231.943007][ T8402] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 231.953309][ T8402] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 231.953345][ T8402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.013958][ T25] usb 6-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.40 [ 232.015319][ T25] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.015373][ T25] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.015415][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 232.021185][ T25] usb 6-1: string descriptor 0 read error: -22 [ 232.021335][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.095194][ T31] audit: type=1800 audit(1789089821.998:133): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.865" name="file0" dev="loop2" ino=10 res=0 errno=0 [ 232.469382][ T5738] usb 4-1: USB disconnect, device number 11 [ 232.562307][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562354][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562509][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562547][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562583][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562619][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562655][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.562697][ T25] hid_mf 0003:0079:1803.000C: unknown main item tag 0x0 [ 232.604497][ T8421] loop0: detected capacity change from 0 to 128 [ 232.719075][ T25] hid_mf 0003:0079:1803.000C: hidraw0: USB HID vff.7f Device [HID 0079:1803] on usb-dummy_hcd.5-1/input0 [ 232.745499][ T25] usb 6-1: USB disconnect, device number 14 [ 233.124023][ T8425] fido_id[8425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 233.362917][ T8427] netlink: 'syz.4.875': attribute type 14 has an invalid length. [ 233.362949][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 233.386487][ T8427] netlink: 'syz.4.875': attribute type 14 has an invalid length. [ 233.386521][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 233.707479][ T5738] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.771337][ T8438] loop1: detected capacity change from 0 to 128 [ 233.825468][ T8438] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 233.852665][ T8439] evm: overlay not supported [ 233.884921][ T5738] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.886401][ T5738] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.886439][ T5738] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.886495][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.889736][ T5738] usb 4-1: config 0 descriptor?? [ 234.007311][ T31] audit: type=1800 audit(1789089823.908:134): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 234.402114][ T8438] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 234.527262][ T8452] loop0: detected capacity change from 0 to 2048 [ 234.616128][ T8452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.653368][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.691046][ T31] audit: type=1804 audit(1789089824.598:135): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.885" name="/newroot/159/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 234.816085][ T980] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 234.820886][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.820938][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.820995][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.858388][ T980] usb 5-1: config 0 descriptor?? [ 234.932440][ T8463] kAFS: Invalid Command on /proc/fs/afs/cells file [ 235.004417][ T5799] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.191892][ T5799] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.293070][ T5799] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.311249][ T980] hid_parser_main: 4009 callbacks suppressed [ 235.311281][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.311319][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.311353][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.311387][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.311420][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.311453][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.311486][ T980] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 235.322808][ T980] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 235.524177][ T980] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 235.721786][ T5799] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.855059][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.029485][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.044257][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.050285][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.072392][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.087664][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.227046][ T8470] loop1: detected capacity change from 0 to 4096 [ 236.280548][ T8470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.280574][ T8470] EXT4-fs (loop1): Test dummy encryption mode enabled [ 236.329183][ T980] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 236.332683][ T8470] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 236.332921][ T8470] System zones: 0-5 [ 236.383322][ T980] usb 5-1: USB disconnect, device number 9 [ 236.639234][ T9] usb 4-1: USB disconnect, device number 12 [ 236.658616][ T8470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.699490][ T31] audit: type=1800 audit(1789089826.608:136): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.890" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 237.187941][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.349459][ T5799] bridge_slave_1: left allmulticast mode [ 237.349525][ T5799] bridge_slave_1: left promiscuous mode [ 237.352216][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.477062][ T5799] bridge_slave_0: left allmulticast mode [ 237.480304][ T5799] bridge_slave_0: left promiscuous mode [ 237.480555][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.928451][ T8505] loop4: detected capacity change from 0 to 2048 [ 237.956528][ T8505] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.093603][ T8505] syz.4.901: attempt to access beyond end of device [ 238.093603][ T8505] loop4: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 238.116928][ T8511] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.193568][ T5724] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.261970][ T8515] loop3: detected capacity change from 0 to 1024 [ 238.271742][ T8515] EXT4-fs: Ignoring removed bh option [ 238.332403][ T8515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.343727][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 238.346336][ T5724] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 238.351123][ T5752] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 238.354792][ T5724] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 238.354831][ T5724] usb 2-1: config 0 has no interface number 0 [ 238.354886][ T5724] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.354945][ T5724] usb 2-1: config 0 interface 85 has no altsetting 0 [ 238.387804][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.387848][ T5724] usb 2-1: Product: syz [ 238.387874][ T5724] usb 2-1: Manufacturer: syz [ 238.387911][ T5724] usb 2-1: SerialNumber: syz [ 238.407132][ T5622] Bluetooth: hci5: command tx timeout [ 238.449498][ T5724] usb 2-1: config 0 descriptor?? [ 238.503981][ T5752] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 238.525628][ T5752] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.525729][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 238.525775][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 238.525824][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 238.525864][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.595787][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 238.595826][ T5752] usb 3-1: Product: syz [ 238.595850][ T5752] usb 3-1: Manufacturer: syz [ 238.595872][ T5752] usb 3-1: SerialNumber: syz [ 238.602718][ T5752] usb 3-1: config 0 descriptor?? [ 238.734046][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.822511][ T5752] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 238.822552][ T5752] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 238.878385][ T8525] loop0: detected capacity change from 0 to 512 [ 238.898402][ T8525] EXT4-fs (loop0): Test dummy encryption mode enabled [ 238.977359][ T8525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.045548][ T5752] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 239.045589][ T5752] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 239.045626][ T5752] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 239.141624][ T8525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.142339][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.192434][ T5724] appletouch 2-1:0.85: Geyser mode initialized. [ 239.238412][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.244359][ T5724] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input17 [ 239.261346][ T5799] bond0 (unregistering): Released all slaves [ 239.267926][ T5752] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 239.328170][ T5799] bond1 (unregistering): Released all slaves [ 239.456286][ T5724] usb 2-1: USB disconnect, device number 13 [ 239.781031][ T5724] appletouch 2-1:0.85: input: appletouch disconnected [ 239.879920][ T5752] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 239.880306][ T5752] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 239.931493][ T5752] usb 3-1: USB disconnect, device number 10 [ 240.493310][ T5622] Bluetooth: hci5: command tx timeout [ 240.588008][ T8555] loop1: detected capacity change from 0 to 4096 [ 240.851836][ T8555] ntfs3(loop1): MFT: r=1b, expect seq=1 instead of 0! [ 241.433502][ T5752] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 241.604891][ T5752] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 241.607609][ T5752] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 241.607677][ T5752] usb 2-1: config 1 has no interface number 0 [ 241.644936][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.644980][ T5752] usb 2-1: Product: syz [ 241.645007][ T5752] usb 2-1: Manufacturer: syz [ 241.645035][ T5752] usb 2-1: SerialNumber: syz [ 241.673730][ T5799] hsr_slave_0: left promiscuous mode [ 241.681370][ T5799] hsr_slave_1: left promiscuous mode [ 241.684993][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.685038][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.714956][ T5752] usb 2-1: 3:0 : does not exist [ 241.714993][ T5752] usb 2-1: 3:0 : does not exist [ 241.789490][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.789522][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.989921][ T5799] veth1_macvtap: left promiscuous mode [ 241.990002][ T5799] veth0_macvtap: left promiscuous mode [ 241.990207][ T5799] veth1_vlan: left promiscuous mode [ 241.990326][ T5799] veth0_vlan: left promiscuous mode [ 242.145856][ T9] usb 2-1: USB disconnect, device number 14 [ 242.563341][ T5622] Bluetooth: hci5: command tx timeout [ 242.816228][ T8590] loop3: detected capacity change from 0 to 131072 [ 242.820049][ T8590] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 242.820088][ T8590] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.864602][ T8590] F2FS-fs (loop3): invalid crc value [ 242.961039][ T8590] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 242.980426][ T8590] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 242.980466][ T8590] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 243.066473][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.080521][ T8590] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 243.087407][ T8590] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 243.281418][ T8614] loop1: detected capacity change from 0 to 512 [ 243.285938][ T8614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.318943][ T8614] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 243.324654][ T8614] EXT4-fs error (device loop1): ext4_iget_extra_inode:5209: inode #15: comm syz.1.933: corrupted in-inode xattr: e_value size too large [ 243.324721][ T8614] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 243.333162][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 243.333193][ C1] EXT4-fs (loop1): initial error at time 1789089833: ext4_iget_extra_inode:5209: inode 15 [ 243.333243][ C1] EXT4-fs (loop1): last error at time 1789089833: ext4_iget_extra_inode:5209: inode 15 [ 243.358235][ T8614] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.933: couldn't read orphan inode 15 (err -117) [ 243.358287][ T8614] loop1: lost filesystem error report for type 5 error -117 [ 243.397360][ T8614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.525211][ T8614] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 243.661132][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.037658][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 244.068960][ T5799] team0 (unregistering): Port device team_slave_0 removed [ 244.385269][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 244.654236][ T5622] Bluetooth: hci5: command tx timeout [ 244.785702][ T8628] loop1: detected capacity change from 0 to 1024 [ 244.801615][ T8628] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 244.836806][ T8636] kAFS: Invalid Command on /proc/fs/afs/cells file [ 244.865005][ T8628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.162527][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.603346][ T5843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.755924][ T5843] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 245.775394][ T5843] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 245.775438][ T5843] usb 5-1: config 1 has no interface number 0 [ 245.782492][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.782613][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.785193][ T8471] bridge_slave_0: entered allmulticast mode [ 245.790822][ T8471] bridge_slave_0: entered promiscuous mode [ 245.803948][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.804592][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.805396][ T8471] bridge_slave_1: entered allmulticast mode [ 245.813854][ T8471] bridge_slave_1: entered promiscuous mode [ 245.850354][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.850398][ T5843] usb 5-1: Product: syz [ 245.850425][ T5843] usb 5-1: Manufacturer: syz [ 245.850452][ T5843] usb 5-1: SerialNumber: syz [ 245.913809][ T5843] usb 5-1: 3:0 : does not exist [ 245.913847][ T5843] usb 5-1: 3:0 : does not exist [ 246.079774][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.119415][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.359873][ T9] usb 5-1: USB disconnect, device number 10 [ 246.381521][ T8471] team0: Port device team_slave_0 added [ 246.396922][ T8471] team0: Port device team_slave_1 added [ 247.822809][ T8696] loop0: detected capacity change from 0 to 32768 [ 247.865757][ T8696] JBD2: Ignoring recovery information on journal [ 247.905310][ T8696] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 247.947661][ T8696] overlayfs: upper fs does not support tmpfile. [ 247.948968][ T8696] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 247.955491][ T8696] overlayfs: upper fs missing required features. [ 249.609136][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.609164][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.609800][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.630369][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.630403][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.630450][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.718818][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 249.864672][ T5614] ocfs2: Unmounting device (7,0) on (node local) [ 250.154058][ T8471] hsr_slave_0: entered promiscuous mode [ 250.155772][ T8471] hsr_slave_1: entered promiscuous mode [ 250.156616][ T8471] debugfs: 'hsr0' already exists in 'hsr' [ 250.156644][ T8471] Cannot create hsr debugfs directory [ 250.304232][ T8714] loop4: detected capacity change from 0 to 256 [ 250.305366][ T8714] exfat: Deprecated parameter 'utf8' [ 250.305545][ T8714] exfat: Deprecated parameter 'namecase' [ 250.305593][ T8714] exfat: Deprecated parameter 'namecase' [ 250.474906][ T8714] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 250.627239][ T8725] loop0: detected capacity change from 0 to 512 [ 250.638222][ T8725] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.638335][ T8725] EXT4-fs: Ignoring removed nobh option [ 250.695550][ T8725] EXT4-fs error (device loop0): ext4_iget_extra_inode:5209: inode #15: comm syz.0.958: corrupted in-inode xattr: e_value size too large [ 250.695606][ T8725] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.697916][ T8725] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.958: couldn't read orphan inode 15 (err -117) [ 250.697961][ T8725] loop0: lost filesystem error report for type 5 error -117 [ 250.711284][ T8725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.076178][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.146061][ T8735] jffs2: notice: (8735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 251.580866][ T34] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.580928][ T34] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.815509][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 251.866559][ T34] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.866621][ T34] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.970965][ T34] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.971027][ T34] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.102309][ T34] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.102371][ T34] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.108758][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 252.261102][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.273718][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.276866][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.280069][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.281463][ T4925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.807265][ T8767] warning: `syz.4.978' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.319038][ T8471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.346338][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.347523][ T8471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.382344][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.524080][ T8471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.606701][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.674475][ T8788] loop2: detected capacity change from 0 to 32768 [ 253.723336][ T8788] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.746149][ T8471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.817164][ T8788] XFS (loop2): Ending clean mount [ 253.821684][ T8788] XFS (loop2): Quotacheck needed: Please wait. [ 253.864289][ T8471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.969024][ T34] bridge_slave_1: left allmulticast mode [ 253.969062][ T34] bridge_slave_1: left promiscuous mode [ 253.972341][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.021847][ T8788] XFS (loop2): Quotacheck: Done. [ 254.059229][ T34] bridge_slave_0: left allmulticast mode [ 254.059266][ T34] bridge_slave_0: left promiscuous mode [ 254.059539][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.403781][ T4925] Bluetooth: hci1: command tx timeout [ 254.467565][ T5843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.485060][ T5752] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 254.593631][ T5616] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 254.635898][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 254.636639][ T5843] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 254.647086][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 254.650649][ T5752] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.654427][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.654493][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.663264][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.663302][ T5843] usb 5-1: Product: syz [ 254.663329][ T5843] usb 5-1: Manufacturer: syz [ 254.663355][ T5843] usb 5-1: SerialNumber: syz [ 254.678423][ T5752] usb 4-1: config 0 descriptor?? [ 254.689598][ T5843] usb 5-1: config 0 descriptor?? [ 254.817739][ T5843] usb 5-1: selecting invalid altsetting 1 [ 254.817772][ T5843] technisat-usb2: could not set alternate setting to 0 [ 254.968889][ T5843] technisat-usb2: firmware version: 0.0 [ 254.968962][ T5843] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 254.988409][ T5752] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 255.055367][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.055445][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.062041][ T8822] FAULT_INJECTION: forcing a failure. [ 255.062041][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 255.062093][ T8822] CPU: 1 UID: 0 PID: 8822 Comm: syz.2.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.062149][ T8822] Tainted: [L]=SOFTLOCKUP [ 255.062163][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 255.062186][ T8822] Call Trace: [ 255.062199][ T8822] [ 255.062214][ T8822] dump_stack_lvl+0x100/0x190 [ 255.062272][ T8822] should_fail_ex.cold+0x5/0xa [ 255.062316][ T8822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.062372][ T8822] should_failslab+0xc2/0x120 [ 255.062411][ T8822] __kmalloc_cache_noprof+0x91/0x6d0 [ 255.062462][ T8822] ? copy_mount_options+0x55/0x190 [ 255.062525][ T8822] copy_mount_options+0x55/0x190 [ 255.062582][ T8822] __x64_sys_mount+0x1ab/0x310 [ 255.062636][ T8822] ? __pfx___x64_sys_mount+0x10/0x10 [ 255.062696][ T8822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.062752][ T8822] do_syscall_64+0x123/0x790 [ 255.062820][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.062861][ T8822] RIP: 0033:0x7fd96ed9e159 [ 255.062891][ T8822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.062929][ T8822] RSP: 002b:00007fd96fce3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.062967][ T8822] RAX: ffffffffffffffda RBX: 00007fd96f025fa0 RCX: 00007fd96ed9e159 [ 255.062993][ T8822] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.063018][ T8822] RBP: 00007fd96ee3503b R08: 0000200000000700 R09: 0000000000000000 [ 255.063044][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.063068][ T8822] R13: 00007fd96f026038 R14: 00007fd96f025fa0 R15: 00007ffd08d71438 [ 255.063120][ T8822] [ 255.211139][ T5752] usb 4-1: USB disconnect, device number 13 [ 255.402713][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.410504][ T5843] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 255.410570][ T5843] usb 5-1: media controller created [ 255.411233][ T5843] technisat-usb2: i2c-error: out failed 53 = -22 [ 255.411420][ T5843] dvb-usb: MAC address reading failed. [ 255.462685][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.492085][ T34] bond1 (unregistering): (slave geneve2): Releasing active interface [ 255.603058][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.623463][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.631081][ T34] bond0 (unregistering): Released all slaves [ 255.660312][ T34] bond1 (unregistering): Released all slaves [ 255.717149][ T5843] DVB: Unable to find symbol stv090x_attach() [ 255.717617][ T5843] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 255.731810][ T34] bond2 (unregistering): Released all slaves [ 255.796000][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 255.853437][ T5843] rc_core: IR keymap rc-technisat-usb2 not found [ 255.853463][ T5843] Registered IR keymap rc-empty [ 255.929435][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.940172][ T5843] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 255.970982][ T5843] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 255.997807][ T5843] dvb-usb: schedule remote query interval to 100 msecs. [ 256.004525][ T5843] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 256.072910][ T8841] FAULT_INJECTION: forcing a failure. [ 256.072910][ T8841] name failslab, interval 1, probability 0, space 0, times 0 [ 256.072965][ T8841] CPU: 1 UID: 0 PID: 8841 Comm: syz.3.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.073021][ T8841] Tainted: [L]=SOFTLOCKUP [ 256.073035][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 256.073059][ T8841] Call Trace: [ 256.073071][ T8841] [ 256.073085][ T8841] dump_stack_lvl+0x100/0x190 [ 256.073150][ T8841] should_fail_ex.cold+0x5/0xa [ 256.073199][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.073253][ T8841] should_failslab+0xc2/0x120 [ 256.073290][ T8841] __kmalloc_noprof+0xfc/0x840 [ 256.073348][ T8841] ? anon_vma_name_alloc+0x58/0x100 [ 256.073398][ T8841] anon_vma_name_alloc+0x58/0x100 [ 256.073443][ T8841] set_anon_vma_name+0x214/0x4c0 [ 256.073490][ T8841] ? __pfx_set_anon_vma_name+0x10/0x10 [ 256.073535][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.073581][ T8841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.073652][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.073699][ T8841] ? cap_task_prctl+0x104/0xa50 [ 256.073746][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.073796][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.073843][ T8841] ? static_key_count+0x5a/0x70 [ 256.073890][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.073936][ T8841] ? security_task_prctl+0x11c/0x160 [ 256.073986][ T8841] __do_sys_prctl+0xb41/0x2270 [ 256.074045][ T8841] ? __pfx___do_sys_prctl+0x10/0x10 [ 256.074106][ T8841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.074162][ T8841] do_syscall_64+0x123/0x790 [ 256.074232][ T8841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.074272][ T8841] RIP: 0033:0x7f1f8659e159 [ 256.074302][ T8841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.074340][ T8841] RSP: 002b:00007f1f874c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 256.074377][ T8841] RAX: ffffffffffffffda RBX: 00007f1f86825fa0 RCX: 00007f1f8659e159 [ 256.074404][ T8841] RDX: 0000200000ffb000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 256.074429][ T8841] RBP: 00007f1f8663503b R08: 0000200000000000 R09: 0000000000000000 [ 256.074454][ T8841] R10: 00000000fffffd00 R11: 0000000000000246 R12: 0000000000000000 [ 256.074479][ T8841] R13: 00007f1f86826038 R14: 00007f1f86825fa0 R15: 00007ffe118ffe28 [ 256.074531][ T8841] [ 256.100864][ T5843] usb 5-1: USB disconnect, device number 11 [ 256.493818][ T4925] Bluetooth: hci1: command tx timeout [ 256.682223][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.703315][ T5738] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 256.737783][ T5843] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 256.749033][ T8850] loop4: detected capacity change from 0 to 4096 [ 256.822963][ T8855] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.855263][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 256.857595][ T5738] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 256.860770][ T5738] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 256.860820][ T5738] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 256.860882][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 256.860932][ T5738] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.860979][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.861028][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.861078][ T5738] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 256.861129][ T5738] usb 1-1: config 168 interface 0 has no altsetting 0 [ 256.878468][ T5738] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 256.878521][ T5738] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 256.878580][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 256.878630][ T5738] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.878676][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.878725][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.878774][ T5738] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 256.878825][ T5738] usb 1-1: config 168 interface 0 has no altsetting 0 [ 256.934382][ T5738] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 256.934438][ T5738] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 256.934496][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 256.934536][ T5738] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.934576][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.934621][ T5738] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.934663][ T5738] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 256.934709][ T5738] usb 1-1: config 168 interface 0 has no altsetting 0 [ 257.065407][ T5738] usb 1-1: string descriptor 0 read error: -22 [ 257.065563][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.117592][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.117718][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.232255][ T5738] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 257.340176][ T34] hsr_slave_0: left promiscuous mode [ 257.341967][ T34] hsr_slave_1: left promiscuous mode [ 257.350651][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.350680][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.372453][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.372484][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.500940][ T5724] usb 1-1: USB disconnect, device number 9 [ 257.541085][ T34] veth1_macvtap: left promiscuous mode [ 257.541137][ T34] veth0_macvtap: left promiscuous mode [ 257.552985][ T34] veth1_vlan: left promiscuous mode [ 257.553089][ T34] veth0_vlan: left promiscuous mode [ 257.735479][ T5738] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 257.883765][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 257.886326][ T5738] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 257.889906][ T5738] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 257.889960][ T5738] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.890010][ T5738] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.890059][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.954734][ T5738] usb 3-1: config 0 descriptor?? [ 258.574544][ T5622] Bluetooth: hci1: command tx timeout [ 259.352183][ T34] team_slave_1 (unregistering): left allmulticast mode [ 259.355229][ T34] team0 (unregistering): Port device team_slave_1 removed [ 259.369481][ T8875] loop4: detected capacity change from 0 to 32768 [ 259.392834][ T5738] hid-alps 0003:044E:120B.000E: failed to read command (-71) [ 259.392906][ T5738] hid-alps 0003:044E:120B.000E: failed U1_NUM_SENS_X (-71) [ 259.410208][ T8875] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 259.410236][ T8875] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 259.437884][ T34] team_slave_0 (unregistering): left allmulticast mode [ 259.450241][ T34] team0 (unregistering): Port device team_slave_0 removed [ 259.460628][ T5738] hid-alps 0003:044E:120B.000E: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 259.479709][ T5738] usb 3-1: USB disconnect, device number 11 [ 259.546399][ T8875] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 259.552348][ T1213] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 259.552373][ T1213] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 259.711026][ T1213] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 259.713032][ T1213] gfs2: fsid=syz:syz.0: jid=0: Done [ 259.713082][ T8875] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 259.756659][ T8878] fido_id[8878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.566168][ T4925] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 260.662968][ T4925] Bluetooth: hci1: command tx timeout [ 260.680179][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.680306][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.047621][ T8890] netlink: 'syz.0.1010': attribute type 15 has an invalid length. [ 261.221228][ T8890] netlink: 'syz.0.1010': attribute type 15 has an invalid length. [ 261.313388][ T6695] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 261.354429][ T5799] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 261.383394][ T5896] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 261.384869][ T6697] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 261.573065][ T34] IPVS: stop unused estimator thread 0... [ 261.753576][ T5724] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 261.903927][ T5724] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 261.905270][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.905321][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8192, setting to 1024 [ 261.907306][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 261.907345][ T5724] usb 5-1: Product: syz [ 261.907372][ T5724] usb 5-1: Manufacturer: syz [ 262.275737][ T25] usb 5-1: USB disconnect, device number 12 [ 262.316660][ T1213] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.404251][ T8925] FAULT_INJECTION: forcing a failure. [ 262.404251][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 262.404298][ T8925] CPU: 1 UID: 0 PID: 8925 Comm: syz.0.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.404353][ T8925] Tainted: [L]=SOFTLOCKUP [ 262.404367][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 262.404391][ T8925] Call Trace: [ 262.404406][ T8925] [ 262.404421][ T8925] dump_stack_lvl+0x100/0x190 [ 262.404479][ T8925] should_fail_ex.cold+0x5/0xa [ 262.404530][ T8925] should_failslab+0xc2/0x120 [ 262.404568][ T8925] kmem_cache_alloc_noprof+0x92/0x6a0 [ 262.404628][ T8925] ? sctp_get_port_local+0x828/0x1630 [ 262.404676][ T8925] sctp_get_port_local+0x828/0x1630 [ 262.404728][ T8925] ? __pfx_sctp_get_port_local+0x10/0x10 [ 262.404765][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.404821][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.404867][ T8925] ? sctp_bind_addr_match+0x19d/0x300 [ 262.404933][ T8925] sctp_do_bind+0x2b9/0x760 [ 262.404990][ T8925] sctp_connect_new_asoc+0x5e7/0x770 [ 262.405043][ T8925] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 262.405097][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405143][ T8925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 262.405220][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405274][ T8925] __sctp_connect+0x3e7/0xc70 [ 262.405335][ T8925] ? __pfx___sctp_connect+0x10/0x10 [ 262.405383][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405439][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405493][ T8925] __sctp_setsockopt_connectx+0x100/0x190 [ 262.405550][ T8925] sctp_getsockopt+0x3f06/0x7110 [ 262.405600][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405647][ T8925] ? aa_inet_opt_perm+0x30d/0x970 [ 262.405698][ T8925] ? __pfx_sctp_getsockopt+0x10/0x10 [ 262.405746][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405801][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405848][ T8925] ? __lock_acquire+0x5c0/0x1f40 [ 262.405904][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.405951][ T8925] ? lock_acquire+0x1d1/0x380 [ 262.405986][ T8925] ? __might_fault+0xc5/0x140 [ 262.406032][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406078][ T8925] ? find_held_lock+0x2b/0x80 [ 262.406128][ T8925] ? __might_fault+0xc5/0x140 [ 262.406179][ T8925] ? __might_fault+0xc5/0x140 [ 262.406222][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406281][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406328][ T8925] ? _copy_from_user+0x59/0xd0 [ 262.406375][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406421][ T8925] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 262.406490][ T8925] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 262.406556][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406607][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406654][ T8925] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 262.406721][ T8925] do_sock_getsockopt+0x50a/0x6e0 [ 262.406792][ T8925] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 262.406862][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.406910][ T8925] ? __fget_files+0x34/0x3d0 [ 262.406947][ T8925] ? find_held_lock+0x2b/0x80 [ 262.407009][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.407057][ T8925] ? __fget_files+0x21f/0x3d0 [ 262.407103][ T8925] __sys_getsockopt+0x148/0x260 [ 262.407155][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.407219][ T8925] ? __x64_sys_getsockopt+0xbd/0x160 [ 262.407269][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.407315][ T8925] __x64_sys_getsockopt+0xbd/0x160 [ 262.407366][ T8925] ? do_syscall_64+0xae/0x790 [ 262.407421][ T8925] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.407467][ T8925] ? lockdep_hardirqs_on+0x7d/0x110 [ 262.407524][ T8925] do_syscall_64+0x123/0x790 [ 262.407587][ T8925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.407627][ T8925] RIP: 0033:0x7f61f779e159 [ 262.407657][ T8925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.407695][ T8925] RSP: 002b:00007f61f871b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 262.407732][ T8925] RAX: ffffffffffffffda RBX: 00007f61f7a25fa0 RCX: 00007f61f779e159 [ 262.407758][ T8925] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 262.407782][ T8925] RBP: 00007f61f783503b R08: 0000200000000100 R09: 0000000000000000 [ 262.407807][ T8925] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 262.407832][ T8925] R13: 00007f61f7a26038 R14: 00007f61f7a25fa0 R15: 00007ffe79f7e738 [ 262.407884][ T8925] [ 262.585745][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 262.603500][ T1213] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 262.734164][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 262.734214][ T1213] usb 3-1: Product: syz [ 262.734242][ T1213] usb 3-1: Manufacturer: syz [ 262.734268][ T1213] usb 3-1: SerialNumber: syz [ 262.831730][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.831854][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.832034][ T8760] bridge_slave_0: entered allmulticast mode [ 262.845698][ T8760] bridge_slave_0: entered promiscuous mode [ 262.906195][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.914408][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.914591][ T8760] bridge_slave_1: entered allmulticast mode [ 262.926902][ T8760] bridge_slave_1: entered promiscuous mode [ 262.949717][ T1213] usb 3-1: config 0 descriptor?? [ 263.001484][ T1213] gspca_main: sq905-2.14.0 probing 2770:9120 [ 263.078636][ T8936] loop0: detected capacity change from 0 to 2048 [ 263.207390][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.236943][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.318265][ T8945] netlink: 'syz.4.1019': attribute type 4 has an invalid length. [ 263.477854][ T8946] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 263.477889][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1020'. [ 263.514252][ T8760] team0: Port device team_slave_0 added [ 263.699188][ T8760] team0: Port device team_slave_1 added [ 263.700957][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 263.836402][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.836429][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.836476][ T8760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.857947][ T8760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.857972][ T8760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.858018][ T8760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.079341][ T1213] gspca_sq905: bulk read fail (-22) len 0/4 [ 264.079447][ T1213] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 264.239082][ T8960] loop4: detected capacity change from 0 to 4096 [ 264.261728][ T8760] hsr_slave_0: entered promiscuous mode [ 264.272939][ T8760] hsr_slave_1: entered promiscuous mode [ 264.290937][ T9] usb 3-1: USB disconnect, device number 12 [ 264.303089][ T8760] debugfs: 'hsr0' already exists in 'hsr' [ 264.303169][ T8760] Cannot create hsr debugfs directory [ 264.308938][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.368350][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.605735][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.831514][ T8973] gadgetfs: bound to dummy_udc driver [ 265.418793][ T8760] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.509450][ T8760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.525019][ T8760] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.560346][ T8760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.577673][ T8760] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.603428][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 265.603460][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 265.603499][ T8992] netlink: 'syz.2.1029': attribute type 15 has an invalid length. [ 265.629076][ T8760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.635793][ T8760] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.680802][ T8760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.751180][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 265.751215][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 265.751251][ T8992] netlink: 'syz.2.1029': attribute type 15 has an invalid length. [ 265.851399][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 265.914090][ T5896] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 265.915705][ T6695] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 265.915773][ T6695] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 265.915835][ T6695] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 265.966989][ T9003] ip_tables: iptables: counters copy to user failed while replacing table [ 265.995129][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.999209][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.004101][ T25] usb 1-1: config 0 descriptor?? [ 266.041030][ T25] cp210x 1-1:0.0: cp210x converter detected [ 266.220685][ T8471] veth0_vlan: entered promiscuous mode [ 266.334528][ T8471] veth1_vlan: entered promiscuous mode [ 266.385698][ T1213] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 266.512323][ T25] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 266.548212][ T1213] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 266.551971][ T1213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.552014][ T1213] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 266.552073][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.571522][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 266.589760][ T8471] veth0_macvtap: entered promiscuous mode [ 266.664976][ T8471] veth1_macvtap: entered promiscuous mode [ 266.768068][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.798830][ T1213] usb 1-1: USB disconnect, device number 10 [ 266.818666][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 266.837324][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.855119][ T1213] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.882493][ T1213] cp210x 1-1:0.0: device disconnected [ 266.883895][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.903358][ T5895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.904438][ T5895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.904526][ T5895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.928426][ T5895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.019594][ T9] usb 4-1: USB disconnect, device number 14 [ 267.035778][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.070098][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.070215][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.106655][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.106784][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.485228][ T6697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.485260][ T6697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.620472][ T30] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 267.779313][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.779346][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.808350][ T30] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.156267][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 268.292449][ T9044] hsr_slave_1 (unregistering): left promiscuous mode [ 268.620812][ T9054] input: syz0 as /devices/virtual/input/input20 [ 269.180593][ T9065] loop4: detected capacity change from 0 to 2048 [ 269.210236][ T9065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.310270][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 269.827371][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.749519][ T9107] loop0: detected capacity change from 0 to 8 [ 270.915036][ T9107] SQUASHFS error: lzo decompression failed, data probably corrupt [ 270.915081][ T9107] SQUASHFS error: Failed to read block 0x91: -5 [ 270.915104][ T9107] SQUASHFS error: Unable to read metadata cache entry [8f] [ 270.915125][ T9107] SQUASHFS error: Unable to read inode 0x7 [ 270.961351][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 271.119771][ T9116] FAULT_INJECTION: forcing a failure. [ 271.119771][ T9116] name failslab, interval 1, probability 0, space 0, times 0 [ 271.119830][ T9116] CPU: 0 UID: 0 PID: 9116 Comm: syz.6.1058 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.119888][ T9116] Tainted: [L]=SOFTLOCKUP [ 271.119902][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 271.119927][ T9116] Call Trace: [ 271.119940][ T9116] [ 271.119955][ T9116] dump_stack_lvl+0x100/0x190 [ 271.120016][ T9116] should_fail_ex.cold+0x5/0xa [ 271.120061][ T9116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.120116][ T9116] should_failslab+0xc2/0x120 [ 271.120155][ T9116] __kmalloc_noprof+0xfc/0x840 [ 271.120212][ T9116] ? find_held_lock+0x2b/0x80 [ 271.120266][ T9116] ? inotify_handle_inode_event+0x1aa/0x6a0 [ 271.120340][ T9116] inotify_handle_inode_event+0x1aa/0x6a0 [ 271.120411][ T9116] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 271.120476][ T9116] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 271.120532][ T9116] fsnotify+0x1b45/0x3240 [ 271.120587][ T9116] ? __pfx_fsnotify+0x10/0x10 [ 271.120626][ T9116] ? futex_wake+0x4ea/0x5e0 [ 271.120704][ T9116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.120762][ T9116] __fsnotify_parent+0x74f/0xd00 [ 271.120823][ T9116] ? __pfx___fsnotify_parent+0x10/0x10 [ 271.120880][ T9116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.120933][ T9116] ? __pfx___might_resched+0x10/0x10 [ 271.121005][ T9116] ? __fput+0x30d/0xb50 [ 271.121042][ T9116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.121090][ T9116] __fput+0x30d/0xb50 [ 271.121141][ T9116] fput_close_sync+0x118/0x250 [ 271.121187][ T9116] ? __pfx_fput_close_sync+0x10/0x10 [ 271.121244][ T9116] __x64_sys_close+0x8b/0x120 [ 271.121296][ T9116] do_syscall_64+0x123/0x790 [ 271.121364][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.121406][ T9116] RIP: 0033:0x7fccf719e159 [ 271.121438][ T9116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.121477][ T9116] RSP: 002b:00007fccf7f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 271.121515][ T9116] RAX: ffffffffffffffda RBX: 00007fccf7425fa0 RCX: 00007fccf719e159 [ 271.121543][ T9116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 271.121568][ T9116] RBP: 00007fccf723503b R08: 0000000000000000 R09: 0000000000000000 [ 271.121594][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.121619][ T9116] R13: 00007fccf7426038 R14: 00007fccf7425fa0 R15: 00007ffc59d14dd8 [ 271.121672][ T9116] [ 271.935730][ T8760] veth0_vlan: entered promiscuous mode [ 271.982972][ T8760] veth1_vlan: entered promiscuous mode [ 272.193639][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 272.207571][ T8760] veth0_macvtap: entered promiscuous mode [ 272.240723][ T8760] veth1_macvtap: entered promiscuous mode [ 272.360258][ T9142] netlink: 1355 bytes leftover after parsing attributes in process `syz.6.1067'. [ 272.377932][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.447152][ T8760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.559875][ T5896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.559938][ T5896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.559991][ T5896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.706719][ T5799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.835058][ T5724] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 272.970998][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.971032][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.988752][ T5724] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.994897][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.994947][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.994987][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.995050][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.013038][ T5724] usb 5-1: config 0 descriptor?? [ 273.248312][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.248392][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.485175][ T31] audit: type=1804 audit(1789089863.388:137): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1074" name="/newroot/207/file1" dev="tmpfs" ino=1115 res=1 errno=0 [ 273.526503][ T9167] nbd6: detected capacity change from 0 to 1125899906842625 [ 273.622769][ T9168] block nbd6: shutting down sockets [ 273.718216][ T5724] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 273.832110][ T9175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.884278][ T5752] usb 5-1: USB disconnect, device number 13 [ 274.061167][ T9184] loop7: detected capacity change from 0 to 1024 [ 274.075418][ T9184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 274.125362][ T9184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 274.125500][ T9184] System zones: 0-1, 3-36 [ 274.234054][ T9184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.599221][ T8760] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.616556][ T9191] fido_id[9191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 275.205844][ T5752] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 275.354201][ T5752] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 275.357530][ T9214] FAULT_INJECTION: forcing a failure. [ 275.357530][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 275.357583][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.3.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.357639][ T9214] Tainted: [L]=SOFTLOCKUP [ 275.357653][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 275.357677][ T9214] Call Trace: [ 275.357690][ T9214] [ 275.357704][ T9214] dump_stack_lvl+0x100/0x190 [ 275.357763][ T9214] should_fail_ex.cold+0x5/0xa [ 275.357809][ T9214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.357865][ T9214] should_failslab+0xc2/0x120 [ 275.357905][ T9214] __kmalloc_cache_noprof+0x91/0x6d0 [ 275.357956][ T9214] ? copy_ipcs+0x10d/0x7e0 [ 275.358019][ T9214] copy_ipcs+0x10d/0x7e0 [ 275.358076][ T9214] create_new_namespaces+0x20a/0xac0 [ 275.358119][ T9214] ? security_capable+0x80/0x260 [ 275.358173][ T9214] unshare_nsproxy_namespaces+0xf2/0x220 [ 275.358225][ T9214] ksys_unshare+0x4a2/0xa70 [ 275.358269][ T9214] ? __pfx_ksys_unshare+0x10/0x10 [ 275.358310][ T9214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.358378][ T9214] __x64_sys_unshare+0x31/0x40 [ 275.358420][ T9214] do_syscall_64+0x123/0x790 [ 275.358486][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.358528][ T9214] RIP: 0033:0x7f1f8659e159 [ 275.358558][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.358599][ T9214] RSP: 002b:00007f1f874c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 275.358638][ T9214] RAX: ffffffffffffffda RBX: 00007f1f86825fa0 RCX: 00007f1f8659e159 [ 275.358666][ T9214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 275.358691][ T9214] RBP: 00007f1f8663503b R08: 0000000000000000 R09: 0000000000000000 [ 275.358717][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.358741][ T9214] R13: 00007f1f86826038 R14: 00007f1f86825fa0 R15: 00007ffe118ffe28 [ 275.358793][ T9214] [ 275.359617][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.359657][ T5752] usb 5-1: Product: syz [ 275.359684][ T5752] usb 5-1: Manufacturer: syz [ 275.359711][ T5752] usb 5-1: SerialNumber: syz [ 275.374974][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1088'. [ 275.486423][ T9189] loop0: detected capacity change from 0 to 32768 [ 275.609154][ T5752] usb 5-1: config 0 descriptor?? [ 275.635480][ T9189] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 275.783053][ T9189] XFS (loop0): Ending clean mount [ 276.092554][ T31] audit: type=1800 audit(1789089865.998:138): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1081" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4425 res=0 errno=0 [ 276.159593][ T5752] usb 5-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 276.173410][ T5889] bond0: (slave bond_slave_0): interface is now down [ 276.173443][ T5889] bond0: (slave bond_slave_1): interface is now down [ 276.211985][ T5895] bond0: (slave bond_slave_0): interface is now down [ 276.212017][ T5895] bond0: (slave bond_slave_1): interface is now down [ 276.236094][ T5895] bond0: now running without any active interface! [ 276.366913][ T5752] usb 5-1: no permanent extended address found, random address set [ 276.366954][ T5752] usb 5-1: atusb_probe: initialization failed, error = -524 [ 276.367165][ T5752] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 276.596681][ T5614] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 276.620847][ T5752] usb 5-1: USB disconnect, device number 14 [ 279.116159][ T9294] loop6: detected capacity change from 0 to 32768 [ 279.240189][ T31] audit: type=1800 audit(1789089869.148:139): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1114" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 279.396989][ T31] audit: type=1800 audit(1789089869.308:140): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1114" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 279.582697][ T9316] loop7: detected capacity change from 0 to 512 [ 279.608962][ T9316] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.657932][ T9316] EXT4-fs (loop7): 1 truncate cleaned up [ 279.679158][ T9316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.111390][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 280.832805][ T8760] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.082682][ T9329] hsr_slave_1 (unregistering): left promiscuous mode [ 281.205084][ T4925] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 282.003381][ T5752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 282.098549][ T9376] batadv_slave_1: entered promiscuous mode [ 282.109760][ T9375] batadv_slave_1: left promiscuous mode [ 282.154706][ T5752] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 282.156150][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.156207][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.156266][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.160418][ T5752] usb 7-1: config 0 descriptor?? [ 282.277905][ T9378] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1132'. [ 282.440801][ T9374] loop3: detected capacity change from 0 to 2048 [ 282.670970][ T5752] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 282.671094][ T5752] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 282.704069][ T5752] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0011/input/input21 [ 282.742226][ T5752] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 282.937667][ T9370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.954483][ T9370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.981451][ T5724] usb 7-1: USB disconnect, device number 2 [ 283.052426][ T9400] bond0: invalid NS target :: specified for addition [ 283.052539][ T9400] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 283.557954][ T9406] smpboot: CPU 1 is now offline [ 283.933526][ T9417] loop7: detected capacity change from 0 to 16 [ 283.941144][ T9417] erofs (device loop7): mounted with root inode @ nid 36. [ 284.859289][ T9432] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 285.546636][ T9450] loop7: detected capacity change from 0 to 16384 [ 286.119873][ T9452] loop7: detected capacity change from 16384 to 0 [ 286.132702][ C0] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 286.434924][ T5766] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 286.457516][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 286.457540][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 286.586511][ T5766] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 286.603895][ T5766] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 286.603927][ T5766] usb 4-1: config 0 has no interface number 0 [ 286.603970][ T5766] usb 4-1: config 0 interface 41 has no altsetting 0 [ 286.641106][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.641139][ T5766] usb 4-1: Product: syz [ 286.641159][ T5766] usb 4-1: Manufacturer: syz [ 286.641179][ T5766] usb 4-1: SerialNumber: syz [ 286.681787][ T5766] usb 4-1: config 0 descriptor?? [ 286.877197][ T9463] loop4: detected capacity change from 0 to 2048 [ 287.099748][ T9468] loop7: detected capacity change from 0 to 512 [ 287.109562][ T9463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.145755][ T9468] EXT4-fs (loop7): Test dummy encryption mode enabled [ 287.173357][ T9468] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1155: inode has both inline data and extents flags [ 287.173395][ T9468] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.176650][ T9468] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1155: couldn't read orphan inode 15 (err -117) [ 287.176688][ T9468] loop7: lost filesystem error report for type 5 error -117 [ 287.235416][ T9468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.353634][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 287.429095][ T9478] ip_tables: iptables: counters copy to user failed while replacing table [ 287.431937][ T31] audit: type=1804 audit(1789089877.338:141): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1150" name="/newroot/188/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 287.525364][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.526824][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.526853][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.526920][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.581823][ T9468] EXT4-fs error (device loop7): ext4_check_dx_root:2202: inode #2: comm syz.7.1155: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 287.615150][ T9] usb 3-1: config 0 descriptor?? [ 287.701698][ T5766] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 287.890520][ T8760] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.959023][ T5766] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 287.959060][ T5766] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 287.959288][ T5766] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 288.024586][ T5766] usb 4-1: USB disconnect, device number 15 [ 288.389247][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.550989][ T9487] loop6: detected capacity change from 0 to 4096 [ 288.582914][ T9487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.582937][ T9487] EXT4-fs (loop6): Test dummy encryption mode enabled [ 288.627062][ T9487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 288.627626][ T9487] System zones: 0-5 [ 288.673475][ T9487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.899834][ T31] audit: type=1800 audit(1789089878.808:142): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1160" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 289.218792][ T8471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.754779][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 289.934527][ T5843] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 290.086626][ T5843] usb 7-1: Using ep0 maxpacket: 16 [ 290.091201][ T5843] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 290.091247][ T5843] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 290.130831][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.156769][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.160999][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.173899][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.215482][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.242052][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.268744][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.288629][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.306874][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 290.306904][ T5843] usb 7-1: SerialNumber: syz [ 290.334300][ T5843] usb 7-1: config 0 descriptor?? [ 290.378124][ T5843] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 290.760932][ T9519] loop0: detected capacity change from 0 to 40427 [ 290.795289][ T9519] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 290.795321][ T9519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 290.914899][ T9519] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 290.947477][ T9519] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 290.947508][ T9519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 291.002025][ T5752] usb 3-1: USB disconnect, device number 13 [ 291.089510][ T4960] bcm5974 7-1:0.0: could not read from device [ 291.178264][ T4960] bcm5974 7-1:0.0: could not read from device [ 291.258304][ T5843] bcm5974 7-1:0.0: could not read from device [ 291.345572][ T9519] syz.0.1169: attempt to access beyond end of device [ 291.345572][ T9519] loop0: rw=2049, sector=45096, nr_sectors = 1704 limit=40427 [ 291.553601][ T9531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.808889][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.887660][ T5843] input: failed to attach handler mousedev to device input22, error: -5 [ 291.985761][ T5843] usb 7-1: USB disconnect, device number 3 [ 292.000880][ T4960] bcm5974 7-1:0.0: could not read from device [ 292.066001][ T4960] bcm5974 7-1:0.0: could not read from device [ 292.571890][ T9541] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1173'. [ 293.040741][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1179'. [ 293.040772][ T9549] netlink: 'syz.2.1179': attribute type 2 has an invalid length. [ 293.040789][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 294.062817][ T9566] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 294.900067][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920411][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920513][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920607][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920700][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920792][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920884][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.920976][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.921068][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.921160][ T9581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 297.374113][ T5843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 297.528925][ T5843] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 297.531112][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 297.531149][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 297.531184][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 297.595325][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.595359][ T5843] usb 3-1: Product: syz [ 297.595379][ T5843] usb 3-1: Manufacturer: syz [ 297.595399][ T5843] usb 3-1: SerialNumber: syz [ 297.637734][ T9607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.637874][ T9607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.665316][ T5843] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 297.665344][ T5843] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 297.665386][ T5843] usbserial_generic 3-1:1.0: generic converter detected [ 297.752110][ T5843] usb 3-1: generic converter now attached to ttyUSB0 [ 298.047891][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 298.047991][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 298.048319][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 298.048383][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 298.048509][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 298.286053][ T9] usb 3-1: USB disconnect, device number 14 [ 298.411667][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 298.412339][ T9] usbserial_generic 3-1:1.0: device disconnected [ 299.435822][ T9642] loop7: detected capacity change from 0 to 2048 [ 299.588626][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 299.588796][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 299.617535][ T9642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.652503][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 299.652667][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 299.803482][ T5891] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 299.804323][ T5891] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 299.804369][ T5891] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 299.804413][ T5891] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 299.869461][ T9629] ceph: No mds server is up or the cluster is laggy [ 299.912569][ T9634] ceph: No mds server is up or the cluster is laggy [ 299.959312][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 299.959481][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 299.984573][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 299.991616][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 300.054094][ T50] net_ratelimit: 3321 callbacks suppressed [ 300.054117][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.476642][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.616951][ T8760] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.125379][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.125922][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.578823][ T9671] FAULT_INJECTION: forcing a failure. [ 301.578823][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 301.578866][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.4.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.578907][ T9671] Tainted: [L]=SOFTLOCKUP [ 301.578918][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 301.578936][ T9671] Call Trace: [ 301.578945][ T9671] [ 301.578956][ T9671] dump_stack_lvl+0x100/0x190 [ 301.579000][ T9671] should_fail_ex.cold+0x5/0xa [ 301.579033][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.579074][ T9671] should_failslab+0xc2/0x120 [ 301.579103][ T9671] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 301.579147][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.579189][ T9671] ? lock_acquire+0x1d1/0x380 [ 301.579222][ T9671] ? kstrdup_const+0x63/0x80 [ 301.579265][ T9671] kstrdup+0x51/0xe0 [ 301.579303][ T9671] kstrdup_const+0x63/0x80 [ 301.579338][ T9671] alloc_vfsmnt+0xe5/0x710 [ 301.579374][ T9671] ? __pfx___might_resched+0x10/0x10 [ 301.579422][ T9671] clone_mnt+0x4b/0x930 [ 301.579456][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.579497][ T9671] copy_tree+0xfc/0xbf0 [ 301.579525][ T9671] ? __pfx_down_write+0x10/0x10 [ 301.579562][ T9671] copy_mnt_ns+0x3fa/0x1180 [ 301.579604][ T9671] ? __pfx_copy_mnt_ns+0x10/0x10 [ 301.579639][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.579678][ T9671] ? create_new_namespaces+0x30/0xac0 [ 301.579716][ T9671] create_new_namespaces+0xd3/0xac0 [ 301.579745][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.579779][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.579814][ T9671] ? security_capable+0x80/0x260 [ 301.579854][ T9671] unshare_nsproxy_namespaces+0xf2/0x220 [ 301.579889][ T9671] ksys_unshare+0x4a2/0xa70 [ 301.579922][ T9671] ? __pfx_ksys_unshare+0x10/0x10 [ 301.579952][ T9671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.580003][ T9671] __x64_sys_unshare+0x31/0x40 [ 301.580034][ T9671] do_syscall_64+0x123/0x790 [ 301.580082][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.580115][ T9671] RIP: 0033:0x7f744bb9e159 [ 301.580138][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.580166][ T9671] RSP: 002b:00007f744ca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 301.580194][ T9671] RAX: ffffffffffffffda RBX: 00007f744be25fa0 RCX: 00007f744bb9e159 [ 301.580219][ T9671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 301.580237][ T9671] RBP: 00007f744bc3503b R08: 0000000000000000 R09: 0000000000000000 [ 301.580255][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.580273][ T9671] R13: 00007f744be26038 R14: 00007f744be25fa0 R15: 00007ffec2dbbba8 [ 301.580313][ T9671] [ 301.754693][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.143270][ T980] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.381405][ T980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 302.381453][ T980] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.392523][ T980] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 302.392560][ T980] usb 7-1: can't read configurations, error -71 [ 302.476311][ T9679] loop3: detected capacity change from 0 to 1024 [ 302.477301][ T9679] EXT4-fs: Ignoring removed bh option [ 302.512459][ T9679] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 302.611469][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.852113][ T9686] EXT4-fs error (device loop3): ext4_read_inline_dir:1511: inode #12: block 7: comm syz.3.1215: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 303.030012][ T9686] EXT4-fs (loop3): Remounting filesystem read-only [ 303.228580][ T9679] overlayfs: failed to create directory ./bus/work (errno: 30); mounting read-only [ 303.228949][ T9679] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 304.461913][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.007092][ T9706] ip6gretap1: entered allmulticast mode [ 305.067927][ T9706] batman_adv: batadv0: Adding interface: ip6gretap1 [ 305.067948][ T9706] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.067985][ T9706] batman_adv: batadv0: Interface activated: ip6gretap1 [ 305.123313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.443259][ T980] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 305.607330][ T980] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 305.635854][ T980] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 305.635888][ T980] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 305.635915][ T980] usb 5-1: config 4 has no interface number 0 [ 305.635954][ T980] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.700703][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.700748][ T980] usb 5-1: Product: syz [ 305.700769][ T980] usb 5-1: Manufacturer: syz [ 305.700789][ T980] usb 5-1: SerialNumber: syz [ 306.202504][ T9724] loop7: detected capacity change from 0 to 512 [ 306.215481][ T9724] EXT4-fs: Invalid want_extra_isize 1969 [ 306.348059][ T980] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 306.429427][ T980] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 306.444449][ T980] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 306.444497][ T980] usb 5-1: media controller created [ 306.502777][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.513545][ T5843] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 306.680227][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 306.689605][ T5843] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 306.712045][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 306.712084][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 306.712118][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 306.712149][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 306.712183][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 306.806995][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.807028][ T5843] usb 4-1: Product: syz [ 306.807048][ T5843] usb 4-1: Manufacturer: syz [ 306.807068][ T5843] usb 4-1: SerialNumber: syz [ 306.876311][ T5843] usb 4-1: config 0 descriptor?? [ 307.043820][ T5766] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 307.198104][ T5766] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 307.225668][ T5766] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.225718][ T5766] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 307.225752][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 307.225810][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 307.225840][ T5766] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.232979][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 307.233011][ T5766] usb 1-1: Product: syz [ 307.233030][ T5766] usb 1-1: Manufacturer: syz [ 307.233051][ T5766] usb 1-1: SerialNumber: syz [ 307.333057][ T980] DVB: Unable to find symbol dib7000p_attach() [ 307.333072][ T980] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 307.397582][ T5766] usb 1-1: config 0 descriptor?? [ 307.430610][ T9734] ip_tables: iptables: counters copy to user failed while replacing table [ 307.516544][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 307.516597][ T5843] input input27: Device does not respond to id packet M [ 307.519515][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 307.519582][ T5843] input input27: Device does not respond to id packet P [ 307.521692][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 307.521759][ T5843] input input27: Device does not respond to id packet B [ 307.696918][ T5766] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 307.696949][ T5766] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 307.811578][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 307.820941][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 307.829400][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 307.832128][ T5843] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 307.902009][ T5843] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 307.925916][ T980] rc_core: IR keymap rc-dib0700-rc5 not found [ 307.925960][ T980] Registered IR keymap rc-empty [ 307.926472][ T980] dvb-usb: could not initialize remote control. [ 307.926483][ T980] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 307.989264][ T5766] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 307.989295][ T5766] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 307.989323][ T5766] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 308.090096][ T980] usb 5-1: USB disconnect, device number 15 [ 308.152693][ T5843] usb 4-1: USB disconnect, device number 16 [ 308.211194][ T5766] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 308.487066][ T980] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 308.887792][ T5766] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 309.069013][ T5766] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 309.155343][ T5766] usb 1-1: USB disconnect, device number 11 [ 309.347270][ T9750] FAULT_INJECTION: forcing a failure. [ 309.347270][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 309.347313][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.2.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.347354][ T9750] Tainted: [L]=SOFTLOCKUP [ 309.347365][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 309.347383][ T9750] Call Trace: [ 309.347394][ T9750] [ 309.347406][ T9750] dump_stack_lvl+0x100/0x190 [ 309.347451][ T9750] should_fail_ex.cold+0x5/0xa [ 309.347484][ T9750] ? lockdep_hardirqs_on+0x7d/0x110 [ 309.347533][ T9750] should_failslab+0xc2/0x120 [ 309.347562][ T9750] kmem_cache_alloc_noprof+0x92/0x6a0 [ 309.347605][ T9750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.347643][ T9750] ? do_raw_spin_lock+0x128/0x260 [ 309.347678][ T9750] ? inet_bind_bucket_create+0x2d/0x280 [ 309.347719][ T9750] inet_bind_bucket_create+0x2d/0x280 [ 309.347755][ T9750] inet_csk_get_port+0x153f/0x28e0 [ 309.347815][ T9750] ? __pfx_inet_csk_get_port+0x10/0x10 [ 309.347856][ T9750] inet_csk_listen_start+0x205/0x450 [ 309.347901][ T9750] __inet_listen_sk+0x20f/0x510 [ 309.347931][ T9750] ? __pfx___inet_listen_sk+0x10/0x10 [ 309.347960][ T9750] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.347995][ T9750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.348035][ T9750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.348073][ T9750] ? __local_bh_enable_ip+0xa5/0x120 [ 309.348107][ T9750] inet_listen+0x93/0xd0 [ 309.348136][ T9750] __sys_listen_socket+0x108/0x150 [ 309.348172][ T9750] __sys_listen+0xa7/0x130 [ 309.348206][ T9750] __x64_sys_listen+0x53/0x80 [ 309.348243][ T9750] do_syscall_64+0x123/0x790 [ 309.348292][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.348324][ T9750] RIP: 0033:0x7fd96ed9e159 [ 309.348347][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.348377][ T9750] RSP: 002b:00007fd96fce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 309.348406][ T9750] RAX: ffffffffffffffda RBX: 00007fd96f025fa0 RCX: 00007fd96ed9e159 [ 309.348427][ T9750] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000000003 [ 309.348446][ T9750] RBP: 00007fd96ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 309.348466][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.348485][ T9750] R13: 00007fd96f026038 R14: 00007fd96f025fa0 R15: 00007ffd08d71438 [ 309.348525][ T9750] [ 310.517414][ T9769] loop3: detected capacity change from 0 to 512 [ 310.543660][ T9769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.589913][ T9769] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 310.590157][ T9769] EXT4-fs error (device loop3): ext4_iget_extra_inode:5209: inode #15: comm syz.3.1243: corrupted in-inode xattr: e_value size too large [ 310.590195][ T9769] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.590788][ T9769] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1243: couldn't read orphan inode 15 (err -117) [ 310.590851][ T9769] loop3: lost filesystem error report for type 5 error -117 [ 310.656911][ T9769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.885998][ T9769] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 311.191882][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.313473][ T5766] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 311.463285][ T5766] usb 3-1: Using ep0 maxpacket: 32 [ 311.481553][ T5766] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 311.502067][ T5766] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 311.502101][ T5766] usb 3-1: config 0 has no interface number 0 [ 311.502144][ T5766] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.502182][ T5766] usb 3-1: config 0 interface 85 has no altsetting 0 [ 311.565002][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.565037][ T5766] usb 3-1: Product: syz [ 311.565058][ T5766] usb 3-1: Manufacturer: syz [ 311.565079][ T5766] usb 3-1: SerialNumber: syz [ 311.608288][ T5766] usb 3-1: config 0 descriptor?? [ 312.363602][ T5766] appletouch 3-1:0.85: Geyser mode initialized. [ 312.387318][ T5766] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input29 [ 312.640102][ T5766] usb 3-1: USB disconnect, device number 15 [ 312.755898][ T9800] loop7: detected capacity change from 0 to 512 [ 312.819500][ T9800] EXT4-fs error (device loop7): ext4_validate_block_bitmap:435: comm syz.7.1254: bg 0: block 5: invalid block bitmap [ 312.819542][ T9800] loop7: lost filesystem error report for type 5 error -117 [ 312.823152][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 312.823178][ C0] EXT4-fs (loop7): initial error at time 1789089902: ext4_validate_block_bitmap:435 [ 312.823209][ C0] EXT4-fs (loop7): last error at time 1789089902: ext4_validate_block_bitmap:435 [ 312.916944][ T9800] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 312.916976][ T9800] loop7: lost filesystem error report for type 5 error -117 [ 312.917320][ T9800] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.1254: invalid indirect mapped block 3 (level 2) [ 312.917362][ T9800] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.919211][ T9800] EXT4-fs (loop7): 1 orphan inode deleted [ 312.919241][ T9800] EXT4-fs (loop7): 1 truncate cleaned up [ 312.995726][ T9800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.111405][ T5766] appletouch 3-1:0.85: input: appletouch disconnected [ 313.283331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.742544][ T8760] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.854529][ T5766] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 314.003959][ T5766] usb 4-1: Using ep0 maxpacket: 16 [ 314.009946][ T5766] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 314.061265][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.061300][ T5766] usb 4-1: Product: syz [ 314.061321][ T5766] usb 4-1: Manufacturer: syz [ 314.061342][ T5766] usb 4-1: SerialNumber: syz [ 314.107440][ T5766] usb 4-1: config 0 descriptor?? [ 314.160309][ T5766] usb 4-1: selecting invalid altsetting 1 [ 314.160334][ T5766] technisat-usb2: could not set alternate setting to 0 [ 314.398424][ T5766] technisat-usb2: firmware version: 0.0 [ 314.398466][ T5766] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 314.859561][ T5766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 314.883902][ T5766] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 314.883953][ T5766] usb 4-1: media controller created [ 314.883999][ T5766] technisat-usb2: i2c-error: out failed 53 = -22 [ 314.884040][ T5766] dvb-usb: MAC address reading failed. [ 315.225049][ T9825] loop2: detected capacity change from 0 to 40427 [ 315.248561][ T9825] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 315.248592][ T9825] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 315.357139][ T9825] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 315.387715][ T9825] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 315.387747][ T9825] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 315.414470][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.607921][ T5617] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 315.703796][ T9825] syz.2.1259: attempt to access beyond end of device [ 315.703796][ T9825] loop2: rw=2049, sector=45096, nr_sectors = 1704 limit=40427 [ 315.794322][ T5617] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 315.800502][ T5617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.800550][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 315.800584][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 315.800620][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 315.800673][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.892875][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 315.892909][ T5617] usb 5-1: Product: syz [ 315.892931][ T5617] usb 5-1: Manufacturer: syz [ 315.892953][ T5617] usb 5-1: SerialNumber: syz [ 315.939628][ T5617] usb 5-1: config 0 descriptor?? [ 316.128770][ T5766] DVB: Unable to find symbol stv090x_attach() [ 316.145070][ T5766] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 316.395772][ T5617] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 316.395804][ T5617] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 316.492819][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.500426][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.572732][ T9839] loop0: detected capacity change from 0 to 512 [ 316.689152][ T5617] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 316.689188][ T5617] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 316.689216][ T5617] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 316.819023][ T9839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.907871][ T5766] rc_core: IR keymap rc-technisat-usb2 not found [ 316.907916][ T5766] Registered IR keymap rc-empty [ 316.909118][ T5766] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 316.965781][ T5617] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 316.982015][ T5766] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input30 [ 317.015916][ T5766] dvb-usb: schedule remote query interval to 100 msecs. [ 317.019572][ T5766] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 317.052020][ T9839] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 317.089512][ T5766] usb 4-1: USB disconnect, device number 17 [ 317.108243][ T9839] EXT4-fs error (device loop0): ext4_iget_extra_inode:5209: inode #15: comm syz.0.1261: corrupted in-inode xattr: e_value size too large [ 317.108284][ T9839] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.112706][ T9839] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1261: couldn't read orphan inode 15 (err -117) [ 317.112744][ T9839] loop0: lost filesystem error report for type 5 error -117 [ 317.113137][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 317.113162][ C0] EXT4-fs (loop0): initial error at time 1789089907: ext4_iget_extra_inode:5209: inode 15 [ 317.113212][ C0] EXT4-fs (loop0): last error at time 1789089907: ext4_orphan_get:1406 [ 317.293741][ T9839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.546429][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1263'. [ 317.546489][ T9848] netlink: 'syz.6.1263': attribute type 2 has an invalid length. [ 317.546508][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1263'. [ 317.667752][ T5617] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 317.668005][ T5617] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 317.742525][ T5766] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 317.805337][ T9839] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 317.832398][ T5617] usb 5-1: USB disconnect, device number 16 [ 318.252283][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.985918][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.034744][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.034849][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.034943][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.035036][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.035129][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.035226][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.035319][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.035412][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.035504][ T9860] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 321.360108][ T9881] loop3: detected capacity change from 0 to 4096 [ 322.657550][ T9909] loop2: detected capacity change from 0 to 128 [ 322.913027][ T9905] loop4: detected capacity change from 0 to 40427 [ 322.952716][ T9905] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 322.952749][ T9905] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 323.082603][ T9905] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 323.116790][ T9905] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 323.116824][ T9905] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 323.122024][ T9909] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.159948][ T9909] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.543234][ T9909] EXT4-fs error (device loop2): dx_make_map:1295: inode #2: block 20: comm syz.2.1282: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 323.546569][ T9909] EXT4-fs error (device loop2) in do_split:2029: Corrupt filesystem [ 323.817424][ T9923] loop3: detected capacity change from 0 to 32768 [ 323.838607][ T9923] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1284 (9923) [ 323.861674][ T9923] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 323.861713][ T9923] BTRFS info (device loop3): using blake2b checksum algorithm [ 323.899002][ T9924] EXT4-fs error (device loop2): dx_make_map:1295: inode #2: block 20: comm syz.2.1282: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 323.937710][ T9924] EXT4-fs error (device loop2) in do_split:2029: Corrupt filesystem [ 324.117751][ T9923] BTRFS info (device loop3): enabling ssd optimizations [ 324.117782][ T9923] BTRFS info (device loop3): turning on async discard [ 324.117806][ T9923] BTRFS info (device loop3): enabling free space tree [ 324.117830][ T9923] BTRFS info (device loop3): use zstd compression, level 3 [ 324.211852][ T9905] syz.4.1279: attempt to access beyond end of device [ 324.211852][ T9905] loop4: rw=2049, sector=45096, nr_sectors = 1704 limit=40427 [ 324.317213][ T31] audit: type=1800 audit(1789089914.228:143): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1284" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 324.492078][ T5616] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.634290][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 324.634466][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 324.844900][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 324.845055][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 324.967388][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 324.967551][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 325.109445][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 325.109595][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 325.295094][ T9946] ceph: No mds server is up or the cluster is laggy [ 325.301344][ T9940] ceph: No mds server is up or the cluster is laggy [ 325.477085][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 325.477249][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 325.602984][ T5613] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 325.992295][ T9961] FAULT_INJECTION: forcing a failure. [ 325.992295][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 325.992341][ T9961] CPU: 0 UID: 0 PID: 9961 Comm: syz.0.1291 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.992383][ T9961] Tainted: [L]=SOFTLOCKUP [ 325.992395][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 325.992414][ T9961] Call Trace: [ 325.992424][ T9961] [ 325.992437][ T9961] dump_stack_lvl+0x100/0x190 [ 325.992482][ T9961] should_fail_ex.cold+0x5/0xa [ 325.992516][ T9961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.992558][ T9961] should_failslab+0xc2/0x120 [ 325.992588][ T9961] __kmalloc_cache_noprof+0x91/0x6d0 [ 325.992627][ T9961] ? file_f_owner_allocate+0x84/0x130 [ 325.992674][ T9961] file_f_owner_allocate+0x84/0x130 [ 325.992711][ T9961] do_fcntl+0xbd8/0x1670 [ 325.992745][ T9961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.992784][ T9961] ? __pfx_do_fcntl+0x10/0x10 [ 325.992818][ T9961] ? __fget_files+0x215/0x3d0 [ 325.992857][ T9961] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.992892][ T9961] ? tomoyo_file_fcntl+0x6c/0xc0 [ 325.992934][ T9961] __x64_sys_fcntl+0x163/0x200 [ 325.992975][ T9961] do_syscall_64+0x123/0x790 [ 325.993024][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.993055][ T9961] RIP: 0033:0x7f61f779e159 [ 325.993080][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.993109][ T9961] RSP: 002b:00007f61f871b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 325.993138][ T9961] RAX: ffffffffffffffda RBX: 00007f61f7a25fa0 RCX: 00007f61f779e159 [ 325.993159][ T9961] RDX: 00002000000000c0 RSI: 000000000000000f RDI: 0000000000000003 [ 325.993178][ T9961] RBP: 00007f61f783503b R08: 0000000000000000 R09: 0000000000000000 [ 325.993197][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.993216][ T9961] R13: 00007f61f7a26038 R14: 00007f61f7a25fa0 R15: 00007ffe79f7e738 [ 325.993261][ T9961] [ 326.318410][ T9963] xt_hashlimit: size too large, truncated to 1048576 [ 327.162682][ T980] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 327.252279][ T980] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.615665][ T9977] FAULT_INJECTION: forcing a failure. [ 327.615665][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 327.615709][ T9977] CPU: 0 UID: 0 PID: 9977 Comm: syz.0.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.615751][ T9977] Tainted: [L]=SOFTLOCKUP [ 327.615763][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 327.615781][ T9977] Call Trace: [ 327.615792][ T9977] [ 327.615804][ T9977] dump_stack_lvl+0x100/0x190 [ 327.615849][ T9977] should_fail_ex.cold+0x5/0xa [ 327.615882][ T9977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.615923][ T9977] should_failslab+0xc2/0x120 [ 327.615953][ T9977] __kmalloc_cache_noprof+0x91/0x6d0 [ 327.615992][ T9977] ? copy_mount_options+0x55/0x190 [ 327.616039][ T9977] copy_mount_options+0x55/0x190 [ 327.616083][ T9977] __x64_sys_mount+0x1ab/0x310 [ 327.616119][ T9977] ? __pfx___x64_sys_mount+0x10/0x10 [ 327.616159][ T9977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.616202][ T9977] do_syscall_64+0x123/0x790 [ 327.616256][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.616288][ T9977] RIP: 0033:0x7f61f779e159 [ 327.616312][ T9977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.616341][ T9977] RSP: 002b:00007f61f871b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.616370][ T9977] RAX: ffffffffffffffda RBX: 00007f61f7a25fa0 RCX: 00007f61f779e159 [ 327.616390][ T9977] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.616410][ T9977] RBP: 00007f61f783503b R08: 0000200000000700 R09: 0000000000000000 [ 327.616429][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.616448][ T9977] R13: 00007f61f7a26038 R14: 00007f61f7a25fa0 R15: 00007ffe79f7e738 [ 327.616487][ T9977] [ 328.615991][ T9982] jffs2: notice: (9982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 329.283357][ C0] net_ratelimit: 3320 callbacks suppressed [ 329.283380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.895091][ T9997] loop7: detected capacity change from 0 to 256 [ 329.919769][ T9997] exfat: Deprecated parameter 'utf8' [ 329.919900][ T9997] exfat: Deprecated parameter 'namecase' [ 329.919938][ T9997] exfat: Deprecated parameter 'namecase' [ 330.035785][ T9997] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 330.464541][ T5617] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 330.614121][ T5617] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 330.619601][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.619661][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.619705][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.729484][ T5617] usb 1-1: config 0 descriptor?? [ 331.209346][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209381][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209406][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209432][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209458][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209483][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209508][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.209534][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.213298][ T5617] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 331.300472][ T5617] savu 0003:1E7D:2D5A.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 331.735240][ T10] usb 1-1: USB disconnect, device number 12 [ 332.810893][T10022] loop3: detected capacity change from 0 to 128 [ 332.881798][T10022] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.921279][T10022] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 333.116213][T10022] EXT4-fs error (device loop3): dx_make_map:1295: inode #2: block 20: comm syz.3.1309: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 333.120736][T10022] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 333.188658][T10022] EXT4-fs error (device loop3): dx_make_map:1295: inode #2: block 20: comm syz.3.1309: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 333.190776][T10022] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 333.510044][ T5613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.701739][T10028] xt_hashlimit: size too large, truncated to 1048576 [ 334.974139][ T5617] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 335.135243][ T5617] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 335.138518][ T5617] usb 7-1: config 0 has no interfaces? [ 335.138553][ T5617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.173851][ T5617] usb 7-1: config 0 descriptor?? [ 335.253333][T10044] loop0: detected capacity change from 0 to 512 [ 335.301595][T10044] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.1315: bg 0: block 5: invalid block bitmap [ 335.301659][T10044] loop0: lost filesystem error report for type 5 error -117 [ 335.303143][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 335.303168][ C0] EXT4-fs (loop0): initial error at time 1789089925: ext4_validate_block_bitmap:435 [ 335.303198][ C0] EXT4-fs (loop0): last error at time 1789089925: ext4_validate_block_bitmap:435 [ 335.364225][T10044] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 335.364262][T10044] loop0: lost filesystem error report for type 5 error -117 [ 335.364609][T10044] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.1315: invalid indirect mapped block 3 (level 2) [ 335.364676][T10044] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 335.365846][T10044] EXT4-fs (loop0): 1 orphan inode deleted [ 335.365870][T10044] EXT4-fs (loop0): 1 truncate cleaned up [ 335.508572][T10044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.898051][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.147862][ T5766] usb 7-1: USB disconnect, device number 6 [ 336.215053][ T5617] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 336.259603][ T10] hid_parser_main: 22 callbacks suppressed [ 336.259631][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 336.358262][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.363449][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 336.391041][ T5617] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 336.403676][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.403727][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.437341][ T5617] usb 5-1: config 0 descriptor?? [ 336.694526][ T5617] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 336.956419][ T5617] usb 5-1: USB disconnect, device number 17 [ 337.533541][ T5617] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 337.689597][ T5617] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 337.704307][ T5617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.704346][ T5617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.704389][ T5617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.755309][ T5617] usb 7-1: config 0 descriptor?? [ 338.137884][T10073] loop7: detected capacity change from 0 to 1024 [ 338.159415][T10073] EXT4-fs: Ignoring removed bh option [ 338.175546][T10073] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 338.249797][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249833][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249859][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249885][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249910][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249936][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249961][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.249987][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.250012][ T5617] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 338.252260][T10073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.356302][ T5617] savu 0003:1E7D:2D5A.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 338.458335][T10062] ------------[ cut here ]------------ [ 338.458353][T10062] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 338.458364][T10062] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.6.1323/10062 [ 338.480786][T10062] Modules linked in: [ 338.484897][T10062] CPU: 0 UID: 0 PID: 10062 Comm: syz.6.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.496052][T10062] Tainted: [L]=SOFTLOCKUP [ 338.500439][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 338.511250][T10062] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 338.516772][T10062] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 68 ff 73 05 45 85 c0 75 13 48 8d 3d 0c 0a 77 05 48 c7 c6 20 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 338.536580][T10062] RSP: 0018:ffffc900048a7790 EFLAGS: 00010246 [ 338.542673][T10062] RAX: 0000000000000003 RBX: ffff888029fdf880 RCX: 1ffffffff228b09c [ 338.550735][T10062] RDX: 0000000000000000 RSI: ffffffff8beff620 RDI: ffffffff91488f90 [ 338.558899][T10062] RBP: ffffc900048a7900 R08: 0000000000000000 R09: 0000000000000000 [ 338.567099][T10062] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 338.575661][T10062] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888029fdf808 [ 338.583967][T10062] FS: 00007fccf7f9d6c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 338.592929][T10062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.599549][T10062] CR2: 0000200000001000 CR3: 0000000075976000 CR4: 0000000000350ef0 [ 338.607590][T10062] Call Trace: [ 338.610882][T10062] [ 338.613854][T10062] ? roccat_open+0x105/0x660 [ 338.618483][T10062] ? __pfx___mutex_lock+0x10/0x10 [ 338.623572][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.629243][T10062] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 338.634840][T10062] ? lock_acquire+0x1d1/0x380 [ 338.639537][T10062] ? roccat_open+0x8b/0x660 [ 338.644369][T10062] ? roccat_open+0x105/0x660 [ 338.649099][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.654789][T10062] roccat_open+0x105/0x660 [ 338.659240][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.664934][T10062] ? __pfx_roccat_open+0x10/0x10 [ 338.670428][T10062] chrdev_open+0x234/0x6a0 [ 338.675174][T10062] ? __pfx_chrdev_open+0x10/0x10 [ 338.680177][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.685860][T10062] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 338.692220][T10062] do_dentry_open+0x6ab/0x14d0 [ 338.697035][T10062] ? __pfx_chrdev_open+0x10/0x10 [ 338.702013][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.707702][T10062] vfs_open+0x82/0x3f0 [ 338.711789][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.717483][T10062] path_openat+0x19fa/0x2440 [ 338.722117][T10062] ? __pfx_path_openat+0x10/0x10 [ 338.727279][T10062] do_file_open+0x20e/0x430 [ 338.731807][T10062] ? __pfx_do_file_open+0x10/0x10 [ 338.736909][T10062] ? _raw_spin_unlock+0x28/0x50 [ 338.741789][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.747459][T10062] ? alloc_fd+0x471/0x7a0 [ 338.751811][T10062] do_sys_openat2+0x10f/0x1e0 [ 338.756532][T10062] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.761756][T10062] ? __pfx_get_timespec64+0x10/0x10 [ 338.767046][T10062] ? raw_ioctl+0x26f/0x2b80 [ 338.771577][T10062] __x64_sys_openat+0x12d/0x210 [ 338.777014][T10062] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.782691][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.788399][T10062] do_syscall_64+0x123/0x790 [ 338.793031][T10062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.798972][T10062] RIP: 0033:0x7fccf719e159 [ 338.803553][T10062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.823247][T10062] RSP: 002b:00007fccf7f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.831694][T10062] RAX: ffffffffffffffda RBX: 00007fccf7425fa0 RCX: 00007fccf719e159 [ 338.839730][T10062] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 338.847750][T10062] RBP: 00007fccf723503b R08: 0000000000000000 R09: 0000000000000000 [ 338.855784][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.863807][T10062] R13: 00007fccf7426038 R14: 00007fccf7425fa0 R15: 00007ffc59d14dd8 [ 338.871815][T10062] [ 338.875426][T10062] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.882710][T10062] CPU: 0 UID: 0 PID: 10062 Comm: syz.6.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.893647][T10062] Tainted: [L]=SOFTLOCKUP [ 338.897953][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 338.907996][T10062] Call Trace: [ 338.911260][T10062] [ 338.914179][T10062] dump_stack_lvl+0x100/0x190 [ 338.918869][T10062] vpanic+0x553/0x970 [ 338.922845][T10062] ? __pfx_vpanic+0x10/0x10 [ 338.927342][T10062] ? lock_release+0x24d/0x310 [ 338.932019][T10062] panic+0xd1/0xe0 [ 338.935734][T10062] ? __pfx_panic+0x10/0x10 [ 338.940151][T10062] check_panic_on_warn.cold+0x19/0x34 [ 338.945520][T10062] ? __mutex_lock+0x944/0x1bd0 [ 338.950295][T10062] __warn.cold+0x191/0x318 [ 338.954709][T10062] __report_bug+0x30f/0x440 [ 338.959241][T10062] ? __mutex_lock+0x944/0x1bd0 [ 338.964019][T10062] ? __pfx___report_bug+0x10/0x10 [ 338.969061][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.974693][T10062] ? __lock_acquire+0x5c0/0x1f40 [ 338.979627][T10062] report_bug_entry+0xe2/0x290 [ 338.984403][T10062] ? __mutex_lock+0x94b/0x1bd0 [ 338.989184][T10062] handle_bug+0x1cd/0x2a0 [ 338.993507][T10062] exc_invalid_op+0x17/0x50 [ 338.998003][T10062] asm_exc_invalid_op+0x1a/0x20 [ 339.002848][T10062] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 339.008234][T10062] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 68 ff 73 05 45 85 c0 75 13 48 8d 3d 0c 0a 77 05 48 c7 c6 20 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 339.027842][T10062] RSP: 0018:ffffc900048a7790 EFLAGS: 00010246 [ 339.033911][T10062] RAX: 0000000000000003 RBX: ffff888029fdf880 RCX: 1ffffffff228b09c [ 339.041874][T10062] RDX: 0000000000000000 RSI: ffffffff8beff620 RDI: ffffffff91488f90 [ 339.049836][T10062] RBP: ffffc900048a7900 R08: 0000000000000000 R09: 0000000000000000 [ 339.057797][T10062] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 339.065759][T10062] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888029fdf808 [ 339.073736][T10062] ? roccat_open+0x105/0x660 [ 339.078344][T10062] ? __pfx___mutex_lock+0x10/0x10 [ 339.083391][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.089029][T10062] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 339.094580][T10062] ? lock_acquire+0x1d1/0x380 [ 339.099253][T10062] ? roccat_open+0x8b/0x660 [ 339.103765][T10062] ? roccat_open+0x105/0x660 [ 339.108376][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.114010][T10062] roccat_open+0x105/0x660 [ 339.118434][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.124070][T10062] ? __pfx_roccat_open+0x10/0x10 [ 339.129033][T10062] chrdev_open+0x234/0x6a0 [ 339.133486][T10062] ? __pfx_chrdev_open+0x10/0x10 [ 339.138436][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.144069][T10062] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 339.150419][T10062] do_dentry_open+0x6ab/0x14d0 [ 339.155192][T10062] ? __pfx_chrdev_open+0x10/0x10 [ 339.160150][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.165789][T10062] vfs_open+0x82/0x3f0 [ 339.169853][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.175492][T10062] path_openat+0x19fa/0x2440 [ 339.180081][T10062] ? __pfx_path_openat+0x10/0x10 [ 339.185018][T10062] do_file_open+0x20e/0x430 [ 339.189519][T10062] ? __pfx_do_file_open+0x10/0x10 [ 339.194550][T10062] ? _raw_spin_unlock+0x28/0x50 [ 339.199405][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.205041][T10062] ? alloc_fd+0x471/0x7a0 [ 339.209371][T10062] do_sys_openat2+0x10f/0x1e0 [ 339.214047][T10062] ? __pfx_do_sys_openat2+0x10/0x10 [ 339.219255][T10062] ? __pfx_get_timespec64+0x10/0x10 [ 339.224471][T10062] ? raw_ioctl+0x26f/0x2b80 [ 339.228997][T10062] __x64_sys_openat+0x12d/0x210 [ 339.233849][T10062] ? __pfx___x64_sys_openat+0x10/0x10 [ 339.239234][T10062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.244964][T10062] do_syscall_64+0x123/0x790 [ 339.249593][T10062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.255492][T10062] RIP: 0033:0x7fccf719e159 [ 339.259909][T10062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.279518][T10062] RSP: 002b:00007fccf7f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 339.287933][T10062] RAX: ffffffffffffffda RBX: 00007fccf7425fa0 RCX: 00007fccf719e159 [ 339.295919][T10062] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 339.303880][T10062] RBP: 00007fccf723503b R08: 0000000000000000 R09: 0000000000000000 [ 339.311840][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.319800][T10062] R13: 00007fccf7426038 R14: 00007fccf7425fa0 R15: 00007ffc59d14dd8 [ 339.327777][T10062] [ 339.330828][T10062] Kernel Offset: disabled [ 339.335161][T10062] Rebooting in 86400 seconds..