last executing test programs: 5m37.795167223s ago: executing program 0 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x40) 5m37.295307523s ago: executing program 0 (id=2504): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x101]}, 0x8, 0x0) 5m33.892155296s ago: executing program 0 (id=2522): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000400)={[{@discard}, {@zero_size_dir}, {@gid}, {@fmask={'fmask', 0x3d, 0x8}}, {}, {@umask={'umask', 0x3d, 0xc63}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}, 0x1, 0x1540, &(0x7f0000000880)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 5m32.984095716s ago: executing program 0 (id=2529): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000003240)={[{@utf8no}, {@fat=@errors_remount}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsH3ehmaOMnCNKCGFBqI+pCmNqJhoxJyMRIRGx3bv0cxaUrBfULdOPOvbgpguCmC3GkyUybpgHTapza/H9Q5u05886c4cyEdwYy2b75/EG56FlFu6FY0igmbWhHyuxGgbFgGWvHk+q2oQvTXz/8f/3W7Su5fH5x2Zil3MrFrDFm9sybR09enH3XmL7xcvZ1QluZO9tfsh+3/tn6d/v7Srj1qmSb1Wq1Ya+6jlkreWXLmGuuY3uOKVU8p94wXf1Ft1qrtYxdWZtJ1eqO5xm70jJlp2UaVdOot4x9zy5VjGVZZialURM/ckZhc3nZzg1lMIjCVL/Gej1nx/t2Fjb/xKAAAMDJElX9f7/kmZJnKtUD9f3h+j+mI9T/0kjX/8dVi3oAGKrd+j8VXL8HUf8DAAAAAAAAAAAAAAAAAAAAAPA32PH9tO/76XAZ/iUkJSWF/0c9TgwH8z/aur64l5TcZ81Cs9BZdvpzRZXkytH8hPStfT4EOvHS5fzivGnL6K27HuSvNwtxJcL8UKZ//kIn33Tnr2tCqe79Z5XWXP/8bJ/8ZmFS58/5iWDPjiyl9f6uqnK11j6v9/OfLhhz6Wq+J3+qvR4AAAAAAKeBZfYcun9v91smfG1IT3+ncf/5gNI/eT7Qc389rv/GoztuAAAAAABGiTepsu26Tt1rPT7tQfj7B79lg1LUh5McdOVxSUHLq5MyF4MEMUm9XROHWvoH8V+b5c/SwetiLvLpPnbgx/fO1U8PO1fAIOlRfioBAAAAGIaw6B+LeiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQd8iFq5/nJeQde0uHs1RAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDjwAAAP//5JwTUw==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 5m32.076880856s ago: executing program 0 (id=2535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 5m31.135461911s ago: executing program 0 (id=2539): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "acff3a528001727d85e098fbad002835"}]}, 0x1, [{0x92, &(0x7f0000000400)=@string={0x92, 0x3, "7fd0972090946c6c69da103bc17ed59e92e50e5e1f7486f98b8b8dd71ebba6f8e78e333f7b0c56ee94eff23a1a5b140ccb4e50caa2bcb3cb3ad38ec93c610d265ea469f1fc68f706589026574e1bea003a09c5a36e5ce980577bd986e9106925b7fdcbe1484a9da34bdac4147752ac282cf25c62b241ae967e3376d67d968519bef941f6278cd2c8c030aa6c0235dba8"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5m30.212290733s ago: executing program 32 (id=2539): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "acff3a528001727d85e098fbad002835"}]}, 0x1, [{0x92, &(0x7f0000000400)=@string={0x92, 0x3, "7fd0972090946c6c69da103bc17ed59e92e50e5e1f7486f98b8b8dd71ebba6f8e78e333f7b0c56ee94eff23a1a5b140ccb4e50caa2bcb3cb3ad38ec93c610d265ea469f1fc68f706589026574e1bea003a09c5a36e5ce980577bd986e9106925b7fdcbe1484a9da34bdac4147752ac282cf25c62b241ae967e3376d67d968519bef941f6278cd2c8c030aa6c0235dba8"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m22.137427845s ago: executing program 6 (id=3310): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0xf9, 0x9, 0xb, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x2, 0x20}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x9}, 0x2f2}}, [0x7, 0x2, 0x8005, 0x73, 0x4, 0x793, 0xc5, 0x8, 0x7, 0x4, 0x4000000000d, 0x100000001, 0x4, 0x6]}, &(0x7f0000000580)=0x100) 3m21.629163669s ago: executing program 6 (id=3316): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060005", 0x2f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201c576000000000000000003000001140018800800024000000009080001400000000904"], 0x2c}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3m20.875545205s ago: executing program 6 (id=3320): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)={[{@disable_ext_identify}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noextent_cache}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==") unshare(0x22020600) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x2042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x0, 0x40}) 3m16.469927887s ago: executing program 6 (id=3339): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00') 3m15.891746541s ago: executing program 6 (id=3343): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000140)='./bus\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="8f4736b51076d5d74a750e63866da0afc30a276a99021a54b372fc2403069bb07425d8836879cbdb96decbe1c63b034d9b54e90ba5ab", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0x22, 0x1521, &(0x7f0000001340)="$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") r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="000324000000e32731ab90"], 0x0, 0x0, 0x0, 0x0}) 3m14.364827074s ago: executing program 6 (id=3350): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m12.34086924s ago: executing program 33 (id=3350): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m5.192452043s ago: executing program 3 (id=3377): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) 3m2.383725122s ago: executing program 3 (id=3389): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r2, 0x0, 0x9, 0x232b23, 0x1, &(0x7f00000001c0)="a5"}) 3m1.954235786s ago: executing program 3 (id=3391): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="f6ae", 0x2}], 0x1}}], 0x2, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m1.639369303s ago: executing program 3 (id=3394): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x5002, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 3m1.256011108s ago: executing program 3 (id=3397): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x8, 0x4) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 2m55.113500153s ago: executing program 3 (id=3416): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m53.892792496s ago: executing program 34 (id=3416): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 17.645141965s ago: executing program 7 (id=4304): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500), 0x8) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 16.50950407s ago: executing program 1 (id=4311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r0) 16.12722251s ago: executing program 7 (id=4314): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$fb0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xff) 16.092589694s ago: executing program 1 (id=4315): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 15.61979857s ago: executing program 7 (id=4318): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)='-1', 0x2}], 0x1, 0x4, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="276d143a490e2f07d28cb43574ee7bcc6b995de60c850d63bb8e648006f77c323cb73812fa00bfa70b1d34e15d3795544078e2b93ef21a0cee", 0x39}], 0x1, 0x13c, 0xdec) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 15.611229071s ago: executing program 1 (id=4319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x0, 0x2, 0x40000000b4, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x73e9}) 15.564998099s ago: executing program 4 (id=4320): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r1, &(0x7f0000000680)="6ee3", &(0x7f0000000740)=""/1}, 0x20) 15.267651334s ago: executing program 8 (id=4322): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 15.239905249s ago: executing program 1 (id=4323): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e25, 0x3, @empty, 0x3}}, 0x8002, 0x402}, &(0x7f0000000480)=0x90) 15.226429086s ago: executing program 4 (id=4324): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0xb0, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0xc91}, 0x0) 15.152615297s ago: executing program 7 (id=4325): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.856684477s ago: executing program 1 (id=4326): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 14.831296869s ago: executing program 4 (id=4327): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xc3, {}, 0x1010000, 0x0, 0x4, 0x0, 0x1b, '\x04nodev{%voo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00+\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) 14.719865641s ago: executing program 5 (id=4328): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 14.616926609s ago: executing program 8 (id=4330): r0 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) 14.208886366s ago: executing program 4 (id=4331): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb) write(r0, &(0x7f0000000600)='tcpci 0x51\n\x00', 0xb) 14.207704088s ago: executing program 5 (id=4332): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x800000000000000, 0x3}) close_range(r2, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 14.115501649s ago: executing program 1 (id=4333): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303039303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1bb9ec930dabfc165907d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31c0971007f269f873e14e5fe3c46c0ac2b22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b98ade053b2f9b7918"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 14.045458087s ago: executing program 2 (id=4334): r0 = timerfd_create(0x1, 0x0) r1 = syz_io_uring_setup(0x7e72, &(0x7f0000000340)={0x0, 0xa723, 0x10000, 0x1, 0xc7}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13.836809637s ago: executing program 8 (id=4335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 13.738598173s ago: executing program 5 (id=4336): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x86) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb, 0x0, 0x401}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x44d4, 0x32}, 0x2, @in=@multicast1, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 13.545531972s ago: executing program 2 (id=4337): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 13.416876024s ago: executing program 8 (id=4338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r0, 0x8, 0x4000, 0x4000) 13.348715158s ago: executing program 5 (id=4339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000740)='E', 0x1, 0x4fed3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13.274868208s ago: executing program 7 (id=4340): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0xc2f, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x15f}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 13.144813529s ago: executing program 2 (id=4341): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 13.057271829s ago: executing program 4 (id=4342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 12.790099334s ago: executing program 2 (id=4343): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e50, &(0x7f0000000080)={[{@abort}, {@noinit_itable}, {@grpquota}, {@user_xattr}, {@auto_da_alloc}, {@inlinecrypt}], [{@flag='async'}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 12.379028174s ago: executing program 8 (id=4344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12.373432521s ago: executing program 7 (id=4345): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmmsg$sock(r0, &(0x7f0000002540)=[{{&(0x7f00000001c0)=@ll={0x11, 0x19, 0x0, 0x1, 0x7}, 0x80, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 12.325048506s ago: executing program 2 (id=4346): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) 12.172193676s ago: executing program 5 (id=4347): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) 11.803452076s ago: executing program 4 (id=4348): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x9, 0x802000003) 11.786318603s ago: executing program 2 (id=4349): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 11.580545438s ago: executing program 8 (id=4350): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e1e, 0x101, @loopback, 0x9}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r0, 0x0) 0s ago: executing program 5 (id=4351): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x70}, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): 003:0458:0153.000F: unknown main item tag 0x0 [ 532.484203][T12858] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 532.522142][T12858] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 532.568984][T12858] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 532.631763][T12858] kye 0003:0458:0153.000F: item fetching failed at offset 39/40 [ 532.715508][T12858] kye 0003:0458:0153.000F: parse failed [ 532.782320][T12858] kye 0003:0458:0153.000F: probe with driver kye failed with error -22 [ 532.907419][T12858] usb 2-1: USB disconnect, device number 19 [ 533.275389][T14398] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 533.432445][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3305'. [ 533.558936][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3305'. [ 533.841440][T14407] loop5: detected capacity change from 0 to 512 [ 533.910415][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 533.931229][T14407] EXT4-fs: Ignoring removed nobh option [ 534.073726][T14407] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 534.151513][T14407] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 534.199557][T14419] loop2: detected capacity change from 0 to 512 [ 534.242394][T14407] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.3311: inode has both inline data and extents flags [ 534.313732][T14419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.348146][T14423] netlink: 762 bytes leftover after parsing attributes in process `syz.6.3316'. [ 534.371267][T14407] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 534.373902][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 534.389614][ C0] EXT4-fs (loop5): initial error at time 1785335357: ext4_orphan_get:1399: inode 13 [ 534.399031][ C0] EXT4-fs (loop5): last error at time 1785335357: ext4_orphan_get:1399: inode 13 [ 534.417431][T14407] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3311: couldn't read orphan inode 13 (err -117) [ 534.651155][T14425] loop3: detected capacity change from 0 to 32768 [ 534.672323][T14425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3317 (14425) [ 534.689585][T14425] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 534.699724][T14425] BTRFS info (device loop3): using sha256 checksum algorithm [ 534.719183][T14419] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.762526][T14407] loop5: lost filesystem error report for type 5 error -117 [ 534.771700][T14407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.933167][T14425] BTRFS info (device loop3): enabling ssd optimizations [ 534.940203][T14425] BTRFS info (device loop3): turning on sync discard [ 534.947282][T14425] BTRFS info (device loop3): enabling free space tree [ 535.431122][T14443] loop1: detected capacity change from 0 to 65536 [ 535.487281][ T30] audit: type=1800 audit(1785335358.446:250): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3317" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 535.510846][T14425] BTRFS error (device loop3): unable to set label with more than 255 bytes [ 535.542516][T14407] EXT4-fs (loop5): shut down requested (2) [ 535.554712][T14443] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 535.625962][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.654191][T14443] XFS (loop1): Ending clean mount [ 535.669764][T14443] XFS (loop1): Quotacheck needed: Please wait. [ 535.741164][T14454] Invalid argument reading file caps for ./file0 [ 535.928978][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.083442][T14443] XFS (loop1): Quotacheck: Done. [ 536.382615][ T5623] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 536.434813][ T5624] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 536.781395][T14465] loop2: detected capacity change from 0 to 512 [ 536.975794][T14465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.507257][T14465] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.318432][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.764811][T14488] loop4: detected capacity change from 0 to 512 [ 539.332445][T14488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.673119][T14488] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.270592][T14487] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 540.447903][T14487] EXT4-fs: can't change dax mount option while remounting [ 540.494523][T14483] loop3: detected capacity change from 0 to 32768 [ 540.639249][T14483] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 541.086594][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.301706][T14517] wlan0 speed is unknown, defaulting to 1000 [ 541.765421][T14524] loop5: detected capacity change from 0 to 32768 [ 541.834259][T14524] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 541.842434][T14524] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 541.869876][T14524] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 541.919303][T12858] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 541.929649][ T5623] ocfs2: Unmounting device (7,3) on (node local) [ 542.029956][T12858] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 542.541767][T14520] wlan0 speed is unknown, defaulting to 1000 [ 542.743091][T12858] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 713ms [ 542.827302][T12858] gfs2: fsid=syz:syz.0: jid=0: Done [ 542.865074][T14524] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 542.930278][T14524] gfs2: fsid=syz:syz.0: found 1 quota changes [ 543.152652][T14531] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0 [ 543.249402][T14531] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 543.319268][ T7932] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.346007][T14531] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 543.407890][T14531] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 543.419025][T14531] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 543.450825][ T7932] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.526179][T14531] gfs2: fsid=syz:syz.0: gfs2_quotad: sync error -5 [ 543.683219][ T5626] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 543.819736][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 543.819770][ T5626] Tainted: [L]=SOFTLOCKUP [ 543.819778][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.819789][ T5626] Call Trace: [ 543.819798][ T5626] [ 543.819807][ T5626] dump_stack_lvl+0xe8/0x150 [ 543.819841][ T5626] gfs2_assert_warn_i+0x18c/0x2c0 [ 543.819870][ T5626] gfs2_qd_dispose+0x444/0x540 [ 543.819904][ T5626] gfs2_quota_cleanup+0x42d/0x770 [ 543.819936][ T5626] ? __pfx_gfs2_quota_cleanup+0x10/0x10 [ 543.819965][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.819990][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.820016][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.820046][ T5626] gfs2_make_fs_ro+0x2a0/0x320 [ 543.820073][ T5626] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 543.820098][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.820124][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.820147][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 543.820169][ T5626] ? flush_work+0xd/0x30 [ 543.820198][ T5626] gfs2_put_super+0x235/0x870 [ 543.820229][ T5626] ? __pfx_gfs2_put_super+0x10/0x10 [ 543.820254][ T5626] generic_shutdown_super+0x13d/0x2d0 [ 543.820287][ T5626] kill_block_super+0x44/0x90 [ 543.820308][ T5626] deactivate_locked_super+0xbc/0x130 [ 543.820338][ T5626] cleanup_mnt+0x3d3/0x460 [ 543.820362][ T5626] task_work_run+0x1d9/0x270 [ 543.820384][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 543.820412][ T5626] exit_to_user_mode_loop+0x1fa/0x730 [ 543.820440][ T5626] ? rcu_is_watching+0x15/0xb0 [ 543.820460][ T5626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.820481][ T5626] do_syscall_64+0x353/0x580 [ 543.820503][ T5626] ? trace_irq_disable+0x3b/0x140 [ 543.820534][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.820553][ T5626] RIP: 0033:0x7fb25119f0d7 [ 543.820571][ T5626] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 543.820588][ T5626] RSP: 002b:00007ffe6bad5288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 543.820607][ T5626] RAX: 0000000000000000 RBX: 00007fb25123330a RCX: 00007fb25119f0d7 [ 543.820620][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6bad5340 [ 543.820632][ T5626] RBP: 00007ffe6bad5340 R08: 00007ffe6bad6340 R09: 00000000ffffffff [ 543.820646][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6bad63d0 [ 543.820658][ T5626] R13: 00007fb25123330a R14: 0000000000084985 R15: 00007ffe6bad6410 [ 543.820688][ T5626] [ 544.100989][T14539] loop3: detected capacity change from 0 to 128 [ 544.391533][T14539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.410477][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.431418][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.440145][T14539] ext4 filesystem being mounted at /583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 544.474188][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.485578][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.497617][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 545.473192][T14540] wlan0 speed is unknown, defaulting to 1000 [ 545.629912][ T5623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.586351][ T7932] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.638262][ T5640] Bluetooth: hci2: command tx timeout [ 546.666558][ T7932] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.071169][T14567] xt_hashlimit: size too large, truncated to 1048576 [ 547.084395][ T10] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 547.266006][ T7932] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.314029][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 547.356785][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 547.367778][ T7932] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.418873][ T10] usb 6-1: can't read configurations, error -71 [ 547.888171][ T7932] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.972454][ T7932] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.704310][ T5640] Bluetooth: hci2: command tx timeout [ 548.823759][T14587] loop2: detected capacity change from 0 to 2048 [ 548.973530][T14587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.099614][T14587] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.450401][T14601] loop4: detected capacity change from 0 to 2048 [ 549.511256][T14599] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 549.526522][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.753544][T14601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.784395][ T5640] Bluetooth: hci2: command tx timeout [ 551.037244][ T7932] bridge_slave_1: left allmulticast mode [ 551.086099][ T7932] bridge_slave_1: left promiscuous mode [ 551.145552][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.219586][ T7932] bridge_slave_0: left allmulticast mode [ 551.261854][ T7932] bridge_slave_0: left promiscuous mode [ 551.333467][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.865064][T14641] loop1: detected capacity change from 0 to 128 [ 552.105773][T14641] syz.1.3383: attempt to access beyond end of device [ 552.105773][T14641] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 552.178608][T14641] syz.1.3383: attempt to access beyond end of device [ 552.178608][T14641] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 552.756847][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.804612][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.847902][ T7932] bond0 (unregistering): Released all slaves [ 552.864882][ T5640] Bluetooth: hci2: command tx timeout [ 553.020375][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 553.177669][T14654] binder: 14653:14654 ioctl c0306201 200000001a80 returned -14 [ 553.629012][T14540] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.729466][T14540] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.821833][T14540] bridge_slave_0: entered allmulticast mode [ 553.890032][T14540] bridge_slave_0: entered promiscuous mode [ 553.964451][ T5760] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 554.109053][T14540] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.172393][T14540] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.182475][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 554.230743][T14540] bridge_slave_1: entered allmulticast mode [ 554.244012][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.303663][T14540] bridge_slave_1: entered promiscuous mode [ 554.320291][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.450007][ T5760] usb 5-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 554.517925][ T5760] usb 5-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 554.595493][ T5760] usb 5-1: Product: syz [ 554.647359][ T5760] usb 5-1: Manufacturer: syz [ 554.673227][T14540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.741696][ T5760] usb 5-1: config 0 descriptor?? [ 554.796598][T14540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.925989][ T7932] hsr_slave_0: left promiscuous mode [ 554.986346][ T7932] hsr_slave_1: left promiscuous mode [ 555.016827][T14686] loop2: detected capacity change from 0 to 512 [ 555.030494][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.093246][T14686] EXT4-fs: old and new quota format mixing [ 555.101380][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.171377][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.236621][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.407513][ T7932] veth1_macvtap: left promiscuous mode [ 555.457244][ T7932] veth0_macvtap: left promiscuous mode [ 555.511043][ T7932] veth1_vlan: left promiscuous mode [ 555.552285][ T7932] veth0_vlan: left promiscuous mode [ 555.592876][ T5760] hid-generic 0003:25DD:F3D2.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 555.794782][ T5760] usb 5-1: USB disconnect, device number 20 [ 556.626888][T14705] fido_id[14705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 558.443338][ T7932] team0 (unregistering): Port device team_slave_1 removed [ 558.681493][ T7932] team0 (unregistering): Port device team_slave_0 removed [ 559.009415][T14719] loop5: detected capacity change from 0 to 40427 [ 559.089976][T14719] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 559.124922][T14719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 559.179939][T14719] F2FS-fs (loop5): invalid crc value [ 559.528050][T14745] loop2: detected capacity change from 0 to 256 [ 559.618975][T14745] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 559.731547][T14719] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 559.863580][ T30] audit: type=1800 audit(1785335382.826:251): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3413" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048819 res=0 errno=0 [ 560.011003][T14719] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 560.055923][T14719] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 560.379979][T14749] loop2: detected capacity change from 0 to 512 [ 560.441702][T14749] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3414: inode has both inline data and extents flags [ 560.491799][T14749] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 560.492123][T14749] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3414: couldn't read orphan inode 15 (err -117) [ 560.501398][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 560.501421][ C0] EXT4-fs (loop2): initial error at time 1785335383: ext4_orphan_get:1399: inode 15 [ 560.501455][ C0] EXT4-fs (loop2): last error at time 1785335383: ext4_orphan_get:1399: inode 15 [ 560.724415][T14749] loop2: lost filesystem error report for type 5 error -117 [ 560.741314][T14749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.799971][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 561.044892][T14540] team0: Port device team_slave_0 added [ 561.114222][T14540] team0: Port device team_slave_1 added [ 561.130696][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.419016][T14540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.492018][T14540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.669213][T14540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.755316][T14540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.788524][T14540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.993713][T14540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.036165][T14765] loop4: detected capacity change from 0 to 128 [ 562.109544][T14765] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 562.314475][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.327285][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.652677][T14540] hsr_slave_0: entered promiscuous mode [ 562.716830][T14540] hsr_slave_1: entered promiscuous mode [ 562.798857][T14540] debugfs: 'hsr0' already exists in 'hsr' [ 562.881983][T14540] Cannot create hsr debugfs directory [ 562.901049][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 562.917759][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 562.925820][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 562.950954][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 562.977539][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.284259][T14786] loop1: detected capacity change from 0 to 512 [ 563.359230][T14786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 563.424303][T14790] loop5: detected capacity change from 0 to 512 [ 563.488024][T14786] EXT4-fs (loop1): 1 truncate cleaned up [ 563.545346][T14790] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 563.592393][T14786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.644597][T14790] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.3426: corrupted in-inode xattr: e_value size too large [ 563.799794][T14790] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 563.801196][T14790] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3426: couldn't read orphan inode 15 (err -117) [ 563.810418][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 563.810437][ C0] EXT4-fs (loop5): initial error at time 1785335386: ext4_iget_extra_inode:5180: inode 15 [ 563.810470][ C0] EXT4-fs (loop5): last error at time 1785335386: ext4_iget_extra_inode:5180: inode 15 [ 564.160193][T14790] loop5: lost filesystem error report for type 5 error -117 [ 564.168230][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.197869][T14790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.272959][ T7932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.417306][T14790] EXT4-fs error (device loop5): ext4_check_dx_root:2201: inode #2: comm syz.5.3426: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 564.810338][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.933083][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 565.025274][ T5642] Bluetooth: hci4: command tx timeout [ 565.365344][ T7932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.220601][ T7932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.473725][T14805] loop1: detected capacity change from 0 to 32768 [ 566.556571][T14838] loop4: detected capacity change from 0 to 256 [ 566.622062][T14838] exfat: Deprecated parameter 'namecase' [ 566.746118][T14805] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 566.778560][T14838] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 567.018470][T14805] XFS (loop1): Ending clean mount [ 567.104642][ T5642] Bluetooth: hci4: command tx timeout [ 567.148602][ T30] audit: type=1800 audit(1785335390.116:252): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3440" name="file2" dev="loop4" ino=1048820 res=0 errno=0 [ 567.227097][ T7932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.683379][ T5624] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 568.798866][T14775] wlan0 speed is unknown, defaulting to 1000 [ 569.185123][ T5642] Bluetooth: hci4: command tx timeout [ 571.264491][ T5642] Bluetooth: hci4: command tx timeout [ 572.258579][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 573.080212][T14901] netlink: 'syz.4.3455': attribute type 7 has an invalid length. [ 573.118734][T14906] coredump: 1435(syz.1.3457): Core dump to core aborted: cannot preserve file permissions [ 573.142465][T14901] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3455'. [ 573.205426][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3455'. [ 573.511754][T14540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 573.651226][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.695852][T14540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 573.770502][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.932327][T14540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 574.048454][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.093762][T14540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 574.158480][T14918] loop4: detected capacity change from 0 to 4096 [ 574.171979][T14540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.208562][T14918] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 574.344974][ T7932] bridge_slave_1: left allmulticast mode [ 574.435616][ T7932] bridge_slave_1: left promiscuous mode [ 574.487151][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.559189][ T7932] bridge_slave_0: left allmulticast mode [ 574.599422][ T7932] bridge_slave_0: left promiscuous mode [ 574.636765][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.901103][ T30] audit: type=1800 audit(1785335397.866:253): pid=14918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3461" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 575.200585][ T7946] ntfs3(loop4): ino=1e, ni_find_attr [ 576.067802][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.129569][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.180294][ T7932] bond0 (unregistering): Released all slaves [ 576.653470][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.660653][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.766973][ T7932] tipc: Disabling bearer [ 576.802652][ T7932] tipc: Left network mode [ 576.880356][ T9] wlan0 speed is unknown, defaulting to 1000 [ 576.930830][T14971] loop1: detected capacity change from 0 to 128 [ 576.996232][T14973] overlayfs: failed to clone upperpath [ 577.081122][T14971] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 577.221988][T14971] hpfs: filesystem error: improperly stopped [ 577.277674][T14971] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 577.378838][T14971] hpfs: You really don't want any checks? You are crazy... [ 577.442148][T14971] hpfs: Code page index out of array [ 577.487386][T14971] hpfs: code page support is disabled [ 577.529832][T14971] hpfs: hpfs_map_4sectors(): unaligned read [ 577.578659][T14971] hpfs: hpfs_map_4sectors(): unaligned read [ 577.631330][T14971] hpfs: filesystem error: unable to find root dir [ 577.961701][T14971] hpfs: hpfs_map_4sectors(): unaligned read [ 579.006718][T15014] input: syz1 as /devices/virtual/input/input23 [ 579.083046][ T7932] hsr_slave_0: left promiscuous mode [ 579.168305][ T7932] hsr_slave_1: left promiscuous mode [ 579.231026][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.319481][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.431750][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.496208][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.551358][ T7932] batman_adv: batadv0: Removing interface: vlan2 [ 579.589934][ T5760] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 579.652195][ T7932] batman_adv: batadv0: Removing interface: vlan3 [ 579.800322][ T5760] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.846074][ T7932] veth1_macvtap: left promiscuous mode [ 579.871955][ T5760] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 579.900655][ T7932] veth0_macvtap: left promiscuous mode [ 579.941463][ T7932] veth1_vlan: left promiscuous mode [ 579.963048][ T5760] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.009439][ T7932] veth0_vlan: left promiscuous mode [ 580.031877][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.063747][T15034] loop4: detected capacity change from 0 to 8 [ 580.109154][T15021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 580.237538][ T5760] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.617906][ T5760] usb 6-1: USB disconnect, device number 13 [ 581.739412][ T30] audit: type=1326 audit(1785335404.706:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 581.915901][ T30] audit: type=1326 audit(1785335404.736:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 582.105751][ T30] audit: type=1326 audit(1785335404.746:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 582.283677][ T30] audit: type=1326 audit(1785335404.746:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 582.448580][ T30] audit: type=1326 audit(1785335404.746:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 582.621528][ T30] audit: type=1326 audit(1785335404.746:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 582.779278][ T30] audit: type=1326 audit(1785335404.756:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 582.912708][ T7932] team0 (unregistering): Port device team_slave_1 removed [ 582.933761][ T30] audit: type=1326 audit(1785335404.766:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 583.053091][ T7932] team0 (unregistering): Port device team_slave_0 removed [ 583.086583][ T30] audit: type=1326 audit(1785335404.766:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f71a919de99 code=0x7ffc0000 [ 583.128801][T15078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3511'. [ 583.191425][ T30] audit: type=1326 audit(1785335404.766:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71a919de99 code=0x0 [ 583.676639][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 583.990847][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.017908][T15090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 584.024677][T15090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.069854][T15093] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 584.076420][T15093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 584.198968][T15090] vhci_hcd vhci_hcd.0: Device attached [ 584.276736][T15096] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 584.283279][T15096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.452107][ T10] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 584.552335][T15093] vhci_hcd vhci_hcd.0: Device attached [ 584.590479][T15102] loop1: detected capacity change from 0 to 4096 [ 584.670805][T15096] vhci_hcd vhci_hcd.0: Device attached [ 584.690248][T15102] EXT4-fs: inline encryption not supported [ 584.736349][T15108] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(5) [ 584.742863][T15108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.801233][T15102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 584.848236][T14775] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.871199][T15102] EXT4-fs (loop1): Test dummy encryption mode enabled [ 584.907433][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.928503][T15106] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 584.935159][T15106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.969313][T15102] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 584.980626][T14775] bridge_slave_0: entered allmulticast mode [ 585.035948][T14775] bridge_slave_0: entered promiscuous mode [ 585.050055][T15102] System zones: 0-5 [ 585.110072][T14540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.117517][T15108] vhci_hcd vhci_hcd.0: Device attached [ 585.123135][T15097] vhci_hcd: connection closed [ 585.128254][T15091] vhci_hcd: connection reset by peer [ 585.146386][T15102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.160006][T15094] vhci_hcd: connection closed [ 585.196350][T15109] vhci_hcd: connection closed [ 585.226923][T15106] vhci_hcd vhci_hcd.0: Device attached [ 585.243356][T15113] vhci_hcd: connection closed [ 585.263488][T14775] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.306485][ T7946] vhci_hcd vhci_hcd.2: stop threads [ 585.360485][ T7946] vhci_hcd vhci_hcd.2: release socket [ 585.368525][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.437480][T14775] bridge_slave_1: entered allmulticast mode [ 585.455890][ T7946] vhci_hcd vhci_hcd.2: disconnect device [ 585.495437][T14775] bridge_slave_1: entered promiscuous mode [ 585.501616][ T7946] vhci_hcd vhci_hcd.2: stop threads [ 585.531901][ T7946] vhci_hcd vhci_hcd.2: release socket [ 585.603204][ T7946] vhci_hcd vhci_hcd.2: disconnect device [ 585.626205][T14540] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.659431][ T7946] vhci_hcd vhci_hcd.2: stop threads [ 585.673130][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.703333][ T7946] vhci_hcd vhci_hcd.2: release socket [ 585.773430][ T7946] vhci_hcd vhci_hcd.2: disconnect device [ 585.793451][T15088] loop4: detected capacity change from 0 to 32768 [ 585.828975][ T7946] vhci_hcd vhci_hcd.2: stop threads [ 585.880939][ T7946] vhci_hcd vhci_hcd.2: release socket [ 585.950410][T15088] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 585.964267][ T7946] vhci_hcd vhci_hcd.2: disconnect device [ 586.006625][T14775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.033611][ T7946] vhci_hcd vhci_hcd.2: stop threads [ 586.081345][ T7946] vhci_hcd vhci_hcd.2: release socket [ 586.186938][ T7946] vhci_hcd vhci_hcd.2: disconnect device [ 586.207917][T14775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.266986][T15088] XFS (loop4): Ending clean mount [ 586.341796][T15137] loop5: detected capacity change from 0 to 128 [ 586.448175][T15137] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 586.510212][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.517447][ T7947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.640349][T15137] hpfs: filesystem error: improperly stopped [ 586.684381][T15137] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 586.760115][T14775] team0: Port device team_slave_0 added [ 586.770723][T15137] hpfs: You really don't want any checks? You are crazy... [ 586.812295][ T5625] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 586.830041][T15137] hpfs: hpfs_map_sector(): read error [ 586.874716][T15137] hpfs: code page support is disabled [ 586.897505][T14775] team0: Port device team_slave_1 added [ 586.934917][T15137] hpfs: hpfs_map_4sectors(): unaligned read [ 586.978368][T15137] hpfs: hpfs_map_4sectors(): unaligned read [ 587.021374][T15137] hpfs: filesystem error: unable to find root dir [ 587.075352][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.082525][ T7947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.147146][T15137] hpfs: hpfs_map_4sectors(): unaligned read [ 587.216705][T15137] hpfs: hpfs_map_sector(): read error [ 587.250392][T15138] wlan0 speed is unknown, defaulting to 1000 [ 587.528666][T15148] macvtap1: entered promiscuous mode [ 587.863262][T14775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.919986][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.057188][T14775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.261041][T14775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.323762][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.413187][T15160] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3529'. [ 588.515633][T14775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.446480][ T5760] hid_parser_main: 7 callbacks suppressed [ 589.446503][ T5760] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 589.597206][ T5760] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 589.610876][T14775] hsr_slave_0: entered promiscuous mode [ 589.652697][T14775] hsr_slave_1: entered promiscuous mode [ 589.671553][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 589.720020][T14775] debugfs: 'hsr0' already exists in 'hsr' [ 589.762554][T14775] Cannot create hsr debugfs directory [ 589.815254][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 590.404974][ T5898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 590.629220][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 590.678507][ T5898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 590.719066][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.780017][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.856016][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.947234][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.078611][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 591.164510][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.647371][ T5898] usb 5-1: usb_control_msg returned -32 [ 591.696076][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 592.082319][T15216] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 592.355852][ T5898] usb 5-1: USB disconnect, device number 21 [ 593.798412][T14775] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 593.881499][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.926614][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 593.957805][T15256] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 593.967179][ T5898] IPVS: starting estimator thread 0... [ 593.979909][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3555'. [ 594.008793][T14775] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 594.068505][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 594.126478][T14775] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 594.135562][T15258] IPVS: using max 31 ests per chain, 74400 per kthread [ 594.228389][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 594.276725][T14540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.315735][T15262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.417086][T14775] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 594.592918][T14775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.206773][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 595.417397][T14775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.581869][T14775] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.728652][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.735857][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.902727][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.910054][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.531560][T14540] veth0_vlan: entered promiscuous mode [ 596.703429][T14540] veth1_vlan: entered promiscuous mode [ 597.013064][T14540] veth0_macvtap: entered promiscuous mode [ 597.142227][T14540] veth1_macvtap: entered promiscuous mode [ 597.201673][T15295] loop1: detected capacity change from 0 to 32768 [ 597.292189][T15295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3564 (15295) [ 597.375330][T14540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.452429][T15295] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 597.574505][T15295] BTRFS info (device loop1): using crc32c checksum algorithm [ 597.582986][T14540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.835741][ T7902] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.935910][ T7902] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.001197][T15295] BTRFS info (device loop1): setting nodatasum [ 598.058211][ T7902] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.080620][T15295] BTRFS info (device loop1): enabling ssd optimizations [ 598.128188][T15295] BTRFS info (device loop1): disabling tree log [ 598.139220][ T7902] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.199812][T15295] BTRFS info (device loop1): turning on sync discard [ 598.261207][T15295] BTRFS info (device loop1): enabling free space tree [ 598.339672][T15295] BTRFS info (device loop1): max_inline set to 0 [ 598.739153][ T5624] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 598.892143][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 599.062586][ T7902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.100263][T15365] wlan0 speed is unknown, defaulting to 1000 [ 599.175644][ T7902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.472593][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3584'. [ 599.612259][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3584'. [ 599.908537][ T7912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.986258][ T7912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.689594][T15393] loop1: detected capacity change from 0 to 512 [ 600.777761][T14775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.821413][T15393] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 600.862897][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.978418][T15393] EXT4-fs (loop1): 1 truncate cleaned up [ 601.068024][T15393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.687638][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.464668][T14775] veth0_vlan: entered promiscuous mode [ 603.510205][T15440] loop5: detected capacity change from 0 to 512 [ 603.567018][T14775] veth1_vlan: entered promiscuous mode [ 603.818074][T15410] loop4: detected capacity change from 0 to 32768 [ 603.930886][T14775] veth0_macvtap: entered promiscuous mode [ 603.955963][T15410] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 604.053286][T14775] veth1_macvtap: entered promiscuous mode [ 604.071407][T15410] JBD2: Ignoring recovery information on journal [ 604.318119][T15410] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 604.354002][T14775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.511887][T14775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.634731][ T7932] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.684831][ T7932] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.741150][ T7932] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.790476][ T7932] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.337321][ T5625] ocfs2: Unmounting device (7,4) on (node local) [ 605.507592][ T7946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.613947][ T7946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.961927][T15473] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3609'. [ 606.065563][T15473] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 606.210261][ T7912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.293319][ T7912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.520419][T15479] loop5: detected capacity change from 0 to 2048 [ 606.692708][T15479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.839088][T15479] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 607.027238][T15479] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 607.120675][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3615'. [ 607.151929][T15479] EXT4-fs (loop5): This should not happen!! Data will be lost [ 607.151929][T15479] [ 607.252758][T15479] EXT4-fs (loop5): Total free blocks count 0 [ 607.336127][T15479] EXT4-fs (loop5): Free/Dirty block details [ 607.387452][T15479] EXT4-fs (loop5): free_blocks=4096 [ 607.450532][T15479] EXT4-fs (loop5): dirty_blocks=48 [ 607.511064][T15479] EXT4-fs (loop5): Block reservation details [ 607.576648][T15479] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 607.601768][T15499] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 607.677451][T12858] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 607.780698][T15499] bond1 (unregistering): Released all slaves [ 607.850531][ T7946] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 607.930661][T12858] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 607.996574][T15479] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz.5.3611: data will be lost [ 608.033447][T12858] usb 9-1: config 0 interface 0 has no altsetting 0 [ 608.080348][T12858] usb 9-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 608.167580][T12858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.282035][T12858] usb 9-1: config 0 descriptor?? [ 608.347100][T15503] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 609.038467][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.119263][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.206325][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.275019][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.350160][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.413683][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.489636][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.569051][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.645198][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.721045][T12858] razer 0003:1532:010D.0012: unknown main item tag 0x0 [ 609.867543][T15543] loop5: detected capacity change from 0 to 512 [ 609.879807][T12858] razer 0003:1532:010D.0012: failed to enable macro keys: -71 [ 610.179710][T15543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.215940][T12858] razer 0003:1532:010D.0012: hidraw0: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.8-1/input0 [ 610.229940][T15555] loop8: detected capacity change from 0 to 512 [ 610.291488][T15555] EXT4-fs: Ignoring removed orlov option [ 610.341527][T15543] ext4 filesystem being mounted at /603/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 610.403597][T15555] EXT4-fs: Ignoring removed mblk_io_submit option [ 610.423016][T12858] usb 9-1: USB disconnect, device number 2 [ 610.600336][T15555] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.3632: corrupted in-inode xattr: e_value size too large [ 610.801587][T15555] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 610.803856][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 610.819439][ C0] EXT4-fs (loop8): initial error at time 1785335433: ext4_iget_extra_inode:5180: inode 15 [ 610.829363][ C0] EXT4-fs (loop8): last error at time 1785335433: ext4_iget_extra_inode:5180: inode 15 [ 610.857951][T15555] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3632: couldn't read orphan inode 15 (err -117) [ 611.001028][T15555] loop8: lost filesystem error report for type 5 error -117 [ 611.022303][T15555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.060600][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.291666][T15566] fido_id[15566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 611.563265][T15573] wlan0 speed is unknown, defaulting to 1000 [ 611.669027][T15585] loop5: detected capacity change from 0 to 1024 [ 611.692145][T15555] EXT4-fs error (device loop8): ext4_check_dx_root:2201: inode #2: comm syz.8.3632: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 611.830902][T15585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 611.945789][T15585] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.069031][T14775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.123745][T15583] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.3640: lblock 0 mapped to illegal pblock 0 (length 1) [ 612.233916][ T5760] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 612.320765][T15583] EXT4-fs (loop5): Remounting filesystem read-only [ 612.447135][ T5760] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 612.487289][ T5760] usb 5-1: config 0 has no interface number 0 [ 612.547227][ T5760] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 612.622964][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.658678][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 612.680872][ T5760] usb 5-1: Product: syz [ 612.707523][ T5760] usb 5-1: Manufacturer: syz [ 612.766251][ T5760] usb 5-1: SerialNumber: syz [ 612.811605][ T5760] usb 5-1: config 0 descriptor?? [ 613.530976][T15608] wlan0 speed is unknown, defaulting to 1000 [ 613.570682][ T5760] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 613.661014][ T5760] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 613.760655][ T5760] asix 5-1:0.251: probe with driver asix failed with error -71 [ 613.865824][ T5760] usb 5-1: USB disconnect, device number 22 [ 615.821984][T15611] wlan0 speed is unknown, defaulting to 1000 [ 617.537765][T15665] IPVS: nq: FWM 3 0x00000003 - no destination available [ 617.547378][ T5760] IPVS: starting estimator thread 0... [ 617.696352][T15667] IPVS: using max 35 ests per chain, 84000 per kthread [ 618.614272][ T5822] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 618.824062][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 618.875282][ T5822] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 618.963741][ T5822] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 619.039574][ T5822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 619.125393][ T5822] usb 6-1: config 1 has no interface number 0 [ 619.181484][ T5822] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.228347][T12858] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 619.292075][ T5822] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 619.410581][ T5822] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 619.466838][T12858] usb 3-1: Using ep0 maxpacket: 16 [ 619.493119][T15692] loop4: detected capacity change from 0 to 256 [ 619.509949][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.534517][T12858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.572986][T15692] vfat: Unknown parameter '"T׺N)Afuni_xlate' [ 619.612886][T12858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.650086][ T5822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 619.722909][T12858] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 619.839985][ T5822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 619.882312][T12858] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.019674][T12858] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 620.153245][T12858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.240293][T12858] usb 3-1: Product: syz [ 620.273147][T12858] usb 3-1: Manufacturer: syz [ 620.323574][T12858] usb 3-1: SerialNumber: syz [ 620.416513][ T5822] usb 6-1: USB disconnect, device number 14 [ 620.500830][ T5822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 620.638863][T12858] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 620.737149][T12858] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 620.818110][T15715] loop4: detected capacity change from 0 to 512 [ 620.901490][T15702] loop8: detected capacity change from 0 to 8192 [ 620.950476][T15715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 621.003722][T15702] FAT-fs (loop8): bogus logical sector size 516 [ 621.035006][T15715] System zones: 1-12 [ 621.070728][T15702] FAT-fs (loop8): Can't find a valid FAT filesystem [ 621.087211][T12858] usb 3-1: 2:1 : invalid Cluster Descriptor size [ 621.097758][T15715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.3682: missing EA_INODE flag [ 621.205723][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3684'. [ 621.227452][T15715] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 621.233039][T15715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3682: error while reading EA inode 12 err=-117 [ 621.242404][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 621.242423][ C0] EXT4-fs (loop4): initial error at time 1785335444: ext4_xattr_inode_iget:441: inode 12 [ 621.242453][ C0] EXT4-fs (loop4): last error at time 1785335444: ext4_xattr_inode_iget:441: inode 12 [ 621.616296][T12858] usb 3-1: USB disconnect, device number 24 [ 621.801665][T15715] loop4: lost filesystem error report for type 5 error -117 [ 621.802040][T15715] EXT4-fs (loop4): 1 orphan inode deleted [ 622.002697][T15715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.701921][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.990021][T15755] loop5: detected capacity change from 0 to 256 [ 623.092531][T15755] exfat: Deprecated parameter 'utf8' [ 623.151370][T15755] exfat: Deprecated parameter 'namecase' [ 623.180371][T15750] wlan0 speed is unknown, defaulting to 1000 [ 623.219985][T15755] exfat: Deprecated parameter 'utf8' [ 623.348438][T15755] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 623.562525][T15755] xt_hashlimit: size too large, truncated to 1048576 [ 623.752284][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.764185][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.835060][T12858] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 624.044289][T12858] usb 5-1: Using ep0 maxpacket: 16 [ 624.086736][T12858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 624.151831][T12858] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 624.243515][T12858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.339998][T12858] usb 5-1: config 0 descriptor?? [ 624.368531][T15777] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3701'. [ 624.841554][T12858] kye 0003:0458:500F.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 624.942840][T12858] hid_parser_main: 830 callbacks suppressed [ 624.942861][T12858] kye 0003:0458:500F.0013: unknown main item tag 0x0 [ 625.018143][T15784] loop5: detected capacity change from 0 to 256 [ 625.057310][T12858] kye 0003:0458:500F.0013: unknown main item tag 0x6 [ 625.120603][T12858] kye 0003:0458:500F.0013: ignoring exceeding usage max [ 625.251805][T12858] kye 0003:0458:500F.0013: hidraw0: USB HID v0.08 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0 [ 625.381410][T12858] kye 0003:0458:500F.0013: tablet-enabling feature report not found [ 625.490100][T12858] kye 0003:0458:500F.0013: tablet enabling failed [ 625.638181][T12858] usb 5-1: USB disconnect, device number 23 [ 625.809504][T15791] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3704'. [ 625.973307][T15787] fido_id[15787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 626.728247][T15798] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3706'. [ 627.046369][T15811] loop7: detected capacity change from 0 to 256 [ 627.168321][T15814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3712'. [ 627.338225][T15820] netlink: 'syz.1.3714': attribute type 1 has an invalid length. [ 627.352318][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.230026][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.591841][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.600225][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.220673][T15855] input: syz0 as /devices/virtual/input/input24 [ 630.286366][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3728'. [ 630.656771][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.927608][T15867] loop5: detected capacity change from 0 to 256 [ 631.022748][T15867] exfat: Deprecated parameter 'namecase' [ 631.183928][T15867] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 631.695305][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.154901][T15884] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 632.624468][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.737081][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.827545][T15861] loop8: detected capacity change from 0 to 32768 [ 633.106138][T15861] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 633.197570][T15906] Bluetooth: MGMT ver 1.23 [ 633.579952][T15910] loop7: detected capacity change from 0 to 4096 [ 633.669032][T15910] EXT4-fs: Ignoring removed orlov option [ 633.781049][T15910] EXT4-fs (loop7): Test dummy encryption mode enabled [ 633.801654][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.922389][T15910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.047165][T15861] (syz.8.3730,15861,0):ocfs2_rename:1287 ERROR: status = -2 [ 634.190850][T15861] (syz.8.3730,15861,0):ocfs2_rename:1700 ERROR: status = -2 [ 634.278520][T15910] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 634.546097][ T5642] Bluetooth: hci3: command 0x0c1a tx timeout [ 634.558722][T12858] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 634.650320][T12858] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 634.953786][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.148696][T14775] ocfs2: Unmounting device (7,8) on (node local) [ 635.156932][T14540] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.267095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.277120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.463261][T15938] devpts: Invalid gid '0x00000000ffffffff' [ 635.665243][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.686479][T15940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.699822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.152449][T15948] loop7: detected capacity change from 0 to 32768 [ 636.203487][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.299928][T15948] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 636.308589][T15948] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 636.358280][T15948] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 636.371885][ T5822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 636.425903][ T5822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 637.104175][ T5642] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.115578][T12858] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 637.252714][T12858] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 637.363238][ T5822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 937ms [ 637.383505][T15969] loop8: detected capacity change from 0 to 2048 [ 637.478270][ T5822] gfs2: fsid=syz:syz.0: jid=0: Done [ 637.534872][T15969] NILFS (loop8): invalid segment: Magic number mismatch [ 637.558260][T15948] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 637.752666][T15969] NILFS (loop8): trying rollback from an earlier position [ 637.824711][ T9] net_ratelimit: 1 callbacks suppressed [ 637.824728][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.970727][T15969] NILFS (loop8): recovery complete [ 638.040805][ T9] kernel write not supported for file bpf-map (pid: 9 comm: kworker/0:0) [ 638.081022][T15984] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 638.418328][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.707007][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.438334][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3776'. [ 639.503490][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.584382][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 639.591617][T12858] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 639.650769][T12858] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 640.522025][T15997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.618200][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.681224][T15997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.269791][T16026] loop8: detected capacity change from 0 to 8 [ 641.347354][T16026] SQUASHFS error: lzo decompression failed, data probably corrupt [ 641.416445][T16026] SQUASHFS error: Failed to read block 0x91: -5 [ 641.474733][T16026] SQUASHFS error: Unable to read metadata cache entry [8f] [ 641.516047][T16026] SQUASHFS error: Unable to read inode 0x11f [ 641.726878][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.770051][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.884164][T15997] vlan2: left promiscuous mode [ 641.904224][T12858] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 641.910927][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 641.927925][T15997] bond0: left promiscuous mode [ 641.943168][T12858] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 641.964253][T15997] bond_slave_0: left promiscuous mode [ 641.985922][T15997] bond_slave_1: left promiscuous mode [ 642.013078][T15997] bond1: left promiscuous mode [ 642.062720][ T7933] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.133800][ T7933] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.796565][ T186] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 642.829668][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.984706][ T186] usb 5-1: Using ep0 maxpacket: 32 [ 643.011677][ T186] usb 5-1: config 32 has an invalid interface number: 85 but max is 0 [ 643.041791][ T186] usb 5-1: config 32 has no interface number 0 [ 643.075744][ T186] usb 5-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.150766][ T186] usb 5-1: config 32 interface 85 has no altsetting 0 [ 643.209953][ T186] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 643.260582][ T7933] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.288310][ T186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.329479][ T7933] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.358806][ T186] usb 5-1: Product: syz [ 643.390063][ T186] usb 5-1: Manufacturer: syz [ 643.427830][ T186] usb 5-1: SerialNumber: syz [ 643.959726][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.175113][ T186] appletouch 5-1:32.85: Geyser mode initialized. [ 644.259394][ T186] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.85/input/input25 [ 644.380566][T16075] loop7: detected capacity change from 0 to 8 [ 644.760902][T16075] SQUASHFS error: lzo decompression failed, data probably corrupt [ 644.886179][ T9] usb 5-1: USB disconnect, device number 24 [ 644.893731][T16075] SQUASHFS error: Failed to read block 0x0: -5 [ 644.994700][T16075] SQUASHFS error: lzo decompression failed, data probably corrupt [ 645.092976][ T9] appletouch 5-1:32.85: input: appletouch disconnected [ 645.115608][T16075] SQUASHFS error: Failed to read block 0x0: -5 [ 645.167035][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.176290][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.205624][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 645.205640][ T30] audit: type=1800 audit(1785335468.156:324): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3800" name="file2" dev="loop7" ino=3 res=0 errno=0 [ 645.470137][T16091] loop8: detected capacity change from 0 to 512 [ 645.539863][T16091] EXT4-fs: Ignoring removed i_version option [ 645.636733][T16091] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 645.753271][T16091] EXT4-fs (loop8): 1 truncate cleaned up [ 645.831220][T16091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.225374][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.313539][T14775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.836660][T16114] loop4: detected capacity change from 0 to 4096 [ 646.905026][T16114] EXT4-fs: inline encryption not supported [ 646.968593][T16114] EXT4-fs: Ignoring removed oldalloc option [ 647.017708][T16114] EXT4-fs (loop4): Test dummy encryption mode enabled [ 647.100223][T16114] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 647.187125][T16114] System zones: 0-5 [ 647.242483][T16114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.288316][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.346784][T12858] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 647.408684][T12858] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 647.424656][ T5642] Bluetooth: hci2: command 0x0c1a tx timeout [ 647.431816][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.220775][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.271805][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.315987][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.329834][T16137] loop7: detected capacity change from 0 to 4096 [ 648.423227][T16137] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 648.754812][T16137] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 649.008052][T16137] ntfs3(loop7): ino=19, mi_enum_attr [ 649.350368][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.502327][T16137] ntfs3(loop7): ino=23, "file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_rename [ 649.719555][T16167] loop1: detected capacity change from 0 to 512 [ 649.810545][T16167] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3828: inode has both inline data and extents flags [ 649.958023][T16167] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 649.961127][T16167] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3828: couldn't read orphan inode 15 (err -117) [ 649.970444][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 649.970467][ C0] EXT4-fs (loop1): initial error at time 1785335472: ext4_orphan_get:1399: inode 15 [ 649.970500][ C0] EXT4-fs (loop1): last error at time 1785335472: ext4_orphan_get:1399: inode 15 [ 650.312349][ T5642] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.328128][T12858] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 650.385810][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.413618][T12858] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 650.518187][T16167] loop1: lost filesystem error report for type 5 error -117 [ 650.537800][T16167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.156569][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.376082][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3840'. [ 651.386490][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.553119][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.693739][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3843'. [ 651.851042][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3843'. [ 651.899361][T16209] loop1: detected capacity change from 0 to 4096 [ 651.962262][T16209] EXT4-fs: inline encryption not supported [ 652.090402][T16209] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 652.195397][T16209] EXT4-fs (loop1): Test dummy encryption mode enabled [ 652.286127][T16209] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 652.390200][T16209] System zones: 0-5 [ 652.500817][T16209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.624530][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.682406][T16232] loop7: detected capacity change from 0 to 256 [ 653.078587][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.208042][T16236] loop4: detected capacity change from 0 to 512 [ 653.317939][T16236] EXT4-fs (loop4): Test dummy encryption mode enabled [ 653.438866][T16236] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3852: inode has both inline data and extents flags [ 653.453686][T16237] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 653.575760][T16236] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 653.576094][T16236] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3852: couldn't read orphan inode 15 (err -117) [ 653.585337][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 653.585357][ C0] EXT4-fs (loop4): initial error at time 1785335476: ext4_orphan_get:1399: inode 15 [ 653.585396][ C0] EXT4-fs (loop4): last error at time 1785335476: ext4_orphan_get:1399: inode 15 [ 653.666220][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.141505][T16236] loop4: lost filesystem error report for type 5 error -117 [ 654.156446][T16236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.465601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.482498][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.491043][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.705453][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.872074][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.614654][ T5898] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 655.757040][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.874311][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 655.920063][ T5898] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 655.990677][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.085946][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.157269][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.230028][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.302935][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.381066][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.466361][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.546271][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.577082][T16303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.645563][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 656.693310][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 656.720720][T16303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.750359][ T5898] usb 2-1: SerialNumber: syz [ 656.775672][T16303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.787355][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.812675][ T5898] usb 2-1: config 0 descriptor?? [ 656.867844][T16303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.905602][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 656.963210][T16279] loop7: detected capacity change from 0 to 32768 [ 657.139836][T16279] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 657.191661][ T4974] bcm5974 2-1:0.0: could not read from device [ 657.230961][T16315] vivid-003: disconnect [ 657.297718][T16315] vivid-003: reconnect [ 657.323583][ T4974] bcm5974 2-1:0.0: could not read from device [ 657.341810][ T5898] usb 2-1: USB disconnect, device number 20 [ 657.355525][T16279] XFS (loop7): Ending clean mount [ 657.816320][ T4974] bcm5974 2-1:0.0: could not read from device [ 657.875187][T14540] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 658.958490][T16341] loop1: detected capacity change from 0 to 32768 [ 658.965849][T16341] btrfs: Deprecated parameter 'usebackuproot' [ 658.971937][T16341] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 658.994671][T16341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3891 (16341) [ 659.014931][T16341] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 659.025202][T16341] BTRFS info (device loop1): using crc32c checksum algorithm [ 659.032691][T16341] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 659.261375][ T7933] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 659.449883][T16341] BTRFS error (device loop1): failed to load root extent [ 659.458440][T16341] BTRFS warning (device loop1): try to load backup roots slot 1 [ 659.467730][ T7902] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 659.595936][T16341] BTRFS warning (device loop1): couldn't read tree root [ 659.602971][T16341] BTRFS warning (device loop1): try to load backup roots slot 2 [ 659.613512][ T7933] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 659.711019][T16341] BTRFS warning (device loop1): couldn't read tree root [ 659.718138][T16341] BTRFS warning (device loop1): try to load backup roots slot 3 [ 659.776885][T16341] BTRFS info (device loop1): rebuilding free space tree [ 659.954410][T16341] BTRFS info (device loop1): disabling free space tree [ 659.961356][T16341] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 659.971847][T16341] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 659.987892][T16341] BTRFS info (device loop1): checking UUID tree [ 660.010869][T16341] BTRFS info (device loop1): enabling ssd optimizations [ 660.018187][T16341] BTRFS info (device loop1): turning on async discard [ 660.025208][T16341] BTRFS info (device loop1): enabling disk space caching [ 660.032240][T16341] BTRFS info (device loop1): force clearing of disk cache [ 660.039758][T16341] BTRFS info (device loop1): enabling auto defrag [ 660.046217][T16341] BTRFS info (device loop1): trying to use backup root at mount time [ 660.054352][T16341] BTRFS info (device loop1): use zstd compression, level 3 [ 660.065536][ T5898] net_ratelimit: 369 callbacks suppressed [ 660.065550][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.544821][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.709502][ T5624] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 661.104670][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.146014][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.794736][T16420] loop4: detected capacity change from 0 to 1024 [ 663.189020][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.587232][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.647456][T16435] loop8: detected capacity change from 0 to 1024 [ 663.804355][T12858] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 663.960947][T16442] loop4: detected capacity change from 0 to 256 [ 664.018614][T12858] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 664.105869][T12858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.159457][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.225035][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.249791][T12858] usb 6-1: config 0 descriptor?? [ 664.323438][T12858] cp210x 6-1:0.0: cp210x converter detected [ 664.473397][T16448] pim6reg: entered allmulticast mode [ 664.559184][T16452] pim6reg: left allmulticast mode [ 664.742908][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.758947][T12858] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 665.051120][T12858] usb 6-1: cp210x converter now attached to ttyUSB0 [ 665.070255][T16461] loop1: detected capacity change from 0 to 256 [ 665.159458][T16461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x478b151d, utbl_chksum : 0xe619d30d) [ 665.235311][ T186] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 665.296791][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.306477][T12858] usb 6-1: USB disconnect, device number 15 [ 665.378956][T12858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 665.463478][T12858] cp210x 6-1:0.0: device disconnected [ 665.469104][ T186] usb 3-1: Using ep0 maxpacket: 8 [ 665.514601][ T186] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 665.596617][ T186] usb 3-1: config 0 has no interface number 0 [ 665.639878][ T186] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 665.699381][ T186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.765366][ T186] usb 3-1: config 0 descriptor?? [ 665.907756][ T186] viperboard 3-1:0.143: version 0.00 found at bus 003 address 025 [ 666.035483][ T186] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 666.096395][ T186] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 666.276671][ T186] usb 3-1: USB disconnect, device number 25 [ 666.356163][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.518451][T16477] lapbether: lapb_data_request error - 4 [ 666.594810][T16479] loop5: detected capacity change from 0 to 2048 [ 666.625692][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.661924][T16483] loop7: detected capacity change from 0 to 8 [ 666.681613][T16479] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 666.793779][T16479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 667.312111][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3949'. [ 667.612838][T16497] loop4: detected capacity change from 0 to 32768 [ 667.620375][T16497] btrfs: Deprecated parameter 'usebackuproot' [ 667.626603][T16497] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 667.640493][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.655648][T16497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3951 (16497) [ 667.672293][T16497] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 667.682491][T16497] BTRFS info (device loop4): using crc32c checksum algorithm [ 667.689943][T16497] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 667.894254][ T7945] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 667.991447][T16494] bond1: Invalid ad_actor_system MAC address. [ 668.068807][T16494] bond1: option ad_actor_system: invalid value (1) [ 668.151263][T16494] bond1 (unregistering): Released all slaves [ 668.178491][T16497] BTRFS error (device loop4): failed to load root extent [ 668.186634][T16497] BTRFS warning (device loop4): try to load backup roots slot 1 [ 668.204541][ T7912] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 668.298248][T16497] BTRFS warning (device loop4): couldn't read tree root [ 668.306262][T16497] BTRFS warning (device loop4): try to load backup roots slot 2 [ 668.317845][ T7933] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 668.397345][T16497] BTRFS warning (device loop4): couldn't read tree root [ 668.404399][T16497] BTRFS warning (device loop4): try to load backup roots slot 3 [ 668.443516][T16497] BTRFS info (device loop4): rebuilding free space tree [ 668.495251][T16497] BTRFS info (device loop4): disabling free space tree [ 668.502209][T16497] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 668.511973][T16497] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 668.528138][T16497] BTRFS info (device loop4): checking UUID tree [ 668.539008][T16497] BTRFS info (device loop4): enabling ssd optimizations [ 668.546485][T16497] BTRFS info (device loop4): turning on async discard [ 668.553306][T16497] BTRFS info (device loop4): enabling disk space caching [ 668.560505][T16497] BTRFS info (device loop4): force clearing of disk cache [ 668.567678][T16497] BTRFS info (device loop4): enabling auto defrag [ 668.574458][T16497] BTRFS info (device loop4): trying to use backup root at mount time [ 668.582516][T16497] BTRFS info (device loop4): use zstd compression, level 3 [ 668.707115][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.056634][ T5625] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 669.664937][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.758198][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.785348][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.825733][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.887600][T16590] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 672.046930][T16529] loop8: detected capacity change from 0 to 32768 [ 672.127851][T16590] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 672.187077][T16591] i2c i2c-0: new_device: Missing parameters [ 672.706864][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.847585][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3979'. [ 672.870232][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.920930][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3979'. [ 673.511563][T16626] loop7: detected capacity change from 0 to 512 [ 673.653090][T16626] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3983: corrupted inode contents [ 673.705657][T16628] loop1: detected capacity change from 0 to 2048 [ 673.787860][T16626] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 673.789862][T16626] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 673.799093][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 673.799112][ C0] EXT4-fs (loop7): initial error at time 1785335496: ext4_do_update_inode:5742: inode 15 [ 673.799145][ C0] EXT4-fs (loop7): last error at time 1785335496: ext4_do_update_inode:5742: inode 15 [ 673.909406][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.931129][T16628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.247957][T16626] loop7: lost filesystem error report for type 5 error -117 [ 674.248465][T16626] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3983: corrupted inode contents [ 674.304473][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.442782][T16626] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 674.448173][T16626] EXT4-fs error (device loop7): ext4_evict_inode:315: inode #15: comm syz.7.3983: mark_inode_dirty error [ 674.677614][T16626] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 674.681129][T16626] EXT4-fs (loop7): 1 orphan inode deleted [ 674.741010][T16649] netlink: 'syz.8.3992': attribute type 6 has an invalid length. [ 674.846339][T16626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.952179][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.960944][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.202833][T16645] loop1: detected capacity change from 0 to 8192 [ 675.212450][T16654] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 675.282554][T16654] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 675.308314][ T30] audit: type=1326 audit(1785335498.276:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16655 comm="syz.8.3995" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f386bb9de99 code=0x0 [ 675.419871][T14540] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.546037][ T30] audit: type=1800 audit(1785335498.306:326): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3990" name="bus" dev="loop1" ino=1048841 res=0 errno=0 [ 675.759782][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.841814][T16664] loop4: detected capacity change from 0 to 512 [ 675.910013][T16664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 675.985712][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.056661][T16664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 676.152453][T16664] System zones: 1-12 [ 676.206336][T16664] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3999: bad orphan inode 131072 [ 676.326702][T16664] loop4: lost filesystem error report for type 5 error -117 [ 676.342355][T16664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.792831][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.824705][T16684] loop8: detected capacity change from 0 to 4096 [ 676.948956][T16684] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 677.026936][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.789231][T16706] tipc: Started in network mode [ 677.827545][T16706] tipc: Node identity ac14142f, cluster identity 4711 [ 677.888875][T16706] tipc: New replicast peer: 172.20.20.170 [ 677.949665][T16706] tipc: Enabled bearer , priority 10 [ 678.014393][T16712] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:0000:0000 [ 678.065381][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.485596][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4025'. [ 678.506360][T16728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.588047][T16728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.639046][T16731] loop8: detected capacity change from 0 to 1024 [ 678.648212][T16728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.782074][T16733] loop4: detected capacity change from 0 to 512 [ 678.790111][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.907867][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4030'. [ 678.918740][T16733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.998646][T16736] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4030'. [ 679.086320][ T5898] tipc: Node number set to 2886997039 [ 679.147448][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.258118][T16744] xt_hashlimit: size too large, truncated to 1048576 [ 679.358223][T16747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.464076][T16749] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4033'. [ 679.837699][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.225285][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.501633][T16769] loop4: detected capacity change from 0 to 128 [ 681.007737][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4045'. [ 681.265343][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.824406][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.048193][T16800] loop7: detected capacity change from 0 to 1024 [ 682.109055][T16800] EXT4-fs: inline encryption not supported [ 682.341443][T16805] loop8: detected capacity change from 0 to 32768 [ 682.353562][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.372419][T16805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4057 (16805) [ 682.389070][T16805] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 682.399853][T16805] BTRFS info (device loop8): using sha256 checksum algorithm [ 682.407308][T16805] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 682.502208][T16800] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 682.676473][T16805] BTRFS info (device loop8): rebuilding free space tree [ 682.701198][T16800] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.4055: lblock 1 mapped to illegal pblock 1 (length 1) [ 682.775091][T16805] BTRFS info (device loop8): disabling free space tree [ 682.782075][T16805] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 682.792161][T16805] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 682.813312][T16805] BTRFS info (device loop8): enabling ssd optimizations [ 682.820657][T16805] BTRFS info (device loop8): turning on async discard [ 682.827605][T16805] BTRFS info (device loop8): enabling disk space caching [ 682.834729][T16805] BTRFS info (device loop8): force clearing of disk cache [ 682.928671][T16800] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 682.933832][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 682.949353][ C0] EXT4-fs (loop7): initial error at time 1785335505: ext4_map_blocks:833: inode 3: block 1 [ 682.959392][ C0] EXT4-fs (loop7): last error at time 1785335505: ext4_map_blocks:833: inode 3: block 1 [ 682.972808][T16800] EXT4-fs (loop7): Remounting filesystem read-only [ 683.035810][T16800] Quota error (device loop7): write_blk: dquota write failed [ 683.091044][ T30] audit: type=1800 audit(1785335506.046:327): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4057" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 683.112351][T16824] input: syz1 as /devices/virtual/input/input27 [ 683.142188][T16805] BTRFS info (device loop8): balance: start -sconvert=raid0,soft,drange=1580..7 [ 683.153130][T16805] BTRFS info (device loop8): balance: ended with status: 0 [ 683.194073][T16800] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 683.301551][T16800] EXT4-fs (loop7): 1 orphan inode deleted [ 683.373766][T16800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.426849][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.440938][T14775] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 683.671358][T16832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.980537][T14540] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.466026][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.477466][ T30] audit: type=1326 audit(1785335507.426:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16844 comm="syz.7.4066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289d99de99 code=0x0 [ 684.613641][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.865077][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.109078][T16858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.124657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.201928][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.215224][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.504933][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.395941][T16883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.544510][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.688787][T16851] loop8: detected capacity change from 0 to 32768 [ 686.785199][T16851] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 686.794406][T12858] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 686.959534][T16851] XFS (loop8): Ending clean mount [ 686.995557][T12858] usb 2-1: Using ep0 maxpacket: 8 [ 687.043172][T12858] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 687.102292][T12858] usb 2-1: config 0 has no interface number 0 [ 687.160273][T12858] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 687.241542][T12858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.307955][T14775] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 687.349510][T12858] usb 2-1: config 0 descriptor?? [ 687.529459][T12858] viperboard 2-1:0.143: version 0.00 found at bus 002 address 021 [ 687.589911][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.680601][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 687.735097][T12858] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 687.855172][T12858] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 687.954933][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.037077][T12858] usb 2-1: USB disconnect, device number 21 [ 688.624366][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.749825][T16912] netlink: 'syz.8.4091': attribute type 11 has an invalid length. [ 688.833590][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4091'. [ 688.956918][T16915] netlink: 'syz.8.4091': attribute type 11 has an invalid length. [ 689.051256][T16915] netlink: 59 bytes leftover after parsing attributes in process `syz.8.4091'. [ 689.609624][T16928] sctp: [Deprecated]: syz.4.4098 (pid 16928) Use of int in max_burst socket option. [ 689.609624][T16928] Use struct sctp_assoc_value instead [ 689.664721][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.712037][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.026168][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.229657][T16966] loop7: detected capacity change from 0 to 1024 [ 691.508992][T16976] Invalid argument reading file caps for ./file0 [ 691.824231][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.559662][T17003] loop5: detected capacity change from 0 to 256 [ 692.739574][T17003] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 692.870045][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.498900][T17015] loop5: detected capacity change from 0 to 32768 [ 693.549041][T17015] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 693.557843][T17015] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 693.581436][T17015] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 693.591218][ T186] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 693.628851][ T186] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 693.819108][T17023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.846225][T17020] loop8: detected capacity change from 0 to 2048 [ 693.936233][T17020] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 693.956623][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.970108][T17028] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 693.980257][ T186] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 351ms [ 694.042933][ T186] gfs2: fsid=syz:syz.0: jid=0: Done [ 694.053443][T17020] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 694.064679][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.101719][T17015] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 694.170706][T17015] gfs2: fsid=syz:syz.0: found 1 quota changes [ 694.180695][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.210395][T17030] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 694.236177][T17020] UDF-fs: Scanning with blocksize 512 failed [ 694.388332][T17030] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 694.436900][T17020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 694.502714][T17030] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:17030 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 694.589658][ T30] audit: type=1800 audit(1785335517.556:329): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4136" name="file1" dev="loop8" ino=838 res=0 errno=0 [ 694.668370][T17030] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 694.762836][T17030] CPU: 0 UID: 0 PID: 17030 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 694.762870][T17030] Tainted: [L]=SOFTLOCKUP [ 694.762879][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 694.762892][T17030] Call Trace: [ 694.762901][T17030] [ 694.762911][T17030] dump_stack_lvl+0xe8/0x150 [ 694.762948][T17030] gfs2_withdraw+0xc3/0x1b0 [ 694.762974][T17030] inode_go_instantiate+0xbc7/0x12c0 [ 694.763004][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.763034][T17030] ? __pfx_inode_go_instantiate+0x10/0x10 [ 694.763055][T17030] ? do_raw_spin_unlock+0xf5/0x210 [ 694.763085][T17030] ? __pfx_wake_bit_function+0x10/0x10 [ 694.763122][T17030] gfs2_instantiate+0x168/0x220 [ 694.763151][T17030] gfs2_glock_wait+0x1d4/0x2a0 [ 694.763180][T17030] do_sync+0x49c/0xbb0 [ 694.763211][T17030] ? gfs2_quota_sync+0x353/0x450 [ 694.763253][T17030] ? __pfx_do_sync+0x10/0x10 [ 694.763283][T17030] ? do_raw_spin_lock+0x12b/0x2f0 [ 694.763320][T17030] ? gfs2_quota_sync+0x353/0x450 [ 694.763352][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.763382][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.763408][T17030] ? do_raw_spin_unlock+0xf5/0x210 [ 694.763440][T17030] gfs2_quota_sync+0x353/0x450 [ 694.763488][T17030] gfs2_quotad+0x2ab/0x6f0 [ 694.763537][T17030] ? __pfx_gfs2_quotad+0x10/0x10 [ 694.763569][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.763598][T17030] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 694.763621][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.763647][T17030] ? __kthread_parkme+0x71/0x1f0 [ 694.763680][T17030] ? __kthread_parkme+0x196/0x1f0 [ 694.763717][T17030] kthread+0x388/0x470 [ 694.763750][T17030] ? __pfx_gfs2_quotad+0x10/0x10 [ 694.763785][T17030] ? __pfx_kthread+0x10/0x10 [ 694.763820][T17030] ret_from_fork+0x514/0xb70 [ 694.763859][T17030] ? __pfx_ret_from_fork+0x10/0x10 [ 694.763892][T17030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.763918][T17030] ? __switch_to+0xc89/0x1420 [ 694.763951][T17030] ? __pfx_kthread+0x10/0x10 [ 694.763987][T17030] ret_from_fork_asm+0x1a/0x30 [ 694.764028][T17030] [ 694.970914][T17031] gfs2: fsid=syz:syz.0: gfs2_create_inode: -5 [ 695.059815][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.154614][T17044] loop1: detected capacity change from 0 to 1024 [ 695.161963][T17044] EXT4-fs: Ignoring removed orlov option [ 695.842649][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 695.877359][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4152'. [ 695.907241][T17044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.986148][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 696.120243][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.177942][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.201312][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.279558][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.299565][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 696.350129][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.461029][T17030] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 696.497547][ T9] usb 3-1: config 0 descriptor?? [ 696.790715][T17075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4158'. [ 696.964203][ T5898] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 696.975334][ T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 697.030747][ T9] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 697.104673][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.154310][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 697.197116][ T5898] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.234770][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.260893][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 697.294927][ T9] cp2112 0003:10C4:EA90.0014: error requesting version [ 697.338533][ T5898] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 697.369837][ T9] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 697.410253][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.469351][ T9] usb 3-1: USB disconnect, device number 26 [ 697.482049][ T5898] usb 2-1: Product: syz [ 697.508747][ T5898] usb 2-1: Manufacturer: syz [ 697.556548][ T5898] usb 2-1: SerialNumber: syz [ 697.602952][ T5898] usb 2-1: config 0 descriptor?? [ 698.196755][ T5898] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 698.326322][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.567283][T17102] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4170'. [ 698.854027][ T5898] rc_core: IR keymap rc-imon-pad not found [ 698.898334][ T5898] Registered IR keymap rc-empty [ 698.941911][ T5898] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 699.008303][ T5898] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 699.130692][ T5898] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 699.278534][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 699.318450][ T5898] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 699.358348][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.431990][ T5898] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:22> initialized [ 699.505586][ T5898] usb 2-1: USB disconnect, device number 22 [ 700.145510][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.410024][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.672343][T17113] loop4: detected capacity change from 0 to 32768 [ 700.811646][T17113] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 701.057201][T17118] loop7: detected capacity change from 0 to 32768 [ 701.141290][T17118] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4176 (17118) [ 701.352225][T17118] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 701.432798][T17118] BTRFS info (device loop7): using blake2b checksum algorithm [ 701.489649][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.699872][T17118] BTRFS info (device loop7): enabling ssd optimizations [ 701.792297][T17118] BTRFS info (device loop7): turning on async discard [ 701.817877][T12858] gfs2: fsid=syz:syz.0: file system withdrawn [ 701.864659][T17118] BTRFS info (device loop7): enabling free space tree [ 701.956050][T17118] BTRFS info (device loop7): use zstd compression, level 3 [ 702.006782][ T5625] ocfs2: Unmounting device (7,4) on (node local) [ 702.592715][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.905648][ T30] audit: type=1800 audit(1785335525.876:330): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4176" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 703.019119][ T30] audit: type=1800 audit(1785335525.896:331): pid=17170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4176" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 703.079949][T17178] loop1: detected capacity change from 0 to 1024 [ 703.204057][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.358252][T12858] page_pool_release_retry() stalled pool shutdown: id 111, 1 inflight 60 sec [ 703.619707][T14540] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 703.713353][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.785265][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.401173][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 704.480394][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 704.786022][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.840825][T17204] wlan0 speed is unknown, defaulting to 1000 [ 704.904258][ T5898] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 705.141465][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 705.174329][ T5898] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 705.225362][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.338163][ T5898] usb 5-1: config 0 descriptor?? [ 705.411588][ T5898] gspca_main: sunplus-2.14.0 probing 041e:400b [ 705.609620][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4209'. [ 705.700084][T17212] block nbd3: Unsupported socket: should be TCP or UNIX. [ 705.829959][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.201203][T17217] loop5: detected capacity change from 0 to 128 [ 706.227947][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.243277][ T5898] gspca_sunplus: reg_r err -71 [ 706.276965][ T5898] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 706.287136][T17217] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 706.404598][ T5898] usb 5-1: USB disconnect, device number 25 [ 706.427563][T17217] hpfs: filesystem error: improperly stopped [ 706.483616][T17217] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 706.558737][T17217] hpfs: You really don't want any checks? You are crazy... [ 706.638409][T17217] hpfs: Code page index out of array [ 706.668942][T17217] hpfs: code page support is disabled [ 706.702699][T17217] hpfs: hpfs_map_4sectors(): unaligned read [ 706.756538][T17217] hpfs: hpfs_map_4sectors(): unaligned read [ 706.816572][T17217] hpfs: filesystem error: unable to find root dir [ 706.865178][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.938032][T17226] xt_hashlimit: size too large, truncated to 1048576 [ 706.979155][T17217] hpfs: hpfs_map_4sectors(): unaligned read [ 707.157215][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4215'. [ 707.912103][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.997205][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 708.093056][T17244] netlink: 'syz.4.4220': attribute type 30 has an invalid length. [ 708.156808][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 708.230192][T17245] netlink: 'syz.4.4220': attribute type 30 has an invalid length. [ 708.783383][T17259] xt_hashlimit: size too large, truncated to 1048576 [ 708.944309][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.265229][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.527285][ T7932] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.612311][ T7932] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.708878][ T7932] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.800916][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4232'. [ 709.818813][ T7932] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.988557][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.356281][T17290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.367732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.929499][T17303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.051093][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.959565][T17333] netlink: 'syz.4.4258': attribute type 11 has an invalid length. [ 712.088613][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.306602][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.502649][T17341] loop4: detected capacity change from 0 to 2048 [ 712.600408][T17341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.000060][T17339] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 8192 extent 65+4096 [ 713.134770][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.345237][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.644875][T17360] loop4: detected capacity change from 0 to 512 [ 713.707041][T17360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 713.809278][T17360] EXT4-fs (loop4): 1 truncate cleaned up [ 713.819854][T17370] loop8: detected capacity change from 0 to 128 [ 713.862199][T17360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.056859][T17360] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.4267: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 714.184646][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.229995][T17360] EXT4-fs (loop4): Remounting filesystem read-only [ 714.485060][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.827140][T17385] loop4: detected capacity change from 0 to 512 [ 714.931033][T17385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.051331][T17385] ext4 filesystem being mounted at /744/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.267058][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.366231][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.451921][T17397] team0: Port device batadv0 added [ 715.507680][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.550708][T17399] bridge0: port 3(team0) entered blocking state [ 715.603071][T17399] bridge0: port 3(team0) entered disabled state [ 715.616064][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.697942][T17399] team0: entered allmulticast mode [ 715.733212][T17399] team_slave_0: entered allmulticast mode [ 715.792839][T17399] team_slave_1: entered allmulticast mode [ 715.843639][T17399] batadv0: entered allmulticast mode [ 716.192973][T17399] team0: entered promiscuous mode [ 716.252541][T17399] team_slave_0: entered promiscuous mode [ 716.300867][ T7932] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 716.311428][ T7932] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 716.324325][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.340455][T17399] team_slave_1: entered promiscuous mode [ 716.372648][T17413] loop8: detected capacity change from 0 to 4096 [ 716.379946][T17399] batadv0: entered promiscuous mode [ 716.422804][T17399] bridge0: port 3(team0) entered blocking state [ 716.430380][T17399] bridge0: port 3(team0) entered forwarding state [ 716.473175][T17413] NILFS (loop8): invalid segment: Checksum error in segment payload [ 716.560639][T17413] NILFS (loop8): trying rollback from an earlier position [ 716.742352][T17413] NILFS (loop8): recovery complete [ 716.819619][T17420] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 716.979674][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4288'. [ 717.379025][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.406486][T17430] loop7: detected capacity change from 0 to 2048 [ 717.591572][T17430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.746759][T17441] batadv_slave_1: entered promiscuous mode [ 717.812415][T17430] EXT4-fs (loop7): shut down requested (1) [ 717.845544][T17439] batadv_slave_1: left promiscuous mode [ 717.871559][T17443] loop5: detected capacity change from 0 to 1024 [ 717.988584][T17443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 718.112251][T17443] ext4 filesystem being mounted at /704/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.163266][T14540] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.413714][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.561140][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 718.624217][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.443537][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.578022][T17479] loop4: detected capacity change from 0 to 512 [ 719.680060][T17479] vfat: Unknown parameter 'nonumtaidtl' [ 720.502148][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.124732][T17513] loop1: detected capacity change from 0 to 64 [ 721.261941][ T30] audit: type=1800 audit(1785335544.226:332): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4326" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 721.539031][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.625235][ T5624] hfs: node 4:3 still has 1 user(s)! [ 721.670672][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.907886][T17528] tcpci 0-0050: probe with driver tcpci failed with error -5 [ 722.015525][T17528] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 722.360235][T17530] tcpci 0-0051: probe with driver tcpci failed with error -5 [ 722.439309][T17530] i2c i2c-0: new_device: Instantiated device tcpci at 0x51 [ 722.571585][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.612010][T17542] loop8: detected capacity change from 0 to 1024 [ 722.635680][T17544] loop5: detected capacity change from 0 to 512 [ 722.720696][T17544] EXT4-fs: Ignoring removed nobh option [ 722.790998][T17542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.812745][T17544] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 722.945983][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.991668][T17544] EXT4-fs (loop5): 1 truncate cleaned up [ 723.039694][T17544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.387820][T14775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.694806][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.735670][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.978195][T17534] loop1: detected capacity change from 0 to 32768 [ 724.067208][T17534] [ 724.067208][T17534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 724.067208][T17534] [ 724.220045][T17534] JFS: metapage_get_blocks failed [ 724.245719][T17534] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 724.245719][T17534] [ 724.246768][T17534] ERROR: (device loop1): diWrite: ixpxd invalid [ 724.246768][T17534] [ 724.246802][T17534] ERROR: (device loop1): txCommit: [ 724.246802][T17534] [ 727.918046][T17575] ERROR: (device loop1): diWrite: ixpxd invalid [ 727.918046][T17575] [ 727.918088][T17575] ERROR: (device loop1): txCommit: [ 727.918088][T17575] [ 728.315954][ C0] sched: DL replenish lagged too much [ 729.294772][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.319427][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.714511][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.720863][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.182322][T16576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.146406][T16581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.128465][T16580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.538144][ T7946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.041585][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.165336][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.177371][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.579837][T16568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.094364][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.125900][T12858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.024202][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.297524][T16572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.443733][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 867.443754][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14540/1:b..l P17572/1:b..l [ 867.445250][ C0] rcu: (detected by 0, t=10502 jiffies, g=139977, q=924 ncpus=1) [ 867.445270][ C0] task:syz.8.4350 state:R running task stack:26856 pid:17572 tgid:17570 ppid:14775 task_flags:0x40054c flags:0x00080001 [ 867.445342][ C0] Call Trace: [ 867.445350][ C0] [ 867.445365][ C0] __schedule+0x17d9/0x56c0 [ 867.445406][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.445435][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.445466][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.445490][ C0] ? __lock_acquire+0x683/0x2cf0 [ 867.445520][ C0] ? __pfx___schedule+0x10/0x10 [ 867.445545][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.445569][ C0] ? __lock_acquire+0x683/0x2cf0 [ 867.445611][ C0] preempt_schedule_irq+0x4d/0xa0 [ 867.445634][ C0] irqentry_exit+0x14f/0x8f0 [ 867.445657][ C0] ? trace_irq_disable+0x3b/0x140 [ 867.445696][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 867.445720][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 867.445749][ C0] Code: 7d ca 11 00 00 00 00 eb b5 e8 c5 0d 2e 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 38 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 85 59 6d ff cc 48 8d 3d 12 3d b8 [ 867.445768][ C0] RSP: 0018:ffffc90002dcef88 EFLAGS: 00000286 [ 867.445787][ C0] RAX: 563ef51bdfd07700 RBX: 0000000000000206 RCX: 0000000000000046 [ 867.445802][ C0] RDX: 0000000000000001 RSI: ffffffff8e4b276c RDI: ffffffff8c4bdd80 [ 867.445818][ C0] RBP: ffff8880761cc9c8 R08: ffffc90002dcfc30 R09: ffffc90002dcf0b8 [ 867.445835][ C0] R10: dffffc0000000000 R11: fffff520005b9e19 R12: 0000000000000001 [ 867.445851][ C0] R13: 0000000000000001 R14: ffffffff8eb59c60 R15: ffff8880761cbe00 [ 867.445887][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.445912][ C0] unwind_next_frame+0x1baa/0x2550 [ 867.445941][ C0] ? do_exit+0x6cd/0x2360 [ 867.445970][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.445996][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 867.446028][ C0] arch_stack_walk+0x11b/0x150 [ 867.446060][ C0] ? do_group_exit+0x22d/0x2f0 [ 867.446088][ C0] stack_trace_save+0xa9/0x100 [ 867.446114][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 867.446143][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.446167][ C0] ? stack_depot_save_flags+0x33/0x800 [ 867.446198][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.446225][ C0] save_stack+0x122/0x230 [ 867.446258][ C0] ? __pfx_save_stack+0x10/0x10 [ 867.446285][ C0] ? free_unref_folios+0xd84/0x14a0 [ 867.446310][ C0] ? folios_put_refs+0x9e9/0xb30 [ 867.446337][ C0] ? free_pages_and_swap_cache+0x2ba/0x490 [ 867.446360][ C0] ? tlb_flush_mmu+0x6d3/0xa30 [ 867.446388][ C0] ? tlb_finish_mmu+0xf4/0x220 [ 867.446414][ C0] ? exit_mmap+0x4b2/0x9f0 [ 867.446437][ C0] ? __mmput+0x118/0x420 [ 867.446459][ C0] ? exit_mm+0x221/0x2d0 [ 867.446487][ C0] ? do_exit+0x6cd/0x2360 [ 867.446523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.446550][ C0] ? page_ext_put+0x97/0xc0 [ 867.446584][ C0] __reset_page_owner+0x71/0x1f0 [ 867.446616][ C0] free_unref_folios+0xd84/0x14a0 [ 867.446653][ C0] ? folios_put_refs+0x991/0xb30 [ 867.446690][ C0] folios_put_refs+0x9e9/0xb30 [ 867.446716][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 867.446743][ C0] ? exit_to_user_mode_loop+0x104/0x730 [ 867.446771][ C0] ? do_syscall_64+0x353/0x580 [ 867.446807][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 867.446839][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.446863][ C0] ? free_swap_cache+0x109/0x300 [ 867.446890][ C0] free_pages_and_swap_cache+0x2ba/0x490 [ 867.446923][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 867.446947][ C0] ? free_pgd_range+0x1356/0x13c0 [ 867.447003][ C0] ? __virt_addr_valid+0x137/0x390 [ 867.447032][ C0] ? __virt_addr_valid+0x137/0x390 [ 867.447073][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447106][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 867.447136][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447166][ C0] tlb_finish_mmu+0xf4/0x220 [ 867.447199][ C0] exit_mmap+0x4b2/0x9f0 [ 867.447227][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 867.447280][ C0] ? __pfx_exit_aio+0x10/0x10 [ 867.447315][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447338][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 867.447371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447394][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 867.447416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447444][ C0] __mmput+0x118/0x420 [ 867.447469][ C0] exit_mm+0x221/0x2d0 [ 867.447502][ C0] do_exit+0x6cd/0x2360 [ 867.447533][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447584][ C0] ? __pfx_do_exit+0x10/0x10 [ 867.447618][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 867.447643][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.447673][ C0] do_group_exit+0x22d/0x2f0 [ 867.447694][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 867.447718][ C0] get_signal+0x121b/0x12c0 [ 867.447751][ C0] ? kick_process+0xeb/0x160 [ 867.447790][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 867.447817][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 867.447840][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 867.447885][ C0] exit_to_user_mode_loop+0x104/0x730 [ 867.447912][ C0] ? rcu_is_watching+0x15/0xb0 [ 867.447933][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.447955][ C0] do_syscall_64+0x353/0x580 [ 867.447978][ C0] ? trace_irq_disable+0x3b/0x140 [ 867.448009][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.448030][ C0] RIP: 0033:0x7f386bb9de99 [ 867.448047][ C0] RSP: 002b:00007f386ca93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 867.448067][ C0] RAX: 0000000000000000 RBX: 00007f386be25fa0 RCX: 00007f386bb9de99 [ 867.448081][ C0] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 867.448094][ C0] RBP: 00007f386bc33eaf R08: 0000000000000010 R09: 0000000000000000 [ 867.448107][ C0] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000000 [ 867.448120][ C0] R13: 00007f386be26038 R14: 00007f386be25fa0 R15: 00007fff670a2758 [ 867.448151][ C0] [ 867.448160][ C0] task:syz-executor state:R running task stack:22384 pid:14540 tgid:14540 ppid:1 task_flags:0x400140 flags:0x00080002 [ 867.448216][ C0] Call Trace: [ 867.448223][ C0] [ 867.448235][ C0] __schedule+0x17d9/0x56c0 [ 867.448262][ C0] ? __lock_acquire+0x683/0x2cf0 [ 867.448304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.448327][ C0] ? __kernel_text_address+0xd/0x30 [ 867.448346][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.448371][ C0] ? __pfx___schedule+0x10/0x10 [ 867.448389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.448416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.448439][ C0] ? __lock_acquire+0x683/0x2cf0 [ 867.448477][ C0] preempt_schedule_irq+0x4d/0xa0 [ 867.448499][ C0] irqentry_exit+0x14f/0x8f0 [ 867.448521][ C0] ? trace_irq_disable+0x3b/0x140 [ 867.448552][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 867.448573][ C0] RIP: 0010:lock_acquire+0x61/0x350 [ 867.448601][ C0] Code: 24 58 0f 1f 44 00 00 65 8b 05 2f 6c ca 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 18 de b4 0e 73 0d e8 f1 29 09 00 84 c0 <0f> 84 ca 01 00 00 83 3d 12 11 b5 0e 00 0f 84 d3 00 00 00 48 8b b4 [ 867.448618][ C0] RSP: 0018:ffffc9000318f3c0 EFLAGS: 00000202 [ 867.448635][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000001 [ 867.448648][ C0] RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: ffffffff8c4bdd20 [ 867.448662][ C0] RBP: ffffffff8177827f R08: 0000000000000000 R09: 0000000000000000 [ 867.448676][ C0] R10: dffffc0000000000 R11: ffffffff81b1fa10 R12: 0000000000000002 [ 867.448695][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000000 [ 867.448711][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.448732][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 867.448772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.448797][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.448818][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 867.448845][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.448867][ C0] unwind_next_frame+0xac/0x2550 [ 867.448888][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.448917][ C0] ? qlist_free_all+0x99/0x100 [ 867.448944][ C0] ? unwind_next_frame+0x8f/0x2550 [ 867.448969][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 867.448995][ C0] arch_stack_walk+0x11b/0x150 [ 867.449023][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 867.449054][ C0] stack_trace_save+0xa9/0x100 [ 867.449079][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 867.449103][ C0] ? __lock_acquire+0x683/0x2cf0 [ 867.449137][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.449163][ C0] save_stack+0x122/0x230 [ 867.449193][ C0] ? __pfx_save_stack+0x10/0x10 [ 867.449218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.449240][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 867.449265][ C0] ? __slab_free+0x274/0x2c0 [ 867.449291][ C0] ? qlist_free_all+0x99/0x100 [ 867.449314][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 867.449348][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.449374][ C0] ? page_ext_put+0x97/0xc0 [ 867.449406][ C0] __reset_page_owner+0x71/0x1f0 [ 867.449435][ C0] __free_frozen_pages+0xc1e/0xd10 [ 867.449470][ C0] __slab_free+0x274/0x2c0 [ 867.449503][ C0] ? qlist_free_all+0x8e/0x100 [ 867.449532][ C0] qlist_free_all+0x99/0x100 [ 867.449558][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 867.449585][ C0] kasan_quarantine_reduce+0x148/0x160 [ 867.449614][ C0] __kasan_kmalloc+0x22/0xb0 [ 867.449645][ C0] __kmalloc_noprof+0x375/0x720 [ 867.449670][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.449697][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 867.449723][ C0] ? tomoyo_encode+0x2ad/0x570 [ 867.449746][ C0] ? tomoyo_encode+0x2ad/0x570 [ 867.449775][ C0] tomoyo_encode+0x2ad/0x570 [ 867.449805][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 867.449842][ C0] tomoyo_path_perm+0x283/0x560 [ 867.449862][ C0] ? tomoyo_path_perm+0x251/0x560 [ 867.449882][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 867.449900][ C0] ? __x64_sys_openat+0x138/0x170 [ 867.449970][ C0] security_inode_getattr+0x12b/0x310 [ 867.450000][ C0] __x64_sys_newfstat+0x133/0x270 [ 867.450028][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.450053][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 867.450097][ C0] ? rcu_is_watching+0x15/0xb0 [ 867.450117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.450148][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.450170][ C0] do_syscall_64+0x174/0x580 [ 867.450192][ C0] ? trace_irq_disable+0x3b/0x140 [ 867.450223][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.450243][ C0] RIP: 0033:0x7f289d99c4a7 [ 867.450260][ C0] RSP: 002b:00007fffac50ca48 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 867.450279][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f289d99c4a7 [ 867.450294][ C0] RDX: 0000000000000000 RSI: 00007fffac50ca50 RDI: 0000000000000003 [ 867.450307][ C0] RBP: 00007fffac50cb4c R08: 0000000000000000 R09: 0000000000000000 [ 867.450320][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000077 [ 867.450333][ C0] R13: 0000000000000000 R14: 00000000000b0d78 R15: 00007fffac50cba0 [ 867.450363][ C0] [ 869.608169][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.614524][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.955372][ T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4989 P5624 P17572 P14540 } 13281 jiffies s: 18861 root: 0x0/T [ 930.955442][ T18] rcu: blocking rcu_node structures (internal RCU debug): [ 931.055224][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.067156][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 977.447379][ T31] INFO: task syz.7.4345:17561 blocked for more than 159 seconds. [ 977.447408][ T31] Tainted: G L syzkaller #0 [ 977.447420][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 977.447431][ T31] task:syz.7.4345 state:D stack:24752 pid:17561 tgid:17559 ppid:14540 task_flags:0x400140 flags:0x00080003 [ 977.447492][ T31] Call Trace: [ 977.447501][ T31] [ 977.447517][ T31] __schedule+0x17d9/0x56c0 [ 977.447545][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.447570][ T31] ? __lock_acquire+0x683/0x2cf0 [ 977.447604][ T31] ? wakeup_preempt_fair+0x745/0xb10 [ 977.447637][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 977.447664][ T31] ? __pfx___schedule+0x10/0x10 [ 977.447691][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.447718][ T31] ? schedule+0x90/0x2b0 [ 977.447743][ T31] schedule+0x164/0x2b0 [ 977.447766][ T31] synchronize_rcu_expedited+0x584/0x770 [ 977.447794][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 977.447818][ T31] ? packet_release+0xa33/0xd30 [ 977.447851][ T31] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 977.447891][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.447916][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 977.447945][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.447971][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.448003][ T31] packet_release+0xa38/0xd30 [ 977.448035][ T31] ? __pfx_packet_release+0x10/0x10 [ 977.448059][ T31] ? down_write+0x16d/0x200 [ 977.448091][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.448123][ T31] sock_close+0xad/0x220 [ 977.448152][ T31] ? __pfx_sock_close+0x10/0x10 [ 977.448179][ T31] __fput+0x418/0xa50 [ 977.448216][ T31] task_work_run+0x1d9/0x270 [ 977.448239][ T31] ? __pfx_task_work_run+0x10/0x10 [ 977.448260][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.448283][ T31] ? __fput_deferred+0x216/0x380 [ 977.448311][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 977.448344][ T31] get_signal+0x1181/0x12c0 [ 977.448372][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.448395][ T31] ? __sys_sendto+0x4d0/0x5a0 [ 977.448422][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 977.448450][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 977.448482][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 977.448530][ T31] exit_to_user_mode_loop+0x104/0x730 [ 977.448558][ T31] ? rcu_is_watching+0x15/0xb0 [ 977.448579][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.448602][ T31] do_syscall_64+0x353/0x580 [ 977.448626][ T31] ? trace_irq_disable+0x3b/0x140 [ 977.448659][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.448680][ T31] RIP: 0033:0x7f289d99de99 [ 977.448698][ T31] RSP: 002b:00007f289e870028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 977.448720][ T31] RAX: 00000000000100a6 RBX: 00007f289dc25fa0 RCX: 00007f289d99de99 [ 977.448736][ T31] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 977.448750][ T31] RBP: 00007f289da33eaf R08: 0000200000000140 R09: 0000000000000014 [ 977.448764][ T31] R10: 0000000088a8ffff R11: 0000000000000246 R12: 0000000000000000 [ 977.448778][ T31] R13: 00007f289dc26038 R14: 00007f289dc25fa0 R15: 00007fffac50c7a8 [ 977.448810][ T31] [ 977.448821][ T31] [ 977.448821][ T31] Showing all locks held in the system: [ 977.448832][ T31] 3 locks held by kworker/0:1/10: [ 977.448847][ T31] 1 lock held by khungtaskd/31: [ 977.448865][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 977.448921][ T31] 1 lock held by kcompactd0/34: [ 977.448935][ T31] 2 locks held by kworker/u8:3/48: [ 977.448948][ T31] 1 lock held by kswapd0/83: [ 977.448962][ T31] 2 locks held by kworker/0:2/186: [ 977.448988][ T31] 2 locks held by kworker/R-bat_e/3225: [ 977.449002][ T31] 3 locks held by udevd/4989: [ 977.449014][ T31] 2 locks held by dhcpcd/5283: [ 977.449026][ T31] 1 lock held by dhcpcd/5284: [ 977.449039][ T31] 2 locks held by getty/5377: [ 977.449051][ T31] #0: ffff888035e260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 977.449105][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 977.449164][ T31] 1 lock held by syz-executor/5609: [ 977.449177][ T31] 2 locks held by syz-executor/5622: [ 977.449190][ T31] 3 locks held by syz-executor/5624: [ 977.449203][ T31] 3 locks held by syz-executor/5625: [ 977.449215][ T31] 2 locks held by syz-executor/5626: [ 977.449230][ T31] 2 locks held by udevd/5745: [ 977.449242][ T31] 2 locks held by kworker/0:4/5760: [ 977.449257][ T31] 2 locks held by kworker/1:7/5849: [ 977.449269][ T31] 3 locks held by kworker/0:8/5898: [ 977.449283][ T31] 4 locks held by kworker/u8:18/7902: [ 977.449295][ T31] 3 locks held by kworker/u8:28/7912: [ 977.449308][ T31] 5 locks held by kworker/u8:41/7926: [ 977.449321][ T31] 3 locks held by kworker/u8:47/7932: [ 977.449333][ T31] 4 locks held by kworker/u8:48/7933: [ 977.449346][ T31] 4 locks held by kworker/u8:60/7945: [ 977.449358][ T31] 3 locks held by kworker/u8:61/7946: [ 977.449371][ T31] 2 locks held by kworker/u8:62/7947: [ 977.449386][ T31] 2 locks held by kworker/0:5/12858: [ 977.449399][ T31] 2 locks held by syz-executor/14540: [ 977.449412][ T31] 3 locks held by syz-executor/14775: [ 977.449428][ T31] 2 locks held by kworker/u8:0/16562: [ 977.449441][ T31] 3 locks held by kworker/u8:1/16565: [ 977.449453][ T31] 4 locks held by kworker/u8:2/16568: [ 977.449466][ T31] 2 locks held by kworker/u8:4/16570: [ 977.449478][ T31] 2 locks held by kworker/u8:5/16572: [ 977.449491][ T31] 4 locks held by kworker/u8:6/16574: [ 977.449503][ T31] 3 locks held by kworker/u8:7/16576: [ 977.449516][ T31] 3 locks held by kworker/u8:8/16578: [ 977.449529][ T31] 2 locks held by kworker/u8:9/16580: [ 977.449541][ T31] 3 locks held by kworker/u8:10/16581: [ 977.449554][ T31] 4 locks held by kworker/u8:11/16582: [ 977.449568][ T31] 5 locks held by syz.1.4333/17534: [ 977.449580][ T31] 2 locks held by syz.7.4345/17561: [ 977.449592][ T31] #0: ffff8880527c0800 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 977.449658][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 977.449713][ T31] 6 locks held by syz.4.4348/17567: [ 977.449726][ T31] 1 lock held by syz.8.4350/17572: [ 977.449738][ T31] [ 977.449745][ T31] ============================================= [ 977.449745][ T31] [ 977.449755][ T31] NMI backtrace for cpu 0 [ 977.449769][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 977.449793][ T31] Tainted: [L]=SOFTLOCKUP [ 977.449800][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 977.449811][ T31] Call Trace: [ 977.449818][ T31] [ 977.449826][ T31] dump_stack_lvl+0xe8/0x150 [ 977.449860][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 977.449890][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 977.449921][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 977.449953][ T31] sys_info+0x135/0x170 [ 977.449979][ T31] watchdog+0xfd7/0x1030 [ 977.450010][ T31] ? watchdog+0x1c7/0x1030 [ 977.450041][ T31] kthread+0x388/0x470 [ 977.450070][ T31] ? __pfx_watchdog+0x10/0x10 [ 977.450092][ T31] ? __pfx_kthread+0x10/0x10 [ 977.450122][ T31] ret_from_fork+0x514/0xb70 [ 977.450154][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 977.450182][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.450203][ T31] ? __switch_to+0xc89/0x1420 [ 977.450231][ T31] ? __pfx_kthread+0x10/0x10 [ 977.450260][ T31] ret_from_fork_asm+0x1a/0x30 [ 977.450293][ T31] [ 977.450304][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 977.450318][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 977.450342][ T31] Tainted: [L]=SOFTLOCKUP [ 977.450350][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 977.450362][ T31] Call Trace: [ 977.450370][ T31] [ 977.450378][ T31] vpanic+0x56c/0xa60 [ 977.450407][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.450433][ T31] ? __pfx_vpanic+0x10/0x10 [ 977.450461][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.450486][ T31] ? __down_trylock_console_sem+0x6b/0x110 [ 977.450515][ T31] panic+0xc5/0xd0 [ 977.450543][ T31] ? __pfx_panic+0x10/0x10 [ 977.450574][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.450597][ T31] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 977.450630][ T31] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 977.450664][ T31] watchdog+0x1030/0x1030 [ 977.450696][ T31] ? watchdog+0x1c7/0x1030 [ 977.450728][ T31] kthread+0x388/0x470 [ 977.450757][ T31] ? __pfx_watchdog+0x10/0x10 [ 977.450779][ T31] ? __pfx_kthread+0x10/0x10 [ 977.450810][ T31] ret_from_fork+0x514/0xb70 [ 977.450841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 977.450875][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.450898][ T31] ? __switch_to+0xc89/0x1420 [ 977.450926][ T31] ? __pfx_kthread+0x10/0x10 [ 977.450956][ T31] ret_from_fork_asm+0x1a/0x30 [ 977.450990][ T31] [ 977.451037][ T31] Kernel Offset: disabled