last executing test programs: 2m17.639253831s ago: executing program 5 (id=587): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m14.933275058s ago: executing program 5 (id=600): r0 = timerfd_create(0x9, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 2m14.583866027s ago: executing program 5 (id=602): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m13.439587119s ago: executing program 5 (id=606): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x31}, 0x18) 2m13.142841925s ago: executing program 5 (id=610): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) 2m12.63991494s ago: executing program 5 (id=613): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m11.344539995s ago: executing program 32 (id=613): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.111030202s ago: executing program 1 (id=1651): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000014c0)={0x14, &(0x7f0000001380)={0x0, 0xe, 0x9, {0x9, 0x22, "72a3afdfe33b44"}}, 0x0}, 0x0) 7.581642809s ago: executing program 6 (id=1655): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) 5.728414504s ago: executing program 2 (id=1663): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200010, &(0x7f0000000040)=ANY=[], 0x1, 0x6b5, &(0x7f0000001540)="$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") mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.225414406s ago: executing program 1 (id=1666): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x41, 0x5510, &(0x7f0000009680)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmz6seit6i5+YJey6sGTpkkasptkSpOmtScPghfx4H8iCp48+jd48OxNPCjeBCUz03WrLgpNm277+8HkmffNmyfPG0rhmQkJ4MyaTX77pRTX4lJETEfE1YjsvFQcmZU8vBAR1yNi6rGjVMw/mjgfEZcj4tooeZ6zVDz1xc3hjeWf3/r12+8vnLvy5Tc/TG7XwKS9GBHdzfx8p5vHtJXHB8V8bdjOYndpWMT8ie7DYpzmcae5nmXYqe2vq2VxsZWvTze3+6O40anVR7HV3sjmN3v5G/aHrf082Qse1LaycaO5nsV2P81iay+va3cv/9+21x/keRpFvo+y9DEY7Md8vrnbzPez+TCL9d6gmM/zpo3m7igOi1i8XdTTTiOrY/0wn/TJ9na7t72bDJtb/XbaS5Yr1Zcq1dvl6lbaaA6aS+Vat3F7KZlrdUbLyoNmrbvSStNWp1mpp935ZK5Vr5er1WTuTnO9Xesl1WplsXKrvDxfnN1MXr/3XtJpJHOj+Gq7tz1od/rJRrqV5K+YTxYqiy/PJzeqyTura8na/bt3V9fe/eDO+/deWX3ztWLRP8pK5hZuLSyUq7fKC9X5M7T/T4qix7h/OJTSpAsAePro/4FJOHT/P/2k/n/rfsTR9/+h/x+Lp6r/PRX9/5U4SfuHQ9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWT/OfPVGdjKbj68U888UU88V41JETEXEH/9iOs4fyDld5Jl5wvqZv9XwXSmyDKP3uFAclyNipTh+f/aoPwUAAAA4vb7++PrnebeeP8xOuiCOU37RZurqh2PKV4qImdmfxpRtavTw/JiSZX/f52J3TNmyC1gXx5Qsv+R2blzZ/pfpA+HiY6GUh6ljLQcAADgWBzuB4+1CAAAAOE6fTboAJqMU+7cy9+8FZ9+8/+uG4KUDIwAAAOCE+PTRF3ev/efa0lEXAwAAAExc1v/7/T8AAAA43fLf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9m5n9vEgSgOwM8GL+w/LVrtfVvZG5SxJexxjxEFpAkKyIG0kAaogdxSQgQRHodAxCGSx7YSfZ/kTMYyP94gOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl+6r9eL26vd125zdvp08owEAAAAu2VbrRf3PLPW/Nve/N7d+Nv0iIsqIuDR3H8Wns8xRk1O9PH9z+nz1qoa7iDrh8B6T5voSEX+a6/FH158CAAAAfFyb5WqeZuvpz2zoguhTWrQpv/3NlFdERDV7yJRWHvJ+ZQqrv9/j+J8prV7AmmYKS0tu41xpb1L/3I+rdtOTpkhNefFlxyKzjR0AAOjR6KzpdxYCAABAn/4NXQDDKOJ5K/O4FThJTbO99/msBwAAALxDxdAFAAAAAJ2r5/89nf+3d/4fAAAADCOd/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXttV6sVmu5m1zdvt28owGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7Yn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLn/l3kqOIAgL+Z2dmYqLiessWJKFhoYzabkJhOLJTDwj9BOC4bPbNBTa4wIYjX2MnVaURLEUE5u/wPqRNIE7sUW0SwVt7szO3cD3D9kZm9u88H3rzvDsO873sLx33nzR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJXJO7M4i4feNE7Lc/ce31qL/f09fXRn68FybDFOmkz6cHi5/iHpt5cIAAAAx0dW1fchhIf59krs015R/+fVNbHm/+7ZaVzV83vr/qqvav/Yfv3l0Ys7A/Wm48SbXl4fj87sT6Xz5Ga52J772ys6xcoXz16y4gtJ3998YZIX65l8c/fuu90iPNFEtgDAv3G66sug+n0o9sM2EwPg2OjUCu+q/s967eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITJZni6ipMQwnJnFkf3H99aO6i/s/VguWoXbt/eCl/N7hlvkYcQLq+PR2canc1iu37j5pXV8Xh0rfnglRBCW6O/XU7/yodzXBxCK+sj+J+CtPyyFyWfwxG0+EMJAIAjKS9brOsf5tsr8VyyFMKf3++u/1+vxWHO+v/Rxxfu1ceq1//Dxma4+AYbVz8bXL9x8831q6sfjeIKnx2+NTx38fz5i4PiWcnAExMAAAD+m27Z6vV/urR///9ULQ5z1v+ffzv8sj5Wpv4/0GzTr+1MAAAAjrfnX/3j9+SA80m3G75Y3di4Npwedz6fnR5bSPUfO1G2ev2fLbWdFQAAANCEyWaya///Ui0Oc+7/P/PDSz/V75mFEE6W+/+n1z4dX2puOgutiT8nbnuOAAAAtOtk2er7/3nx/n+688pDGkJ447VpXP4bwLnq/+y9r3+sj1V///9cc1NcSGl/uh5F3w+h0287IwAAAI6yp8oWi/3f8u2VT34+9UHX+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfsrAAD//zY6POs=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x3, 0x1) 4.697998398s ago: executing program 4 (id=1668): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)="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", 0x5ce}], 0x1) 4.411708236s ago: executing program 3 (id=1669): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaee77f04986dd606410a600080000fe800000000000000000000000000012ff"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.362324137s ago: executing program 2 (id=1670): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000009a000/0xb000)=nil], &(0x7f00000000c0), &(0x7f0000000100), 0x2) 3.781119464s ago: executing program 3 (id=1671): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 3.696400826s ago: executing program 2 (id=1672): r0 = syz_open_dev$usbmon(&(0x7f0000004940), 0xa, 0x103) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff0001090224"], 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000049c0)={0x0, 0xfffffffffffffeca, 0x3}) 3.509511034s ago: executing program 6 (id=1673): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "a1a23b02a0c8121422dba7f6a8390ee3"}, 0x18) 3.319917954s ago: executing program 3 (id=1674): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) 3.223002819s ago: executing program 6 (id=1675): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x15) write(r0, 0x0, 0x0) 3.034690849s ago: executing program 3 (id=1676): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x1000000}, 0x38) 3.02561323s ago: executing program 0 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff0a000e001c16"], 0x34}}, 0x10) 2.96600977s ago: executing program 4 (id=1678): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000021", 0x4c}, {&(0x7f0000001a40)="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", 0xcdb}], 0x2}, 0x0) 2.862759522s ago: executing program 1 (id=1679): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2540, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) 2.744047271s ago: executing program 3 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 2.629137323s ago: executing program 6 (id=1681): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 2.174219243s ago: executing program 4 (id=1682): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) 2.120882584s ago: executing program 3 (id=1683): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000484, &(0x7f0000000140)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x623d, &(0x7f0000006580)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1.833886273s ago: executing program 4 (id=1684): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x8, r1, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)='Y', 0x1}], 0x1}}], 0x1, 0x240400c5) 1.831791994s ago: executing program 0 (id=1685): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.528997639s ago: executing program 0 (id=1686): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x5, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001600156f27bd7000fddfdf270a"], 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) 1.448536167s ago: executing program 4 (id=1687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x240040c0) 1.348170315s ago: executing program 2 (id=1688): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.230586095s ago: executing program 0 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 1.094681497s ago: executing program 1 (id=1690): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 1.025262486s ago: executing program 1 (id=1691): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x3fffffffffffffff) 976.519997ms ago: executing program 4 (id=1692): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 866.989083ms ago: executing program 2 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25090000001c000480040007801300010062726f6164636173742d6c69044dda"], 0x30}}, 0x8040) 767.949209ms ago: executing program 0 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r1, 0x311, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x20040000) 624.992526ms ago: executing program 6 (id=1695): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) 520.4735ms ago: executing program 1 (id=1696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 378.240055ms ago: executing program 2 (id=1697): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x66) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 245.674238ms ago: executing program 0 (id=1698): r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x245, 0x0, 0x3, 0x18f}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000000)) exit(0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) 0s ago: executing program 6 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a00ffff0900010073797a3100000000300004802c000180090001007866726d000000001c0002800800024000000006080001400000000e05000300020000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) kernel console output (not intermixed with test programs): 3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.914857][ T5893] logitech 0003:046D:C50C.0011: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 232.960641][ T5893] usb 1-1: USB disconnect, device number 11 [ 233.308383][ T8592] fido_id[8592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 233.685862][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 233.852493][ T8612] loop0: detected capacity change from 0 to 4096 [ 233.859191][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 233.885085][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 233.906619][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 233.947604][ T8619] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.952788][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 233.987555][ T8618] loop1: detected capacity change from 0 to 1024 [ 234.024453][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 234.089688][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.113582][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 234.115477][ T30] audit: type=1800 audit(1774966322.141:14): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1008" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 234.133831][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 234.144767][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 234.202292][ T9] usb 5-1: Product: syz [ 234.238104][ T9] usb 5-1: Manufacturer: syz [ 234.242841][ T9] usb 5-1: SerialNumber: syz [ 234.287591][ T9] usb 5-1: config 0 descriptor?? [ 234.323274][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 234.336461][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 234.346367][ T91] hfsplus: b-tree write err: -5, ino 25 [ 234.352058][ T91] hfsplus: b-tree write err: -5, ino 4 [ 234.370889][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 234.377882][ T5928] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.395612][ T91] hfsplus: b-tree write err: -5, ino 2 [ 234.401238][ T5928] usb 4-1: config 0 has no interface number 0 [ 234.411465][ T91] hfsplus: b-tree write err: -5, ino 20 [ 234.421504][ T5928] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.466057][ T5928] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.520836][ T5928] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 234.572012][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.608444][ T5928] usb 4-1: config 0 descriptor?? [ 234.708677][ T29] usb 5-1: USB disconnect, device number 11 [ 234.729101][ T29] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 234.777701][ T8627] loop1: detected capacity change from 0 to 1024 [ 234.847917][ T8627] hfsplus: bad catalog entry type [ 234.963161][ T8614] loop6: detected capacity change from 0 to 32768 [ 234.982395][ T91] hfsplus: b-tree write err: -5, ino 25 [ 234.999146][ T91] hfsplus: b-tree write err: -5, ino 4 [ 235.030447][ T8614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1006 (8614) [ 235.048504][ T91] hfsplus: b-tree write err: -5, ino 2 [ 235.158587][ T8614] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.203926][ T8635] loop2: detected capacity change from 0 to 512 [ 235.234678][ T8614] BTRFS info (device loop6): using sha256 checksum algorithm [ 235.288184][ T8635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.316157][ T5928] uclogic 0003:28BD:0094.0012: failed retrieving string descriptor #100: -71 [ 235.335092][ T5928] uclogic 0003:28BD:0094.0012: failed retrieving pen parameters: -71 [ 235.361254][ T5928] uclogic 0003:28BD:0094.0012: pen probing failed: -71 [ 235.441257][ T5928] uclogic 0003:28BD:0094.0012: failed probing parameters: -71 [ 235.450381][ T8635] fs-verity (loop2, inode 16): Unsupported log_blocksize: 12 [ 235.470145][ T5928] uclogic 0003:28BD:0094.0012: probe with driver uclogic failed with error -71 [ 235.531456][ T5928] usb 4-1: USB disconnect, device number 5 [ 235.532994][ T8614] BTRFS info (device loop6): setting nodatasum [ 235.570332][ T8614] BTRFS info (device loop6): enabling ssd optimizations [ 235.579571][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.611274][ T30] audit: type=1326 audit(1774966323.641:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.1.1021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc82f99c819 code=0x0 [ 235.632930][ T8614] BTRFS info (device loop6): turning on async discard [ 235.632967][ T8614] BTRFS info (device loop6): enabling free space tree [ 235.863913][ T7516] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.428732][ T8671] loop3: detected capacity change from 0 to 4096 [ 236.656527][ T8683] xt_hashlimit: size too large, truncated to 1048576 [ 236.740732][ T8671] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 236.965909][ T8690] loop4: detected capacity change from 0 to 512 [ 236.976290][ T8671] ntfs3(loop3): ino=0, "file1" failed to extend initialized size to 100003. [ 237.050993][ T8690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.120601][ T8690] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.482786][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.525161][ T8701] loop2: detected capacity change from 0 to 64 [ 237.574476][ T8701] hfs: bad catalog entry type 0 [ 237.662760][ T8705] loop3: detected capacity change from 0 to 256 [ 237.688323][ T8705] exfat: Deprecated parameter 'utf8' [ 237.697593][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 237.713517][ T8705] exfat: Deprecated parameter 'utf8' [ 237.757528][ T8707] loop4: detected capacity change from 0 to 512 [ 237.796137][ T8705] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 237.874114][ T8707] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 237.947402][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 237.980616][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.010982][ T8707] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 238.013853][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.078350][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.108349][ T8713] loop0: detected capacity change from 0 to 256 [ 238.133369][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.146933][ T8713] exfat: Deprecated parameter 'utf8' [ 238.172930][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.175158][ T8713] exfat: Deprecated parameter 'utf8' [ 238.246211][ T9] usb 2-1: config 0 descriptor?? [ 238.263057][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 238.324369][ T8713] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 238.397130][ T8717] loop2: detected capacity change from 0 to 64 [ 238.810521][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input13 [ 238.839138][ T8729] loop4: detected capacity change from 0 to 512 [ 238.842821][ T8731] loop6: detected capacity change from 0 to 256 [ 238.919514][ T8731] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 238.958752][ T9] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 238.998330][ T8729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.082669][ T8735] loop0: detected capacity change from 0 to 1024 [ 239.091304][ T9] usb 2-1: USB disconnect, device number 5 [ 239.183518][ T8735] hfsplus: bad catalog entry type [ 239.381462][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.415208][ T1138] hfsplus: b-tree write err: -5, ino 25 [ 239.426830][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 239.465942][ T1138] hfsplus: b-tree write err: -5, ino 2 [ 239.628331][ T8740] fido_id[8740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 239.699078][ T8748] exfat: Deprecated parameter 'namecase' [ 239.794330][ T8748] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 239.969331][ T36] hfsplus: b-tree write err: -5, ino 25 [ 240.010814][ T36] hfsplus: b-tree write err: -5, ino 4 [ 240.025160][ T36] hfsplus: b-tree write err: -5, ino 2 [ 241.805146][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 242.009521][ T5893] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 242.045437][ T5893] usb 4-1: config 1 has no interface number 0 [ 242.051574][ T5893] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 242.083665][ T5893] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 242.105050][ T5893] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.112338][ T8780] set_capacity_and_notify: 2 callbacks suppressed [ 242.112361][ T8780] loop0: detected capacity change from 0 to 32768 [ 242.127887][ T5893] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 242.173494][ T8780] [ 242.173494][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.173494][ T8780] [ 242.205147][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.215405][ T5893] usb 4-1: Product: syz [ 242.219587][ T5893] usb 4-1: Manufacturer: syz [ 242.246081][ T5893] usb 4-1: SerialNumber: syz [ 242.269532][ T8803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.324157][ T8780] [ 242.324157][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.324157][ T8780] [ 242.384812][ T8780] [ 242.384812][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.384812][ T8780] [ 242.439422][ T8780] [ 242.439422][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.439422][ T8780] [ 242.495147][ T8780] [ 242.495147][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.495147][ T8780] [ 242.551770][ T8803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.583004][ T8780] [ 242.583004][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.583004][ T8780] [ 242.612674][ T8780] [ 242.612674][ T8780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.612674][ T8780] [ 242.720538][ T109] [ 242.720538][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.720538][ T109] [ 242.797981][ T5893] usb 4-1: Incompatible driver and firmware versions [ 242.934169][ T8838] loop4: detected capacity change from 0 to 512 [ 242.951890][ T5837] [ 242.951890][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.951890][ T5837] [ 242.989839][ T5893] usb 4-1: USB disconnect, device number 6 [ 243.005899][ T5837] [ 243.005899][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.005899][ T5837] [ 243.049914][ T8838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.133412][ T8838] fs-verity (loop4, inode 16): Unsupported log_blocksize: 12 [ 243.178566][ T8845] loop1: detected capacity change from 0 to 128 [ 243.277969][ T8845] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 243.318951][ T8845] syz.1.1107: attempt to access beyond end of device [ 243.318951][ T8845] loop1: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 243.422830][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.560762][ T8851] loop2: detected capacity change from 0 to 512 [ 243.802525][ T8854] loop4: detected capacity change from 0 to 1024 [ 243.860337][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 243.933213][ T8854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.027513][ T8839] loop6: detected capacity change from 0 to 32768 [ 244.055265][ T8839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1103 (8839) [ 244.117586][ T8839] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.176876][ T8839] BTRFS info (device loop6): using sha256 checksum algorithm [ 244.363489][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.430886][ T8839] BTRFS info (device loop6): enabling ssd optimizations [ 244.505116][ T8839] BTRFS info (device loop6): turning on async discard [ 244.535468][ T8839] BTRFS info (device loop6): enabling free space tree [ 244.580966][ T8839] BTRFS info (device loop6): enabling auto defrag [ 244.622799][ T8839] BTRFS info (device loop6): max_inline set to 4096 [ 244.735682][ T8839] BTRFS info (device loop6 state M): max_inline set to 4096 [ 244.792849][ T8887] BTRFS info (device loop6 state M): max_inline set to 4096 [ 244.866922][ T5893] hid_parser_main: 30 callbacks suppressed [ 244.866953][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 244.935809][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 244.960355][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.015184][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.022643][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.035344][ T7516] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.058419][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.071045][ T8852] loop1: detected capacity change from 0 to 32768 [ 245.082955][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.123445][ T8852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1110 (8852) [ 245.138376][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.176511][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.184126][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 245.225856][ T5893] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 245.240019][ T8852] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.284616][ T8852] BTRFS info (device loop1): using crc32c checksum algorithm [ 245.381627][ T8878] loop0: detected capacity change from 0 to 32768 [ 245.426408][ T8878] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1114 (8878) [ 245.585997][ T8852] BTRFS info (device loop1): enabling ssd optimizations [ 245.597327][ T8897] fido_id[8897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.675838][ T8878] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 245.685142][ T8852] BTRFS info (device loop1): turning on flush-on-commit [ 245.692926][ T8852] BTRFS info (device loop1): enabling free space tree [ 245.725241][ T8852] BTRFS info (device loop1): enabling auto defrag [ 245.762265][ T8878] BTRFS info (device loop0): using blake2b checksum algorithm [ 245.773023][ T8852] BTRFS info (device loop1): use lzo compression, level 1 [ 245.805100][ T8852] BTRFS info (device loop1): max_inline set to 4096 [ 245.849890][ T8916] loop2: detected capacity change from 0 to 512 [ 246.058852][ T8916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.142991][ T8916] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.317869][ T8878] BTRFS info (device loop0): enabling ssd optimizations [ 246.334518][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.365108][ T8878] BTRFS info (device loop0): turning on async discard [ 246.371923][ T8878] BTRFS info (device loop0): enabling free space tree [ 246.577027][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.955980][ T5837] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 247.076917][ T8952] loop3: detected capacity change from 0 to 4096 [ 247.170296][ T8960] tmpfs: Bad value for 'mpol' [ 247.184459][ T8958] loop6: detected capacity change from 0 to 1024 [ 247.207203][ T8961] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.327983][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.384422][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.466651][ T8958] hfsplus: xattr searching failed [ 247.476996][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.521719][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.570390][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.627598][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.681260][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.815093][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.868867][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.925063][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 247.993127][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1140'. [ 248.005131][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.027495][ T8973] loop1: detected capacity change from 0 to 256 [ 248.044129][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.050452][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1140'. [ 248.098794][ T8973] exfat: Deprecated parameter 'utf8' [ 248.104145][ T8973] exfat: Deprecated parameter 'utf8' [ 248.135050][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.143600][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.223829][ T8973] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 248.246990][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.284044][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.333663][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.385890][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.394456][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.445140][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.453710][ T8952] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 248.487944][ T8952] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 248.980440][ T8992] netlink: 'syz.0.1161': attribute type 3 has an invalid length. [ 249.133137][ T8956] loop2: detected capacity change from 0 to 40427 [ 249.174964][ T8994] loop3: detected capacity change from 0 to 2048 [ 249.175812][ T8956] F2FS-fs (loop2): build fault injection rate: 174 [ 249.195111][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.218255][ T8994] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 249.244830][ T8956] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 249.273121][ T9000] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.299082][ T8956] F2FS-fs (loop2): invalid crc value [ 249.405078][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 249.429929][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.432899][ T8998] loop1: detected capacity change from 0 to 4096 [ 249.468971][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.511654][ T9005] loop6: detected capacity change from 0 to 256 [ 249.538525][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.567570][ T9005] exfat: Deprecated parameter 'utf8' [ 249.588108][ T9005] exfat: Deprecated parameter 'utf8' [ 249.615384][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.624440][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.657389][ T8956] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 249.704002][ T29] usb 5-1: config 0 descriptor?? [ 249.709886][ T9005] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 249.743255][ T8956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.236040][ T9018] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 250.241091][ T9012] loop0: detected capacity change from 0 to 4096 [ 250.292214][ T9012] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 250.295136][ T9018] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1160'. [ 250.323797][ T9012] ntfs3(loop0): Failed to load $Extend (-22). [ 250.331363][ T9012] ntfs3(loop0): Failed to initialize $Extend. [ 250.408714][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input14 [ 250.530798][ T29] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 250.623696][ T29] usb 5-1: USB disconnect, device number 12 [ 251.037506][ T9025] fido_id[9025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 251.238787][ T9035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1170'. [ 251.288745][ T9035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1170'. [ 251.685098][ T5893] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.836273][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 251.865139][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 251.888264][ T9028] loop1: detected capacity change from 0 to 32768 [ 251.906452][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 251.940866][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.958084][ T9028] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1167 (9028) [ 251.981807][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 252.015506][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 252.033898][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.055750][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.066821][ T5893] usb 5-1: config 0 descriptor?? [ 252.087273][ T9028] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 252.094657][ T29] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 252.127631][ T9028] BTRFS info (device loop1): using blake2b checksum algorithm [ 252.133034][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.196511][ T29] usb 3-1: config 0 descriptor?? [ 252.304692][ T9028] BTRFS info (device loop1): enabling ssd optimizations [ 252.335269][ T9028] BTRFS info (device loop1): turning on async discard [ 252.342125][ T9028] BTRFS info (device loop1): enabling free space tree [ 252.359690][ T9028] BTRFS info (device loop1): use zstd compression, level 3 [ 252.501546][ T5893] hid_parser_main: 73 callbacks suppressed [ 252.501585][ T5893] logitech 0003:046D:CA03.0016: unknown main item tag 0x4 [ 252.518128][ T30] audit: type=1800 audit(1774966340.541:16): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1167" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 252.537535][ T5893] logitech 0003:046D:CA03.0016: unknown main item tag 0x1 [ 252.555043][ T5893] logitech 0003:046D:CA03.0016: unknown main item tag 0x4 [ 252.570749][ T9028] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 252.582555][ T5893] logitech 0003:046D:CA03.0016: bogus close delimiter [ 252.608727][ T5893] logitech 0003:046D:CA03.0016: item 0 0 2 10 parsing failed [ 252.646514][ T5893] logitech 0003:046D:CA03.0016: parse failed [ 252.665151][ T5893] logitech 0003:046D:CA03.0016: probe with driver logitech failed with error -22 [ 252.695950][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.713387][ T5893] usb 5-1: USB disconnect, device number 13 [ 252.736085][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.753766][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.773027][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.795068][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.835445][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.863931][ T5826] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 252.870661][ T29] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 252.939585][ T29] lenovo 0003:17EF:60EE.0017: hidraw0: USB HID v7f.fd Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 253.015218][ T29] lenovo 0003:17EF:60EE.0017: Failed to switch middle button: -71 [ 253.039586][ T29] lenovo 0003:17EF:60EE.0017: Fn-lock setting failed: -71 [ 253.135215][ T29] lenovo 0003:17EF:60EE.0017: Sensitivity setting failed: -71 [ 253.164753][ T29] usb 3-1: USB disconnect, device number 8 [ 253.292307][ T9075] fido_id[9075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 253.453813][ T9054] loop3: detected capacity change from 0 to 32768 [ 253.560987][ T9074] loop0: detected capacity change from 0 to 32768 [ 253.586710][ T9054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1178 (9054) [ 253.617900][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 253.635248][ T30] audit: type=1800 audit(1774966341.661:17): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1181" name="file2" dev="loop0" ino=5 res=0 errno=0 [ 253.640232][ T9054] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.728955][ T9054] BTRFS info (device loop3): using sha256 checksum algorithm [ 253.761848][ T9057] loop6: detected capacity change from 0 to 40427 [ 253.821676][ T9057] F2FS-fs (loop6): invalid crc value [ 253.844227][ T9074] ERROR: (device loop0): dbAdjCtl: Corrupt dmapctl page [ 253.844227][ T9074] [ 253.886272][ T9074] ERROR: (device loop0): remounting filesystem as read-only [ 254.041862][ T9054] BTRFS info (device loop3): setting nodatasum [ 254.088821][ T9054] BTRFS info (device loop3): enabling ssd optimizations [ 254.146415][ T9054] BTRFS info (device loop3): turning on async discard [ 254.153234][ T9054] BTRFS info (device loop3): enabling free space tree [ 254.225295][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.351622][ T9057] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 254.425669][ T9057] F2FS-fs (loop6): Start checkpoint disabled! [ 254.485655][ T9057] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 254.555547][ T9057] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 254.766905][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.779121][ T13] kworker/u8:1: attempt to access beyond end of device [ 254.779121][ T13] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.846128][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 254.846176][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.846201][ T13] Workqueue: writeback wb_workfn (flush-7:6) [ 254.846264][ T13] Call Trace: [ 254.846276][ T13] [ 254.846289][ T13] dump_stack_lvl+0x100/0x190 [ 254.846351][ T13] f2fs_handle_critical_error+0x5d7/0x970 [ 254.846400][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.846445][ T13] ? f2fs_build_fault_attr+0x53/0x280 [ 254.846520][ T13] f2fs_write_end_io+0xc3f/0xf30 [ 254.846659][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 254.846715][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.846770][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 254.846818][ T13] bio_endio+0x7a3/0x910 [ 254.846865][ T13] submit_bio_noacct+0x64c/0x2010 [ 254.846933][ T13] f2fs_submit_write_bio+0x133/0x350 [ 254.846979][ T13] __submit_merged_bio+0x331/0x7b0 [ 254.847035][ T13] __submit_merged_write_cond+0x3fe/0x510 [ 254.847093][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 254.847154][ T13] ? __pfx___might_resched+0x10/0x10 [ 254.847197][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847252][ T13] f2fs_write_cache_pages+0x21c0/0x2720 [ 254.847334][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 254.847389][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847444][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847490][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847535][ T13] ? find_held_lock+0x2b/0x80 [ 254.847588][ T13] ? nr_blockdev_pages+0xde/0x120 [ 254.847640][ T13] ? nr_blockdev_pages+0xde/0x120 [ 254.847689][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847755][ T13] ? si_meminfo+0x118/0x230 [ 254.847791][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847838][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847950][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.847995][ T13] ? rcu_is_watching+0x12/0xc0 [ 254.848049][ T13] f2fs_write_data_pages+0x799/0x16d0 [ 254.848105][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.848164][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 254.848235][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.848281][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 254.848342][ T13] do_writepages+0x278/0x600 [ 254.848407][ T13] ? __pfx_do_writepages+0x10/0x10 [ 254.848468][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.848520][ T13] __writeback_single_inode+0x164/0x13c0 [ 254.848576][ T13] ? find_held_lock+0x2b/0x80 [ 254.848624][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.848674][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 254.848724][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.848769][ T13] ? do_raw_spin_unlock+0x145/0x1e0 [ 254.848810][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.848862][ T13] writeback_sb_inodes+0x766/0x1c70 [ 254.848934][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 254.848983][ T13] ? do_raw_spin_lock+0x128/0x260 [ 254.849024][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849127][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849171][ T13] ? rcu_is_watching+0x12/0xc0 [ 254.849245][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849291][ T13] ? queue_io+0x287/0x550 [ 254.849336][ T13] wb_writeback+0x1c0/0xbe0 [ 254.849383][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849443][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 254.849505][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849550][ T13] ? mark_held_locks+0x40/0x70 [ 254.849614][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.849679][ T13] wb_workfn+0x142/0xc00 [ 254.849734][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849779][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.849841][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 254.849894][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849944][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.849994][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.850040][ T13] ? rcu_is_watching+0x12/0xc0 [ 254.850090][ T13] process_one_work+0xa23/0x19a0 [ 254.850159][ T13] ? __pfx_process_one_work+0x10/0x10 [ 254.850195][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.850256][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.850309][ T13] worker_thread+0x5ef/0xe50 [ 254.850365][ T13] ? kthread+0x13a/0x450 [ 254.850395][ T13] ? __pfx_worker_thread+0x10/0x10 [ 254.850430][ T13] kthread+0x370/0x450 [ 254.850462][ T13] ? __pfx_kthread+0x10/0x10 [ 254.850498][ T13] ret_from_fork+0x754/0xd80 [ 254.850536][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 254.850580][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.850625][ T13] ? __switch_to+0x7b4/0x1120 [ 254.850670][ T13] ? __pfx_kthread+0x10/0x10 [ 254.850706][ T13] ret_from_fork_asm+0x1a/0x30 [ 254.850773][ T13] [ 254.935105][ T13] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 255.376890][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'. [ 255.424678][ T9115] loop2: detected capacity change from 0 to 512 [ 255.535468][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 255.641868][ T9115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.720590][ T9115] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.748380][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 255.773155][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.804401][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.835662][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.865035][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 255.927205][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.969780][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.980574][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.028669][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.102145][ T9] usb 2-1: Manufacturer: syz [ 256.136442][ T9] usb 2-1: config 0 descriptor?? [ 256.236233][ T9110] loop4: detected capacity change from 0 to 32768 [ 256.291203][ T9110] (syz.4.1191,9110,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.346791][ T9110] (syz.4.1191,9110,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.404696][ T9130] autofs: Bad value for 'fd' [ 256.495143][ T9133] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1200'. [ 256.517360][ T9110] JBD2: Ignoring recovery information on journal [ 256.555085][ T9] rc_core: IR keymap rc-hauppauge not found [ 256.628494][ T9] Registered IR keymap rc-empty [ 256.652167][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 256.671192][ T9110] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 256.744629][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 256.806263][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 256.859423][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 256.910784][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 256.965446][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 256.995323][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.025201][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.047048][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.071937][ T9145] loop6: detected capacity change from 0 to 4096 [ 257.078788][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.106545][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.136547][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.171540][ T9148] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.185496][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.230606][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.264766][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.275282][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.309665][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.309679][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 257.329245][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 257.355163][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.360858][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 257.385898][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.426884][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.441136][ T9] usb 2-1: USB disconnect, device number 6 [ 257.459497][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.500667][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.557606][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.605434][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.646126][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.675789][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.716356][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.788375][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.845340][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.864086][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.874303][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 257.886289][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.889373][ T9138] loop2: detected capacity change from 0 to 32768 [ 257.896687][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.896726][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.896761][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.896796][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.896831][ T9145] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 257.897392][ T9145] NILFS (loop6): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 258.055041][ T9138] [ 258.055041][ T9138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.055041][ T9138] [ 258.070642][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.093752][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.133192][ T9138] read_mapping_page failed! [ 258.148085][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.162825][ T9138] ERROR: (device loop2): txAbort: [ 258.162825][ T9138] [ 258.188412][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 258.222549][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.279971][ T10] usb 1-1: config 0 descriptor?? [ 258.422339][ T5825] [ 258.422339][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.422339][ T5825] [ 258.422640][ T5825] [ 258.422640][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.422640][ T5825] [ 258.617354][ T9166] loop2: detected capacity change from 0 to 16 [ 258.626496][ T9166] erofs (device loop2): mounted with root inode @ nid 36. [ 258.672059][ T5834] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 258.727640][ T10] hid_parser_main: 221 callbacks suppressed [ 258.727674][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.732254][ T9166] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 258.733618][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.773914][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.781303][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.790043][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.805274][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.813478][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.829013][ T9166] erofs (device loop2): read error -117 @ 2 of nid 89 [ 258.865089][ T30] audit: type=1800 audit(1774966346.881:18): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1213" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 258.869614][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.956073][ T9171] loop6: detected capacity change from 0 to 64 [ 258.965375][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 258.982863][ T9171] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 259.002107][ T10] magicmouse 0003:05AC:0265.0018: unknown main item tag 0x0 [ 259.055674][ T10] magicmouse 0003:05AC:0265.0018: hidraw0: USB HID v0.03 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 259.082814][ T5834] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 259.111594][ T10] usb 1-1: USB disconnect, device number 12 [ 259.295906][ T9179] loop2: detected capacity change from 0 to 64 [ 259.343483][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 259.375785][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.382118][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.852510][ T9188] fido_id[9188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 259.967032][ T9192] loop2: detected capacity change from 0 to 4096 [ 259.994132][ T9192] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 260.470699][ T9210] loop1: detected capacity change from 0 to 16 [ 260.501284][ T9210] erofs (device loop1): mounted with root inode @ nid 36. [ 261.090180][ T9216] loop6: detected capacity change from 0 to 32768 [ 261.099433][ T9216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1236 (9216) [ 261.136214][ T9216] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.146825][ T9216] BTRFS info (device loop6): using crc32c checksum algorithm [ 261.221849][ T9228] loop2: detected capacity change from 0 to 512 [ 261.233285][ T9228] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 261.252536][ T9228] EXT4-fs (loop2): invalid journal inode [ 261.306595][ T9198] loop3: detected capacity change from 0 to 32768 [ 261.329245][ T9228] EXT4-fs (loop2): can't get journal size [ 261.340110][ T9216] BTRFS info (device loop6): setting nodatasum [ 261.347456][ T9216] BTRFS info (device loop6): setting nodatacow [ 261.353630][ T9216] BTRFS info (device loop6): turning on sync discard [ 261.360454][ T9216] BTRFS info (device loop6): enabling free space tree [ 261.367301][ T9216] BTRFS info (device loop6): max_inline set to 0 [ 261.381088][ T9216] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.411094][ T9198] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1228 (9198) [ 261.470440][ T9198] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 261.566685][ T9228] EXT4-fs (loop2): 1 truncate cleaned up [ 261.590845][ T9212] loop4: detected capacity change from 0 to 32768 [ 261.598062][ T9198] BTRFS info (device loop3): using blake2b checksum algorithm [ 261.650889][ T9228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.881121][ T9238] loop0: detected capacity change from 0 to 4096 [ 261.885237][ T9212] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.009098][ T9238] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 262.123140][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.174606][ T9198] BTRFS info (device loop3): enabling ssd optimizations [ 262.205485][ T9238] ntfs3(loop0): ino=19, mi_enum_attr [ 262.220698][ T9212] XFS (loop4): Ending clean mount [ 262.226859][ T9238] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 262.245748][ T9198] BTRFS info (device loop3): turning on async discard [ 262.296923][ T9198] BTRFS info (device loop3): enabling free space tree [ 262.299496][ T9238] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 262.562433][ T10] IPVS: starting estimator thread 0... [ 262.619122][ T5833] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.686306][ T9273] IPVS: using max 22 ests per chain, 52800 per kthread [ 263.006821][ T5839] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 263.107481][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 263.119775][ T5834] Bluetooth: hci3: Injecting HCI hardware error event [ 263.128583][ T5841] Bluetooth: hci3: hardware error 0x00 [ 263.418258][ T9284] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.444096][ T5921] kernel write not supported for file /uhid (pid: 5921 comm: kworker/1:4) [ 263.532672][ T9284] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.868609][ T1084] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.146584][ T9305] set_capacity_and_notify: 2 callbacks suppressed [ 264.146611][ T9305] loop6: detected capacity change from 0 to 64 [ 264.300375][ T9310] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1259'. [ 264.363351][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 264.859606][ T9324] Invalid source name [ 264.975098][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 265.018682][ T9326] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1269'. [ 265.135418][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 265.173936][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.194330][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.231971][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 265.239731][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 265.295273][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 265.330211][ T29] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 265.345171][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 265.361834][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.392759][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 265.403974][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 265.405058][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 265.435785][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 265.445093][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 265.446472][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.465529][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 265.488895][ T10] usb 2-1: config 179 has no interface number 0 [ 265.505259][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 265.535144][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 265.578007][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 265.643573][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 265.683395][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 265.703387][ T9322] loop6: detected capacity change from 0 to 32768 [ 265.715098][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.767364][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.818187][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.879500][ T9328] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.896371][ T29] usb 5-1: USB disconnect, device number 14 [ 265.944011][ T10] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 266.195169][ T29] usb 2-1: USB disconnect, device number 7 [ 266.752409][ T9358] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 266.788871][ T9358] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1283'. [ 266.798443][ T9360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1284'. [ 266.833129][ T9358] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 266.841200][ T9360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1284'. [ 266.865179][ T9358] netlink: 'syz.0.1283': attribute type 8 has an invalid length. [ 266.872913][ T9358] netlink: 606 bytes leftover after parsing attributes in process `syz.0.1283'. [ 267.040287][ T9330] loop3: detected capacity change from 0 to 32768 [ 267.075226][ T9330] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1268 (9330) [ 267.250743][ T9330] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 267.351139][ T9330] BTRFS info (device loop3): using sha256 checksum algorithm [ 268.129639][ T9356] loop4: detected capacity change from 0 to 32768 [ 268.326304][ T9330] BTRFS error (device loop3): open_ctree failed: -4 [ 268.501117][ T9407] loop6: detected capacity change from 0 to 1024 [ 268.650764][ T9407] hfsplus: bad catalog entry type [ 268.713186][ T9412] loop1: detected capacity change from 0 to 256 [ 268.806555][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 269.002560][ T13] hfsplus: b-tree write err: -5, ino 25 [ 269.035409][ T13] hfsplus: b-tree write err: -5, ino 4 [ 269.041010][ T13] hfsplus: b-tree write err: -5, ino 2 [ 269.054635][ T29] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 269.072285][ T9414] loop2: detected capacity change from 0 to 1024 [ 269.085050][ T29] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 269.093923][ T29] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 269.176664][ T29] usb 1-1: config 220 has no interface number 2 [ 269.185703][ T29] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 269.285152][ T29] usb 1-1: config 220 interface 0 has no altsetting 0 [ 269.335168][ T29] usb 1-1: config 220 interface 76 has no altsetting 0 [ 269.375122][ T29] usb 1-1: config 220 interface 1 has no altsetting 0 [ 269.408787][ T29] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 269.440145][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.459097][ T9422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.485130][ T29] usb 1-1: Product: syz [ 269.496622][ T29] usb 1-1: Manufacturer: syz [ 269.501235][ T29] usb 1-1: SerialNumber: syz [ 269.834684][ T9426] loop3: detected capacity change from 0 to 512 [ 269.863098][ T29] usb 1-1: selecting invalid altsetting 0 [ 269.889187][ T29] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 269.927706][ T29] uvcvideo 1-1:220.0: No valid video chain found. [ 269.969861][ T9428] loop2: detected capacity change from 0 to 4096 [ 269.983778][ T29] usb 1-1: selecting invalid altsetting 0 [ 269.994379][ T10] IPVS: starting estimator thread 0... [ 270.002171][ T29] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 270.055383][ T29] usb 1-1: USB disconnect, device number 13 [ 270.119090][ T9437] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.135180][ T9434] IPVS: using max 22 ests per chain, 52800 per kthread [ 270.163370][ T9426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.217398][ T9428] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 270.242824][ T9426] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.552169][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.605847][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 270.844824][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.844882][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.844926][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.845151][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 270.845268][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.858355][ T10] usb 5-1: config 0 descriptor?? [ 271.046909][ T9420] loop6: detected capacity change from 0 to 32768 [ 271.055963][ T9420] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1303 (9420) [ 271.060070][ T9420] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 271.060119][ T9420] BTRFS info (device loop6): using blake2b checksum algorithm [ 271.269122][ T9461] tipc: Started in network mode [ 271.269194][ T9461] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 271.269885][ T9461] tipc: Enabling of bearer rejected, failed to enable media [ 271.287530][ T10] kovaplus 0003:1E7D:2D50.0019: item fetching failed at offset 3/5 [ 271.288323][ T10] kovaplus 0003:1E7D:2D50.0019: parse failed [ 271.288417][ T10] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -22 [ 271.362866][ T9420] BTRFS info (device loop6): enabling ssd optimizations [ 271.362908][ T9420] BTRFS info (device loop6): turning on async discard [ 271.362939][ T9420] BTRFS info (device loop6): enabling free space tree [ 271.543235][ T10] usb 5-1: USB disconnect, device number 15 [ 271.700581][ T7516] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 272.877026][ T9500] loop6: detected capacity change from 0 to 16 [ 272.884590][ T9500] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 272.958442][ T9473] loop1: detected capacity change from 0 to 32768 [ 272.996488][ T9500] cramfs: empty filesystem [ 273.079110][ T9473] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.521867][ T9473] XFS (loop1): Ending clean mount [ 273.836186][ T5826] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.914633][ T9531] loop4: detected capacity change from 0 to 16 [ 273.947620][ T9531] erofs (device loop4): mounted with root inode @ nid 36. [ 274.259669][ T9535] loop6: detected capacity change from 0 to 164 [ 274.612547][ T9543] loop1: detected capacity change from 0 to 16 [ 274.641632][ T9543] erofs (device loop1): mounted with root inode @ nid 36. [ 274.692564][ T9543] erofs (device loop1): bogus dirent @ nid 36 [ 275.471855][ T9552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.673665][ T9558] gretap0: entered promiscuous mode [ 275.682493][ T9558] vlan2: entered promiscuous mode [ 276.326516][ T9576] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 276.332895][ T9576] [U] J"—e:ÀÆ" [ 276.372758][ T9574] loop4: detected capacity change from 0 to 4096 [ 276.395506][ T9578] loop3: detected capacity change from 0 to 64 [ 276.418812][ T5920] hid_parser_main: 28 callbacks suppressed [ 276.418843][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.450363][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.489308][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.515306][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.545201][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.595117][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.626447][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.654830][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.680628][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.756741][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 276.828434][ T5920] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device []ê QÖ~µ¶{”œ¥o»a÷‚šðR¥º‹Â¼±¨Ý«YlÉû¾³C¡LæÔ®(Ó] on pA‹¸…mÓótŒÉs®îÒvfØÙ'Ô_pê'°1­ž [ 277.128323][ T9587] fido_id[9587]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.316021][ T9597] loop3: detected capacity change from 0 to 1024 [ 277.326755][ T29] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 277.484743][ T9599] loop6: detected capacity change from 0 to 4096 [ 277.495384][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 277.510651][ T29] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 277.532942][ T29] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 277.562254][ T9599] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 277.573930][ T29] usb 2-1: Product: syz [ 277.590335][ T29] usb 2-1: Manufacturer: syz [ 277.605293][ T29] usb 2-1: SerialNumber: syz [ 277.615864][ T9597] hfsplus: bad catalog entry type [ 277.644901][ T29] usb 2-1: config 0 descriptor?? [ 277.692061][ T9599] ntfs3(loop6): ino=1a, mi_enum_attr [ 277.701753][ T5920] kernel read not supported for file /video9 (pid: 5920 comm: kworker/0:6) [ 277.721440][ T9599] ntfs3(loop6): ino=1a, mi_enum_attr [ 277.729251][ T9] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 277.755202][ T9599] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 277.769399][ T13] hfsplus: b-tree write err: -5, ino 25 [ 277.795470][ T13] hfsplus: b-tree write err: -5, ino 4 [ 277.801027][ T13] hfsplus: b-tree write err: -5, ino 2 [ 277.921630][ T29] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 277.944582][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.988480][ T9610] loop0: detected capacity change from 0 to 64 [ 277.996731][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 278.033564][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.097047][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 278.113252][ T29] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 278.136862][ T29] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 278.148416][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.154328][ T29] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 278.219694][ T9] usb 5-1: config 0 descriptor?? [ 278.235372][ T9604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.425804][ T29] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 278.471136][ T29] usb 2-1: USB disconnect, device number 8 [ 278.514079][ T9621] loop6: detected capacity change from 0 to 512 [ 278.648816][ T9621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.765227][ T9621] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.777892][ T9] hid (null): unknown global tag 0xe [ 278.807707][ T9] hid (null): unknown global tag 0xe [ 278.841130][ T30] audit: type=1800 audit(1774966366.871:19): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1386" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 278.842493][ T9] waltop 0003:172F:0500.001B: unknown global tag 0xe [ 278.947970][ T9] waltop 0003:172F:0500.001B: item 0 1 1 14 parsing failed [ 278.961420][ T9] waltop 0003:172F:0500.001B: probe with driver waltop failed with error -22 [ 278.964013][ T7516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.181414][ T29] usb 5-1: USB disconnect, device number 16 [ 279.487803][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 279.656165][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 279.673653][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.729807][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.775114][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.783849][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.828026][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 279.832228][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1401'. [ 279.850878][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.864242][ T9654] loop6: detected capacity change from 0 to 1024 [ 279.889231][ T10] usb 1-1: config 0 descriptor?? [ 279.965123][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 280.041021][ T5920] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 280.094411][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.139063][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 280.178864][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.183713][ T5920] usb 4-1: config 0 descriptor?? [ 280.369070][ T10] magicmouse 0003:05AC:0323.001C: item fetching failed at offset 35/41 [ 280.370229][ T10] magicmouse 0003:05AC:0323.001C: magicmouse hid parse failed [ 280.370382][ T10] magicmouse 0003:05AC:0323.001C: probe with driver magicmouse failed with error -22 [ 280.627325][ T10] usb 1-1: USB disconnect, device number 14 [ 280.643151][ T5920] logitech 0003:046D:C24F.001D: invalid report_size 26545 [ 280.643188][ T5920] logitech 0003:046D:C24F.001D: item 0 2 1 7 parsing failed [ 280.643957][ T5920] logitech 0003:046D:C24F.001D: parse failed [ 280.644090][ T5920] logitech 0003:046D:C24F.001D: probe with driver logitech failed with error -22 [ 280.646332][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 280.857360][ T5920] usb 4-1: USB disconnect, device number 7 [ 280.921043][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 282.083133][ T9701] loop4: detected capacity change from 0 to 4096 [ 282.155167][ T9705] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.277583][ T9701] NILFS (loop4): bad btree node (ino=18446744073709486081, blocknr=1024): level = 0, flags = 0x0, nchildren = 0 [ 282.316047][ T9701] NILFS (loop4): error -5 preparing GC: cannot read source blocks [ 282.317228][ T9704] loop1: detected capacity change from 0 to 2048 [ 282.434464][ T9704] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 282.463987][ T9709] loop0: detected capacity change from 0 to 4096 [ 282.476675][ T9679] loop2: detected capacity change from 0 to 32768 [ 282.501990][ T9704] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 282.536086][ T9704] UDF-fs: Scanning with blocksize 512 failed [ 282.573469][ T9679] JBD2: Ignoring recovery information on journal [ 282.595506][ T9704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.657532][ T9709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.808324][ T9679] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 283.033374][ T9679] (syz.2.1412,9679,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 283.059287][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.083912][ T9679] (syz.2.1412,9679,0):ocfs2_trim_mainbm:7631 ERROR: status = -12 [ 283.248282][ T9725] loop1: detected capacity change from 0 to 512 [ 283.268035][ T9724] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1434'. [ 283.294376][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1434'. [ 283.343197][ T9725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 283.409843][ T9725] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.488184][ T5825] ocfs2: Unmounting device (7,2) on (node local) [ 283.524290][ T9725] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 283.628687][ T9734] loop3: detected capacity change from 0 to 512 [ 283.747410][ T9734] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 283.803793][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 283.805424][ T9734] EXT4-fs (loop3): orphan cleanup on readonly fs [ 283.859794][ T9734] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 283.967487][ T9734] EXT4-fs warning (device loop3): ext4_enable_quotas:7257: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.056024][ T9734] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 284.100686][ T9734] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.1436: bg 0: block 15: invalid block bitmap [ 284.158450][ T9734] loop3: lost filesystem error report for type 5 error -117 [ 284.159050][ T9734] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 284.166450][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 284.166482][ C0] EXT4-fs (loop3): initial error at time 1774966372: ext4_validate_block_bitmap:431 [ 284.166526][ C0] EXT4-fs (loop3): last error at time 1774966372: ext4_validate_block_bitmap:431 [ 284.233701][ T9734] loop3: lost filesystem error report for type 5 error -117 [ 284.234326][ T9734] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.1436: data will be lost [ 284.275222][ T9734] EXT4-fs (loop3): 1 truncate cleaned up [ 284.350083][ T9734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.477395][ T9734] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1436: bad symlink. [ 284.518740][ T9734] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1436: bad symlink. [ 284.619735][ T9733] loop6: detected capacity change from 0 to 32768 [ 284.634145][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.661913][ T9733] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1437 (9733) [ 284.676587][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 284.728531][ T9733] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 284.806872][ T9733] BTRFS info (device loop6): using blake2b checksum algorithm [ 284.866821][ T5893] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.902961][ T5893] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.944136][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.959159][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.984716][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 285.014324][ T5893] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.054183][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.095101][ T5893] usb 2-1: Product: syz [ 285.095226][ T9772] sp0: Synchronizing with TNC [ 285.099283][ T5893] usb 2-1: Manufacturer: syz [ 285.184700][ T9733] BTRFS info (device loop6): enabling ssd optimizations [ 285.215217][ T9733] BTRFS info (device loop6): turning on async discard [ 285.243470][ T9733] BTRFS info (device loop6): enabling free space tree [ 285.289020][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 285.309733][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 285.344622][ T5893] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 285.365239][ T5893] cdc_wdm 2-1:1.0: Unknown control protocol [ 285.400890][ T30] audit: type=1800 audit(1774966373.431:20): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1437" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 285.602395][ T7516] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 285.851887][ C0] cdc_wdm 2-1:1.0: unknown notification 129 received: index 49755 len 0 [ 285.896808][ T5893] usb 2-1: USB disconnect, device number 9 [ 285.990418][ T30] audit: type=1326 audit(1774966374.021:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.072208][ T30] audit: type=1326 audit(1774966374.061:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.140305][ T9797] loop2: detected capacity change from 0 to 256 [ 286.196676][ T30] audit: type=1326 audit(1774966374.101:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.313129][ T30] audit: type=1326 audit(1774966374.101:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.342518][ T9797] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 286.432077][ T30] audit: type=1326 audit(1774966374.101:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.546535][ T30] audit: type=1326 audit(1774966374.101:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.660786][ T30] audit: type=1326 audit(1774966374.101:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.791247][ T30] audit: type=1326 audit(1774966374.101:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.6.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdaeb9c819 code=0x7ffc0000 [ 286.834261][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 286.911913][ T9763] loop0: detected capacity change from 0 to 40427 [ 286.950921][ T9763] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 286.989314][ T9763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 287.051590][ T9763] F2FS-fs (loop0): invalid crc value [ 287.085172][ T5935] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 287.259169][ T9821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1467'. [ 287.303713][ T5935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 287.344283][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 287.374769][ T5935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 287.443171][ T9763] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.446431][ T9824] loop6: detected capacity change from 0 to 1024 [ 287.463220][ T5935] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 287.503215][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.523575][ T9763] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 287.541422][ T5935] usb 2-1: Product: syz [ 287.559672][ T5935] usb 2-1: Manufacturer: syz [ 287.564322][ T5935] usb 2-1: SerialNumber: syz [ 287.575753][ T9763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 287.603373][ T9822] loop3: detected capacity change from 0 to 8192 [ 287.631046][ T5935] usb 2-1: config 0 descriptor?? [ 287.662726][ T9808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.671863][ T9808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.695102][ T13] hfsplus: b-tree write err: -5, ino 25 [ 287.710822][ T5935] usb 2-1: ucan: probing device on interface #0 [ 287.723146][ T13] hfsplus: b-tree write err: -5, ino 4 [ 287.757920][ T13] hfsplus: b-tree write err: -5, ino 2 [ 288.195645][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 288.220287][ T9839] loop3: detected capacity change from 0 to 1024 [ 288.245636][ T9838] syz_tun: entered promiscuous mode [ 288.258604][ T9838] syz_tun: refused to change device tx_queue_len [ 288.308517][ T9839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.360730][ T5935] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 288.413088][ T9839] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.473985][ T9839] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 288.475299][ T5935] usb 2-1: USB disconnect, device number 10 [ 288.513693][ T9839] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 288.728341][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 288.739642][ T9849] loop6: detected capacity change from 0 to 256 [ 288.798940][ T9849] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 288.965267][ T9854] gretap0: entered promiscuous mode [ 288.986747][ T9854] vlan2: entered promiscuous mode [ 289.954654][ T9882] loop0: detected capacity change from 0 to 128 [ 290.018352][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 290.558867][ T9863] loop6: detected capacity change from 0 to 32768 [ 290.656748][ T9863] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.732937][ T9872] loop1: detected capacity change from 0 to 32768 [ 290.757045][ T9872] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1488 (9872) [ 290.803446][ T9863] XFS (loop6): Ending clean mount [ 290.894198][ T9863] XFS (loop6): Quotacheck needed: Please wait. [ 290.985468][ T9872] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 291.036129][ T9872] BTRFS info (device loop1): using blake2b checksum algorithm [ 291.060423][ T9863] XFS (loop6): Quotacheck: Done. [ 291.163362][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 291.163389][ T30] audit: type=1800 audit(1774966379.191:35): pid=9863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1484" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 291.316404][ T9872] BTRFS info (device loop1): enabling ssd optimizations [ 291.365112][ T9872] BTRFS info (device loop1): turning on async discard [ 291.423470][ T9872] BTRFS info (device loop1): enabling free space tree [ 291.465320][ T9872] BTRFS info (device loop1): use zstd compression, level 3 [ 291.537495][ T7516] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.643391][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 291.789802][ T5826] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 291.800376][ T9946] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1514'. [ 291.815046][ T30] audit: type=1326 audit(1774966379.841:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 291.938712][ T30] audit: type=1326 audit(1774966379.841:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.108355][ T30] audit: type=1326 audit(1774966379.841:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.247190][ T30] audit: type=1326 audit(1774966379.841:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.360346][ T30] audit: type=1326 audit(1774966379.871:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.404841][ T9959] loop3: detected capacity change from 0 to 1024 [ 292.445861][ T30] audit: type=1326 audit(1774966379.871:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.455080][ T9959] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 292.574489][ T30] audit: type=1326 audit(1774966379.871:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.600355][ T9959] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 2: comm syz.3.1519: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.649739][ T30] audit: type=1326 audit(1774966379.891:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.674174][ T30] audit: type=1326 audit(1774966379.891:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.0.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f06ed19c819 code=0x7ffc0000 [ 292.698202][ T9959] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.715151][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 292.730689][ C0] EXT4-fs (loop3): initial error at time 1774966380: ext4_map_blocks:786: inode 3: block 2 [ 292.740781][ C0] EXT4-fs (loop3): last error at time 1774966380: ext4_map_blocks:786: inode 3: block 2 [ 292.806676][ T9959] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 48: comm syz.3.1519: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.822186][ T9959] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.822515][ T9959] EXT4-fs error (device loop3): ext4_acquire_dquot:7024: comm syz.3.1519: Failed to acquire dquot type 0 [ 292.834844][ T9967] gretap0: entered promiscuous mode [ 292.864673][ T9959] loop3: lost filesystem error report for type 5 error -117 [ 292.865172][ T9959] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 292.884056][ T9967] vlan2: entered promiscuous mode [ 292.983354][ T9959] loop3: lost filesystem error report for type 5 error -117 [ 292.983726][ T9959] EXT4-fs error (device loop3): ext4_evict_inode:265: inode #11: comm syz.3.1519: mark_inode_dirty error [ 293.043748][ T9959] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 293.044096][ T9959] EXT4-fs warning (device loop3): ext4_evict_inode:267: couldn't mark inode dirty (err -117) [ 293.110051][ T9959] EXT4-fs (loop3): 1 orphan inode deleted [ 293.126556][ T62] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.175009][ T62] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 293.182131][ T62] EXT4-fs error (device loop3): ext4_release_dquot:7060: comm kworker/u8:4: Failed to release dquot type 0 [ 293.214277][ T9959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.285039][ T62] loop3: lost filesystem error report for type 5 error -117 [ 293.611149][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.636567][ T62] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.685276][ T62] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 293.685645][ T62] EXT4-fs error (device loop3): ext4_release_dquot:7060: comm kworker/u8:4: Failed to release dquot type 0 [ 293.747525][ T62] loop3: lost filesystem error report for type 5 error -117 [ 293.755686][ T5839] EXT4-fs error (device loop3): __ext4_get_inode_loc:4796: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.833082][ T5839] loop3: lost filesystem error report for type 5 error -117 [ 293.836702][ T5893] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 293.861756][ T5839] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 293.882911][ T5839] loop3: lost filesystem error report for type 5 error -117 [ 293.883232][ T5839] EXT4-fs error (device loop3): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 293.937521][ T5839] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 294.005956][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 294.055268][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.108634][ T5893] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 294.142536][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.206244][ T5893] usb 3-1: config 0 descriptor?? [ 294.383173][ T5935] kernel read not supported for file /media6 (pid: 5935 comm: kworker/1:6) [ 294.653276][ T5893] hid_parser_main: 93 callbacks suppressed [ 294.653310][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.679465][T10007] loop3: detected capacity change from 0 to 64 [ 294.700883][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.721079][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.735749][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.753467][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1542'. [ 294.782009][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.806279][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.813696][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.855111][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.863363][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.909051][ T5893] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 294.938642][ T5893] dragonrise 0003:0079:0011.001E: hidraw0: USB HID v0.09 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 294.970851][ T9983] loop1: detected capacity change from 0 to 40427 [ 294.985409][ T5893] usb 3-1: USB disconnect, device number 9 [ 295.021485][ T9983] F2FS-fs (loop1): invalid crc value [ 295.251564][T10012] fido_id[10012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 295.472185][ T9983] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 295.538814][ T9983] F2FS-fs (loop1): Start checkpoint disabled! [ 295.567785][ T9983] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 295.602438][ T9983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 295.805439][T10002] loop4: detected capacity change from 0 to 32768 [ 295.844373][T10002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1539 (10002) [ 295.909636][ T9983] syz.1.1529: attempt to access beyond end of device [ 295.909636][ T9983] loop1: rw=2049, sector=45096, nr_sectors = 848 limit=40427 [ 295.939345][T10002] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.997424][T10002] BTRFS info (device loop4): using sha256 checksum algorithm [ 296.346251][T10002] BTRFS info (device loop4): enabling ssd optimizations [ 296.353338][T10002] BTRFS info (device loop4): turning on async discard [ 296.360727][T10051] loop6: detected capacity change from 0 to 2048 [ 296.368667][T10002] BTRFS info (device loop4): enabling free space tree [ 296.378291][ T91] kworker/u8:5: attempt to access beyond end of device [ 296.378291][ T91] loop1: rw=2049, sector=45944, nr_sectors = 8 limit=40427 [ 296.385437][T10051] EXT4-fs: Ignoring removed oldalloc option [ 296.398254][ T91] CPU: 0 UID: 0 PID: 91 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 296.398299][ T91] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.398325][ T91] Workqueue: writeback wb_workfn (flush-7:1) [ 296.398390][ T91] Call Trace: [ 296.398403][ T91] [ 296.398418][ T91] dump_stack_lvl+0x100/0x190 [ 296.398481][ T91] f2fs_handle_critical_error+0x5d7/0x970 [ 296.398531][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.398578][ T91] ? f2fs_build_fault_attr+0x53/0x280 [ 296.398654][ T91] f2fs_write_end_io+0xc3f/0xf30 [ 296.398708][ T91] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.398765][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.398823][ T91] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.398877][ T91] bio_endio+0x7a3/0x910 [ 296.398926][ T91] submit_bio_noacct+0x64c/0x2010 [ 296.398996][ T91] f2fs_submit_write_bio+0x133/0x350 [ 296.399044][ T91] __submit_merged_bio+0x331/0x7b0 [ 296.399101][ T91] __submit_merged_write_cond+0x3fe/0x510 [ 296.399163][ T91] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 296.399226][ T91] ? __pfx___might_resched+0x10/0x10 [ 296.399269][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.399328][ T91] f2fs_write_cache_pages+0x21c0/0x2720 [ 296.399492][ T91] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 296.399550][ T91] ? kfree+0x1f6/0x6b0 [ 296.399588][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.399651][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.399696][ T91] ? __lock_acquire+0x4a5/0x2630 [ 296.399776][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.399822][ T91] ? __lock_acquire+0x4a5/0x2630 [ 296.399952][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400009][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400054][ T91] ? rcu_is_watching+0x12/0xc0 [ 296.400106][ T91] f2fs_write_data_pages+0x799/0x16d0 [ 296.400180][ T91] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 296.400255][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400303][ T91] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 296.400366][ T91] do_writepages+0x278/0x600 [ 296.400432][ T91] ? __pfx_do_writepages+0x10/0x10 [ 296.400494][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400548][ T91] __writeback_single_inode+0x164/0x13c0 [ 296.400597][ T91] ? find_held_lock+0x2b/0x80 [ 296.400647][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400697][ T91] ? __pfx___writeback_single_inode+0x10/0x10 [ 296.400747][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400793][ T91] ? do_raw_spin_unlock+0x145/0x1e0 [ 296.400839][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.400893][ T91] writeback_sb_inodes+0x766/0x1c70 [ 296.400970][ T91] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 296.401023][ T91] ? mempool_free+0xde/0x130 [ 296.401073][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.401118][ T91] ? stack_trace_save+0x8e/0xc0 [ 296.401234][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.401282][ T91] ? rcu_is_watching+0x12/0xc0 [ 296.401325][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.401372][ T91] ? queue_io+0x287/0x550 [ 296.401421][ T91] wb_writeback+0x1c0/0xbe0 [ 296.401470][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.401536][ T91] ? __pfx_wb_writeback+0x10/0x10 [ 296.401600][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.401646][ T91] ? mark_held_locks+0x40/0x70 [ 296.401705][ T91] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.401775][ T91] wb_workfn+0x142/0xc00 [ 296.401831][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.401881][ T91] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 296.401944][ T91] ? __pfx_wb_workfn+0x10/0x10 [ 296.401999][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.402050][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.402102][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.402147][ T91] ? rcu_is_watching+0x12/0xc0 [ 296.402230][ T91] process_one_work+0xa23/0x19a0 [ 296.402325][ T91] ? __pfx_process_one_work+0x10/0x10 [ 296.402362][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.402426][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.402481][ T91] worker_thread+0x5ef/0xe50 [ 296.402536][ T91] ? __pfx_worker_thread+0x10/0x10 [ 296.402578][ T91] ? kthread+0x13a/0x450 [ 296.402609][ T91] ? __pfx_worker_thread+0x10/0x10 [ 296.402645][ T91] kthread+0x370/0x450 [ 296.402678][ T91] ? __pfx_kthread+0x10/0x10 [ 296.402716][ T91] ret_from_fork+0x754/0xd80 [ 296.402756][ T91] ? __pfx_ret_from_fork+0x10/0x10 [ 296.402796][ T91] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.402846][ T91] ? __switch_to+0x7b4/0x1120 [ 296.402891][ T91] ? __pfx_kthread+0x10/0x10 [ 296.402930][ T91] ret_from_fork_asm+0x1a/0x30 [ 296.403003][ T91] [ 296.403018][ T91] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 296.943589][ T5833] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.961004][T10051] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 296.995808][T10051] System zones: 0-7 [ 297.020487][T10051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.157249][T10051] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm syz.6.1555: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 297.236529][T10051] EXT4-fs (loop6): Remounting filesystem read-only [ 297.471695][ T7516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.023145][T10034] loop0: detected capacity change from 0 to 32768 [ 298.211006][T10034] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.485350][T10034] XFS (loop0): Ending clean mount [ 298.734071][ T5837] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.929261][T10068] loop4: detected capacity change from 0 to 32768 [ 298.996621][T10071] loop6: detected capacity change from 0 to 32768 [ 299.081048][T10071] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 299.178399][T10071] XFS (loop6): Ending clean mount [ 299.265194][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 299.358039][T10072] loop2: detected capacity change from 0 to 32768 [ 299.388454][T10072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1563 (10072) [ 299.437411][T10072] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.485753][ T5920] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 299.505505][T10072] BTRFS info (device loop2): using sha256 checksum algorithm [ 299.517780][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.561140][ T5920] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 299.590593][ T5920] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 299.606479][ T7516] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 299.612926][ T5920] usb 2-1: Manufacturer: syz [ 299.630352][ T5920] usb 2-1: config 0 descriptor?? [ 299.796390][ T5920] rc_core: IR keymap rc-hauppauge not found [ 299.802411][ T5920] Registered IR keymap rc-empty [ 299.879020][T10072] BTRFS info (device loop2): enabling ssd optimizations [ 299.901170][T10072] BTRFS info (device loop2): turning on async discard [ 299.919089][ T5920] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 299.949970][ T5920] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 299.970587][T10072] BTRFS info (device loop2): enabling free space tree [ 300.010788][T10072] BTRFS info (device loop2): enabling auto defrag [ 300.039939][T10072] BTRFS info (device loop2): max_inline set to 4096 [ 300.165570][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 300.394558][ T5920] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 300.423394][ T5825] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 300.433711][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.446350][ T5893] usb 2-1: USB disconnect, device number 11 [ 300.492964][ T5920] usb 1-1: Product: syz [ 300.513350][ T5920] usb 1-1: Manufacturer: syz [ 300.534509][ T5920] usb 1-1: SerialNumber: syz [ 300.594800][ T5920] usb 1-1: config 0 descriptor?? [ 300.967276][T10141] loop4: detected capacity change from 0 to 4096 [ 300.982399][ T5920] usb 1-1: USB disconnect, device number 15 [ 301.176716][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.657966][T10148] loop6: detected capacity change from 0 to 32768 [ 301.725613][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1586'. [ 301.729752][T10148] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 301.743210][T10148] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 301.784039][T10148] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 71, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 301.800679][T10148] gfs2: fsid=syz:syz.0: G: s:SH n:2/47 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 301.809708][T10148] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] gfs2_fill_super+0x1d3d/0x2cf0 [ 301.820392][T10148] gfs2: fsid=syz:syz.0: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 301.830924][T10148] CPU: 0 UID: 0 PID: 10148 Comm: syz.6.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.830980][T10148] Tainted: [L]=SOFTLOCKUP [ 301.830993][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.831016][T10148] Call Trace: [ 301.831028][T10148] [ 301.831042][T10148] dump_stack_lvl+0x100/0x190 [ 301.831106][T10148] gfs2_withdraw.cold+0xa/0xed [ 301.831152][T10148] gfs2_jdesc_check+0x2b0/0x2f0 [ 301.831217][T10148] init_inodes+0x13ac/0x27c0 [ 301.831276][T10148] ? vsnprintf+0x411/0x1240 [ 301.831344][T10148] ? __pfx_init_inodes+0x10/0x10 [ 301.831405][T10148] ? gfs2_fill_super+0x1d3d/0x2cf0 [ 301.831456][T10148] ? init_sb+0xb83/0xfd0 [ 301.831515][T10148] ? __pfx_snprintf+0x10/0x10 [ 301.831602][T10148] ? gfs2_fill_super+0x1d3d/0x2cf0 [ 301.831652][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.831701][T10148] gfs2_fill_super+0x1d3d/0x2cf0 [ 301.831751][T10148] ? __pfx_vsnprintf+0x10/0x10 [ 301.831828][T10148] ? __pfx_gfs2_fill_super+0x10/0x10 [ 301.831956][T10148] ? __pfx_snprintf+0x10/0x10 [ 301.832021][T10148] ? gfs2_fill_super+0x19ba/0x2cf0 [ 301.832072][T10148] ? find_held_lock+0x2b/0x80 [ 301.832120][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.832167][T10148] ? set_blocksize+0x1cf/0x460 [ 301.832217][T10148] ? setup_bdev_super+0x337/0x730 [ 301.832269][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.832316][T10148] ? sb_set_blocksize+0x1fe/0x290 [ 301.832377][T10148] ? get_tree_bdev_flags+0x38c/0x620 [ 301.832428][T10148] get_tree_bdev_flags+0x38c/0x620 [ 301.832479][T10148] ? __pfx_gfs2_fill_super+0x10/0x10 [ 301.832533][T10148] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 301.832598][T10148] ? rcu_is_watching+0x12/0xc0 [ 301.832643][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.832690][T10148] ? apparmor_capable+0x1d7/0x4d0 [ 301.832738][T10148] gfs2_get_tree+0x4e/0x280 [ 301.832792][T10148] vfs_get_tree+0x92/0x320 [ 301.832833][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.832883][T10148] path_mount+0x7d0/0x23d0 [ 301.832931][T10148] ? __pfx_path_mount+0x10/0x10 [ 301.832967][T10148] ? lockdep_hardirqs_on+0x78/0x100 [ 301.833006][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.833058][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.833105][T10148] ? kmem_cache_free+0x124/0x6a0 [ 301.833164][T10148] ? __x64_sys_mount+0x293/0x310 [ 301.833202][T10148] __x64_sys_mount+0x293/0x310 [ 301.833243][T10148] ? __pfx___x64_sys_mount+0x10/0x10 [ 301.833286][T10148] ? do_user_addr_fault+0x8d6/0x12f0 [ 301.833330][T10148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.833385][T10148] do_syscall_64+0x106/0xf80 [ 301.833422][T10148] ? irqentry_exit+0x138/0x670 [ 301.833466][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.833506][T10148] RIP: 0033:0x7fbdaeb9da8a [ 301.833537][T10148] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.833574][T10148] RSP: 002b:00007fbdaf982e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 301.833631][T10148] RAX: ffffffffffffffda RBX: 00007fbdaf982ee0 RCX: 00007fbdaeb9da8a [ 301.833658][T10148] RDX: 0000200000037f40 RSI: 0000200000000000 RDI: 00007fbdaf982ea0 [ 301.833683][T10148] RBP: 0000200000037f40 R08: 00007fbdaf982ee0 R09: 0000000000800000 [ 301.833708][T10148] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 301.833732][T10148] R13: 00007fbdaf982ea0 R14: 0000000000038034 R15: 00002000000000c0 [ 301.833785][T10148] [ 301.833802][T10148] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 301.838019][T10162] loop0: detected capacity change from 0 to 1024 [ 302.046512][T10164] loop3: detected capacity change from 0 to 512 [ 302.311778][T10164] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 302.356615][T10162] hfsplus: b-tree write err: -5, ino 2 [ 302.397339][T10164] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 302.493686][T10164] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1587: bad orphan inode 4 [ 302.555095][T10164] loop3: lost filesystem error report for type 5 error -117 [ 302.555581][T10164] EXT4-fs (loop3): Remounting filesystem read-only [ 302.569544][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 302.569578][ C1] EXT4-fs (loop3): initial error at time 1774966390: ext4_orphan_get:1423 [ 302.569619][ C1] EXT4-fs (loop3): last error at time 1774966390: ext4_orphan_get:1423 [ 302.615796][T10164] EXT4-fs (loop3): 1 orphan inode deleted [ 302.638407][ T1084] hfsplus: b-tree write err: -5, ino 25 [ 302.650967][T10164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.660206][ T1084] hfsplus: b-tree write err: -5, ino 4 [ 302.685126][ T1084] hfsplus: b-tree write err: -5, ino 2 [ 302.701063][ T1084] hfsplus: b-tree write err: -5, ino 26 [ 302.712287][T10175] loop1: detected capacity change from 0 to 512 [ 302.740669][T10175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.930680][T10182] loop2: detected capacity change from 0 to 512 [ 302.989270][T10182] EXT4-fs: Ignoring removed nobh option [ 302.991710][T10186] netlink: 'syz.4.1597': attribute type 2 has an invalid length. [ 303.043655][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.056338][T10182] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 303.064123][T10182] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 303.117678][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.202534][T10182] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.1596: inode has both inline data and extents flags [ 303.215928][T10182] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 303.225011][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 303.240725][ C1] EXT4-fs (loop2): initial error at time 1774966391: ext4_orphan_get:1397: inode 13 [ 303.250200][ C1] EXT4-fs (loop2): last error at time 1774966391: ext4_orphan_get:1397: inode 13 [ 303.270500][T10182] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.1596: couldn't read orphan inode 13 (err -117) [ 303.284396][T10189] loop6: detected capacity change from 0 to 1024 [ 303.311791][T10182] loop2: lost filesystem error report for type 5 error -117 [ 303.314451][T10182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.368709][T10193] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1600'. [ 303.398082][T10189] hfsplus: request for non-existent node 211 in B*Tree [ 303.408334][T10195] loop4: detected capacity change from 0 to 256 [ 303.426669][ T5886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 303.485023][T10189] hfsplus: request for non-existent node 211 in B*Tree [ 303.548120][T10195] FAT-fs (loop4): Directory bread(block 1285) failed [ 303.606679][T10195] FAT-fs (loop4): Directory bread(block 1286) failed [ 303.624671][ T5886] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 303.645948][T10195] FAT-fs (loop4): Directory bread(block 1287) failed [ 303.668079][ T5886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 303.696921][T10195] FAT-fs (loop4): Directory bread(block 1288) failed [ 303.719684][ T5886] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 303.770149][T10195] FAT-fs (loop4): Directory bread(block 1285) failed [ 303.774827][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.794694][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.819030][T10195] FAT-fs (loop4): Directory bread(block 1286) failed [ 303.864935][ T5886] usb 1-1: Product: syz [ 303.880943][T10195] FAT-fs (loop4): Directory bread(block 1287) failed [ 303.910571][ T5886] usb 1-1: Manufacturer: syz [ 303.934896][ T5886] usb 1-1: SerialNumber: syz [ 303.947276][T10195] FAT-fs (loop4): Directory bread(block 1288) failed [ 303.972174][ T5886] usb 1-1: config 0 descriptor?? [ 303.998798][T10195] FAT-fs (loop4): Directory bread(block 1285) failed [ 304.040549][T10195] FAT-fs (loop4): Directory bread(block 1286) failed [ 304.428685][ T5886] mos7840 1-1:0.0: required endpoints missing [ 304.476301][ T5886] usb 1-1: USB disconnect, device number 16 [ 304.710547][T10221] loop2: detected capacity change from 0 to 256 [ 304.741721][T10221] exfat: Deprecated parameter 'utf8' [ 304.770075][T10221] exfat: Deprecated parameter 'utf8' [ 304.890934][T10221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 304.949272][T10224] loop1: detected capacity change from 0 to 1024 [ 305.001206][T10224] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 305.054115][T10224] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 305.110415][T10224] JBD2: no valid journal superblock found [ 305.176271][T10224] EXT4-fs (loop1): Could not load journal inode [ 305.457960][T10233] erofs (device loop4): mounted with root inode @ nid 36. [ 305.766529][T10213] XFS (loop6): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 305.895801][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1626'. [ 305.959372][T10254] erofs (device loop0): mounted with root inode @ nid 36. [ 305.999569][T10254] erofs (device loop0): corrupted dir block 0 @ nid 46 [ 306.008250][T10213] XFS (loop6): Ending clean mount [ 306.345974][ T7516] XFS (loop6): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 306.597660][T10228] set_capacity_and_notify: 3 callbacks suppressed [ 306.597688][T10228] loop3: detected capacity change from 0 to 32768 [ 306.661274][T10228] xfs: Deprecated parameter 'attr2' [ 306.707670][T10228] XFS: attr2 mount option is deprecated. [ 306.819183][T10228] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.828095][ T5935] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.877003][T10275] loop0: detected capacity change from 0 to 64 [ 307.005346][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.025050][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.047839][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.049391][T10228] XFS (loop3): Ending clean mount [ 307.078075][ T5935] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 307.109161][T10228] XFS (loop3): Quotacheck needed: Please wait. [ 307.124641][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.166302][ T5935] usb 3-1: config 0 descriptor?? [ 307.271206][T10228] XFS (loop3): Quotacheck: Done. [ 307.611160][ T5839] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 307.637449][ T5935] hid-rmi 0003:0461:4E72.001F: collection stack underflow [ 307.643406][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 307.653720][ T5935] hid-rmi 0003:0461:4E72.001F: item 0 2 0 12 parsing failed [ 307.654604][ T5935] hid-rmi 0003:0461:4E72.001F: parse failed [ 307.685140][ T5935] hid-rmi 0003:0461:4E72.001F: probe with driver hid-rmi failed with error -22 [ 307.715664][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 307.842055][ T5886] usb 3-1: USB disconnect, device number 10 [ 308.028250][T10282] loop4: detected capacity change from 0 to 32768 [ 308.126441][T10282] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 308.192333][T10282] JBD2: Ignoring recovery information on journal [ 308.255721][T10300] loop0: detected capacity change from 0 to 512 [ 308.300877][T10300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.338797][T10282] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 308.346048][T10300] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.426502][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 308.426527][ T30] audit: type=1800 audit(1774966396.461:46): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1637" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 308.482209][T10300] EXT4-fs error (device loop0): ext4_group_add:1738: inode #7: comm syz.0.1645: iget: checksum invalid [ 308.548051][T10300] EXT4-fs warning (device loop0): ext4_group_add:1740: Error opening resize inode [ 308.571480][T10286] loop6: detected capacity change from 0 to 32768 [ 308.776093][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 308.809265][T10286] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.831303][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.965167][T10286] XFS (loop6): Ending clean mount [ 309.068057][T10286] XFS (loop6): Quotacheck needed: Please wait. [ 309.208959][T10286] XFS (loop6): Quotacheck: Done. [ 309.295493][ T5893] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 309.308023][T10325] loop0: detected capacity change from 0 to 512 [ 309.322316][T10325] EXT4-fs error (device loop0): ext4_iget_extra_inode:5039: inode #12: comm syz.0.1649: corrupted in-inode xattr: bad e_name length [ 309.337323][T10325] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 309.345334][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 309.360244][T10325] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.1649: couldn't read orphan inode 12 (err -117) [ 309.360954][ C1] EXT4-fs (loop0): initial error at time 1774966397: ext4_iget_extra_inode:5039: inode 12 [ 309.382680][ C1] EXT4-fs (loop0): last error at time 1774966397: ext4_iget_extra_inode:5039: inode 12 [ 309.401365][T10325] loop0: lost filesystem error report for type 5 error -117 [ 309.459501][ T5886] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 309.514504][T10325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.539318][ T5893] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 309.556154][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.579745][ T7516] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.592425][ T5893] usb 5-1: Product: syz [ 309.606297][ T5893] usb 5-1: Manufacturer: syz [ 309.610914][ T5893] usb 5-1: SerialNumber: syz [ 309.649045][ T5893] usb 5-1: config 0 descriptor?? [ 309.676996][ T5893] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 309.718252][ T5886] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 309.732715][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.752768][ T5886] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 309.786620][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.904785][T10338] bridge_slave_1: default FDB implementation only supports local addresses [ 309.949266][ T5886] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 310.115211][ T5893] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 310.351292][ T5921] usb 5-1: USB disconnect, device number 17 [ 310.823573][T10340] loop0: detected capacity change from 0 to 32768 [ 310.876602][T10340] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.925770][T10342] loop3: detected capacity change from 0 to 32768 [ 310.953699][T10342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1659 (10342) [ 310.988180][T10340] XFS (loop0): Ending clean mount [ 311.016216][T10340] XFS (loop0): Quotacheck needed: Please wait. [ 311.063303][T10345] loop2: detected capacity change from 0 to 32768 [ 311.070984][T10342] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.102052][T10342] BTRFS info (device loop3): using sha256 checksum algorithm [ 311.137235][T10340] XFS (loop0): Quotacheck: Done. [ 311.147286][T10345] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 311.204572][T10345] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 311.254242][ T5886] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 311.278040][ T5886] stv0680 2-1:4.0: Could not get descriptor 0200 [ 311.299455][ T5886] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 311.320524][ T5886] stv0680 2-1:4.0: last error: 9, command = 0x22 [ 311.362023][ T5886] usb 2-1: USB disconnect, device number 12 [ 311.369149][T10342] BTRFS info (device loop3): enabling ssd optimizations [ 311.401470][ T5837] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.422484][T10342] BTRFS info (device loop3): turning on async discard [ 311.466936][T10342] BTRFS info (device loop3): enabling free space tree [ 311.759383][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.411938][T10381] loop2: detected capacity change from 0 to 1024 [ 312.455815][T10385] loop3: detected capacity change from 0 to 64 [ 312.504485][T10385] MINIX-fs: bad superblock [ 312.548066][T10381] hfsplus: request for non-existent node 3 in B*Tree [ 312.578074][T10381] hfsplus: request for non-existent node 3 in B*Tree [ 312.835085][ T5921] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 312.999065][ T5921] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 313.019279][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.042408][ T5921] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 313.058552][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.075076][ T5921] usb 5-1: Product: syz [ 313.087855][ T5921] usb 5-1: Manufacturer: syz [ 313.097328][ T5921] usb 5-1: SerialNumber: syz [ 313.115471][ T5921] usb 5-1: config 0 descriptor?? [ 313.124651][T10387] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 313.155723][ T5921] usb 5-1: selecting invalid altsetting 0 [ 313.207292][T10379] loop0: detected capacity change from 0 to 32768 [ 313.237735][T10379] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1661 (10379) [ 313.339068][T10379] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.355301][T10377] loop1: detected capacity change from 0 to 40427 [ 313.397249][T10377] F2FS-fs (loop1): build fault injection type: 0x7 [ 313.400857][T10379] BTRFS info (device loop0): using sha256 checksum algorithm [ 313.429766][T10377] F2FS-fs (loop1): invalid crc value [ 313.501319][ T5920] usb 5-1: USB disconnect, device number 18 [ 313.590027][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.664668][T10379] BTRFS info (device loop0): enabling ssd optimizations [ 313.695083][T10379] BTRFS info (device loop0): turning on async discard [ 313.721151][T10377] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 313.755121][T10379] BTRFS info (device loop0): enabling free space tree [ 313.826774][T10377] F2FS-fs (loop1): Start checkpoint disabled! [ 313.854645][T10377] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 313.895963][T10377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 313.961978][ T30] audit: type=1800 audit(1774966401.991:47): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1666" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 313.975375][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 314.009220][T10377] syz.1.1666: attempt to access beyond end of device [ 314.009220][T10377] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.222229][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 314.245572][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.263352][ T13] kworker/u8:1: attempt to access beyond end of device [ 314.263352][ T13] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 314.269214][ T5921] usb 3-1: config 0 has no interfaces? [ 314.308376][ T5837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 314.332647][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.332704][ T13] Tainted: [L]=SOFTLOCKUP [ 314.332718][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.332744][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 314.332808][ T13] Call Trace: [ 314.332819][ T13] [ 314.332833][ T13] dump_stack_lvl+0x100/0x190 [ 314.332902][ T13] f2fs_handle_critical_error+0x5d7/0x970 [ 314.332951][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.332999][ T13] ? f2fs_build_fault_attr+0x53/0x280 [ 314.333074][ T13] f2fs_write_end_io+0xc3f/0xf30 [ 314.333128][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 314.333184][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.333240][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 314.333290][ T13] bio_endio+0x7a3/0x910 [ 314.333339][ T13] submit_bio_noacct+0x64c/0x2010 [ 314.333407][ T13] f2fs_submit_write_bio+0x133/0x350 [ 314.333455][ T13] __submit_merged_bio+0x331/0x7b0 [ 314.333511][ T13] __submit_merged_write_cond+0x3fe/0x510 [ 314.333572][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 314.333634][ T13] ? __pfx___might_resched+0x10/0x10 [ 314.333678][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.333735][ T13] f2fs_write_cache_pages+0x21c0/0x2720 [ 314.333819][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 314.333884][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.333944][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.333993][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334040][ T13] ? find_held_lock+0x2b/0x80 [ 314.334165][ T13] ? nr_blockdev_pages+0xde/0x120 [ 314.334220][ T13] ? nr_blockdev_pages+0xde/0x120 [ 314.334272][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334343][ T13] ? si_meminfo+0x118/0x230 [ 314.334380][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334428][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334542][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334589][ T13] ? rcu_is_watching+0x12/0xc0 [ 314.334639][ T13] f2fs_write_data_pages+0x799/0x16d0 [ 314.334697][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334757][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 314.334831][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.334885][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 314.334955][ T13] do_writepages+0x278/0x600 [ 314.335022][ T13] ? __pfx_do_writepages+0x10/0x10 [ 314.335086][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335139][ T13] __writeback_single_inode+0x164/0x13c0 [ 314.335191][ T13] ? find_held_lock+0x2b/0x80 [ 314.335241][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335291][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 314.335342][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335389][ T13] ? do_raw_spin_unlock+0x145/0x1e0 [ 314.335431][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335485][ T13] writeback_sb_inodes+0x766/0x1c70 [ 314.335559][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 314.335609][ T13] ? do_raw_spin_lock+0x128/0x260 [ 314.335652][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335757][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335803][ T13] ? rcu_is_watching+0x12/0xc0 [ 314.335852][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.335898][ T13] ? queue_io+0x287/0x550 [ 314.335945][ T13] wb_writeback+0x1c0/0xbe0 [ 314.335993][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336054][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 314.336116][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336164][ T13] ? mark_held_locks+0x40/0x70 [ 314.336223][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.336291][ T13] wb_workfn+0x142/0xc00 [ 314.336346][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336392][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 314.336457][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 314.336512][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336563][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336614][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336660][ T13] ? rcu_is_watching+0x12/0xc0 [ 314.336711][ T13] process_one_work+0xa23/0x19a0 [ 314.336771][ T13] ? __pfx_process_one_work+0x10/0x10 [ 314.336860][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336923][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.336977][ T13] worker_thread+0x5ef/0xe50 [ 314.337034][ T13] ? kthread+0x13a/0x450 [ 314.337066][ T13] ? __pfx_worker_thread+0x10/0x10 [ 314.337103][ T13] kthread+0x370/0x450 [ 314.337134][ T13] ? __pfx_kthread+0x10/0x10 [ 314.337172][ T13] ret_from_fork+0x754/0xd80 [ 314.337211][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 314.337250][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.337297][ T13] ? __switch_to+0x7b4/0x1120 [ 314.337343][ T13] ? __pfx_kthread+0x10/0x10 [ 314.337381][ T13] ret_from_fork_asm+0x1a/0x30 [ 314.337449][ T13] [ 314.357267][ T5921] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 314.429399][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 314.654942][ T5921] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 314.862595][ T5921] usb 3-1: Product: syz [ 314.867020][ T5921] usb 3-1: Manufacturer: syz [ 314.882525][ T5921] usb 3-1: config 0 descriptor?? [ 315.150779][ T5921] usb 3-1: USB disconnect, device number 11 [ 315.799880][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'. [ 315.892145][T10427] loop6: detected capacity change from 0 to 32768 [ 315.961294][T10427] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 316.017713][T10427] JBD2: Ignoring recovery information on journal [ 316.043675][T10447] loop2: detected capacity change from 0 to 128 [ 316.138188][T10427] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 316.168292][T10452] loop1: detected capacity change from 0 to 512 [ 316.256950][T10452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.328060][T10452] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.352404][T10452] EXT4-fs warning (device loop1): ext4_group_extend:1884: will only finish group (16384 blocks, 16256 new) [ 316.383970][T10452] EXT4-fs warning (device loop1): ext4_group_extend:1890: can't read last block, resize aborted [ 316.409982][ T30] audit: type=1800 audit(1774966404.441:48): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1681" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 316.575237][ T5893] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.651336][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.674368][ T7516] ocfs2: Unmounting device (7,6) on (node local) [ 316.773529][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 316.801396][ T5893] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 316.815377][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.859480][ T5893] usb 5-1: config 0 descriptor?? [ 316.908286][ T5893] as10x_usb: device has been detected [ 316.914772][ T5893] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 317.066420][ T5893] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 317.100702][T10458] ------------[ cut here ]------------ [ 317.107792][T10458] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 317.107814][T10458] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x93d/0x1b90, CPU#0: syz.4.1692/10458 [ 317.111038][T10433] loop3: detected capacity change from 0 to 32768 [ 317.113792][T10458] Modules linked in: [ 317.134383][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.4.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.146917][T10458] Tainted: [L]=SOFTLOCKUP [ 317.151267][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.161367][T10458] RIP: 0010:__mutex_lock+0x944/0x1b90 [ 317.166891][T10458] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 3e d5 48 05 85 f6 75 13 48 8d 3d d3 f1 4b 05 48 c7 c6 a0 b1 af 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 05 a3 52 [ 317.188449][T10458] RSP: 0018:ffffc900101dfa40 EFLAGS: 00010246 [ 317.194537][T10458] RAX: 0000000000000003 RBX: ffff8880217a6b60 RCX: 1ffffffff21b44fc [ 317.202731][T10458] RDX: 0000000000000000 RSI: ffffffff8bafb1a0 RDI: ffffffff90dd4480 [ 317.210786][T10458] RBP: ffffc900101dfbc0 R08: 0000000000000001 R09: 0000000000000000 [ 317.220277][T10458] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.228578][T10458] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 317.236838][T10458] FS: 00007f4a8733a6c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 317.246108][T10458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.252709][T10458] CR2: 0000001b3101bff8 CR3: 000000004a3d2000 CR4: 0000000000350ef0 [ 317.262426][T10458] Call Trace: [ 317.265941][T10458] [ 317.268883][T10458] ? trace_contention_end+0x140/0x180 [ 317.274280][T10458] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 317.279992][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.287418][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.293084][T10458] ? find_held_lock+0x2b/0x80 [ 317.298056][T10458] ? __pfx___mutex_lock+0x10/0x10 [ 317.303111][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.308819][T10458] ? __pfx___mutex_lock+0x10/0x10 [ 317.313878][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.321063][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.326795][T10458] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 317.332466][T10458] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 317.338016][T10458] dmx_section_feed_start_filtering+0x3a8/0x660 [ 317.344308][T10458] dvb_dmxdev_filter_start+0x767/0xdd0 [ 317.351348][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.357065][T10458] dvb_demux_do_ioctl+0xe64/0x1200 [ 317.362219][T10458] dvb_usercopy+0x167/0x340 [ 317.366831][T10458] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 317.372419][T10458] ? __pfx_dvb_usercopy+0x10/0x10 [ 317.379002][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.384919][T10458] ? __fget_files+0x21f/0x3d0 [ 317.389894][T10458] dvb_demux_ioctl+0x29/0x40 [ 317.394507][T10458] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 317.399882][T10458] __x64_sys_ioctl+0x18e/0x210 [ 317.404684][T10458] do_syscall_64+0x106/0xf80 [ 317.410780][T10458] ? irqentry_exit+0x138/0x670 [ 317.415652][T10458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.421572][T10458] RIP: 0033:0x7f4a8639c819 [ 317.426286][T10458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.447589][T10458] RSP: 002b:00007f4a8733a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.456133][T10458] RAX: ffffffffffffffda RBX: 00007f4a86615fa0 RCX: 00007f4a8639c819 [ 317.464117][T10458] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 317.472165][T10458] RBP: 00007f4a86432c91 R08: 0000000000000000 R09: 0000000000000000 [ 317.481632][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.490007][T10458] R13: 00007f4a86616038 R14: 00007f4a86615fa0 R15: 00007ffe7f53bf08 [ 317.498262][T10458] [ 317.501305][T10458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.508598][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.4.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.519546][T10458] Tainted: [L]=SOFTLOCKUP [ 317.523866][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.533920][T10458] Call Trace: [ 317.537191][T10458] [ 317.540112][T10458] dump_stack_lvl+0x100/0x190 [ 317.544822][T10458] vpanic+0x552/0x970 [ 317.548817][T10458] ? __pfx_vpanic+0x10/0x10 [ 317.553326][T10458] ? lock_release+0x263/0x320 [ 317.558036][T10458] panic+0xd1/0xe0 [ 317.561761][T10458] ? __pfx_panic+0x10/0x10 [ 317.566189][T10458] check_panic_on_warn.cold+0x19/0x34 [ 317.571568][T10458] ? __mutex_lock+0x93d/0x1b90 [ 317.576337][T10458] __warn.cold+0x191/0x348 [ 317.580762][T10458] __report_bug+0x296/0x3d0 [ 317.585289][T10458] ? __mutex_lock+0x93d/0x1b90 [ 317.590066][T10458] ? __pfx___report_bug+0x10/0x10 [ 317.595129][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.600784][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.606432][T10458] ? register_lock_class+0x40/0x560 [ 317.611665][T10458] report_bug_entry+0xe1/0x290 [ 317.616453][T10458] ? __mutex_lock+0x944/0x1b90 [ 317.621223][T10458] handle_bug+0x1cd/0x2a0 [ 317.625564][T10458] exc_invalid_op+0x17/0x50 [ 317.630080][T10458] asm_exc_invalid_op+0x1a/0x20 [ 317.634935][T10458] RIP: 0010:__mutex_lock+0x944/0x1b90 [ 317.640322][T10458] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 3e d5 48 05 85 f6 75 13 48 8d 3d d3 f1 4b 05 48 c7 c6 a0 b1 af 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 05 a3 52 [ 317.659937][T10458] RSP: 0018:ffffc900101dfa40 EFLAGS: 00010246 [ 317.666012][T10458] RAX: 0000000000000003 RBX: ffff8880217a6b60 RCX: 1ffffffff21b44fc [ 317.673980][T10458] RDX: 0000000000000000 RSI: ffffffff8bafb1a0 RDI: ffffffff90dd4480 [ 317.681957][T10458] RBP: ffffc900101dfbc0 R08: 0000000000000001 R09: 0000000000000000 [ 317.689955][T10458] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.697924][T10458] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 317.705909][T10458] ? trace_contention_end+0x140/0x180 [ 317.711289][T10458] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 317.716936][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.722583][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.728229][T10458] ? find_held_lock+0x2b/0x80 [ 317.732997][T10458] ? __pfx___mutex_lock+0x10/0x10 [ 317.738034][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.743692][T10458] ? __pfx___mutex_lock+0x10/0x10 [ 317.748731][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.754388][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.760038][T10458] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 317.765684][T10458] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 317.771159][T10458] dmx_section_feed_start_filtering+0x3a8/0x660 [ 317.777427][T10458] dvb_dmxdev_filter_start+0x767/0xdd0 [ 317.782901][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.788554][T10458] dvb_demux_do_ioctl+0xe64/0x1200 [ 317.793693][T10458] dvb_usercopy+0x167/0x340 [ 317.798214][T10458] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 317.803786][T10458] ? __pfx_dvb_usercopy+0x10/0x10 [ 317.808824][T10458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.814475][T10458] ? __fget_files+0x21f/0x3d0 [ 317.819177][T10458] dvb_demux_ioctl+0x29/0x40 [ 317.823776][T10458] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 317.829073][T10458] __x64_sys_ioctl+0x18e/0x210 [ 317.833851][T10458] do_syscall_64+0x106/0xf80 [ 317.838445][T10458] ? irqentry_exit+0x138/0x670 [ 317.843216][T10458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.849117][T10458] RIP: 0033:0x7f4a8639c819 [ 317.853533][T10458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.873146][T10458] RSP: 002b:00007f4a8733a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.881566][T10458] RAX: ffffffffffffffda RBX: 00007f4a86615fa0 RCX: 00007f4a8639c819 [ 317.889540][T10458] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 317.897516][T10458] RBP: 00007f4a86432c91 R08: 0000000000000000 R09: 0000000000000000 [ 317.905494][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.913476][T10458] R13: 00007f4a86616038 R14: 00007f4a86615fa0 R15: 00007ffe7f53bf08 [ 317.921459][T10458] [ 317.924768][T10458] Kernel Offset: disabled [ 317.929083][T10458] Rebooting in 86400 seconds..