last executing test programs: 5m50.857645044s ago: executing program 1 (id=545): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=ep866,errors=continue,utf8=0,shortname=mixed,shortname=win95,nonumtail=0,uni_xlate=1,iocharset=cp857,shortname=mixed,utf8=1,uni_xlate=0,shortname=win95,codepage=936,utf8=1,utf8=0,\x00'], 0xfd, 0x2a8, &(0x7f0000000580)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) 5m50.364656408s ago: executing program 1 (id=548): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) 5m50.072661081s ago: executing program 1 (id=552): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000040)=0xffffffdd) 5m49.788642295s ago: executing program 1 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x2000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x2000, 0x40) read$FUSE(r0, &(0x7f0000004640)={0x2020}, 0x2020) 5m49.506123087s ago: executing program 1 (id=559): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m49.180476453s ago: executing program 1 (id=562): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) 5m33.990403511s ago: executing program 32 (id=562): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) 2m20.247132467s ago: executing program 4 (id=1930): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) 2m18.471585489s ago: executing program 4 (id=1936): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0xffea, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x50}}, 0x0) 2m18.01646225s ago: executing program 4 (id=1937): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x4, 0x342, &(0x7f0000000940)="$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") io_setup(0x66, &(0x7f0000000400)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) 2m17.518471784s ago: executing program 4 (id=1939): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 2m16.136556068s ago: executing program 4 (id=1948): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m14.708650055s ago: executing program 4 (id=1951): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/x86_fpu/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="31b566a075", 0x5) 2m14.17442918s ago: executing program 33 (id=1951): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/x86_fpu/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="31b566a075", 0x5) 8.090603163s ago: executing program 2 (id=2643): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0) 7.864966914s ago: executing program 6 (id=2647): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 7.564947208s ago: executing program 6 (id=2649): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,checkpoint=disable,flush_merge,fault_injection=00000000000000001262,acl,noacl,compress_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c006973636172645f756e6974497365676d656e742c6661756c745f747970653d303030303e3030303030303030303030303030b88a00"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0xfffffffffffffffe, 0x2, 0x2) 6.038301059s ago: executing program 2 (id=2655): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005ac000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 5.408367878s ago: executing program 6 (id=2657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000200)="070000000000000001000000ffffffff40") 5.363267091s ago: executing program 0 (id=2659): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14f3, &(0x7f0000005940)="$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") lchown(&(0x7f0000000540)='.\x00', 0x0, 0xee01) 4.805122147s ago: executing program 0 (id=2662): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x100, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0xe3}]) 4.439592493s ago: executing program 0 (id=2663): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x100008, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) 4.09607361s ago: executing program 0 (id=2667): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) 3.66030776s ago: executing program 2 (id=2671): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x222222222222r222', 0x2f) 3.66016173s ago: executing program 6 (id=2672): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000600)=ANY=[@ANYBLOB="00ff1ee1dae25f598683b9cdc2513838ff42c05620722df79b1f8cdcb2f22a01f204dc71308bb63edf868c3e381b8b634956319b"], 0xfe, 0x202, &(0x7f0000000380)="$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") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 3.325792556s ago: executing program 3 (id=2674): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_submit(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 3.249012289s ago: executing program 2 (id=2675): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='h', 0xf, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, &(0x7f0000000280)=""/65, 0x41, 0x0) 3.098714626s ago: executing program 6 (id=2677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.854978167s ago: executing program 2 (id=2679): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000020c0)='./file1\x00', 0x1c002, &(0x7f0000000400)=ANY=[], 0x1, 0x5f12, &(0x7f0000008040)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) write(r0, &(0x7f0000000080)='4', 0x1) 2.79953212s ago: executing program 3 (id=2680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) lseek(r0, 0x0, 0x1) 2.257641935s ago: executing program 3 (id=2682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xe24283a1, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) shutdown(r0, 0x0) 1.758086858s ago: executing program 5 (id=2684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe20, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) 1.600655046s ago: executing program 3 (id=2685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x222222222222r222', 0x2f) 1.530748389s ago: executing program 5 (id=2686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="306663353a313232373a666638a38a4b1a125594a67dec9dac9a92a0d8d7ff6d62", 0x21) 1.268765021s ago: executing program 5 (id=2687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x26f, 0x0, 0x8000000008000000}]}) 1.182478555s ago: executing program 3 (id=2688): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffff88, 0x1, {0xe, '\x00', 0x401, 0x1, 0x6, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) 885.051749ms ago: executing program 5 (id=2689): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='h', 0xf, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, &(0x7f0000000280)=""/65, 0x41, 0x0) 882.100469ms ago: executing program 0 (id=2690): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_submit(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 840.725771ms ago: executing program 6 (id=2691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) link(0x0, 0x0) 833.873122ms ago: executing program 2 (id=2692): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 570.684504ms ago: executing program 5 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0306"], 0xffdd) 334.068075ms ago: executing program 5 (id=2694): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000001480)=ANY=[], 0x1, 0x5519, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy6H+ht1V38wF3KqgdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNUDLvVLe6gtC0sdvfDybPzDtvnnneUArPTEgAJ9Zi9uvPlbgU5yJiPiIuRhT7lXIr3E7hhYi4HBFzj22VcvzPgdMRcT4iLk2Sp5yV8tTnV8dXbv701i/ffHfm1IUvvv5+dqsGZu3FiOhvpP3tfop5J8WH5Xhj3C1i/8a4jOlE72w638/T+HZ7rciw3dib1yji9U6an29sDSdxvddoTmKnu16MbwzSBYfjzl6e4g0PG5vFcau9VsTuMC9iZzddd2c3/W/bHY5SnlaZ76MifYxGezGNt3faaT0bj4rYHIzK8ZQ3b7V3JnFcxvJy0cx7raKOtQN80P9zb3cHWzvZuL057OaD7Gat/lKtfqta38xb7VH7RrXRb926kS11epNp1VG70b/dyfNOr11r5v3lbKnTbFbr9WzpTnut2xhk9Xrteu1a9eZyuXc1e/3+e1mvlS1N4qvdwdao2xtm6/lmlt6xnK3Urr+8nF2pZ+/cW81WH9y9e2/13Q/uvH//lXtvvlZO+kdZ2dLKtZWVav1adaW+fILW/0lZ9BTXDwdSmXUBAMeP/h+YhYP0//1H5fET+//NBxGH3/+H/n8qjlX/e9L7/0NYPxyI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MT6YeHLN4qdxXR8oRx/phx6rjyuRMRcRPz+BPNxel/O+TLPwr/MX/hbDd9WosgwucaZcjsfEbfL7bdnD/tTAAAAgKfXVx9f/ix16+llcdYFcZTSTZu5ix9OKV8lIhYWf5xStrnJy/NTSlb8fZ+KnSllK25gnZ1SsnTL7dS0sv0n8/vC2cdCJYW5Iy0HAAA4Evs7gaPtQgAAADhKn866AGajEnuPMveeBRffvP/rgeC5fUcAAADAMVSZdQEAAADAoSv6f7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wc793CYORHEAfjZ4Yf9p0Wrv28reoIwtIcccIwpIExSQAzWkAWogt5QQQYTHIRBxiOSxrUTfJzmTscyPNwgOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJceqnUVN39v2+bs9u3kGQ0AAABwybZaL+p/Zqn/vbn/s7n1u+kXEVFGxKW5+yi+nGWOmpzq9fm70+erNzXcR9QJh/eYNNe3iPjXXE+/uv4UAAAA4PPaLFfzNFtPf2ZDF0Sf0qJN+eN/prwiIqrZY6a08pD3J1NY/f0ex3WmtHoBa5opLC25jXOlvUv9cz+u2k1PmiI15cWXHYvMNnYAAKBHo7Om31kIAAAAfboaugCGUcTLVuZxK3CSmmZ77+tZDwAAAPiAiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz8vclNxAMBfksnUVsVxlTmsiIIHvdjptLb2Jh6UxYN/grBsp3Xt1B/tHmwp4l68yZ57ET2KCMp66//Qcwu91FsPc6ggHkeSSWbSdtFZwSTd/Xzg5X0TQt73JbDsNy+7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCavLuIk2zTm8Vxcez2g+sbWX/nkT5zc+fuatayOKoz6SfDy9WdqN9cIgAAABweSVnfhxDupbtrWR/38vo/Lc/Jav7vn53FZT3/aN1f9mXtn7Xffr3/4nyg3myc7KLnN8ejE4+n0vn/Ztluz/3rGZ38zufvXpL8gcQfbL8wSfP7GX1769Z73Tw8Uke2AMB/cbzsi6D8fSjrh00mBsCh0akU3mX9n/SazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDpPt8HQZRyGE1c4iztx5cH1jr/7mzt3Vsp25cWMnfL24ZnaJNIRwfnM8OlHrbNrtytVrF9fH49Hl+oNXQghNjf5OMf2LHy1xcgiN3J/9B3+1I422BXHxsNuSz5MRNPhDCQCAAyktWlbX30t317Jj0UoI0x8erv9fr8Rhyfr//sdnblfHqtb/w9pm2H6DrUufD65cvfbm5qX1C6MLo0/fOjl8e3jq7OnTZwf5u5KBNyYAAADs23Q6nc53ukWr1v/xyuPr/8cqcViy/v/iu+FX1YET9f+eFot+TWcCAABwuD3/6p9/RHscj7rd8OX61tbl4Ww73z852zaQ6r4dKVq1/k9Wms4KAAAAqMNkO3po/f9cJQ5Lrv8/8+NLP1evmYQQjhbr/8c3Phufq286rVbHnxM3PUcAAACadbRo1fX/NP/+P55/8hCHEN54bRYX/wbwH+v/tKj/k/e/+ak6VvX7/1P1TbGV4v7sfuR9P4ROv+mMAAAAOMieKlpW7P+e7q598suxD7u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo298BAAD//y5wQIQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) fallocate(r0, 0x20, 0x0, 0x8000) 243.713219ms ago: executing program 3 (id=2695): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0xa}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x1c, '\x00', @c}) 0s ago: executing program 0 (id=2696): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x2640, 0x0) ioctl$TIOCEXCL(r0, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40000, 0x0) kernel console output (not intermixed with test programs): [ 350.841829][ T5354] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 350.898825][ T5354] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 350.948723][ T5354] usb 1-1: config 220 has no interface number 2 [ 350.980017][ T5354] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 351.039974][ T5354] usb 1-1: config 220 interface 0 has no altsetting 0 [ 351.094350][ T5354] usb 1-1: config 220 interface 76 has no altsetting 0 [ 351.123183][ T5354] usb 1-1: config 220 interface 1 has no altsetting 0 [ 351.177071][ T5354] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 351.196957][ T9276] MPI: mpi too large (113288 bits) [ 351.230718][ T5354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.289391][ T5354] usb 1-1: Product: syz [ 351.315636][ T5354] usb 1-1: Manufacturer: syz [ 351.360862][ T5354] usb 1-1: SerialNumber: syz [ 351.613177][ T5354] usb 1-1: selecting invalid altsetting 0 [ 351.653617][ T5354] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 351.685441][ T5354] usb 1-1: No valid video chain found. [ 351.792665][ T5354] usb 1-1: selecting invalid altsetting 0 [ 351.829391][ T5354] usbtest: probe of 1-1:220.1 failed with error -22 [ 351.898623][ T5354] usb 1-1: USB disconnect, device number 18 [ 351.929632][ T9286] loop5: detected capacity change from 0 to 1024 [ 352.080693][ T9289] loop4: detected capacity change from 0 to 1024 [ 352.137823][ T9286] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 352.989108][ T9303] loop5: detected capacity change from 0 to 8 [ 353.984129][ T9327] loop5: detected capacity change from 0 to 512 [ 354.628496][ T9326] loop4: detected capacity change from 0 to 131072 [ 354.653333][ T9326] F2FS-fs (loop4): invalid crc value [ 354.715921][ T9326] F2FS-fs (loop4): Found nat_bits in checkpoint [ 354.756336][ T9326] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 354.799330][ T9326] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 354.880195][ T9327] EXT4-fs (loop5): 1 orphan inode deleted [ 354.924138][ T57] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 355.009960][ T9327] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 355.028850][ T57] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 355.136719][ T9327] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.584620][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 356.943567][ T9372] loop5: detected capacity change from 0 to 1024 [ 356.993317][ T9372] EXT4-fs: Ignoring removed orlov option [ 357.110249][ T9372] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 357.342158][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 359.097137][ T9412] pi3usb30532 0-0005: Error reading config register -5 [ 359.163093][ T9412] pi3usb30532: probe of 0-0005 failed with error -5 [ 359.222004][ T9412] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 359.461476][ T9416] loop5: detected capacity change from 0 to 512 [ 359.560005][ T9416] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1876: bg 0: block 5: invalid block bitmap [ 359.733821][ T9416] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 359.777286][ T9416] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1876: invalid indirect mapped block 3 (level 2) [ 359.876142][ T9416] EXT4-fs (loop5): 1 orphan inode deleted [ 359.882216][ T9416] EXT4-fs (loop5): 1 truncate cleaned up [ 359.955289][ T9416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 360.105979][ T26] audit: type=1800 audit(1789488467.436:418): pid=9416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1876" name="cgroup" dev="loop5" ino=11 res=0 errno=0 [ 360.277494][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 360.655327][ T9443] loop2: detected capacity change from 0 to 164 [ 360.826747][ T8706] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 361.075692][ T8706] usb 6-1: Using ep0 maxpacket: 32 [ 361.111743][ T8706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.183420][ T8706] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.245842][ T8706] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 361.298955][ T8706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.340598][ T8706] usb 6-1: Product: syz [ 361.362886][ T8706] usb 6-1: Manufacturer: syz [ 361.389192][ T8706] usb 6-1: SerialNumber: syz [ 361.418912][ T8706] usb 6-1: config 0 descriptor?? [ 361.700409][ T5354] usb 6-1: USB disconnect, device number 9 [ 362.281000][ T9471] loop4: detected capacity change from 0 to 512 [ 362.375386][ T5353] kernel read not supported for file /dsp (pid: 5353 comm: kworker/0:13) [ 362.785482][ T9482] ip_tables: iptables: counters copy to user failed while replacing table [ 363.192933][ T9489] nfsd: exp_rootfh path not found \ [ 363.428470][ T9494] loop4: detected capacity change from 0 to 16 [ 363.511156][ T9494] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 364.032299][ T9506] loop5: detected capacity change from 0 to 256 [ 364.834578][ T9517] kAFS: bad VL server IP address [ 365.201893][ T9520] loop3: detected capacity change from 0 to 4096 [ 365.398411][ T9527] loop2: detected capacity change from 0 to 256 [ 365.425143][ T9520] ntfs: volume version 3.1. [ 365.484683][ T9527] exfat: Deprecated parameter 'namecase' [ 365.565745][ T9527] exfat: Deprecated parameter 'namecase' [ 365.659791][ T9527] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 365.704441][ T9520] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 365.954072][ T9520] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 366.284047][ T9519] loop5: detected capacity change from 0 to 40427 [ 366.341315][ T9525] loop4: detected capacity change from 0 to 32768 [ 366.391236][ T9519] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 366.421531][ T9519] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 366.498869][ T9525] JBD2: Ignoring recovery information on journal [ 366.511042][ T9519] F2FS-fs (loop5): invalid crc value [ 366.614443][ T9519] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 366.695636][ T9525] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 367.079141][ T9519] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 367.141521][ T9519] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 367.516174][ T9525] syz.4.1925 (9525) used greatest stack depth: 18624 bytes left [ 367.641256][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 367.667412][ T6038] syz-executor: attempt to access beyond end of device [ 367.667412][ T6038] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 368.060872][ T9530] loop2: detected capacity change from 0 to 32768 [ 368.196788][ T9530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1927 (9530) [ 368.360636][ T9530] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 368.450460][ T9530] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 368.529162][ T9530] BTRFS info (device loop2): using free space tree [ 368.781789][ T9530] BTRFS info (device loop2): enabling ssd optimizations [ 368.792160][ T9565] loop5: detected capacity change from 0 to 128 [ 368.883611][ T9565] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 368.989712][ T9565] hpfs: filesystem error: improperly stopped [ 369.039027][ T9565] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 369.104758][ T9565] hpfs: You really don't want any checks? You are crazy... [ 369.156004][ T9565] hpfs: hpfs_map_sector(): read error [ 369.161470][ T9565] hpfs: code page support is disabled [ 369.222283][ T9540] loop3: detected capacity change from 0 to 32768 [ 369.235872][ T9565] hpfs: hpfs_map_4sectors(): unaligned read [ 369.241977][ T9565] hpfs: hpfs_map_4sectors(): unaligned read [ 369.336056][ T9565] hpfs: filesystem error: unable to find root dir [ 369.456366][ T4289] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 369.471133][ T9540] XFS (loop3): Mounting V5 Filesystem [ 369.483687][ T9565] hpfs: hpfs_map_4sectors(): unaligned read [ 369.550922][ T9565] hpfs: hpfs_map_sector(): read error [ 369.764332][ T9540] XFS (loop3): Ending clean mount [ 369.894848][ T9585] loop4: detected capacity change from 0 to 128 [ 369.956757][ T9585] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 370.129793][ T4370] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4370) [ 370.467454][ T9588] loop4: detected capacity change from 0 to 512 [ 370.559495][ T9588] EXT4-fs (loop4): orphan cleanup on readonly fs [ 370.605775][ T9588] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 370.676188][ T9588] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 370.700143][ T4276] XFS (loop3): Unmounting Filesystem [ 370.819624][ T9588] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1939: attempt to clear invalid blocks 2 len 1 [ 370.965235][ T9588] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1939: invalid indirect mapped block 1819239214 (level 0) [ 371.044428][ T9588] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1939: invalid indirect mapped block 1819239214 (level 1) [ 371.180433][ T9588] EXT4-fs (loop4): 1 truncate cleaned up [ 371.219825][ T9588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 371.310921][ T9588] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.578568][ T4282] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 371.730890][ T9590] loop5: detected capacity change from 0 to 32768 [ 371.825768][ T5347] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 371.865094][ T9590] XFS (loop5): Mounting V5 Filesystem [ 371.931275][ T9590] XFS (loop5): Ending clean mount [ 372.001047][ T26] audit: type=1800 audit(1789488479.326:419): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1938" name="bus" dev="loop5" ino=6153 res=0 errno=0 [ 372.049450][ T5347] usb 1-1: Using ep0 maxpacket: 32 [ 372.068424][ T5347] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.117629][ T5347] usb 1-1: config 0 has no interface number 0 [ 372.167426][ T5347] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 372.217823][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.239177][ T5347] usb 1-1: Product: syz [ 372.253535][ T5347] usb 1-1: Manufacturer: syz [ 372.273352][ T5347] usb 1-1: SerialNumber: syz [ 372.287888][ T5347] usb 1-1: config 0 descriptor?? [ 372.316810][ T6038] XFS (loop5): Unmounting Filesystem [ 372.348709][ T5347] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 372.381812][ T5347] usb 1-1: selecting invalid altsetting 1 [ 372.392851][ T5347] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 372.468554][ T5347] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 372.499624][ T9607] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 372.518215][ T5347] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 372.547100][ T5347] usb 1-1: media controller created [ 372.584158][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.651098][ T5347] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 372.670337][ T5347] zl10353_read_register: readreg error (reg=127, ret==-71) [ 372.712382][ T5347] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 372.743971][ T9622] loop3: detected capacity change from 0 to 4096 [ 372.797600][ T5347] usb 1-1: USB disconnect, device number 19 [ 372.820804][ T9622] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 372.900599][ T5370] EXT4-fs (loop4): unmounting filesystem. [ 373.143036][ T4351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.418245][ T4351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.632520][ T4351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.916313][ T4351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.974674][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.989314][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.997467][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.006143][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.013777][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 375.023863][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.119234][ T9640] device netdevsim0 entered promiscuous mode [ 375.164934][ T9640] device netdevsim0 left promiscuous mode [ 376.124747][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 376.328568][ T9676] program syz.0.1966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.546755][ T9641] chnl_net:caif_netlink_parms(): no params data found [ 376.765920][ T9685] loop2: detected capacity change from 0 to 1024 [ 376.831770][ T9685] EXT4-fs: Ignoring removed orlov option [ 376.941037][ T9685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.037221][ T9685] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 377.046015][ T4293] Bluetooth: hci3: command 0x0409 tx timeout [ 377.111638][ T9685] EXT4-fs (loop2): orphan cleanup on readonly fs [ 377.225241][ T9685] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1968: Invalid inode table block 0 in block_group 0 [ 377.386285][ T9685] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 377.518026][ T9685] EXT4-fs error (device loop2): ext4_quota_write:7253: inode #3: comm syz.2.1968: mark_inode_dirty error [ 377.606711][ T9685] Quota error (device loop2): write_blk: dquota write failed [ 377.715891][ T9685] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 377.757025][ T4351] device bond0 left promiscuous mode [ 377.762378][ T4351] device bond_slave_0 left promiscuous mode [ 377.819905][ T9685] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1968: Failed to acquire dquot type 0 [ 377.835758][ T4351] device bond_slave_1 left promiscuous mode [ 377.857887][ T9710] loop5: detected capacity change from 0 to 128 [ 377.868270][ T4351] device batadv0 left promiscuous mode [ 377.904666][ T9685] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1968: Invalid inode table block 0 in block_group 0 [ 377.931593][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.953648][ T9710] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 378.020459][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.058004][ T9710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.072343][ T9685] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 378.084149][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.134109][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.159514][ T9685] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.1968: mark_inode_dirty error [ 378.204395][ T4351] device bridge_slave_1 left promiscuous mode [ 378.241902][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.271535][ T9685] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1968: Invalid inode table block 0 in block_group 0 [ 378.316931][ T4351] device bridge_slave_0 left promiscuous mode [ 378.365937][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.453015][ T9685] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 378.488432][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.494810][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.520809][ T4351] device team0 left promiscuous mode [ 378.542147][ T9685] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 378.570321][ T4351] device team_slave_0 left promiscuous mode [ 378.600632][ T9685] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1968: Invalid inode table block 0 in block_group 0 [ 378.615364][ T4351] device team_slave_1 left promiscuous mode [ 378.644434][ T4351] device veth1_macvtap left promiscuous mode [ 378.668396][ T4351] device veth0_macvtap left promiscuous mode [ 378.677259][ T9685] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 378.694095][ T4351] device veth1_vlan left promiscuous mode [ 378.716436][ T4351] device veth0_vlan left promiscuous mode [ 378.734613][ T9685] EXT4-fs error (device loop2): ext4_truncate:4325: inode #15: comm syz.2.1968: mark_inode_dirty error [ 378.794878][ T9685] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 378.854970][ T9685] EXT4-fs (loop2): 1 truncate cleaned up [ 378.912726][ T9685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 379.030459][ T9685] EXT4-fs (loop2): shut down requested (2) [ 379.126364][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 379.232199][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 380.474440][ T9743] loop2: detected capacity change from 0 to 1024 [ 380.606630][ T9743] hfsplus: invalid length 1280 has been corrected to 255 [ 381.205803][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 381.704743][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 381.819356][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 381.915308][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.022163][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.471427][ T9757] loop3: detected capacity change from 0 to 32768 [ 383.084961][ T4351] bond0 (unregistering): Released all slaves [ 383.222756][ T9718] device erspan0 entered promiscuous mode [ 383.264307][ T9641] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.285774][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 383.338254][ T9641] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.405700][ T9641] device bridge_slave_0 entered promiscuous mode [ 383.476394][ T9641] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.483602][ T9641] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.546454][ T9641] device bridge_slave_1 entered promiscuous mode [ 383.656472][ T9770] program syz.2.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.734796][ T9641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.814610][ T4323] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 383.840736][ T9641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.035669][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 384.048453][ T9641] team0: Port device team_slave_0 added [ 384.060024][ T4323] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 384.100549][ T4323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 384.113900][ T9641] team0: Port device team_slave_1 added [ 384.152624][ T4323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 384.198053][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.221489][ T4323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 384.243240][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.269185][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.300903][ T4323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 384.341063][ T4323] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.382403][ T4323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.399626][ T9641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.440008][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.587988][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.595438][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.621452][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.645776][ T5345] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 384.718954][ T4323] usb 1-1: GET_CAPABILITIES returned 0 [ 384.740043][ T4323] usbtmc 1-1:16.0: can't read capabilities [ 384.839253][ T9641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.856937][ T5345] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.895631][ T5345] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.962821][ T4323] usb 1-1: USB disconnect, device number 20 [ 384.979953][ T5345] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 385.049456][ T5345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 385.103100][ T5345] usb 6-1: SerialNumber: syz [ 385.152610][ T9641] device hsr_slave_0 entered promiscuous mode [ 385.223836][ T9641] device hsr_slave_1 entered promiscuous mode [ 385.272240][ T9641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.307023][ T9641] Cannot create hsr debugfs directory [ 385.353816][ T5345] usb 6-1: 0:2 : does not exist [ 385.456374][ T5345] usb 6-1: USB disconnect, device number 10 [ 385.465873][ T9777] loop2: detected capacity change from 0 to 32768 [ 385.565953][ T9777] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2005 (9777) [ 385.712396][ T9777] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 385.777140][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.839419][ T9777] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 385.965067][ T9777] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 386.072913][ T9777] BTRFS info (device loop2): use zstd compression, level 3 [ 386.149493][ T9777] BTRFS info (device loop2): use no compression [ 386.224283][ T9777] BTRFS info (device loop2): using free space tree [ 386.494492][ T9641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.532938][ T9777] BTRFS info (device loop2): enabling ssd optimizations [ 386.615346][ T9641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.692339][ T9641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.709861][ T26] audit: type=1326 audit(1789488494.036:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 386.733913][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.817131][ T9641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.000825][ T26] audit: type=1326 audit(1789488494.076:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 387.239671][ T26] audit: type=1326 audit(1789488494.076:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 387.307775][ T4289] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 387.365789][ T9641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.460802][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.470013][ T26] audit: type=1326 audit(1789488494.076:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 387.534535][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.620849][ T9641] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.709308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.728391][ T26] audit: type=1326 audit(1789488494.076:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 387.752343][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.816261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.824822][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.831980][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.975121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.984440][ T26] audit: type=1326 audit(1789488494.086:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 388.032568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.075334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.123001][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.130176][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.145312][ T26] audit: type=1326 audit(1789488494.086:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 388.169387][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.231757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.312513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.352230][ T26] audit: type=1326 audit(1789488494.086:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 388.390966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.470026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.523355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.541893][ T26] audit: type=1326 audit(1789488494.086:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 388.600951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.650755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.703069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.714324][ T26] audit: type=1326 audit(1789488494.086:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.2011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 388.738334][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.803968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.879819][ T9641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.976442][ T9641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.046010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.100932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.305281][ T9884] jffs2: notice: (9884) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 390.426342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.434201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.539869][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.256315][ T9913] device erspan0 entered promiscuous mode [ 391.994654][ T9929] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 392.118436][ T9933] loop5: detected capacity change from 0 to 256 [ 392.286860][ T9938] bond0: option mode: unable to set because the bond device has slaves [ 392.592060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.676389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.764688][ T9641] device veth0_vlan entered promiscuous mode [ 392.796213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.843063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.899241][ T9641] device veth1_vlan entered promiscuous mode [ 392.966462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.027828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.062623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 393.185686][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 393.227576][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.278295][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.357743][ T9641] device veth0_macvtap entered promiscuous mode [ 393.425179][ T9641] device veth1_macvtap entered promiscuous mode [ 393.594051][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.669002][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.749870][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.764425][ T9957] loop3: detected capacity change from 0 to 256 [ 393.803232][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.870164][ T9957] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 393.954730][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.034290][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.059607][ T9943] loop5: detected capacity change from 0 to 32768 [ 394.099744][ T9957] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.141828][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.210157][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.255161][ T9943] XFS (loop5): Mounting V5 Filesystem [ 394.333172][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.432935][ T9943] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 394.461861][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.506365][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 394.584348][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.626782][ T9943] XFS (loop5): Starting recovery (logdev: internal) [ 394.669123][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.743246][ T9960] device erspan0 entered promiscuous mode [ 394.794200][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.879464][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.950230][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.013811][ T9943] XFS (loop5): Ending recovery (logdev: internal) [ 395.053648][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.144380][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.229482][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.251427][ T9943] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8 [ 395.308457][ T9980] loop2: detected capacity change from 0 to 512 [ 395.347356][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.385629][ T9943] XFS (loop5): Unmount and run xfs_repair [ 395.423533][ T9980] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.454993][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.559103][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.665575][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.718629][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.818970][ T9641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.831003][ T9980] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 395.901777][ T9641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.948057][ T6038] XFS (loop5): Unmounting Filesystem [ 395.975530][ T9641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.013777][ T9980] __quota_error: 4 callbacks suppressed [ 396.013792][ T9980] Quota error (device loop2): write_blk: dquota write failed [ 396.035531][ T9641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.129058][ T9980] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 396.258942][ T9980] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.2055: Failed to acquire dquot type 0 [ 396.353009][ T9980] EXT4-fs (loop2): 1 truncate cleaned up [ 396.370099][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.405332][ T9980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 396.420335][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.461755][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.563175][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.625370][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.687102][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.813525][ T9996] Quota error (device loop2): write_blk: dquota write failed [ 397.106507][ T9996] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 397.363732][ T9996] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.2055: Failed to acquire dquot type 0 [ 397.399468][T10006] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2060'. [ 397.762795][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 397.839620][T10014] loop6: detected capacity change from 0 to 512 [ 398.060707][T10014] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 398.407579][ T2954] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 398.479894][T10020] loop3: detected capacity change from 0 to 512 [ 398.669359][T10020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.706669][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2065'. [ 398.866221][T10020] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.074691][T10020] EXT4-fs (loop3): shut down requested (2) [ 399.119524][T10036] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2068'. [ 399.342204][T10043] loop5: detected capacity change from 0 to 1024 [ 399.472272][T10043] EXT4-fs: Ignoring removed orlov option [ 399.512541][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 399.580707][T10043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.658787][T10043] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 399.793187][T10043] EXT4-fs (loop5): orphan cleanup on readonly fs [ 399.886066][T10043] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2070: Invalid inode table block 0 in block_group 0 [ 400.014952][T10043] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 400.069717][T10043] EXT4-fs error (device loop5): ext4_quota_write:7253: inode #3: comm syz.5.2070: mark_inode_dirty error [ 400.152222][T10052] loop3: detected capacity change from 0 to 256 [ 400.160839][T10043] Quota error (device loop5): write_blk: dquota write failed [ 400.225751][T10043] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 400.330972][T10043] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2070: Failed to acquire dquot type 0 [ 400.459005][T10043] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2070: Invalid inode table block 0 in block_group 0 [ 400.505873][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 400.559619][T10043] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 400.583121][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 400.640902][T10043] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.2070: mark_inode_dirty error [ 400.697812][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 400.756266][T10043] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2070: Invalid inode table block 0 in block_group 0 [ 400.784018][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 400.852275][T10043] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 400.869099][T10055] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 400.913553][T10043] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 400.922744][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 400.961539][T10043] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2070: Invalid inode table block 0 in block_group 0 [ 400.987652][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 401.004414][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2076'. [ 401.039261][T10043] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 401.059137][T10055] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 401.114049][T10043] EXT4-fs error (device loop5): ext4_truncate:4325: inode #15: comm syz.5.2070: mark_inode_dirty error [ 401.139809][ T26] audit: type=1326 audit(1789488508.466:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10044 comm="syz.0.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bac39e159 code=0x7ffc0000 [ 401.209212][T10043] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 401.283831][T10043] EXT4-fs (loop5): 1 truncate cleaned up [ 401.349352][T10043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 401.370054][ T26] audit: type=1326 audit(1789488508.496:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10044 comm="syz.0.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bac39e159 code=0x7ffc0000 [ 401.576575][T10043] EXT4-fs (loop5): shut down requested (2) [ 401.629076][ T26] audit: type=1326 audit(1789488508.496:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10044 comm="syz.0.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bac39e159 code=0x7ffc0000 [ 401.653280][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.820950][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 401.905741][ T26] audit: type=1326 audit(1789488508.496:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10044 comm="syz.0.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5bac39e159 code=0x7ffc0000 [ 401.995739][ T4320] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 402.129789][ T26] audit: type=1326 audit(1789488508.496:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10044 comm="syz.0.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5bac39e159 code=0x7ffc0000 [ 402.153977][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.226949][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.284309][T10080] loop3: detected capacity change from 0 to 512 [ 402.290787][ T4320] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 402.374585][T10061] loop6: detected capacity change from 0 to 32768 [ 402.382571][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.439014][T10080] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 402.456208][ T4320] usb 3-1: config 0 descriptor?? [ 402.577005][T10080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c01c, mo2=0002] [ 402.684470][T10080] EXT4-fs (loop3): orphan cleanup on readonly fs [ 402.705190][ T4320] usb 3-1: USB disconnect, device number 9 [ 402.781777][T10080] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.2083: iget: bad i_size value: 12154761577498 [ 402.908017][T10080] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2083: couldn't read orphan inode 13 (err -117) [ 403.029374][T10080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 403.075769][ T4323] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 403.211581][T10080] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.2083: dx entry: limit 65535 != root limit 120 [ 403.287066][ T4323] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 403.305923][ T4320] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 403.345875][ T4323] usb 6-1: config 0 has no interface number 0 [ 403.365615][T10080] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2083: Corrupt directory, running e2fsck is recommended [ 403.388731][ T4323] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.478883][ T4323] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 403.530303][ T4320] usb 3-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 403.546528][T10080] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2083: path /352/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 403.566284][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.582208][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.609379][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.635772][ T4323] usb 6-1: Product: syz [ 403.652888][ T4320] usb 3-1: Product: syz [ 403.672026][ T4323] usb 6-1: Manufacturer: syz [ 403.684525][ T4320] usb 3-1: Manufacturer: syz [ 403.695280][ T4323] usb 6-1: SerialNumber: syz [ 403.711434][ T4320] usb 3-1: SerialNumber: syz [ 403.732560][ T4323] usb 6-1: config 0 descriptor?? [ 403.744645][T10102] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 3: comm syz.3.2083: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 403.781183][ T4320] usb 3-1: config 0 descriptor?? [ 403.815705][ T4323] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 403.838454][ T4320] gspca_main: benq-2.14.0 probing 04a5:3035 [ 404.032975][ T4323] usb 3-1: USB disconnect, device number 10 [ 404.046244][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 404.172534][ T4320] usb 6-1: USB disconnect, device number 11 [ 404.205182][ T4320] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 404.312685][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 405.922398][T10151] loop2: detected capacity change from 0 to 2048 [ 406.078075][T10151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.605868][T10135] loop6: detected capacity change from 0 to 32768 [ 406.737592][T10135] JBD2: Ignoring recovery information on journal [ 406.932423][T10135] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 407.141654][T10180] loop5: detected capacity change from 0 to 1024 [ 407.219830][T10180] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.295802][T10180] EXT4-fs: Ignoring removed oldalloc option [ 407.414163][T10180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 407.470399][T10180] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.518020][ T9641] ocfs2: Unmounting device (7,6) on (node local) [ 407.882123][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 408.124033][T10190] loop5: detected capacity change from 0 to 512 [ 408.285712][T10190] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 408.347860][T10190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c01c, mo2=0002] [ 408.434125][T10190] EXT4-fs (loop5): orphan cleanup on readonly fs [ 408.461245][T10190] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.2118: iget: bad i_size value: 12154761577498 [ 408.585390][T10190] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.2118: couldn't read orphan inode 13 (err -117) [ 408.644689][T10190] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 408.764443][T10190] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.2118: dx entry: limit 65535 != root limit 120 [ 408.869295][T10190] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2118: Corrupt directory, running e2fsck is recommended [ 408.955318][T10190] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.2118: path /296/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 409.170603][T10206] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 3: comm syz.5.2118: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 409.389257][ T26] audit: type=1400 audit(1789488516.716:439): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=10214 comm="syz.6.2125" [ 409.500627][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 409.857201][T10225] loop7: detected capacity change from 0 to 7 [ 409.936432][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.945822][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.035363][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.075819][T10228] tap0: tun_chr_ioctl cmd 1074025680 [ 410.082746][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.092110][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.102582][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.111824][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.202227][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.211485][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.312393][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.321700][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.450154][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.459416][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.505127][T10238] loop5: detected capacity change from 0 to 512 [ 410.560663][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.569950][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.595791][ T4370] ldm_validate_partition_table(): Disk read failed. [ 410.703264][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.712501][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.821592][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.830922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 410.855749][T10238] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 410.955142][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 411.058117][ T4370] Dev loop7: unable to read RDB block 0 [ 411.157182][T10238] EXT4-fs (loop5): 1 truncate cleaned up [ 411.162916][T10238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 411.194086][ T4370] loop7: unable to read partition table [ 411.212339][ T4370] loop7: partition table beyond EOD, truncated [ 411.293997][T10238] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.2133: Logical block already allocated [ 411.479386][T10238] EXT4-fs (loop5): Remounting filesystem read-only [ 411.524683][T10251] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #2: comm syz.5.2133: invalid size [ 411.600969][T10251] EXT4-fs (loop5): Remounting filesystem read-only [ 411.826386][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 412.540756][T10276] __nla_validate_parse: 1 callbacks suppressed [ 412.540839][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'. [ 412.765801][T10281] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2147'. [ 413.733530][T10303] block device autoloading is deprecated and will be removed. [ 413.840879][T10311] sctp: [Deprecated]: syz.2.2160 (pid 10311) Use of int in maxseg socket option. [ 413.840879][T10311] Use struct sctp_assoc_value instead [ 414.093683][T10318] loop0: detected capacity change from 0 to 256 [ 414.356881][T10321] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2165'. [ 414.779555][T10309] loop5: detected capacity change from 0 to 32768 [ 414.873769][T10309] XFS (loop5): Mounting V5 Filesystem [ 415.055964][T10309] XFS (loop5): Ending clean mount [ 415.162329][T10309] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 415.385573][ T5354] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 415.646873][ T5354] usb 1-1: Using ep0 maxpacket: 16 [ 415.669731][ T5354] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.751713][ T5354] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.789248][ T5354] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 415.854141][ T5354] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.877371][ T5354] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 415.910664][ T5354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.934173][T10359] loop6: detected capacity change from 0 to 2048 [ 415.952471][ T5354] usb 1-1: config 0 descriptor?? [ 416.024220][ T6038] XFS (loop5): Unmounting Filesystem [ 416.048615][T10359] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 416.121302][T10359] UDF-fs: Scanning with blocksize 512 failed [ 416.187122][T10359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.298435][ T26] audit: type=1800 audit(1789488523.626:440): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2174" name="file1" dev="loop6" ino=818 res=0 errno=0 [ 416.386262][ T5354] hid (null): unknown global tag 0xc [ 416.414904][ T5354] hid (null): unknown global tag 0xc [ 416.441567][ T5354] hid (null): unknown global tag 0xc [ 416.591341][ T5354] usb 1-1: USB disconnect, device number 21 [ 416.927764][T10369] loop3: detected capacity change from 0 to 512 [ 416.935053][T10369] EXT4-fs: Ignoring removed nobh option [ 417.013639][T10354] loop2: detected capacity change from 0 to 32768 [ 417.080013][T10369] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 417.184648][T10354] XFS (loop2): Mounting V5 Filesystem [ 417.233507][T10369] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 417.305709][ T8706] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 417.319031][T10354] XFS (loop2): Ending clean mount [ 417.390537][T10369] EXT4-fs (loop3): orphan cleanup on readonly fs [ 417.470705][T10354] XFS (loop2): Quotacheck needed: Please wait. [ 417.500151][T10369] EXT4-fs (loop3): 1 truncate cleaned up [ 417.534112][ T8706] usb 7-1: unable to get BOS descriptor or descriptor too short [ 417.586419][T10369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 417.622553][ T8706] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.669648][ T8706] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.729531][ T8706] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 417.758704][ T8706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.784732][ T8706] usb 7-1: Product: syz [ 417.794984][ T8706] usb 7-1: Manufacturer: syz [ 417.803259][ T8706] usb 7-1: SerialNumber: syz [ 417.822962][T10354] XFS (loop2): Quotacheck: Done. [ 417.862698][ T8706] usb 7-1: selecting invalid altsetting 1 [ 417.923290][ T8706] usb 7-1: unit 6 not found! [ 417.984110][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 418.297221][ T4289] XFS (loop2): Unmounting Filesystem [ 418.671597][ T8706] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 418.733224][ T8706] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 418.778051][ T8706] usb 7-1: USB disconnect, device number 2 [ 418.804803][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.853888][T10425] loop6: detected capacity change from 0 to 1024 [ 419.957558][T10425] EXT4-fs: Ignoring removed orlov option [ 420.080146][T10425] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 420.140041][T10435] netlink: 'syz.0.2198': attribute type 6 has an invalid length. [ 420.447024][ T9641] EXT4-fs (loop6): unmounting filesystem. [ 420.997328][T10453] loop6: detected capacity change from 0 to 1024 [ 421.443207][T10426] loop5: detected capacity change from 0 to 40427 [ 421.511556][T10426] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 421.625601][T10426] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 421.634009][T10426] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 421.862027][T10426] F2FS-fs (loop5): invalid crc value [ 421.904236][T10426] F2FS-fs (loop5): Found nat_bits in checkpoint [ 421.914114][T10471] loop2: detected capacity change from 0 to 512 [ 421.970585][T10475] loop0: detected capacity change from 0 to 512 [ 422.032181][T10471] EXT4-fs: Ignoring removed i_version option [ 422.067573][T10475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.119469][T10471] EXT4-fs: Ignoring removed nobh option [ 422.170477][T10475] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 422.205268][T10471] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 422.290339][T10475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 422.297897][T10426] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 422.337214][T10475] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 422.356317][T10426] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 422.380426][T10471] EXT4-fs (loop2): 1 truncate cleaned up [ 422.445653][T10475] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 422.454855][T10471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 422.511025][T10475] EXT4-fs (loop0): 1 truncate cleaned up [ 422.572759][T10475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 422.648632][T10473] f2fs_ckpt-7:5: attempt to access beyond end of device [ 422.648632][T10473] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 422.784216][T10475] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 422.942585][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 423.113048][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 423.409678][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 424.036994][T10481] loop6: detected capacity change from 0 to 32768 [ 424.198416][T10481] XFS (loop6): Mounting V5 Filesystem [ 424.354201][T10481] XFS (loop6): Ending clean mount [ 424.609795][T10481] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 424.705395][T10514] sch_tbf: burst 2464 is lower than device lo mtu (65550) ! [ 424.774681][T10516] loop0: detected capacity change from 0 to 256 [ 424.857432][T10516] exfat: Deprecated parameter 'utf8' [ 424.913911][T10516] exfat: Deprecated parameter 'utf8' [ 424.985615][T10516] exfat: Deprecated parameter 'namecase' [ 425.025069][T10516] exfat: Deprecated parameter 'namecase' [ 425.119027][T10516] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 425.133622][ T9641] XFS (loop6): Unmounting Filesystem [ 425.367493][T10483] loop3: detected capacity change from 0 to 32768 [ 425.526034][T10483] read_mapping_page failed! [ 425.637866][T10483] jfs_mount: Failed to read AGGREGATE_I [ 425.738204][T10483] Mount JFS Failure: -5 [ 425.810056][T10483] jfs_mount failed w/return code = -5 [ 426.215195][T10535] loop5: detected capacity change from 0 to 2048 [ 426.753696][T10541] WARNING! power/level is deprecated; use power/control instead [ 427.026565][T10547] loop5: detected capacity change from 0 to 4096 [ 427.132146][T10547] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 427.244615][T10529] loop0: detected capacity change from 0 to 32768 [ 427.912327][T10562] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 428.482474][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2241'. [ 429.303636][T10593] loop0: detected capacity change from 0 to 512 [ 429.317838][T10595] loop6: detected capacity change from 0 to 128 [ 429.438004][T10593] EXT4-fs (loop0): 1 truncate cleaned up [ 429.458744][ T26] audit: type=1800 audit(1789488792.788:441): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2248" name="file1" dev="loop6" ino=1048714 res=0 errno=0 [ 429.499797][T10595] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 429.518251][T10593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 429.591482][T10595] FAT-fs (loop6): Filesystem has been set read-only [ 429.682626][T10573] loop5: detected capacity change from 0 to 32768 [ 429.767709][T10573] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2239 (10573) [ 429.808158][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 430.035569][T10573] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 430.165790][T10573] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 430.175254][T10573] BTRFS info (device loop5): using free space tree [ 430.226306][T10608] vcan0: tx address claim with dlc 0 [ 430.477430][T10573] BTRFS info (device loop5): enabling ssd optimizations [ 431.017184][ T6038] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 431.342508][T10601] loop2: detected capacity change from 0 to 32768 [ 431.505293][T10643] loop0: detected capacity change from 0 to 2048 [ 431.530010][T10601] JBD2: Ignoring recovery information on journal [ 431.774688][ T29] wlan1: Trigger new scan to find an IBSS to join [ 431.805361][T10601] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 432.494309][ T4289] ocfs2: Unmounting device (7,2) on (node local) [ 433.599887][ T26] audit: type=1400 audit(1789488796.928:442): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=10677 comm="syz.0.2269" name="//o" offset=60 [ 433.730783][T10685] loop2: detected capacity change from 0 to 64 [ 433.917345][T10682] loop6: detected capacity change from 0 to 4096 [ 434.649591][T10702] input: syz1 as /devices/virtual/input/input22 [ 434.815633][ T4320] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 435.020713][T10709] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 435.034134][ T4320] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.092147][ T4320] usb 7-1: config 0 interface 0 has no altsetting 0 [ 435.138592][ T4320] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 435.223776][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.271181][ T4320] usb 7-1: config 0 descriptor?? [ 435.678621][T10724] loop2: detected capacity change from 0 to 128 [ 435.748474][ T4320] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 435.810125][T10724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 435.845775][ T4320] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 435.932891][ T4320] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 435.955022][T10724] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.031032][ T4320] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 436.078742][T10735] loop0: detected capacity change from 0 to 2048 [ 436.129900][ T4320] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 436.189253][ T4320] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 436.220893][T10735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.252067][T10739] program syz.3.2288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.309615][ T4320] usb 7-1: USB disconnect, device number 3 [ 436.493097][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 436.805836][ T47] wlan1: Trigger new scan to find an IBSS to join [ 436.916233][T10749] netlink: 'syz.6.2292': attribute type 18 has an invalid length. [ 436.937636][T10748] loop2: detected capacity change from 0 to 256 [ 437.432407][T10762] loop6: detected capacity change from 0 to 1024 [ 437.779427][T10762] hfsplus: xattr searching failed [ 437.819381][ T29] wlan1: Creating new IBSS network, BSSID 8a:05:20:21:70:b7 [ 437.863582][T10762] hfsplus: b-tree write err: -5, ino 3 [ 438.055769][ T5351] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 438.122089][ T47] hfsplus: b-tree write err: -5, ino 3 [ 438.297002][ T5351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.355655][ T5351] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.421282][ T5351] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.482003][ T5351] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.579406][ T5351] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 438.640033][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.809177][T10765] loop5: detected capacity change from 0 to 32768 [ 438.939824][T10765] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 439.023894][T10765] JBD2: Ignoring recovery information on journal [ 439.123777][ T5351] gud 1-1:1.0: Unexpected status OK for failed transfer [ 439.170767][ T5351] gud: probe of 1-1:1.0 failed with error -32 [ 439.239555][T10765] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 439.335615][ T5351] usb 1-1: USB disconnect, device number 22 [ 439.795219][ T6038] ocfs2: Unmounting device (7,5) on (node local) [ 439.928149][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.934511][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.405667][ T5354] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 440.666940][ T5354] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.751014][ T5354] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 440.829486][ T5354] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 440.905665][ T5354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 440.937849][T10802] loop6: detected capacity change from 0 to 32768 [ 440.974303][ T5354] usb 4-1: SerialNumber: syz [ 441.044425][ T5354] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 441.113842][ T5354] usb-storage 4-1:1.0: USB Mass Storage device detected [ 441.181873][T10802] XFS (loop6): Mounting V5 Filesystem [ 441.216901][ T5354] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 441.326402][T10802] XFS (loop6): Ending clean mount [ 441.367306][ T5354] usb 4-1: USB disconnect, device number 11 [ 441.738323][ T9641] XFS (loop6): Unmounting Filesystem [ 443.291189][T10857] loop5: detected capacity change from 0 to 32768 [ 443.444571][T10857] XFS (loop5): Mounting V5 Filesystem [ 443.562663][T10857] XFS (loop5): Ending clean mount [ 443.730684][T10895] loop3: detected capacity change from 0 to 512 [ 443.881519][T10895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 443.964958][ T6038] XFS (loop5): Unmounting Filesystem [ 444.436010][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 444.915179][T10915] autofs4:pid:10915:autofs_fill_super: pipe file descriptor does not contain proper ops [ 445.194157][ T4331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.490589][ T4331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.682265][ T4331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.907480][T10929] loop3: detected capacity change from 0 to 2048 [ 446.190052][ T4331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.231374][T10933] loop5: detected capacity change from 0 to 256 [ 446.760218][T10936] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2348'. [ 446.953557][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.968754][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.977254][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.986695][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.994776][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 447.002357][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.279956][T10943] loop3: detected capacity change from 0 to 2048 [ 447.439505][T10943] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 447.459170][T10949] overlayfs: upper fs does not support tmpfile. [ 447.681984][T10943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.088318][ T8706] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 448.234580][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2355'. [ 448.360698][ T8706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.402228][ T8706] usb 3-1: not running at top speed; connect to a high speed hub [ 448.476519][ T8706] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 448.576945][ T8706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 448.638104][ T8706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 448.684341][ T8706] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 448.726552][ T8706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.779499][ T8706] usb 3-1: config 0 descriptor?? [ 448.913268][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2360'. [ 448.937139][T10940] chnl_net:caif_netlink_parms(): no params data found [ 449.045767][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 449.059294][ T5351] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 449.273754][ T5351] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.328829][ T5351] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 449.375233][T10982] loop5: detected capacity change from 0 to 1024 [ 449.390044][ T5351] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.408876][ T8706] usb 3-1: string descriptor 0 read error: -71 [ 449.439003][ T8706] uclogic 0003:5543:004D.000E: failed retrieving string descriptor #200: -71 [ 449.461906][T10982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 449.485437][ T5351] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 449.515776][ T8706] uclogic 0003:5543:004D.000E: failed retrieving pen parameters: -71 [ 449.572515][T10982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 449.581665][ T5351] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.596687][ T8706] uclogic 0003:5543:004D.000E: failed probing pen v2 parameters: -71 [ 449.641920][ T5351] usb 7-1: Product: syz [ 449.647634][T10982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 449.660310][ T8706] uclogic 0003:5543:004D.000E: failed probing parameters: -71 [ 449.668217][ T5351] usb 7-1: Manufacturer: syz [ 449.672833][ T5351] usb 7-1: SerialNumber: syz [ 449.689132][T10982] System zones: 0-1, 3-36 [ 449.693888][ T8706] uclogic: probe of 0003:5543:004D.000E failed with error -71 [ 449.740823][T10982] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 449.773049][ T8706] usb 3-1: USB disconnect, device number 11 [ 450.086257][ T26] audit: type=1800 audit(1789488813.418:443): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2361" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 450.154590][T10971] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 450.235106][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.305969][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.346672][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 450.365398][T10940] device bridge_slave_0 entered promiscuous mode [ 450.609919][ T5351] ATM dev 0: failed to start ADSL synchronisation: -71 [ 450.658256][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880504c5f00 failed (-71)! [ 450.666775][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880504c5900 failed (-71)! [ 450.674711][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880504c5700 failed (-71)! [ 450.682652][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880504c5500 failed (-71)! [ 450.690573][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.759550][ T5351] usb 7-1: USB disconnect, device number 4 [ 450.765821][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff8880504c5f00 submission failed (-19)! [ 450.856425][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.910781][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.961287][T10940] device bridge_slave_1 entered promiscuous mode [ 451.125599][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 451.526001][T11012] loop6: detected capacity change from 0 to 256 [ 451.587990][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.080359][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.223890][ T4331] device hsr_slave_0 left promiscuous mode [ 452.266919][ T4331] device hsr_slave_1 left promiscuous mode [ 452.338032][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.376703][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.516190][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.570109][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.666135][ T4331] device bridge_slave_1 left promiscuous mode [ 452.675875][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.684100][ T4331] device bridge_slave_0 left promiscuous mode [ 452.781311][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.878494][T11042] loop6: detected capacity change from 0 to 512 [ 452.962714][T11042] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 453.022152][T11042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 453.125978][T11042] System zones: 0-1, 15-15, 18-18, 34-34 [ 453.132612][T11042] EXT4-fs (loop6): orphan cleanup on readonly fs [ 453.180510][T11042] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 453.205512][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 453.246040][ T4331] device veth1_macvtap left promiscuous mode [ 453.252113][ T4331] device veth0_macvtap left promiscuous mode [ 453.265086][T11042] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 453.342034][ T4331] device veth1_vlan left promiscuous mode [ 453.384935][T11042] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 453.402225][ T4331] device veth0_vlan left promiscuous mode [ 453.432504][T11042] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2376: bg 0: block 40: padding at end of block bitmap is not set [ 453.517111][T11042] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 453.580145][T11042] EXT4-fs (loop6): 1 truncate cleaned up [ 453.621615][T11042] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 453.709843][T11042] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.2376: bad symlink. [ 453.864793][T11052] loop3: detected capacity change from 0 to 4096 [ 453.878750][ T9641] EXT4-fs (loop6): unmounting filesystem. [ 454.653024][ T4320] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 454.766780][T11064] loop2: detected capacity change from 0 to 2048 [ 454.871456][ T4320] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 454.915430][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.945036][ T4320] usb 7-1: Product: syz [ 454.968999][ T4320] usb 7-1: Manufacturer: syz [ 454.991091][ T4320] usb 7-1: SerialNumber: syz [ 455.017074][ T4320] usb 7-1: config 0 descriptor?? [ 455.064632][ T4320] gspca_main: spca508-2.14.0 probing 041e:4018 [ 455.240193][ T4320] gspca_spca508: reg_read err -32 [ 455.253400][ T4320] gspca_spca508: reg_read err -32 [ 455.293622][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 455.341302][T11072] Cannot find add_set index 4 as target [ 455.482651][ T4320] gspca_spca508: reg_read err -71 [ 455.497862][ T4320] gspca_spca508: reg_read err -71 [ 455.525316][ T4320] gspca_spca508: reg write: error -71 [ 455.542171][ T4320] spca508: probe of 7-1:0.0 failed with error -71 [ 455.572151][ T4320] usb 7-1: USB disconnect, device number 5 [ 456.685701][T11086] loop6: detected capacity change from 0 to 128 [ 457.120092][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 457.388917][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 457.626982][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.798855][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.309795][ T4331] bond0 (unregistering): Released all slaves [ 458.448429][T11103] netem: incorrect ge model size [ 458.475800][T11103] netem: change failed [ 458.627648][T10940] team0: Port device team_slave_0 added [ 458.743255][T10940] team0: Port device team_slave_1 added [ 458.979493][T11118] loop6: detected capacity change from 0 to 256 [ 458.986111][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.993131][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.019016][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.110160][T11118] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 459.357862][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.460152][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.556631][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.582577][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.935884][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.367218][ T26] audit: type=1400 audit(1789488823.688:444): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=11142 comm="syz.6.2412" [ 460.427130][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.448249][T10940] device hsr_slave_0 entered promiscuous mode [ 460.495639][ T5351] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 460.521771][T10940] device hsr_slave_1 entered promiscuous mode [ 460.590044][T10940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.661242][T10940] Cannot create hsr debugfs directory [ 460.725736][ T5351] usb 6-1: Using ep0 maxpacket: 8 [ 460.750552][ T5351] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 460.833302][ T5351] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.945504][ T5351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.063218][ T5351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.180342][ T5351] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.365766][ T5351] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.450287][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.739064][ T5351] usb 6-1: GET_CAPABILITIES returned 0 [ 461.785644][ T5351] usbtmc 6-1:16.0: can't read capabilities [ 461.950400][T11139] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 462.039196][ T5353] usb 6-1: USB disconnect, device number 12 [ 462.189515][T11161] loop6: detected capacity change from 0 to 1024 [ 462.310257][T11161] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 462.369459][T11161] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.464709][ T26] audit: type=1800 audit(1789488825.788:445): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2416" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 462.530796][T11160] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.2416: lblock 0 mapped to illegal pblock 0 (length 1) [ 462.655705][ T26] audit: type=1800 audit(1789488825.838:446): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2416" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 462.752463][T11161] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.2416: lblock 0 mapped to illegal pblock 0 (length 1) [ 462.882587][T11161] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.2416: lblock 0 mapped to illegal pblock 0 (length 1) [ 463.131178][ T5353] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 463.142015][ T9641] EXT4-fs (loop6): unmounting filesystem. [ 463.326840][T10940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.365700][ T5353] usb 6-1: Using ep0 maxpacket: 16 [ 463.408353][ T5353] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 463.478831][ T5353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.531946][ T5353] usb 6-1: Product: syz [ 463.549997][ T5353] usb 6-1: Manufacturer: syz [ 463.574558][ T5353] usb 6-1: SerialNumber: syz [ 463.584434][T11174] loop2: detected capacity change from 0 to 8192 [ 463.631957][T10940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.684602][T11174] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 463.740430][T10940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 463.802182][T10940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 463.842005][ T5353] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 463.863018][T11174] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 463.913882][ T5353] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.950633][T11174] REISERFS (device loop2): using ordered data mode [ 463.963079][T11157] loop3: detected capacity change from 0 to 32768 [ 464.000214][T11174] reiserfs: using flush barriers [ 464.010398][ T5353] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 464.057669][T11174] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 464.103460][ T5353] usb 6-1: media controller created [ 464.212659][ T5353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.254497][T11174] REISERFS (device loop2): checking transaction log (loop2) [ 464.343248][ T5353] zl10353_read_register: readreg error (reg=127, ret==-71) [ 464.515342][ T5353] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5 [ 464.610258][ T5353] usb 6-1: USB disconnect, device number 13 [ 464.801359][T11174] REISERFS (device loop2): Using tea hash to sort names [ 464.867655][T11174] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 465.072955][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.279122][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.339823][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.438347][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.480653][T11195] loop3: detected capacity change from 0 to 8 [ 465.536048][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.599417][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.627730][T11195] squashfs: Unknown parameter 'ÿÿÿÿÿvUÑ°*}`èŒÎ:jfÏvM½¤1b/@pÆDÒ[; »6³ÃÜ]5ÞxŽiÅÚ¹ha_9q«†mŒb;nÊÈ“…epȧ½«˜áD¹—' [ 465.715955][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.723083][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.862642][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.930229][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.017134][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.106147][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.113330][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.229356][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.331735][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.411646][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.471412][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.523159][T11212] loop2: detected capacity change from 0 to 128 [ 466.569352][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.613062][T11212] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.652606][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.709520][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.732980][T11212] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 466.773120][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.840225][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.927851][T10940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.004933][T10940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.075145][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.112018][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.163766][ T4331] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 467.770218][ T5351] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 467.813892][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 467.845088][T10984] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 467.955328][T11238] tipc: Started in network mode [ 468.002944][ T5351] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 468.020571][T11238] tipc: Node identity 7, cluster identity 4711 [ 468.064024][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.090166][T11238] tipc: Node number set to 7 [ 468.115131][ T5351] usb 3-1: Product: syz [ 468.136769][ T5351] usb 3-1: Manufacturer: syz [ 468.141450][ T5351] usb 3-1: SerialNumber: syz [ 468.211140][ T5351] usb 3-1: config 0 descriptor?? [ 468.697770][ T5351] usb 3-1: Firmware: major: 211, minor: 105, hardware type: ATUSB (2) [ 468.902192][ T5351] usb 3-1: failed to fetch extended address, random address set [ 468.926213][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.970267][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.040257][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.181446][ T5351] usb 3-1: USB disconnect, device number 12 [ 469.203796][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.249652][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.434487][T10940] device veth0_vlan entered promiscuous mode [ 469.510002][T10984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.551126][T10984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.649001][T11245] loop6: detected capacity change from 0 to 32768 [ 469.661277][T10940] device veth1_vlan entered promiscuous mode [ 469.700858][T10984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.722841][T11245] XFS: ikeep mount option is deprecated. [ 469.753235][T10984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.812990][T10984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 469.851353][T11245] XFS (loop6): Mounting V5 Filesystem [ 469.938595][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.022163][T11264] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 470.076048][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.126251][T11245] XFS (loop6): Ending clean mount [ 470.135923][T11264] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 470.151046][T11245] XFS (loop6): Quotacheck needed: Please wait. [ 470.157727][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.195717][T11264] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 470.217661][T10940] device veth0_macvtap entered promiscuous mode [ 470.279140][T10940] device veth1_macvtap entered promiscuous mode [ 470.413889][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.435260][T11245] XFS (loop6): Quotacheck: Done. [ 470.505579][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.578086][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.685043][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.745513][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.801654][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.869735][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.924402][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.952659][T11262] loop5: detected capacity change from 0 to 32768 [ 471.017542][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.027066][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.035191][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.048975][ T9641] XFS (loop6): Unmounting Filesystem [ 471.122309][T11262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2442 (11262) [ 471.149407][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.259976][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.278267][T11262] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.351651][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.365765][T11262] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 471.410269][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.428856][T11262] BTRFS info (device loop5): using free space tree [ 471.467335][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.522687][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.570342][T11262] BTRFS info (device loop5): enabling ssd optimizations [ 471.604334][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.654800][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.725282][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.773998][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.844084][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.922504][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2445'. [ 472.023837][T11286] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2445'. [ 472.037560][ T6038] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 472.111250][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.183358][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.296174][T10940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.304934][T10940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.458859][T10940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.549003][T10940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.629877][T11317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2451'. [ 473.094081][T11317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2451'. [ 473.232948][T11325] loop2: detected capacity change from 0 to 2048 [ 473.277926][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2451'. [ 473.296395][T11328] device-mapper: table: 248:0: zero-length target [ 473.315935][T11328] device-mapper: ioctl: error adding target to table [ 473.383292][T11325] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 473.422969][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2451'. [ 473.497016][T11325] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 473.605418][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.613563][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.649928][T11325] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 473.715967][T11325] UDF-fs: Scanning with blocksize 512 failed [ 473.732377][T11333] loop5: detected capacity change from 0 to 128 [ 473.757403][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.789355][T10984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.821893][T11325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.831533][T11333] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 473.870249][T10984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.969268][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 474.022292][T11333] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 474.152447][T11333] FAT-fs (loop5): Filesystem has been set read-only [ 474.321115][T11323] loop6: detected capacity change from 0 to 32768 [ 474.379960][ T6038] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 474.472698][T11323] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 475.044417][ T9641] ocfs2: Unmounting device (7,6) on (node local) [ 475.625494][T11366] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2465'. [ 475.644398][T11368] loop0: detected capacity change from 0 to 256 [ 475.714250][T11374] loop6: detected capacity change from 0 to 64 [ 475.741256][T11373] loop3: detected capacity change from 0 to 256 [ 475.776108][T11368] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 476.015831][T11373] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 476.153997][ T26] audit: type=1326 audit(1789488839.478:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 476.178139][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.350062][T11379] loop5: detected capacity change from 0 to 2048 [ 476.366088][T11373] ip_tables: iptables: counters copy to user failed while replacing table [ 476.456158][ T26] audit: type=1326 audit(1789488839.518:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 476.480496][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.520880][T11379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.824811][ T26] audit: type=1326 audit(1789488839.518:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 476.849043][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.118981][ T26] audit: type=1326 audit(1789488839.528:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff71799e159 code=0x7ffc0000 [ 477.348851][ T26] audit: type=1326 audit(1789488839.528:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff71799dec2 code=0x7ffc0000 [ 477.590822][ T26] audit: type=1326 audit(1789488839.558:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff71795e98e code=0x7ffc0000 [ 477.614745][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.754361][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2481'. [ 477.824401][ T26] audit: type=1326 audit(1789488839.668:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff71799df87 code=0x7ffc0000 [ 477.848481][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.872610][T11407] block nbd0: Unsupported socket: should be TCP or UNIX. [ 478.048694][ T26] audit: type=1326 audit(1789488839.678:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71795e98e code=0x7ffc0000 [ 478.132784][T11415] loop5: detected capacity change from 0 to 256 [ 478.194072][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2486'. [ 478.274132][T11415] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 478.304155][ T26] audit: type=1326 audit(1789488839.678:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff71799ddeb code=0x7ffc0000 [ 478.328227][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.520168][T11423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2487'. [ 478.540392][ T26] audit: type=1326 audit(1789488839.778:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.2469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff71795e98e code=0x7ffc0000 [ 478.564391][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.339165][T11443] loop6: detected capacity change from 0 to 512 [ 481.434567][T11488] netlink: 'syz.0.2517': attribute type 12 has an invalid length. [ 481.494488][T11488] netlink: 'syz.0.2517': attribute type 29 has an invalid length. [ 481.530138][T11488] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2517'. [ 481.591710][T11488] netlink: 'syz.0.2517': attribute type 1 has an invalid length. [ 481.624055][T11488] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2517'. [ 482.011690][T11497] loop6: detected capacity change from 0 to 2048 [ 482.077923][T11497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.023814][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'. [ 483.412738][T11526] loop2: detected capacity change from 0 to 1024 [ 483.432187][T11525] loop5: detected capacity change from 0 to 2048 [ 483.493333][T11526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 483.525408][T11525] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 483.582648][T11525] UDF-fs: Scanning with blocksize 512 failed [ 483.676882][T11525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.859370][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 484.428327][ T4293] Bluetooth: hci3: hcon ffff888053efc000 sent 1 < count 511 [ 484.542201][T11548] tap0: tun_chr_ioctl cmd 1074025677 [ 484.610816][T11548] tap0: linktype set to 776 [ 484.735623][ T14] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 484.947596][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.018922][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.075531][ T14] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 485.115207][T11564] <½ž [ 485.155711][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.223077][ T14] usb 1-1: config 0 descriptor?? [ 485.569630][T11573] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 485.665634][ T14] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 485.720264][ T14] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 485.765761][ T14] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 485.804816][ T14] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 485.840242][ T14] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 485.890764][ T14] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 486.012823][ T14] playstation 0003:054C:0DF2.000F: Invalid byte count transferred, expected 20 got 0 [ 486.041440][ T14] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 486.077566][ T14] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 486.106958][ T14] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 486.123928][ T14] playstation: probe of 0003:054C:0DF2.000F failed with error -22 [ 486.225190][ T3599] usb 1-1: USB disconnect, device number 23 [ 486.294490][T11585] fido_id[11585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 486.912082][T11594] loop6: detected capacity change from 0 to 256 [ 486.929608][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 486.929694][ T26] audit: type=1326 audit(1789488850.258:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.2563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf19e159 code=0x0 [ 486.985521][ T14] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 487.199023][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 487.217768][ T14] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.299201][ T14] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.331478][T11602] loop0: detected capacity change from 0 to 512 [ 487.349161][ T14] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.426921][ T14] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.500037][ T14] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.571978][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.823870][ T14] usb 6-1: GET_CAPABILITIES returned 0 [ 487.847015][ T14] usbtmc 6-1:16.0: can't read capabilities [ 488.063507][ T14] usb 6-1: USB disconnect, device number 14 [ 488.159872][ T26] audit: type=1800 audit(1789488851.488:494): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2574" name="toss_secs" dev="configfs" ino=60104 res=0 errno=0 [ 488.180415][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.469925][T11622] loop3: detected capacity change from 0 to 64 [ 488.569423][T11622] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 488.771496][T11606] loop2: detected capacity change from 0 to 32768 [ 488.949932][T11606] XFS (loop2): Mounting V5 Filesystem [ 489.130597][T11606] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 489.337838][T11606] XFS (loop2): Starting recovery (logdev: internal) [ 489.432473][T11643] program syz.0.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.515705][T11606] XFS (loop2): Ending recovery (logdev: internal) [ 489.757983][T11606] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8 [ 489.897692][T11606] XFS (loop2): Unmount and run xfs_repair [ 490.200571][ T4289] XFS (loop2): Unmounting Filesystem [ 490.663369][ T3599] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0010/input/input24 [ 490.841404][ T3599] hid-generic 0005:057C:0306.0010: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 491.187723][ T3599] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 491.395688][ T3599] usb 6-1: Using ep0 maxpacket: 8 [ 491.417999][ T3599] usb 6-1: config 0 has no interfaces? [ 491.468990][ T3599] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 491.509005][ T3599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.520785][ T26] audit: type=1400 audit(1789488854.848:495): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=11687 comm="syz.6.2599" name="p" offset=33 [ 491.569235][ T3599] usb 6-1: Product: syz [ 491.573464][ T3599] usb 6-1: Manufacturer: syz [ 491.605620][ T3599] usb 6-1: SerialNumber: syz [ 491.630056][ T3599] usb 6-1: config 0 descriptor?? [ 491.795587][ T7] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 491.893570][ T4324] usb 6-1: USB disconnect, device number 15 [ 491.996549][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 492.039396][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 492.103350][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.152979][ T7] usb 1-1: Product: syz [ 492.175063][ T7] usb 1-1: Manufacturer: syz [ 492.207140][ T7] usb 1-1: SerialNumber: syz [ 492.258767][ T7] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 492.290116][ T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 492.378059][ T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 492.445985][ T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 492.461292][ C0] usb 1-1: malformed indat packet [ 492.466751][ C0] usb 1-1: malformed indat packet [ 492.485368][ C0] usb 1-1: malformed indat packet [ 492.502831][ C0] usb 1-1: malformed indat packet [ 492.508367][ C0] usb 1-1: malformed indat packet [ 492.513637][ C0] usb 1-1: malformed indat packet [ 492.534681][ T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 492.549733][ C0] usb 1-1: malformed indat packet [ 492.818487][ T4324] usb 1-1: USB disconnect, device number 24 [ 492.859394][ T4324] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 492.918157][ T4324] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 492.995710][ T4324] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 493.051412][ T4324] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 493.081163][ T4324] keyspan 1-1:1.0: device disconnected [ 493.200203][T11714] loop5: detected capacity change from 0 to 128 [ 493.234189][T11714] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 493.275531][ T7] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 493.488133][ T7] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.538188][ T7] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.592389][ T7] usb 7-1: config 0 interface 0 has no altsetting 0 [ 493.618271][ T7] usb 7-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 493.639677][T11716] loop3: detected capacity change from 0 to 4096 [ 493.648925][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.670930][T11716] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.698822][ T7] usb 7-1: config 0 descriptor?? [ 493.729397][T10984] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 493.805039][T11716] EXT4-fs (loop3): Test dummy encryption mode enabled [ 493.969950][T11716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 494.016917][T11722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2613'. [ 494.134941][ T7] logitech-djreceiver 0003:046D:C714.0011: unknown main item tag 0x2 [ 494.205678][ T7] logitech-djreceiver 0003:046D:C714.0011: collection stack underflow [ 494.271992][T11716] fs-verity: sha256 using implementation "sha256-avx2" [ 494.279565][ T7] logitech-djreceiver 0003:046D:C714.0011: item 0 2 0 12 parsing failed [ 494.342530][ T7] logitech-djreceiver 0003:046D:C714.0011: logi_dj_probe: parse failed [ 494.408095][ T7] logitech-djreceiver: probe of 0003:046D:C714.0011 failed with error -22 [ 494.448167][T11716] fs-verity (loop3, inode 15): fs-verity keyring is empty, rejecting signed file! [ 494.473984][ T7] usb 7-1: USB disconnect, device number 6 [ 494.771099][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 494.803744][ T7120] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0012/input/input25 [ 494.901861][ T7120] hid-generic 0005:057C:0306.0012: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 495.090467][T11739] loop2: detected capacity change from 0 to 4096 [ 495.275645][ T7120] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 495.495646][ T7120] usb 1-1: Using ep0 maxpacket: 8 [ 495.522505][ T7120] usb 1-1: config 0 has no interfaces? [ 495.577498][ T7120] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 495.650612][ T7120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.700926][ T7120] usb 1-1: Product: syz [ 495.732447][ T7120] usb 1-1: Manufacturer: syz [ 495.761592][ T7120] usb 1-1: SerialNumber: syz [ 495.806446][ T7120] usb 1-1: config 0 descriptor?? [ 495.882145][T11735] loop5: detected capacity change from 0 to 32768 [ 495.982998][T11735] JBD2: Ignoring recovery information on journal [ 496.064723][ T7120] usb 1-1: USB disconnect, device number 25 [ 496.096282][T11735] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 496.135679][ T7] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 496.367836][ T7] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.399154][ T7] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.441494][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.461028][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.493758][ T6038] ocfs2: Unmounting device (7,5) on (node local) [ 496.692292][ T7] usb 7-1: GET_CAPABILITIES returned 0 [ 496.727716][ T7] usbtmc 7-1:16.0: can't read capabilities [ 496.756019][ T3599] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 496.917626][ T4324] usb 7-1: USB disconnect, device number 7 [ 496.973066][T11744] loop3: detected capacity change from 0 to 32768 [ 496.983461][ T3599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.024209][ T3599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.066466][T11744] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2622 (11744) [ 497.087594][ T3599] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 497.124964][ T3599] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.146785][T11760] loop5: detected capacity change from 0 to 8192 [ 497.188493][ T3599] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 497.246864][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.331309][T11744] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 497.564428][T11744] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 497.710034][T11744] BTRFS info (device loop3): setting nodatasum [ 497.822208][T11744] BTRFS info (device loop3): force zlib compression, level 3 [ 497.941212][T11744] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 498.092822][T11744] BTRFS info (device loop3): use lzo compression, level 0 [ 498.155379][ T3599] gud 3-1:1.0: Failed to get connectors (error=-71) [ 498.183772][ T3599] gud: probe of 3-1:1.0 failed with error -71 [ 498.200116][T11744] BTRFS info (device loop3): turning on flush-on-commit [ 498.284482][T11744] BTRFS info (device loop3): enabling auto defrag [ 498.314345][ T3599] usb 3-1: USB disconnect, device number 13 [ 498.415206][T11744] BTRFS info (device loop3): max_inline at 4096 [ 498.478801][T11744] BTRFS info (device loop3): using free space tree [ 498.694258][T11795] loop5: detected capacity change from 0 to 2048 [ 498.787412][T11795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.861082][ T26] audit: type=1807 audit(1789488862.188:496): action=measure func=F res=0 [ 498.926225][T11796] ima: policy update failed [ 498.954865][ T26] audit: type=1802 audit(1789488862.238:497): pid=11797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2638" res=0 errno=0 [ 499.074551][ T29] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.133049][ T26] audit: type=1802 audit(1789488862.258:498): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2638" res=0 errno=0 [ 499.356076][T11744] BTRFS error (device loop3): open_ctree failed: -12 [ 499.805738][ T7] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 500.036991][ T7] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 500.064074][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.124296][ T7] usb 1-1: config 0 descriptor?? [ 500.129799][ T5356] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 500.164057][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 500.338362][ T5356] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.364943][ T7] gp8psk: usb in 128 operation failed. [ 500.373261][ T5356] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.439360][ T5356] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.483479][ T5356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.618302][ T7] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 500.733576][ T5356] usb 3-1: GET_CAPABILITIES returned 0 [ 500.750969][ T5356] usbtmc 3-1:16.0: can't read capabilities [ 500.819276][ T7] gp8psk: usb in 149 operation failed. [ 500.855390][ T7] gp8psk: failed to get FPGA version [ 500.890072][ T7] gp8psk: usb in 138 operation failed. [ 500.925668][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 500.993853][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 501.048989][ T7] usb 1-1: USB disconnect, device number 26 [ 501.109646][ T5356] usb 3-1: USB disconnect, device number 14 [ 501.248476][T11819] loop6: detected capacity change from 0 to 40427 [ 501.261412][T11829] loop3: detected capacity change from 0 to 256 [ 501.299397][T11819] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 501.320821][T11831] loop5: detected capacity change from 0 to 512 [ 501.350003][T11819] F2FS-fs (loop6): invalid crc value [ 501.368976][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.375330][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.441916][T11831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 501.454195][T11819] F2FS-fs (loop6): Found nat_bits in checkpoint [ 501.524483][T11831] System zones: 1-12 [ 501.582083][T11831] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.2653: missing EA_INODE flag [ 501.763612][T11831] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2653: error while reading EA inode 12 err=-117 [ 501.800653][T11819] F2FS-fs (loop6): Start checkpoint disabled! [ 501.854778][T11831] EXT4-fs (loop5): 1 orphan inode deleted [ 501.912393][T11831] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 501.930000][T11819] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 502.050532][T11831] fscrypt (loop5, inode 15): Mutually exclusive encryption flags (0x1c) [ 502.371153][ T6038] EXT4-fs (loop5): unmounting filesystem. [ 502.594482][T11844] loop0: detected capacity change from 0 to 256 [ 502.613692][ T4331] kworker/u4:6: attempt to access beyond end of device [ 502.613692][ T4331] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 502.699392][T11844] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 503.574788][ T26] audit: type=1807 audit(1789488866.898:499): action=measure func=F res=0 [ 503.601955][T11857] ima: policy update failed [ 503.630574][ T26] audit: type=1802 audit(1789488866.928:500): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2665" res=0 errno=0 [ 503.790576][ T26] audit: type=1802 audit(1789488867.028:501): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2665" res=0 errno=0 [ 504.202805][T11874] loop6: detected capacity change from 0 to 256 [ 505.030292][T11868] loop0: detected capacity change from 0 to 32768 [ 505.094610][T11868] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 505.154468][T11868] JBD2: Ignoring recovery information on journal [ 505.165557][ T954] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 505.322624][T11868] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 505.363349][ T26] audit: type=1807 audit(1789488868.688:502): action=measure func=F res=0 [ 505.373105][T11894] ima: policy update failed [ 505.379259][ T954] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 505.428887][ T26] audit: type=1802 audit(1789488868.708:503): pid=11896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.2681" res=0 errno=0 [ 505.466195][ T954] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.523461][ T954] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.561183][ T26] audit: type=1802 audit(1789488868.748:504): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2681" res=0 errno=0 [ 505.586157][ T954] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 505.626527][ T954] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 505.666265][ T954] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.698926][ T954] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.726302][ T954] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 505.803082][ T954] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 505.846084][ T954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.878927][ T954] usb 7-1: Product: syz [ 505.904764][ T954] usb 7-1: Manufacturer: syz [ 505.923170][ T954] usb 7-1: SerialNumber: syz [ 505.967017][ T954] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 506.026195][ T954] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 506.070829][ T954] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 506.162980][T11886] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 506.223797][ T954] usb 7-1: USB disconnect, device number 8 [ 506.284920][ T954] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 506.311480][T11890] loop2: detected capacity change from 0 to 32768 [ 506.352487][ T954] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 506.421107][ T954] ti_usb_3410_5052 7-1:2.0: device disconnected [ 506.953047][T10940] ocfs2: Unmounting device (7,0) on (node local) [ 507.150879][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2688'. [ 507.790245][T11925] loop3: detected capacity change from 0 to 512 [ 507.897282][T11925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 508.010408][T11925] System zones: 1-12 [ 508.036292][T11925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.2695: missing EA_INODE flag [ 508.087226][T11925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2695: error while reading EA inode 12 err=-117 [ 508.125761][T11925] EXT4-fs (loop3): 1 orphan inode deleted [ 508.152022][T11925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 508.309537][T11922] loop5: detected capacity change from 0 to 40427 [ 508.334212][T11922] F2FS-fs (loop5): invalid crc value [ 508.355327][T11922] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 508.489358][T11922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 530.306518][ T2954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.765657][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 561.333725][ T29] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.808013][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.814367][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.360796][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 610.965765][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 623.388015][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.249094][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.255501][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.415266][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 670.326800][ T27] INFO: task jbd2/sda1-8:3602 blocked for more than 143 seconds. [ 670.334630][ T27] Not tainted syzkaller #0 [ 670.346522][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.355262][ T27] task:jbd2/sda1-8 state:D stack:25904 pid:3602 ppid:2 flags:0x00004000 [ 670.368465][ T27] Call Trace: [ 670.371881][ T27] [ 670.374901][ T27] __schedule+0x107f/0x4030 [ 670.380153][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 670.385341][ T27] ? release_firmware_map_entry+0x187/0x187 [ 670.396614][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 670.402555][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 670.412533][ T27] schedule+0xb9/0x180 [ 670.420088][ T27] io_schedule+0x7c/0xd0 [ 670.424361][ T27] bit_wait_io+0xd/0xc0 [ 670.432685][ T27] __wait_on_bit+0x9b/0x2c0 [ 670.437380][ T27] ? bit_wait+0xc0/0xc0 [ 670.441684][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 670.450752][ T27] ? bit_wait+0xc0/0xc0 [ 670.454927][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 670.459954][ T27] ? do_raw_write_lock+0x11a/0x260 [ 670.465103][ T27] ? bit_waitqueue+0x30/0x30 [ 670.473781][ T27] ? do_raw_read_unlock+0x39/0x70 [ 670.479022][ T27] jbd2_journal_commit_transaction+0x2f0f/0x5f30 [ 670.489984][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 670.498382][ T27] ? lock_chain_count+0x20/0x20 [ 670.503289][ T27] ? _raw_spin_unlock+0x40/0x40 [ 670.511837][ T27] ? rcu_is_watching+0x11/0xa0 [ 670.517039][ T27] ? __timer_delete_sync+0x239/0x2e0 [ 670.522379][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 670.534367][ T27] ? timer_delete_sync+0x20/0x20 [ 670.540024][ T27] ? do_raw_read_unlock+0x70/0x70 [ 670.545069][ T27] ? prepare_to_wait+0x1a6/0x1f0 [ 670.553605][ T27] kjournald2+0x40b/0x800 [ 670.558222][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 670.563451][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 670.573839][ T27] ? wake_bit_function+0x200/0x200 [ 670.579274][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 670.585219][ T27] ? __kthread_parkme+0x71/0x1c0 [ 670.595295][ T27] ? __kthread_parkme+0x15b/0x1c0 [ 670.600747][ T27] kthread+0x29d/0x330 [ 670.605013][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 670.613946][ T27] ? kthread_blkcg+0xd0/0xd0 [ 670.618770][ T27] ret_from_fork+0x1f/0x30 [ 670.623309][ T27] [ 670.630226][ T27] INFO: task syz-executor:4263 blocked for more than 143 seconds. [ 670.641904][ T27] Not tainted syzkaller #0 [ 670.650718][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.662692][ T27] task:syz-executor state:D stack:22768 pid:4263 ppid:4262 flags:0x00004002 [ 670.680594][ T27] Call Trace: [ 670.684012][ T27] [ 670.690136][ T27] __schedule+0x107f/0x4030 [ 670.694699][ T27] ? mark_lock+0x94/0x320 [ 670.701854][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 670.710419][ T27] ? release_firmware_map_entry+0x187/0x187 [ 670.717358][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 670.723292][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 670.738343][ T27] schedule+0xb9/0x180 [ 670.742477][ T27] io_schedule+0x7c/0xd0 [ 670.754964][ T27] bit_wait_io+0xd/0xc0 [ 670.763072][ T27] __wait_on_bit+0x9b/0x2c0 [ 670.768004][ T27] ? bit_wait+0xc0/0xc0 [ 670.772190][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 670.781775][ T27] ? bit_wait+0xc0/0xc0 [ 670.786277][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 670.791067][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 670.801240][ T27] ? bit_waitqueue+0x30/0x30 [ 670.806326][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 670.811556][ T27] do_get_write_access+0x605/0xf20 [ 670.820447][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 670.826730][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 670.833016][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 670.842758][ T27] ? rcu_is_watching+0x11/0xa0 [ 670.847803][ T27] ext4_reserve_inode_write+0x201/0x290 [ 670.853466][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 670.865593][ T27] ext4_dirty_inode+0xbf/0x100 [ 670.870394][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 670.880311][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 670.887795][ T27] __file_update_time+0x21d/0x240 [ 670.892907][ T27] file_update_time+0x2f3/0x370 [ 670.903002][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 670.908563][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 670.913619][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 670.923417][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 670.929137][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 670.934227][ T27] do_page_mkwrite+0x16b/0x5c0 [ 670.942580][ T27] wp_page_shared+0x167/0x370 [ 670.947510][ T27] handle_mm_fault+0x1b1b/0x3d40 [ 670.952613][ T27] ? mt_find+0x157/0x830 [ 670.960429][ T27] ? numa_migrate_prep+0x250/0x250 [ 670.969290][ T27] ? lock_chain_count+0x20/0x20 [ 670.981524][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 670.992283][ T27] do_user_addr_fault+0x58e/0xb20 [ 671.001180][ T27] exc_page_fault+0x60/0x100 [ 671.007501][ T27] ? clear_bhb_loop+0x60/0xb0 [ 671.012215][ T27] asm_exc_page_fault+0x22/0x30 [ 671.020691][ T27] RIP: 0033:0x7fce9b2701e3 [ 671.025168][ T27] RSP: 002b:00007ffd2e46c000 EFLAGS: 00010202 [ 671.031771][ T27] RAX: 00007fce953fd060 RBX: 00007ffd2e46c130 RCX: 0000000000000000 [ 671.043475][ T27] RDX: 00007fce953fd05c RSI: 0000000000000008 RDI: 00007ffd2e46c130 [ 671.051795][ T27] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 671.063272][ T27] R10: 00007ffd2e46c110 R11: 0000000000000000 R12: 0000000000000000 [ 671.071496][ T27] R13: 0000000000002fa0 R14: ffffffffffffd060 R15: 0000000000000000 [ 671.085520][ T27] [ 671.103070][ T27] INFO: task kworker/u4:8:4351 blocked for more than 144 seconds. [ 671.116585][ T27] Not tainted syzkaller #0 [ 671.121548][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.140442][ T27] task:kworker/u4:8 state:D stack:22256 pid:4351 ppid:2 flags:0x00004000 [ 671.152294][ T27] Workqueue: writeback wb_workfn (flush-8:0) [ 671.159924][ T27] Call Trace: [ 671.163238][ T27] [ 671.168444][ T27] __schedule+0x107f/0x4030 [ 671.172995][ T27] ? release_firmware_map_entry+0x187/0x187 [ 671.180519][ T27] ? blk_check_plugged+0x250/0x250 [ 671.191492][ T27] ? blk_check_plugged+0x250/0x250 [ 671.198246][ T27] ? rq_wait_inc_below+0x11b/0x1a0 [ 671.203440][ T27] ? wq_worker_sleeping+0x60/0x280 [ 671.214805][ T27] schedule+0xb9/0x180 [ 671.220833][ T27] io_schedule+0x7c/0xd0 [ 671.225207][ T27] rq_qos_wait+0x227/0x350 [ 671.231930][ T27] ? wbt_inflight_cb+0x3f0/0x3f0 [ 671.238813][ T27] ? rq_depth_scale_down+0x2f0/0x2f0 [ 671.244124][ T27] ? rq_qos_wait+0x350/0x350 [ 671.251178][ T27] ? wbt_exit+0x90/0x90 [ 671.257085][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 671.262134][ T27] ? blk_mq_sched_try_merge+0x187/0x4b0 [ 671.270035][ T27] ? blk_bio_list_merge+0xd0/0xd0 [ 671.275101][ T27] wbt_wait+0x384/0x650 [ 671.280897][ T27] ? rwb_trace_step+0x3c0/0x3c0 [ 671.288516][ T27] ? dd_depth_updated+0x100/0x100 [ 671.293657][ T27] ? rwb_trace_step+0x3c0/0x3c0 [ 671.303294][ T27] __rq_qos_throttle+0x61/0xa0 [ 671.311763][ T27] blk_mq_submit_bio+0x8ef/0x2100 [ 671.318618][ T27] ? blk_mq_try_issue_list_directly+0x4a0/0x4a0 [ 671.324991][ T27] __submit_bio+0x1a2/0x290 [ 671.332024][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 671.338937][ T27] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 671.345314][ T27] ? blk_add_trace_bio+0x2c/0x2e0 [ 671.352726][ T27] submit_bio_noacct_nocheck+0x79b/0xaa0 [ 671.360036][ T27] ? should_fail_request+0x70/0x70 [ 671.365218][ T27] ext4_io_submit+0xd8/0x140 [ 671.374372][ T27] ext4_writepages+0x9f4/0x2e70 [ 671.380909][ T27] ? ext4_read_folio+0x370/0x370 [ 671.388159][ T27] ? mark_lock+0x94/0x320 [ 671.392786][ T27] ? verify_lock_unused+0x140/0x140 [ 671.399658][ T27] ? __lock_acquire+0x1465/0x7c40 [ 671.404824][ T27] ? writeback_sb_inodes+0x44d/0x17f0 [ 671.416203][ T27] ? ext4_read_folio+0x370/0x370 [ 671.421180][ T27] do_writepages+0x3c6/0x640 [ 671.429749][ T27] ? __writepage+0x130/0x130 [ 671.434398][ T27] ? writeback_sb_inodes+0x6d1/0x17f0 [ 671.440032][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 671.445215][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 671.455652][ T27] __writeback_single_inode+0x153/0x1170 [ 671.461338][ T27] writeback_sb_inodes+0xad5/0x17f0 [ 671.470137][ T27] ? queue_io+0x570/0x570 [ 671.474496][ T27] ? __rwlock_init+0x140/0x140 [ 671.479737][ T27] __writeback_inodes_wb+0x12a/0x3f0 [ 671.485077][ T27] wb_writeback+0x484/0xd40 [ 671.493382][ T27] ? percpu_ref_tryget+0x250/0x250 [ 671.498760][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 671.504762][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 671.513422][ T27] wb_workfn+0xb68/0xee0 [ 671.522536][ T27] ? inode_wait_for_writeback+0x220/0x220 [ 671.532856][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 671.539216][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 671.544283][ T27] ? read_lock_is_recursive+0x10/0x10 [ 671.553510][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 671.558979][ T27] ? process_one_work+0x7b4/0x1160 [ 671.564109][ T27] process_one_work+0x8ab/0x1160 [ 671.572732][ T27] ? worker_detach_from_pool+0x240/0x240 [ 671.578810][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 671.583891][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 671.593164][ T27] ? wq_worker_running+0x97/0x190 [ 671.598735][ T27] worker_thread+0xaf5/0x12a0 [ 671.603488][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 671.613991][ T27] kthread+0x29d/0x330 [ 671.620731][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 671.632593][ T27] ? kthread_blkcg+0xd0/0xd0 [ 671.637849][ T27] ret_from_fork+0x1f/0x30 [ 671.642302][ T27] [ 671.649073][ T27] INFO: task syz.6.2691:11914 blocked for more than 144 seconds. [ 671.657326][ T27] Not tainted syzkaller #0 [ 671.662277][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.674643][ T27] task:syz.6.2691 state:D stack:26288 pid:11914 ppid:9641 flags:0x00004004 [ 671.684122][ T27] Call Trace: [ 671.691050][ T27] [ 671.694007][ T27] __schedule+0x107f/0x4030 [ 671.699371][ T27] ? mark_lock+0x94/0x320 [ 671.703738][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 671.712354][ T27] ? release_firmware_map_entry+0x187/0x187 [ 671.718553][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 671.729423][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 671.734782][ T27] schedule+0xb9/0x180 [ 671.742324][ T27] io_schedule+0x7c/0xd0 [ 671.750392][ T27] bit_wait_io+0xd/0xc0 [ 671.754591][ T27] __wait_on_bit+0x9b/0x2c0 [ 671.759550][ T27] ? bit_wait+0xc0/0xc0 [ 671.763731][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 671.775551][ T27] ? bit_wait+0xc0/0xc0 [ 671.779776][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 671.784700][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 671.793200][ T27] ? bit_waitqueue+0x30/0x30 [ 671.798130][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 671.803686][ T27] do_get_write_access+0x605/0xf20 [ 671.812718][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 671.819208][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 671.830356][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 671.836804][ T27] ? rcu_is_watching+0x11/0xa0 [ 671.841615][ T27] ext4_reserve_inode_write+0x201/0x290 [ 671.853958][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 671.860004][ T27] ext4_dirty_inode+0xbf/0x100 [ 671.864796][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 671.874295][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 671.879542][ T27] __file_update_time+0x21d/0x240 [ 671.884707][ T27] file_update_time+0x2f3/0x370 [ 671.893166][ T27] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 671.898818][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 671.904418][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 671.913010][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 671.919629][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 671.930642][ T27] ? put_page+0x270/0x270 [ 671.935046][ T27] do_page_mkwrite+0x16b/0x5c0 [ 671.940089][ T27] handle_mm_fault+0x199c/0x3d40 [ 671.945055][ T27] ? mt_find+0x157/0x830 [ 671.952907][ T27] ? numa_migrate_prep+0x250/0x250 [ 671.961494][ T27] ? lock_chain_count+0x20/0x20 [ 671.970467][ T27] ? ktime_get+0x247/0x270 [ 671.975033][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 671.980666][ T27] do_user_addr_fault+0x58e/0xb20 [ 671.989533][ T27] exc_page_fault+0x60/0x100 [ 671.994165][ T27] asm_exc_page_fault+0x22/0x30 [ 671.999345][ T27] RIP: 0033:0x7fadc0a727a9 [ 672.004059][ T27] RSP: 002b:00007ffdd6459b90 EFLAGS: 00010202 [ 672.014135][ T27] RAX: 0000001b2eb23000 RBX: ffffffff8a20faa0 RCX: 0000001b2eb22ff8 [ 672.022415][ T27] RDX: 0000001b2e52421c RSI: 0000000000000008 RDI: 00007fadc1955720 [ 672.036032][ T27] RBP: 00000000000001ee R08: 00007fadc0e10000 R09: 00007fadc0e12000 [ 672.044058][ T27] R10: 000000008a20faa4 R11: 0000000000000001 R12: 00007fadc0e26038 [ 672.055173][ T27] R13: 0000000000001241 R14: ffffffff8a20fa37 R15: 00007fadc1955720 [ 672.064087][ T27] ? mas_mab_cp+0x597/0x8d0 [ 672.074720][ T27] ? mas_mab_cp+0x600/0x8d0 [ 672.080688][ T27] [ 672.083895][ T27] INFO: task syz.5.2694:11920 blocked for more than 145 seconds. [ 672.094662][ T27] Not tainted syzkaller #0 [ 672.100610][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.112474][ T27] task:syz.5.2694 state:D stack:26288 pid:11920 ppid:6038 flags:0x00004004 [ 672.122643][ T27] Call Trace: [ 672.128784][ T27] [ 672.133193][ T27] __schedule+0x107f/0x4030 [ 672.138851][ T27] ? mark_lock+0x94/0x320 [ 672.143255][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 672.151545][ T27] ? release_firmware_map_entry+0x187/0x187 [ 672.158603][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 672.164530][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 672.179328][ T27] schedule+0xb9/0x180 [ 672.183469][ T27] io_schedule+0x7c/0xd0 [ 672.191802][ T27] bit_wait_io+0xd/0xc0 [ 672.199458][ T27] __wait_on_bit+0x9b/0x2c0 [ 672.204002][ T27] ? bit_wait+0xc0/0xc0 [ 672.209434][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 672.214947][ T27] ? bit_wait+0xc0/0xc0 [ 672.222066][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 672.227766][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 672.234282][ T27] ? bit_waitqueue+0x30/0x30 [ 672.241846][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 672.248553][ T27] do_get_write_access+0x605/0xf20 [ 672.253703][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 672.262716][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 672.270211][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 672.279261][ T27] ? rcu_is_watching+0x11/0xa0 [ 672.284125][ T27] ext4_reserve_inode_write+0x201/0x290 [ 672.290740][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 672.302370][ T27] ext4_dirty_inode+0xbf/0x100 [ 672.308578][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 672.314676][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 672.322689][ T27] __file_update_time+0x21d/0x240 [ 672.328862][ T27] file_update_time+0x2f3/0x370 [ 672.333768][ T27] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 672.343590][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 672.349875][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 672.354937][ T27] ? pte_alloc_one+0x287/0x310 [ 672.362709][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 672.370039][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 672.378342][ T27] ? put_page+0x270/0x270 [ 672.382734][ T27] do_page_mkwrite+0x16b/0x5c0 [ 672.388748][ T27] handle_mm_fault+0x199c/0x3d40 [ 672.393729][ T27] ? mt_find+0x157/0x830 [ 672.401045][ T27] ? numa_migrate_prep+0x250/0x250 [ 672.411260][ T27] ? lock_chain_count+0x20/0x20 [ 672.419896][ T27] ? ktime_get+0x247/0x270 [ 672.424358][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 672.430651][ T27] do_user_addr_fault+0x58e/0xb20 [ 672.440158][ T27] exc_page_fault+0x60/0x100 [ 672.444977][ T27] asm_exc_page_fault+0x22/0x30 [ 672.450908][ T27] RIP: 0033:0x7ff7178727a9 [ 672.458223][ T27] RSP: 002b:00007ffd863a7280 EFLAGS: 00010202 [ 672.464325][ T27] RAX: 0000001b34e24000 RBX: ffffffff81ea97c6 RCX: 0000001b34e23ff8 [ 672.473328][ T27] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007ff718755700 [ 672.484357][ T27] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ff717c12000 [ 672.494307][ T27] R10: 00007ff718755700 R11: 0000000000000000 R12: 00007ff717c26038 [ 672.506128][ T27] R13: 0000000000000000 R14: ffffffff81ea9eac R15: 00007ff718755720 [ 672.514130][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 672.524843][ T27] ? lock_mnt_tree+0xb6/0x1b0 [ 672.531552][ T27] [ 672.534627][ T27] INFO: task syz.3.2695:11924 blocked for more than 145 seconds. [ 672.549901][ T27] Not tainted syzkaller #0 [ 672.554869][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.565210][ T27] task:syz.3.2695 state:D stack:26288 pid:11924 ppid:4276 flags:0x00004004 [ 672.578604][ T27] Call Trace: [ 672.581944][ T27] [ 672.584892][ T27] __schedule+0x107f/0x4030 [ 672.589913][ T27] ? mark_lock+0x94/0x320 [ 672.594296][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 672.602963][ T27] ? release_firmware_map_entry+0x187/0x187 [ 672.609093][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 672.615047][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 672.624135][ T27] schedule+0xb9/0x180 [ 672.631885][ T27] io_schedule+0x7c/0xd0 [ 672.640292][ T27] bit_wait_io+0xd/0xc0 [ 672.646825][ T27] __wait_on_bit+0x9b/0x2c0 [ 672.651392][ T27] ? bit_wait+0xc0/0xc0 [ 672.659177][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 672.664664][ T27] ? bit_wait+0xc0/0xc0 [ 672.669093][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 672.673896][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 672.682868][ T27] ? bit_waitqueue+0x30/0x30 [ 672.687743][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 672.692962][ T27] do_get_write_access+0x605/0xf20 [ 672.701806][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 672.708137][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 672.714323][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 672.724324][ T27] ? rcu_is_watching+0x11/0xa0 [ 672.729357][ T27] ext4_reserve_inode_write+0x201/0x290 [ 672.734960][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 672.749119][ T27] ext4_dirty_inode+0xbf/0x100 [ 672.753920][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 672.761149][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 672.769131][ T27] __file_update_time+0x21d/0x240 [ 672.774244][ T27] file_update_time+0x2f3/0x370 [ 672.780214][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 672.788547][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 672.793716][ T27] ? pte_alloc_one+0x287/0x310 [ 672.799546][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 672.811526][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 672.817839][ T27] ? put_page+0x270/0x270 [ 672.822198][ T27] do_page_mkwrite+0x16b/0x5c0 [ 672.830248][ T27] handle_mm_fault+0x199c/0x3d40 [ 672.835254][ T27] ? mt_find+0x157/0x830 [ 672.840512][ T27] ? numa_migrate_prep+0x250/0x250 [ 672.853347][ T27] ? lock_chain_count+0x20/0x20 [ 672.860239][ T27] ? ktime_get+0x247/0x270 [ 672.864693][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 672.873222][ T27] do_user_addr_fault+0x58e/0xb20 [ 672.879140][ T27] exc_page_fault+0x60/0x100 [ 672.883826][ T27] asm_exc_page_fault+0x22/0x30 [ 672.891728][ T27] RIP: 0033:0x7fd4bf0727a9 [ 672.897072][ T27] RSP: 002b:00007ffedb54c370 EFLAGS: 00010202 [ 672.903180][ T27] RAX: 0000001b30424000 RBX: ffffffff81ea97c6 RCX: 0000001b30423ff8 [ 672.914108][ T27] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007fd4bff55700 [ 672.923275][ T27] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fd4bf412000 [ 672.934398][ T27] R10: 00007fd4bff55700 R11: 0000000000000000 R12: 00007fd4bf426038 [ 672.943288][ T27] R13: 0000000000000000 R14: ffffffff81ea9eac R15: 00007fd4bff55720 [ 672.958994][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 672.963800][ T27] ? lock_mnt_tree+0xb6/0x1b0 [ 672.972336][ T27] [ 672.977044][ T27] INFO: task syz.0.2696:11929 blocked for more than 146 seconds. [ 672.984817][ T27] Not tainted syzkaller #0 [ 672.992288][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.002578][ T27] task:syz.0.2696 state:D stack:26288 pid:11929 ppid:10940 flags:0x00004004 [ 673.014059][ T27] Call Trace: [ 673.018929][ T27] [ 673.021910][ T27] __schedule+0x107f/0x4030 [ 673.029082][ T27] ? mark_lock+0x94/0x320 [ 673.033484][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 673.040115][ T27] ? release_firmware_map_entry+0x187/0x187 [ 673.048303][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 673.057277][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 673.062509][ T27] schedule+0xb9/0x180 [ 673.071644][ T27] io_schedule+0x7c/0xd0 [ 673.078119][ T27] bit_wait_io+0xd/0xc0 [ 673.082330][ T27] __wait_on_bit+0x9b/0x2c0 [ 673.089213][ T27] ? bit_wait+0xc0/0xc0 [ 673.093397][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 673.100567][ T27] ? bit_wait+0xc0/0xc0 [ 673.104753][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 673.111987][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 673.118632][ T27] ? bit_waitqueue+0x30/0x30 [ 673.123250][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 673.131307][ T27] do_get_write_access+0x605/0xf20 [ 673.138144][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 673.144152][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 673.152709][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 673.161940][ T27] ? rcu_is_watching+0x11/0xa0 [ 673.169008][ T27] ext4_reserve_inode_write+0x201/0x290 [ 673.174759][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 673.184485][ T27] ext4_dirty_inode+0xbf/0x100 [ 673.192470][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 673.199849][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 673.204904][ T27] __file_update_time+0x21d/0x240 [ 673.219642][ T27] file_update_time+0x2f3/0x370 [ 673.224579][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 673.231255][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 673.240173][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 673.246860][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 673.252209][ T27] ? put_page+0x270/0x270 [ 673.261586][ T27] do_page_mkwrite+0x16b/0x5c0 [ 673.266688][ T27] handle_mm_fault+0x199c/0x3d40 [ 673.271646][ T27] ? mt_find+0x157/0x830 [ 673.279603][ T27] ? numa_migrate_prep+0x250/0x250 [ 673.284788][ T27] ? lock_chain_count+0x20/0x20 [ 673.293451][ T27] ? ktime_get+0x247/0x270 [ 673.302481][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 673.308005][ T27] do_user_addr_fault+0x58e/0xb20 [ 673.313062][ T27] exc_page_fault+0x60/0x100 [ 673.321213][ T27] asm_exc_page_fault+0x22/0x30 [ 673.326250][ T27] RIP: 0033:0x7f400dc72f32 [ 673.330700][ T27] RSP: 002b:00007ffd5124b320 EFLAGS: 00010202 [ 673.340826][ T27] RAX: 0000000000001008 RBX: 00007f400eb55720 RCX: 0000000000000000 [ 673.349022][ T27] RDX: 0000001b2fd23000 RSI: 0000000000000008 RDI: 00007f400eb55720 [ 673.362111][ T27] RBP: 00000000000003d1 R08: 00007f400e010000 R09: 00007f400e026038 [ 673.370530][ T27] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff83d146c5 [ 673.381936][ T27] R13: 00007f400e026038 R14: 00000000000001b0 R15: fffffffffffff000 [ 673.390249][ T27] ? fsnotify_perm+0x15/0x550 [ 673.395024][ T27] [ 673.404522][ T27] [ 673.404522][ T27] Showing all locks held in the system: [ 673.413392][ T27] 1 lock held by rcu_tasks_kthre/12: [ 673.422274][ T27] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 673.433077][ T27] 1 lock held by rcu_tasks_trace/13: [ 673.442201][ T27] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 673.454880][ T27] 1 lock held by khungtaskd/27: [ 673.464797][ T27] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 673.475058][ T27] 2 locks held by getty/4033: [ 673.483368][ T27] #0: ffff88823bc04098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 673.493459][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 673.510204][ T27] 3 locks held by syz-executor/4263: [ 673.517951][ T27] #0: ffff88802e3744d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 673.533727][ T27] #1: ffff88807faac558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 673.545332][ T27] #2: ffff88807fac8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 673.558859][ T27] 4 locks held by kworker/u4:8/4351: [ 673.568006][ T27] #0: ffff88801c679938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 673.580445][ T27] #1: ffffc9000480fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 673.594826][ T27] #2: ffff88807faac0e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 673.609207][ T27] #3: ffff88807faaec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 673.622828][ T27] 3 locks held by syz.6.2691/11914: [ 673.632535][ T27] #0: ffff88807a38f958 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 673.642958][ T27] #1: ffff88807faac558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 673.656458][ T27] #2: ffff88807fac8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 673.670000][ T27] 3 locks held by syz.5.2694/11920: [ 673.675222][ T27] #0: ffff88807a38cc58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 673.689564][ T27] #1: ffff88807faac558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 673.699623][ T27] #2: ffff88807fac8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 673.712931][ T27] 3 locks held by syz.3.2695/11924: [ 673.718372][ T27] #0: ffff88807a389f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 673.734788][ T27] #1: ffff88807faac558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 673.749407][ T27] #2: ffff88807fac8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 673.759390][ T27] 3 locks held by syz.0.2696/11929: [ 673.764600][ T27] #0: ffff88807a38b5d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 673.779947][ T27] #1: ffff88807faac558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 673.790011][ T27] #2: ffff88807fac8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 673.803665][ T27] [ 673.806510][ T27] ============================================= [ 673.806510][ T27] [ 673.815011][ T27] NMI backtrace for cpu 0 [ 673.819399][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 673.826603][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 673.836666][ T27] Call Trace: [ 673.839962][ T27] [ 673.842907][ T27] dump_stack_lvl+0x188/0x24e [ 673.847619][ T27] ? irq_work_queue+0xbf/0x140 [ 673.852485][ T27] ? show_regs_print_info+0x12/0x12 [ 673.857699][ T27] ? load_image+0x410/0x410 [ 673.862214][ T27] ? vprintk_emit+0x59f/0x6a0 [ 673.866942][ T27] ? printk_sprint+0x460/0x460 [ 673.871726][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 673.876680][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 673.882857][ T27] ? _printk+0xda/0x130 [ 673.887028][ T27] ? load_image+0x410/0x410 [ 673.891598][ T27] ? load_image+0x410/0x410 [ 673.896153][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 673.902236][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 673.908395][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 673.914392][ T27] watchdog+0xf0e/0xf50 [ 673.918613][ T27] ? watchdog+0x1ed/0xf50 [ 673.922961][ T27] kthread+0x29d/0x330 [ 673.927068][ T27] ? hungtask_pm_notify+0x40/0x40 [ 673.932214][ T27] ? kthread_blkcg+0xd0/0xd0 [ 673.936815][ T27] ret_from_fork+0x1f/0x30 [ 673.941270][ T27] [ 673.944361][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.964060][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 673.970945][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 673.978149][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 673.988208][ T27] Call Trace: [ 673.991507][ T27] [ 673.994464][ T27] dump_stack_lvl+0x188/0x24e [ 673.999151][ T27] ? memcpy+0x3c/0x60 [ 674.003211][ T27] ? show_regs_print_info+0x12/0x12 [ 674.008452][ T27] ? load_image+0x410/0x410 [ 674.012988][ T27] panic+0x2d3/0x710 [ 674.016934][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 674.022604][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 674.027123][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 674.032689][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 674.038854][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 674.045023][ T27] watchdog+0xf4d/0xf50 [ 674.049213][ T27] ? watchdog+0x1ed/0xf50 [ 674.053558][ T27] kthread+0x29d/0x330 [ 674.057632][ T27] ? hungtask_pm_notify+0x40/0x40 [ 674.062663][ T27] ? kthread_blkcg+0xd0/0xd0 [ 674.067260][ T27] ret_from_fork+0x1f/0x30 [ 674.071694][ T27] [ 674.074795][ T27] Kernel Offset: disabled [ 674.079132][ T27] Rebooting in 86400 seconds..