last executing test programs: 1m18.737287577s ago: executing program 1 (id=442): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x67b8, 0x4) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) recvfrom$inet(r0, 0x0, 0x0, 0x12140, 0x0, 0xfffffffffffffdff) 1m18.57035618s ago: executing program 1 (id=445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x5, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44004) 1m18.386912381s ago: executing program 1 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000a40), 0x1000) 1m18.241797466s ago: executing program 1 (id=452): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1400c, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@init_itable}, {@norecovery}]}, 0x3, 0x475, &(0x7f0000000240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000006840)='./bus\x00', 0xe1c00, 0x0, 0x2, 0x0, &(0x7f0000006880)) mount$overlay(0x0, &(0x7f0000006980)='./file0\x00', &(0x7f00000069c0), 0x8, &(0x7f0000006a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m17.637627415s ago: executing program 1 (id=455): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x20008004) 1m16.969915471s ago: executing program 1 (id=460): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xd}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24049014}, 0x20) 1m16.617831552s ago: executing program 32 (id=460): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xd}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24049014}, 0x20) 6.057424872s ago: executing program 2 (id=1037): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000dc0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0xa4) 4.512798842s ago: executing program 2 (id=1045): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="13080000000000000000110000003c00098008000100"], 0x84}}, 0x0) 4.063384579s ago: executing program 3 (id=1049): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc90, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x104) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.795435647s ago: executing program 2 (id=1050): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.510758478s ago: executing program 2 (id=1054): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 3.073839559s ago: executing program 0 (id=1058): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001e40)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 2.89339429s ago: executing program 0 (id=1060): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x6, 0x8, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000002ac0)=""/102400, 0x19000, 0x1000000000) 1.773215164s ago: executing program 3 (id=1064): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.609936086s ago: executing program 2 (id=1066): inotify_init() syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES8, @ANYRESOCT], 0x1, 0x184, &(0x7f0000000700)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x101) 1.54666705s ago: executing program 4 (id=1067): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setresuid(0x0, 0x0, 0xee00) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000000340)='./file0\x00', 0x0) 1.307778299s ago: executing program 4 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="f6e10e", 0x3}, {0x0}], 0x2) 1.115169138s ago: executing program 3 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000030a010800000000000000000a0000070900010073797a31001d00000900030073797a30000000001c000880040002"], 0x70}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1.113264214s ago: executing program 4 (id=1070): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="a2", 0x73220c8b}], 0x1}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 990.582228ms ago: executing program 5 (id=1071): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 920.782139ms ago: executing program 3 (id=1072): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 856.300893ms ago: executing program 4 (id=1073): setresuid(0x0, 0xffffffffffffffff, 0xee01) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) prlimit64(r0, 0x4, 0x0, 0x0) 798.6016ms ago: executing program 5 (id=1074): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) 733.916352ms ago: executing program 0 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7}]}) 703.04907ms ago: executing program 3 (id=1076): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) 632.912671ms ago: executing program 5 (id=1077): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x100}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 506.292281ms ago: executing program 0 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/nf_call_arptables\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 485.192081ms ago: executing program 2 (id=1079): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000300)={0x0, 0x0, 0x20, 0x9, 0x5ca}) 446.40364ms ago: executing program 4 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 403.366589ms ago: executing program 5 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r1, @ANYBLOB="05042abd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="c000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00"], 0xdc}, 0x1, 0x0, 0x0, 0x4000401}, 0x20004080) 353.386542ms ago: executing program 3 (id=1082): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 225.887503ms ago: executing program 0 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./p\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./p\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./p/asound/modules\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/1024, 0x400) 225.602906ms ago: executing program 5 (id=1084): syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) 109.720032ms ago: executing program 0 (id=1085): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffded, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 54.102546ms ago: executing program 4 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0', 0x1) 0s ago: executing program 5 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) kernel console output (not intermixed with test programs): entered promiscuous mode [ 162.830145][ T5865] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 162.851056][ T7253] sd 0:0:1:0: PR command failed: 1026 [ 162.851126][ T7253] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 162.851154][ T7253] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 163.076831][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.099656][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.235631][ T7148] team0: Port device team_slave_0 added [ 163.252648][ T7148] team0: Port device team_slave_1 added [ 163.287068][ T197] usb 5-1: USB disconnect, device number 3 [ 163.288583][ T197] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 163.468358][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.468370][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.468383][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.526847][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.526857][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.526872][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.711686][ T5748] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.761972][ T7148] hsr_slave_0: entered promiscuous mode [ 163.769849][ T7148] hsr_slave_1: entered promiscuous mode [ 163.770343][ T7148] debugfs: 'hsr0' already exists in 'hsr' [ 163.770352][ T7148] Cannot create hsr debugfs directory [ 163.875471][ T5748] usb 1-1: Using ep0 maxpacket: 32 [ 163.877818][ T5748] usb 1-1: New USB device found: idVendor=0499, idProduct=1010, bcdDevice=a.f5 [ 163.887655][ T5748] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 163.920558][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.920575][ T5748] usb 1-1: Product: syz [ 163.920582][ T5748] usb 1-1: Manufacturer: syz [ 163.920589][ T5748] usb 1-1: SerialNumber: syz [ 163.954391][ T5748] usb 1-1: config 0 descriptor?? [ 163.956395][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.041120][ T5748] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.291416][ T197] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.458984][ T197] usb 3-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 164.484955][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.484973][ T197] usb 3-1: Product: syz [ 164.484981][ T197] usb 3-1: Manufacturer: syz [ 164.484988][ T197] usb 3-1: SerialNumber: syz [ 164.517497][ T197] usb 3-1: config 0 descriptor?? [ 164.528579][ T197] hub 3-1:0.0: bad descriptor, ignoring hub [ 164.528595][ T197] hub 3-1:0.0: probe with driver hub failed with error -5 [ 164.633427][ T5653] Bluetooth: hci0: command tx timeout [ 164.737178][ T5748] usb 1-1: USB disconnect, device number 3 [ 164.760530][ T197] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 164.818311][ T197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.850450][ T197] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 164.850494][ T197] usb 3-1: media controller created [ 164.949211][ T197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.242680][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 165.317042][ T197] DVB: Unable to find symbol dib7000p_attach() [ 165.317054][ T197] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 165.533565][ T197] rc_core: IR keymap rc-dib0700-rc5 not found [ 165.533578][ T197] Registered IR keymap rc-empty [ 165.534131][ T197] dvb-usb: could not initialize remote control. [ 165.534139][ T197] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 165.539905][ T7148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.606005][ T197] usb 3-1: USB disconnect, device number 4 [ 165.645460][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.699879][ T7148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.737232][ T33] audit: type=1326 audit(1793775028.033:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 165.775373][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.797242][ T7148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.830740][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.844690][ T7148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.904710][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.945175][ T7282] loop4: detected capacity change from 0 to 32768 [ 165.988807][ T7305] loop2: detected capacity change from 0 to 2048 [ 166.009583][ T7282] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.049877][ T7305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.102682][ T197] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 166.148762][ T7282] XFS (loop4): Ending clean mount [ 166.353546][ T33] audit: type=1326 audit(1793775028.653:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353577][ T33] audit: type=1326 audit(1793775028.653:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353599][ T33] audit: type=1326 audit(1793775028.653:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353619][ T33] audit: type=1326 audit(1793775028.653:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353639][ T33] audit: type=1326 audit(1793775028.653:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353668][ T33] audit: type=1326 audit(1793775028.653:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353689][ T33] audit: type=1326 audit(1793775028.653:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353710][ T33] audit: type=1326 audit(1793775028.653:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.353731][ T33] audit: type=1326 audit(1793775028.653:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.500" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7fc00000 [ 166.679534][ T5654] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.712065][ T5653] Bluetooth: hci0: command tx timeout [ 166.794290][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.883735][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.917555][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.917619][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.990063][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.990134][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.484958][ T7341] loop0: detected capacity change from 0 to 512 [ 167.556687][ T7341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.556764][ T7341] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.785419][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.190877][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 168.190898][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 168.994564][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.892623][ T7148] veth0_vlan: entered promiscuous mode [ 169.928192][ T7424] loop4: detected capacity change from 0 to 512 [ 169.947678][ T7148] veth1_vlan: entered promiscuous mode [ 170.026168][ T7424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.026261][ T7424] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.114069][ T7148] veth0_macvtap: entered promiscuous mode [ 170.142711][ T7148] veth1_macvtap: entered promiscuous mode [ 170.173047][ T7424] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.212529][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.243201][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.284588][ T3674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.284853][ T3674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.284980][ T3674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.284998][ T3674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.286294][ T5654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.669130][ T7437] : renamed from bond0 (while UP) [ 170.758213][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.758229][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.954129][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.954144][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.798088][ T7472] netlink: 'syz.2.548': attribute type 12 has an invalid length. [ 171.798103][ T7472] netlink: 'syz.2.548': attribute type 29 has an invalid length. [ 171.798109][ T7472] netlink: 148 bytes leftover after parsing attributes in process `syz.2.548'. [ 172.389913][ T7494] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 172.425070][ T33] kauditd_printk_skb: 47 callbacks suppressed [ 172.425082][ T33] audit: type=1400 audit(1793775034.723:93): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=7493 comm="syz.2.556" name="p" offset=79 [ 174.022782][ T7516] loop2: detected capacity change from 0 to 32768 [ 174.065484][ T7516] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.123031][ T7516] XFS (loop2): Ending clean mount [ 174.295978][ T5639] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.506093][ T197] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 174.800760][ T7561] fido_id[7561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.955519][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 175.141054][ T7574] loop4: detected capacity change from 0 to 512 [ 175.180229][ T7574] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.587: inode has both inline data and extents flags [ 175.180252][ T7574] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.193614][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 175.193628][ C0] EXT4-fs (loop4): initial error at time 1793775037: ext4_orphan_get:1404: inode 15 [ 175.193644][ C0] EXT4-fs (loop4): last error at time 1793775037: ext4_orphan_get:1404: inode 15 [ 175.224345][ T7574] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.587: couldn't read orphan inode 15 (err -117) [ 175.224366][ T7574] loop4: lost filesystem error report for type 5 error -117 [ 175.254295][ T7574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.299729][ T7574] EXT4-fs (loop4): shut down requested (1) [ 175.533626][ T5748] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.682090][ T5748] usb 6-1: New USB device found: idVendor=046d, idProduct=c71f, bcdDevice=0.00 [ 175.683143][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 175.683174][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.723297][ T5748] usb 6-1: config 0 descriptor?? [ 175.724530][ T7580] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 175.889006][ T5654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.978178][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.978474][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.227022][ T5748] hid (null): report_id 0 is invalid [ 176.251759][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251786][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251801][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251817][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251831][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251846][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251860][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251875][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251889][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.251904][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 176.353181][ T5748] logitech-djreceiver 0003:046D:C71F.0003: unexpected long global item [ 176.353620][ T5748] logitech-djreceiver 0003:046D:C71F.0003: logi_dj_probe: parse failed [ 176.353665][ T5748] logitech-djreceiver 0003:046D:C71F.0003: probe with driver logitech-djreceiver failed with error -22 [ 176.461437][ T5748] usb 6-1: USB disconnect, device number 2 [ 176.529056][ T7597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.950532][ T7614] loop4: detected capacity change from 0 to 1024 [ 177.406075][ T7627] loop4: detected capacity change from 0 to 512 [ 177.425460][ T7627] EXT4-fs: Ignoring removed nobh option [ 177.448709][ T7627] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 177.466610][ T7628] loop5: detected capacity change from 0 to 128 [ 177.570278][ T7627] EXT4-fs error (device loop4): ext4_clear_blocks:893: inode #13: comm syz.4.610: attempt to clear invalid blocks 1 len 1 [ 177.570310][ T7627] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.571757][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 177.571769][ C0] EXT4-fs (loop4): initial error at time 1793775039: ext4_clear_blocks:893: inode 13 [ 177.571785][ C0] EXT4-fs (loop4): last error at time 1793775039: ext4_clear_blocks:893: inode 13 [ 177.662909][ T7627] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 177.699758][ T7627] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #13: comm syz.4.610: invalid indirect mapped block 1819239214 (level 0) [ 177.699796][ T7627] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.728865][ T7627] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #13: comm syz.4.610: invalid indirect mapped block 1819239214 (level 1) [ 177.728891][ T7627] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.768126][ T7628] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 177.768154][ T7628] hpfs: filesystem error: improperly stopped [ 177.768161][ T7628] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 177.768169][ T7628] hpfs: You really don't want any checks? You are crazy... [ 177.768179][ T7628] hpfs: Code page index out of array [ 177.768183][ T7628] hpfs: code page support is disabled [ 177.768963][ T7628] hpfs: hpfs_map_4sectors(): unaligned read [ 177.769256][ T7628] hpfs: hpfs_map_4sectors(): unaligned read [ 177.769263][ T7628] hpfs: filesystem error: unable to find root dir [ 177.886568][ T7627] EXT4-fs (loop4): 1 truncate cleaned up [ 177.887517][ T7627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.957687][ T7627] EXT4-fs (loop4): shut down requested (2) [ 178.042638][ T5654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.361507][ T7645] 9p: Unknown uid 00000000004294967295 [ 178.490848][ T7624] loop0: detected capacity change from 0 to 32768 [ 178.588109][ T7624] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.649436][ T7624] XFS (loop0): Ending clean mount [ 178.737205][ T5640] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.940232][ T7633] loop2: detected capacity change from 0 to 32768 [ 178.982824][ T7633] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.053682][ T7633] XFS (loop2): Ending clean mount [ 179.185030][ T33] audit: type=1800 audit(1793775041.473:94): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.613" name="file1" dev="loop2" ino=4422 res=0 errno=-22 [ 179.305450][ T5639] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.463457][ T7683] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 179.463481][ T7683] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 179.553454][ T197] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 179.705672][ T197] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.718703][ T197] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 179.718721][ T197] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64 [ 179.718735][ T197] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.756458][ T197] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.756474][ T197] usb 4-1: Product: syz [ 179.756482][ T197] usb 4-1: Manufacturer: syz [ 179.756489][ T197] usb 4-1: SerialNumber: syz [ 179.758590][ T197] usb 4-1: config 0 descriptor?? [ 179.798703][ T7679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.815972][ T197] usb 4-1: selecting invalid altsetting 0 [ 180.370187][ T197] usb 4-1: USB disconnect, device number 4 [ 180.451730][ T7704] loop5: detected capacity change from 0 to 4096 [ 180.530635][ T7704] ntfs3(loop5): Failed to load $Extend (-22). [ 180.530654][ T7704] ntfs3(loop5): Failed to initialize $Extend. [ 180.601419][ T5755] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.751386][ T5755] usb 5-1: Using ep0 maxpacket: 8 [ 180.754194][ T5755] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.758383][ T5755] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 180.758413][ T5755] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.758429][ T5755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.758441][ T5755] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.758453][ T5755] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.758475][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.199603][ T7720] loop2: detected capacity change from 0 to 32768 [ 181.248797][ T7720] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.248820][ T7720] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.310991][ T5755] usb 5-1: GET_CAPABILITIES returned 0 [ 181.311027][ T5755] usbtmc 5-1:16.0: can't read capabilities [ 181.344066][ T7720] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 181.436067][ T197] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 181.436084][ T197] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 181.558997][ T5755] usb 5-1: USB disconnect, device number 4 [ 181.663774][ T7728] netlink: 76 bytes leftover after parsing attributes in process `syz.0.648'. [ 181.663791][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.648'. [ 181.812471][ T7730] macsec1: entered allmulticast mode [ 181.813044][ T7730] batman_adv: batadv0: Adding interface: macsec1 [ 181.813053][ T7730] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.813068][ T7730] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 181.886669][ T197] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 450ms [ 181.948773][ T197] gfs2: fsid=syz:syz.0: jid=0: Done [ 181.949935][ T7720] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 182.326449][ T7744] nbd: socks must be embedded in a SOCK_ITEM attr [ 182.347561][ T7742] loop5: detected capacity change from 0 to 4096 [ 182.348208][ T7742] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.370601][ T7744] block nbd0: shutting down sockets [ 182.387990][ T7742] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 182.463335][ T7742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.745412][ T7148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.992224][ T7759] loop5: detected capacity change from 0 to 1024 [ 183.003681][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.661'. [ 183.003695][ T7758] netlink: 3 bytes leftover after parsing attributes in process `syz.4.661'. [ 183.003703][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.661'. [ 183.003710][ T7758] netlink: 3 bytes leftover after parsing attributes in process `syz.4.661'. [ 183.360606][ T7759] hfsplus: xattr search failed [ 183.404971][ T7764] hfsplus: xattr search failed [ 186.279596][ T7789] loop2: detected capacity change from 0 to 8 [ 186.347964][ T7789] SQUASHFS error: Unable to read directory block [629:fe] [ 186.733148][ T5748] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.884020][ T5748] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 186.884048][ T5748] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 186.890596][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.890612][ T5748] usb 1-1: config 1 has no interface number 0 [ 186.902449][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.902465][ T5748] usb 1-1: config 1 has no interface number 0 [ 186.949403][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.949421][ T5748] usb 1-1: config 1 has no interface number 0 [ 186.950278][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.950292][ T5748] usb 1-1: config 1 has no interface number 0 [ 186.951235][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.951248][ T5748] usb 1-1: config 1 has no interface number 0 [ 187.004243][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 187.004259][ T5748] usb 1-1: config 1 has no interface number 0 [ 187.005707][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 187.005721][ T5748] usb 1-1: config 1 has no interface number 0 [ 187.008105][ T5748] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 187.008119][ T5748] usb 1-1: config 1 has no interface number 0 [ 187.067439][ T5748] usb 1-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 187.067455][ T5748] usb 1-1: Product: syz [ 187.067462][ T5748] usb 1-1: Manufacturer: syz [ 187.067469][ T5748] usb 1-1: SerialNumber: syz [ 187.108014][ T5748] usb 1-1: 3:0 : does not exist [ 187.108029][ T5748] usb 1-1: 3:0 : does not exist [ 187.212015][ T7814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.401602][ T5748] usb 1-1: USB disconnect, device number 4 [ 187.912486][ T7817] loop5: detected capacity change from 0 to 32768 [ 187.915215][ T7817] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 187.944787][ T7817] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.681 (7817) [ 187.972635][ T7817] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 187.972656][ T7817] BTRFS info (device loop5): using crc32c checksum algorithm [ 188.201782][ T7817] BTRFS info (device loop5): rebuilding free space tree [ 188.395416][ T7845] loop0: detected capacity change from 0 to 2048 [ 188.464633][ T7846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.648572][ T7817] BTRFS info (device loop5): disabling free space tree [ 188.648644][ T7817] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.648657][ T7817] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.728156][ T7832] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.728344][ T7832] block device autoloading is deprecated and will be removed. [ 188.752826][ T7817] BTRFS info (device loop5): enabling ssd optimizations [ 188.752842][ T7817] BTRFS info (device loop5): turning on async discard [ 188.752851][ T7817] BTRFS info (device loop5): force clearing of disk cache [ 188.752861][ T7817] BTRFS info (device loop5): use zstd compression, level 3 [ 188.816701][ T7846] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 188.816723][ T7846] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 188.845848][ T7846] Remounting filesystem read-only [ 188.852617][ T5640] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 188.937523][ T33] audit: type=1800 audit(1793775051.233:95): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.681" name="bus" dev="loop5" ino=263 res=0 errno=-22 [ 189.153694][ T7148] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 189.407813][ T7863] tipc: Started in network mode [ 189.407836][ T7863] tipc: Node identity ac14142f, cluster identity 4711 [ 189.442657][ T7863] tipc: New replicast peer: 127.0.0.1 [ 189.459913][ T7863] tipc: Enabled bearer , priority 10 [ 189.492580][ T7863] tipc: New replicast peer: 255.255.255.255 [ 189.662310][ T7871] loop4: detected capacity change from 0 to 256 [ 189.730999][ T7871] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 189.818651][ T7876] netlink: 100 bytes leftover after parsing attributes in process `syz.5.701'. [ 190.183153][ T7884] loop2: detected capacity change from 0 to 256 [ 190.205814][ T7884] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 190.375401][ T84] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 190.565594][ T10] tipc: Node number set to 2886997039 [ 190.606957][ T7892] loop2: detected capacity change from 0 to 164 [ 190.835993][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 190.850472][ T7869] loop3: detected capacity change from 0 to 40427 [ 190.886620][ T3674] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.886673][ T3674] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.886712][ T3674] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.886749][ T3674] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.948169][ T7869] F2FS-fs (loop3): invalid crc value [ 190.982076][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 190.984373][ T10] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 190.990056][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.044881][ T10] usb 6-1: config 0 descriptor?? [ 191.214219][ T7869] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.278165][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 191.297700][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.311609][ T7869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.312484][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 191.312514][ T10] usb 6-1: media controller created [ 191.384473][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.502836][ T10] az6027: usb out operation failed. (-71) [ 191.507481][ T10] az6027: usb out operation failed. (-71) [ 191.507494][ T10] stb0899_attach: Driver disabled by Kconfig [ 191.507500][ T10] az6027: no front-end attached [ 191.507500][ T10] [ 191.508520][ T10] az6027: usb out operation failed. (-71) [ 191.508531][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 191.509756][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 191.571884][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 191.571899][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 191.598688][ T10] usb 6-1: USB disconnect, device number 3 [ 191.614482][ T5638] syz-executor: attempt to access beyond end of device [ 191.614482][ T5638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.662818][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 191.662839][ T5638] Tainted: [L]=SOFTLOCKUP [ 191.662843][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.662858][ T5638] Call Trace: [ 191.662863][ T5638] [ 191.662868][ T5638] dump_stack_lvl+0xe8/0x150 [ 191.662893][ T5638] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 191.662909][ T5638] f2fs_write_end_bio+0xf7d/0x1310 [ 191.662936][ T5638] __submit_merged_bio+0x258/0x6a0 [ 191.662947][ T5638] ? rcu_is_watching+0x16/0xb0 [ 191.662967][ T5638] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 191.662980][ T5638] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 191.663004][ T5638] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 191.663029][ T5638] ? __lock_acquire+0x747/0x2de0 [ 191.663053][ T5638] ? __lock_acquire+0x747/0x2de0 [ 191.663069][ T5638] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 191.663083][ T5638] ? __lock_acquire+0x747/0x2de0 [ 191.663119][ T5638] ? rcu_is_watching+0x16/0xb0 [ 191.663135][ T5638] ? rcu_is_watching+0x16/0xb0 [ 191.663148][ T5638] ? __kasan_check_byte+0x12/0x40 [ 191.663168][ T5638] ? is_bpf_text_address+0x292/0x2b0 [ 191.663180][ T5638] ? is_bpf_text_address+0x26/0x2b0 [ 191.663192][ T5638] ? kernel_text_address+0xa5/0xe0 [ 191.663205][ T5638] ? __kernel_text_address+0xd/0x30 [ 191.663227][ T5638] ? unwind_get_return_address+0x4d/0x90 [ 191.663242][ T5638] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 191.663255][ T5638] ? arch_stack_walk+0xfb/0x150 [ 191.663275][ T5638] ? stack_trace_save+0xa9/0x100 [ 191.663287][ T5638] ? __pfx_stack_trace_save+0x10/0x10 [ 191.663301][ T5638] ? check_path+0x21/0x40 [ 191.663318][ T5638] ? add_lock_to_list+0xc7/0x100 [ 191.663334][ T5638] ? lockdep_unlock+0x5c/0xd0 [ 191.663344][ T5638] ? __lock_acquire+0x1511/0x2de0 [ 191.663376][ T5638] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.663393][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 191.663403][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.663417][ T5638] do_writepages+0x338/0x560 [ 191.663436][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 191.663449][ T5638] filemap_fdatawrite+0x1e9/0x2f0 [ 191.663463][ T5638] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 191.663499][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 191.663511][ T5638] f2fs_sync_dirty_inodes+0x471/0x970 [ 191.663534][ T5638] f2fs_write_checkpoint+0x867/0x24d0 [ 191.663573][ T5638] kill_f2fs_super+0x2df/0x700 [ 191.663589][ T5638] ? rcu_do_enqueue+0x616/0x870 [ 191.663605][ T5638] ? lockdep_hardirqs_on+0x7b/0x110 [ 191.663619][ T5638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 191.663641][ T5638] ? __pfx_call_rcu+0x10/0x10 [ 191.663654][ T5638] ? shrinker_free+0x2a7/0x3b0 [ 191.663667][ T5638] deactivate_locked_super+0xbe/0x110 [ 191.663684][ T5638] cleanup_mnt+0x204/0x2a0 [ 191.663698][ T5638] task_work_run+0x1d9/0x260 [ 191.663713][ T5638] ? __pfx_task_work_run+0x10/0x10 [ 191.663731][ T5638] exit_to_user_mode_loop+0x204/0x770 [ 191.663745][ T5638] ? rcu_is_watching+0x16/0xb0 [ 191.663762][ T5638] do_syscall_64+0x328/0x520 [ 191.663774][ T5638] ? trace_irq_disable+0x3b/0x140 [ 191.663789][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.663799][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 191.663812][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.663826][ T5638] RIP: 0033:0x7f9498fa0d57 [ 191.663839][ T5638] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 191.663848][ T5638] RSP: 002b:00007ffd4ac79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 191.663860][ T5638] RAX: 0000000000000000 RBX: 00007f9499036fb3 RCX: 00007f9498fa0d57 [ 191.663867][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4ac790e0 [ 191.663873][ T5638] RBP: 00007ffd4ac790e0 R08: 00007ffd4ac7a0e0 R09: 00000000ffffffff [ 191.663880][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4ac7a170 [ 191.663886][ T5638] R13: 00007f9499036fb3 R14: 000000000002eb57 R15: 00007ffd4ac7a1b0 [ 191.663903][ T5638] [ 191.663922][ T5638] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 192.145765][ T7890] loop4: detected capacity change from 0 to 40427 [ 192.165614][ T7890] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 192.165630][ T7890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 192.196913][ T7890] F2FS-fs (loop4): invalid crc value [ 192.278771][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 192.424390][ T7890] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 192.494848][ T7890] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 192.494867][ T7890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.597765][ T7890] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 192.871653][ T5641] Bluetooth: hci5: command 0x1003 tx timeout [ 192.871736][ T5653] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.025144][ T7923] ip_tables: iptables: counters copy to user failed while replacing table [ 194.480427][ T7937] loop2: detected capacity change from 0 to 262144 [ 194.494880][ T7937] F2FS-fs (loop2): invalid crc value [ 194.548467][ T7937] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 194.566093][ T7937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 195.245344][ T33] audit: type=1400 audit(1793775057.543:96): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7960 comm="syz.3.735" name="unknown" offset=16 [ 195.910861][ T7959] loop0: detected capacity change from 0 to 32768 [ 195.931650][ T7959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.734 (7959) [ 195.969039][ T7959] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.969062][ T7959] BTRFS info (device loop0): using sha256 checksum algorithm [ 196.146035][ T7959] BTRFS info (device loop0): enabling ssd optimizations [ 196.146054][ T7959] BTRFS info (device loop0): turning on async discard [ 196.146079][ T7959] BTRFS info (device loop0): enabling free space tree [ 196.146089][ T7959] BTRFS info (device loop0): use zlib compression, level 3 [ 196.299911][ T5640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.628026][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 196.628047][ T7994] nbd: socks must be embedded in a SOCK_ITEM attr [ 196.935882][ T8002] mmap: syz.4.747 (8002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.972308][ T8002] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.392727][ T8019] vxcan0: tx address claim with dest, not broadcast [ 197.489031][ T8022] device-mapper: table: 248:4: multipath: invalid number of priority groups (-EINVAL) [ 197.489047][ T8022] device-mapper: ioctl: error adding target to table [ 197.662354][ T8025] loop4: detected capacity change from 0 to 2048 [ 197.684278][ T8025] ext4: Unknown parameter 'dont_measure' [ 197.910886][ T8035] loop4: detected capacity change from 0 to 512 [ 197.938816][ T8035] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 197.938828][ T8035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.008886][ T8035] EXT4-fs (loop4): 1 truncate cleaned up [ 198.009798][ T8035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.084689][ T8034] loop5: detected capacity change from 0 to 4096 [ 198.097391][ T8035] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 198.124653][ T8039] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 198.124667][ T8039] netlink: 'syz.3.763': attribute type 2 has an invalid length. [ 198.157521][ T8034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.249141][ T5654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.294569][ T8034] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 198.627083][ T7148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.713856][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.713891][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.047532][ T8066] ipvlan2: entered allmulticast mode [ 199.047552][ T8066] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 199.074099][ T8066] batman_adv: batadv0: Adding interface: ipvlan2 [ 199.074112][ T8066] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.074129][ T8066] batman_adv: batadv0: Interface activated: ipvlan2 [ 199.322463][ T8073] loop2: detected capacity change from 0 to 512 [ 199.342306][ T8073] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 199.342319][ T8073] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.372005][ T8073] EXT4-fs (loop2): 1 truncate cleaned up [ 199.372949][ T8073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.416836][ T8072] serio: Serial port ttyS3 [ 199.548410][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.643542][ T8079] bcache: register_bcache() error : failed to open device [ 199.788356][ T8063] loop5: detected capacity change from 0 to 32768 [ 199.841618][ T8085] loop3: detected capacity change from 0 to 512 [ 199.880543][ T8085] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.780: iget: bad i_size value: 38620345925642 [ 199.880565][ T8085] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.881307][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 199.881318][ C0] EXT4-fs (loop3): initial error at time 1793775062: ext4_orphan_get:1404: inode 15 [ 199.881345][ C0] EXT4-fs (loop3): last error at time 1793775062: ext4_orphan_get:1404: inode 15 [ 199.905838][ T8085] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.780: couldn't read orphan inode 15 (err -117) [ 199.905858][ T8085] loop3: lost filesystem error report for type 5 error -117 [ 199.907567][ T8085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.008007][ T8084] rnbd_client L127: Can't parse path ip:: -22 [ 200.020322][ T33] audit: type=1800 audit(1793775062.313:97): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.780" name="file1" dev="loop3" ino=18 res=0 errno=-22 [ 200.108326][ T8085] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.780: bg 0: block 5: invalid block bitmap [ 200.152655][ T8085] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 200.152676][ T8085] EXT4-fs (loop3): This should not happen!! Data will be lost [ 200.152676][ T8085] [ 200.152684][ T8085] EXT4-fs (loop3): Total free blocks count 0 [ 200.152692][ T8085] EXT4-fs (loop3): Free/Dirty block details [ 200.152699][ T8085] EXT4-fs (loop3): free_blocks=0 [ 200.152707][ T8085] EXT4-fs (loop3): dirty_blocks=4 [ 200.152714][ T8085] EXT4-fs (loop3): Block reservation details [ 200.152720][ T8085] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 200.342282][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.417277][ T8092] TCP: tcp_parse_options: Illegal window scaling value 75 > 14 received [ 200.417304][ T8092] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 200.562574][ T33] audit: type=1400 audit(1793775062.863:98): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8095 comm="syz.3.785" name="p" offset=48 [ 200.675476][ T8102] loop5: detected capacity change from 0 to 512 [ 200.693240][ T8102] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 200.728344][ T8099] sctp: [Deprecated]: syz.2.786 (pid 8099) Use of int in maxseg socket option. [ 200.728344][ T8099] Use struct sctp_assoc_value instead [ 200.814845][ T8102] EXT4-fs (loop5): 1 truncate cleaned up [ 200.889522][ T8102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.941017][ T8107] loop3: detected capacity change from 0 to 2048 [ 200.985054][ T8107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 201.132964][ T7148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.213811][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 201.812732][ T8142] loop5: detected capacity change from 0 to 16 [ 201.941040][ T8148] loop0: detected capacity change from 0 to 1024 [ 201.942978][ T8148] EXT4-fs: Ignoring removed orlov option [ 201.942993][ T8148] EXT4-fs: Ignoring removed i_version option [ 201.998119][ T8142] erofs (device loop5): mounted with root inode @ nid 36. [ 202.010976][ T8148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.158238][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.915791][ T8161] loop4: detected capacity change from 0 to 32768 [ 202.930850][ T8161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.808 (8161) [ 202.968399][ T8161] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.968421][ T8161] BTRFS info (device loop4): using sha256 checksum algorithm [ 203.054903][ T8161] BTRFS info (device loop4): enabling ssd optimizations [ 203.055470][ T8161] BTRFS info (device loop4): disabling tree log [ 203.055483][ T8161] BTRFS info (device loop4): turning on async discard [ 203.055491][ T8161] BTRFS info (device loop4): enabling free space tree [ 203.194611][ T5748] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.246310][ T5654] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.352376][ T5748] usb 6-1: Using ep0 maxpacket: 8 [ 203.356173][ T5748] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.359598][ T5748] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 203.359655][ T5748] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 203.359668][ T5748] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 203.359680][ T5748] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 203.359693][ T5748] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.359704][ T5748] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.359727][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.702474][ T5748] usb 6-1: GET_CAPABILITIES returned 0 [ 203.702504][ T5748] usbtmc 6-1:16.0: can't read capabilities [ 203.941518][ T5748] usb 6-1: USB disconnect, device number 4 [ 204.226875][ T8231] netlink: 'syz.0.834': attribute type 9 has an invalid length. [ 204.255273][ T8233] loop3: detected capacity change from 0 to 512 [ 204.276094][ T8233] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 204.276107][ T8233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.308694][ T8233] EXT4-fs (loop3): 1 truncate cleaned up [ 204.309593][ T8233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.335367][ T197] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.547911][ T8237] loop2: detected capacity change from 0 to 32768 [ 204.562337][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 204.566159][ T197] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 204.587064][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.607282][ T8237] (syz.2.837,8237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 204.607506][ T8237] (syz.2.837,8237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 204.609783][ T197] usb 5-1: config 0 descriptor?? [ 204.625849][ T8237] (syz.2.837,8237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 204.646142][ T8237] JBD2: Ignoring recovery information on journal [ 204.702442][ T8237] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 204.754120][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.864447][ T8237] (syz.2.837,8237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 204.864507][ T8237] (syz.2.837,8237,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 204.864522][ T8237] (syz.2.837,8237,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 204.864549][ T8237] (syz.2.837,8237,0):ocfs2_quota_read:201 ERROR: status = -5 [ 204.864580][ T8237] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 204.864677][ T8237] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 204.864689][ T8237] (syz.2.837,8237,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 204.865545][ T8237] (syz.2.837,8237,0):ocfs2_mknod:318 ERROR: status = -5 [ 204.865589][ T8237] (syz.2.837,8237,0):ocfs2_mknod:507 ERROR: status = -5 [ 204.865600][ T8237] (syz.2.837,8237,0):ocfs2_create:679 ERROR: status = -5 [ 204.979059][ T197] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 204.996186][ T197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.999895][ T197] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 204.999945][ T197] usb 5-1: media controller created [ 205.038193][ T8240] loop0: detected capacity change from 0 to 4096 [ 205.074605][ T197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.162661][ T8240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.232688][ T197] az6027: usb out operation failed. (-71) [ 205.239528][ T197] az6027: usb out operation failed. (-71) [ 205.239538][ T197] stb0899_attach: Driver disabled by Kconfig [ 205.239543][ T197] az6027: no front-end attached [ 205.239543][ T197] [ 205.240995][ T197] az6027: usb out operation failed. (-71) [ 205.241006][ T197] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 205.242318][ T197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 205.300154][ T197] dvb-usb: schedule remote query interval to 400 msecs. [ 205.300169][ T197] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 205.354119][ T197] usb 5-1: USB disconnect, device number 5 [ 205.354740][ T8240] EXT4-fs (loop0): shut down requested (0) [ 205.466698][ T5639] ocfs2: Unmounting device (7,2) on (node local) [ 205.627008][ T197] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 206.110257][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.317532][ T33] audit: type=1400 audit(1793775068.613:99): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="::o" pid=8270 comm="syz.0.850" name="::o" offset=35 [ 206.373212][ T8266] loop2: detected capacity change from 0 to 4096 [ 206.406536][ T8266] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 206.430979][ T8266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.779495][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.939571][ T8291] loop5: detected capacity change from 0 to 736 [ 206.962515][ T8293] loop3: detected capacity change from 0 to 512 [ 206.965590][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 206.998380][ T8293] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 206.998394][ T8293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 206.998562][ T8293] EXT4-fs (loop3): orphan cleanup on readonly fs [ 207.000261][ T8293] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.861: iget: bad i_size value: 12154761577498 [ 207.000302][ T8293] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 207.001312][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 207.001324][ C0] EXT4-fs (loop3): initial error at time 1793775069: ext4_orphan_get:1404: inode 13 [ 207.001339][ C0] EXT4-fs (loop3): last error at time 1793775069: ext4_orphan_get:1404: inode 13 [ 207.018619][ T8293] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.861: couldn't read orphan inode 13 (err -117) [ 207.018637][ T8293] loop3: lost filesystem error report for type 5 error -117 [ 207.079218][ T8293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.146225][ T8289] vlan2: entered allmulticast mode [ 207.146240][ T8289] macsec0: entered allmulticast mode [ 207.146248][ T8289] veth1_macvtap: entered allmulticast mode [ 207.187822][ T8289] batman_adv: batadv0: Adding interface: vlan2 [ 207.187835][ T8289] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.187850][ T8289] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 207.322949][ T8293] CacheFiles: Failed to register: -30 [ 207.426819][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.634671][ T8299] loop2: detected capacity change from 0 to 4096 [ 207.728843][ T8299] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 207.751214][ T8307] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.824371][ T8299] NILFS (loop2): mounting fs with errors [ 207.903698][ T8299] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 159744 [ 207.903717][ T8299] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 207.944851][ T8299] NILFS (loop2): error -5 truncating bmap (ino=15) [ 208.463223][ T8326] netlink: 27 bytes leftover after parsing attributes in process `syz.4.876'. [ 208.580511][ T8331] tap0: tun_chr_ioctl cmd 2147767506 [ 208.612586][ T8334] loop2: detected capacity change from 0 to 512 [ 208.635366][ T8334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.714260][ T8334] EXT4-fs error (device loop2): ext4_readdir:226: inode #2: comm syz.2.880: path /newroot/181/file1: directory fails checksum at offset 0 [ 208.894448][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.263510][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 209.422619][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 209.425043][ T10] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.426590][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 209.426619][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.426630][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.426643][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.426654][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.426676][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.748062][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 209.748091][ T10] usbtmc 3-1:16.0: can't read capabilities [ 209.931213][ T8373] loop3: detected capacity change from 0 to 256 [ 209.939720][ T8355] loop5: detected capacity change from 0 to 40427 [ 209.956740][ T8355] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 209.956757][ T8355] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 210.007109][ T10] usb 3-1: USB disconnect, device number 5 [ 210.018026][ T8355] F2FS-fs (loop5): invalid crc value [ 210.037017][ T8373] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b39636, utbl_chksum : 0xe619d30d) [ 210.294516][ T8355] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.377588][ T8355] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 210.377606][ T8355] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 210.546757][ T7148] syz-executor: attempt to access beyond end of device [ 210.546757][ T7148] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.593329][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 210.593350][ T7148] Tainted: [L]=SOFTLOCKUP [ 210.593354][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.593360][ T7148] Call Trace: [ 210.593365][ T7148] [ 210.593371][ T7148] dump_stack_lvl+0xe8/0x150 [ 210.593393][ T7148] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 210.593409][ T7148] f2fs_write_end_bio+0xf7d/0x1310 [ 210.593433][ T7148] __submit_merged_bio+0x258/0x6a0 [ 210.593444][ T7148] ? rcu_is_watching+0x16/0xb0 [ 210.593463][ T7148] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 210.593476][ T7148] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 210.593500][ T7148] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 210.593525][ T7148] ? __lock_acquire+0x747/0x2de0 [ 210.593549][ T7148] ? __lock_acquire+0x747/0x2de0 [ 210.593563][ T7148] ? __lock_acquire+0x747/0x2de0 [ 210.593576][ T7148] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 210.593614][ T7148] ? rcu_is_watching+0x16/0xb0 [ 210.593630][ T7148] ? rcu_is_watching+0x16/0xb0 [ 210.593660][ T7148] ? __kasan_check_byte+0x12/0x40 [ 210.593679][ T7148] ? is_bpf_text_address+0x292/0x2b0 [ 210.593690][ T7148] ? is_bpf_text_address+0x26/0x2b0 [ 210.593702][ T7148] ? kernel_text_address+0xa5/0xe0 [ 210.593716][ T7148] ? __kernel_text_address+0xd/0x30 [ 210.593728][ T7148] ? unwind_get_return_address+0x4d/0x90 [ 210.593742][ T7148] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.593754][ T7148] ? arch_stack_walk+0xfb/0x150 [ 210.593775][ T7148] ? stack_trace_save+0xa9/0x100 [ 210.593786][ T7148] ? __pfx_stack_trace_save+0x10/0x10 [ 210.593801][ T7148] ? check_path+0x21/0x40 [ 210.593817][ T7148] ? add_lock_to_list+0xc7/0x100 [ 210.593833][ T7148] ? lockdep_unlock+0x5c/0xd0 [ 210.593843][ T7148] ? __lock_acquire+0x1511/0x2de0 [ 210.593870][ T7148] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.593886][ T7148] ? do_raw_spin_unlock+0xf5/0x200 [ 210.593897][ T7148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.593911][ T7148] do_writepages+0x338/0x560 [ 210.593931][ T7148] ? do_raw_spin_unlock+0xf5/0x200 [ 210.593944][ T7148] filemap_fdatawrite+0x1e9/0x2f0 [ 210.593958][ T7148] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 210.593993][ T7148] ? do_raw_spin_unlock+0xf5/0x200 [ 210.594006][ T7148] f2fs_sync_dirty_inodes+0x471/0x970 [ 210.594028][ T7148] f2fs_write_checkpoint+0x867/0x24d0 [ 210.594066][ T7148] kill_f2fs_super+0x2df/0x700 [ 210.594088][ T7148] ? rcu_do_enqueue+0x616/0x870 [ 210.594100][ T7148] ? lockdep_hardirqs_on+0x7b/0x110 [ 210.594113][ T7148] ? __pfx_kill_f2fs_super+0x10/0x10 [ 210.594134][ T7148] ? __pfx_call_rcu+0x10/0x10 [ 210.594146][ T7148] ? shrinker_free+0x2a7/0x3b0 [ 210.594160][ T7148] deactivate_locked_super+0xbe/0x110 [ 210.594175][ T7148] cleanup_mnt+0x204/0x2a0 [ 210.594188][ T7148] task_work_run+0x1d9/0x260 [ 210.594202][ T7148] ? __pfx_task_work_run+0x10/0x10 [ 210.594220][ T7148] exit_to_user_mode_loop+0x204/0x770 [ 210.594234][ T7148] ? rcu_is_watching+0x16/0xb0 [ 210.594251][ T7148] do_syscall_64+0x328/0x520 [ 210.594262][ T7148] ? trace_irq_disable+0x3b/0x140 [ 210.594276][ T7148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.594286][ T7148] ? clear_bhb_loop+0x70/0xc0 [ 210.594299][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.594309][ T7148] RIP: 0033:0x7f63bd1a0d57 [ 210.594320][ T7148] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 210.594329][ T7148] RSP: 002b:00007fffc90baac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 210.594341][ T7148] RAX: 0000000000000000 RBX: 00007f63bd236fb3 RCX: 00007f63bd1a0d57 [ 210.594348][ T7148] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc90bab80 [ 210.594354][ T7148] RBP: 00007fffc90bab80 R08: 00007fffc90bbb80 R09: 00000000ffffffff [ 210.594361][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc90bbc10 [ 210.594367][ T7148] R13: 00007f63bd236fb3 R14: 00000000000335a3 R15: 00007fffc90bbc50 [ 210.594384][ T7148] [ 210.594403][ T7148] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 211.072031][ T8389] loop0: detected capacity change from 0 to 1024 [ 211.458183][ T33] audit: type=1400 audit(1793775073.753:100): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=8398 comm="syz.3.909" name="//o" offset=71 [ 211.656346][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 211.976175][ T8413] kvm: kvm [8412]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001f) [ 212.628778][ T8438] netlink: 64 bytes leftover after parsing attributes in process `syz.3.927'. [ 212.645133][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 212.999516][ T33] audit: type=1326 audit(1793775075.293:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.000116][ T33] audit: type=1326 audit(1793775075.293:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.000259][ T33] audit: type=1326 audit(1793775075.293:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.090984][ T33] audit: type=1326 audit(1793775075.383:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.118533][ T33] audit: type=1326 audit(1793775075.413:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.148946][ T33] audit: type=1326 audit(1793775075.443:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.148976][ T33] audit: type=1326 audit(1793775075.443:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.148996][ T33] audit: type=1326 audit(1793775075.443:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.235272][ T33] audit: type=1326 audit(1793775075.533:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.933" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5199fb19 code=0x7ffc0000 [ 213.444477][ T8457] loop5: detected capacity change from 0 to 64 [ 213.517818][ T8460] jffs2: notice: (8460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.753151][ T8415] loop4: detected capacity change from 0 to 32768 [ 213.982629][ T8466] loop3: detected capacity change from 0 to 128 [ 214.016291][ T8466] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 214.101743][ T8415] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 214.101743][ T8415] [ 214.454947][ T8459] loop0: detected capacity change from 0 to 32768 [ 214.456023][ T8473] loop3: detected capacity change from 0 to 128 [ 214.484343][ T8459] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.936 (8459) [ 214.559007][ T8459] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 214.559031][ T8459] BTRFS info (device loop0): using blake2b checksum algorithm [ 214.714160][ T8459] BTRFS info (device loop0): enabling ssd optimizations [ 214.714178][ T8459] BTRFS info (device loop0): turning on async discard [ 214.714187][ T8459] BTRFS info (device loop0): enabling free space tree [ 214.714196][ T8459] BTRFS info (device loop0): use zlib compression, level 3 [ 215.216146][ T5640] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.778310][ T8507] ima: policy update failed [ 216.010560][ T8512] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 216.713498][ T8505] loop5: detected capacity change from 0 to 32768 [ 216.806946][ T8505] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 216.861771][ T8505] XFS (loop5): Ending clean mount [ 216.931805][ T33] kauditd_printk_skb: 13 callbacks suppressed [ 216.931818][ T33] audit: type=1800 audit(1793775079.233:123): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.951" name="file1" dev="loop5" ino=4422 res=0 errno=-22 [ 217.154651][ T7148] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 217.743642][ T8523] loop3: detected capacity change from 0 to 40427 [ 217.805226][ T8523] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 217.805247][ T8523] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.806526][ T8523] F2FS-fs (loop3): Image doesn't support compression [ 217.806539][ T8523] F2FS-fs (loop3): build fault injection rate: 690 [ 217.806547][ T8523] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 217.807030][ T8523] F2FS-fs (loop3): invalid crc value [ 217.976368][ T8523] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 217.981652][ T8523] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 217.981669][ T8523] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 217.981684][ T8523] F2FS-fs (loop3): Start checkpoint disabled! [ 218.034946][ T8523] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 218.035906][ T8523] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 218.035942][ T8523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 218.297898][ T84] kworker/u8:5: attempt to access beyond end of device [ 218.297898][ T84] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.297972][ T84] CPU: 0 UID: 0 PID: 84 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.297987][ T84] Tainted: [L]=SOFTLOCKUP [ 218.297992][ T84] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.297998][ T84] Workqueue: writeback wb_workfn (flush-7:3) [ 218.298018][ T84] Call Trace: [ 218.298022][ T84] [ 218.298027][ T84] dump_stack_lvl+0xe8/0x150 [ 218.298046][ T84] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 218.298062][ T84] f2fs_write_end_bio+0xf7d/0x1310 [ 218.298085][ T84] __submit_merged_bio+0x258/0x6a0 [ 218.298096][ T84] ? rcu_is_watching+0x16/0xb0 [ 218.298115][ T84] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 218.298144][ T84] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 218.298168][ T84] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 218.298182][ T84] ? arch_stack_walk+0x11b/0x150 [ 218.298198][ T84] ? ret_from_fork_asm+0x1a/0x30 [ 218.298222][ T84] ? kasan_save_track+0x3f/0x90 [ 218.298235][ T84] ? kasan_save_alloc_info+0x20/0x50 [ 218.298247][ T84] ? ieee80211_inform_bss+0xc59/0x1150 [ 218.298260][ T84] ? cfg80211_inform_single_bss_data+0xd9c/0x1be0 [ 218.298273][ T84] ? cfg80211_inform_bss_data+0x25b/0x3be0 [ 218.298284][ T84] ? ieee80211_ibss_rx_queued_mgmt+0x1ce1/0x2c40 [ 218.298297][ T84] ? process_scheduled_works+0xc3d/0x1630 [ 218.298311][ T84] ? worker_thread+0xa47/0xfb0 [ 218.298320][ T84] ? kthread+0x38b/0x480 [ 218.298330][ T84] ? ret_from_fork+0x514/0xb70 [ 218.298341][ T84] ? ret_from_fork_asm+0x1a/0x30 [ 218.298352][ T84] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 218.298390][ T84] ? kfree+0x1c7/0x650 [ 218.298401][ T84] ? ieee80211_inform_bss+0xc59/0x1150 [ 218.298415][ T84] ? ieee80211_inform_bss+0xc59/0x1150 [ 218.298437][ T84] ? f2fs_inode_chksum_verify+0x15e/0x850 [ 218.298456][ T84] ? __pfx_f2fs_inode_chksum_verify+0x10/0x10 [ 218.298470][ T84] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 218.298484][ T84] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.298497][ T84] ? __lock_acquire+0x747/0x2de0 [ 218.298512][ T84] ? look_up_lock_class+0x57/0x110 [ 218.298532][ T84] ? register_lock_class+0x31/0x2e0 [ 218.298547][ T84] ? __lock_acquire+0x747/0x2de0 [ 218.298562][ T84] ? __lock_acquire+0x747/0x2de0 [ 218.298581][ T84] ? __lock_acquire+0x747/0x2de0 [ 218.298604][ T84] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 218.298619][ T84] do_writepages+0x338/0x560 [ 218.298634][ T84] ? reacquire_held_locks+0x117/0x1a0 [ 218.298648][ T84] ? writeback_sb_inodes+0x450/0x1af0 [ 218.298664][ T84] __writeback_single_inode+0x136/0x1220 [ 218.298679][ T84] ? do_raw_spin_unlock+0xf5/0x200 [ 218.298692][ T84] writeback_sb_inodes+0x9de/0x1af0 [ 218.298703][ T84] ? __lock_acquire+0x747/0x2de0 [ 218.298723][ T84] ? lock_acquire+0x115/0x350 [ 218.298739][ T84] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 218.298775][ T84] ? rcu_is_watching+0x16/0xb0 [ 218.298790][ T84] ? queue_io+0x2d3/0x470 [ 218.298804][ T84] wb_writeback+0x41c/0xad0 [ 218.298818][ T84] ? queue_io+0x201/0x470 [ 218.298833][ T84] ? __pfx_wb_writeback+0x10/0x10 [ 218.298845][ T84] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.298864][ T84] wb_workfn+0x431/0x10f0 [ 218.298888][ T84] ? __pfx_wb_workfn+0x10/0x10 [ 218.298902][ T84] ? trace_hrtimer_start+0x82/0x200 [ 218.298919][ T84] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.298935][ T84] ? lock_acquire+0x115/0x350 [ 218.298952][ T84] ? rcu_is_watching+0x16/0xb0 [ 218.298967][ T84] ? process_scheduled_works+0x97a/0x1630 [ 218.298982][ T84] process_scheduled_works+0xc3d/0x1630 [ 218.299017][ T84] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.299036][ T84] ? assign_work+0x3cf/0x5d0 [ 218.299053][ T84] worker_thread+0xa47/0xfb0 [ 218.299078][ T84] kthread+0x38b/0x480 [ 218.299089][ T84] ? __pfx_worker_thread+0x10/0x10 [ 218.299098][ T84] ? __pfx_kthread+0x10/0x10 [ 218.299110][ T84] ret_from_fork+0x514/0xb70 [ 218.299123][ T84] ? __pfx_ret_from_fork+0x10/0x10 [ 218.299134][ T84] ? __switch_to+0xc78/0x1410 [ 218.299145][ T84] ? __pfx_kthread+0x10/0x10 [ 218.299158][ T84] ret_from_fork_asm+0x1a/0x30 [ 218.299177][ T84] [ 218.299195][ T84] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 218.969346][ T8565] loop2: detected capacity change from 0 to 512 [ 218.997800][ T8565] EXT4-fs (loop2): Test dummy encryption mode enabled [ 218.998707][ T8565] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 218.999828][ T8565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 218.999982][ T8565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.999992][ T8565] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.972: bad orphan inode 3 [ 219.000004][ T8565] loop2: lost filesystem error report for type 5 error -117 [ 219.007111][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 219.007123][ C0] EXT4-fs (loop2): initial error at time 1793775337: ext4_orphan_get:1430 [ 219.007135][ C0] EXT4-fs (loop2): last error at time 1793775337: ext4_orphan_get:1430 [ 219.080672][ T8565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 219.157204][ T8565] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.972: dx entry: limit 0 != root limit 125 [ 219.157243][ T8565] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.972: Corrupt directory, running e2fsck is recommended [ 219.283293][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 219.716745][ T8581] loop2: detected capacity change from 0 to 4096 [ 219.843233][ T8581] ntfs3(loop2): ino=b, Correct links count -> 1. [ 219.843651][ T8581] ntfs3(loop2): ino=18, mi_enum_attr [ 219.843667][ T8581] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 220.115477][ T8592] loop4: detected capacity change from 0 to 8 [ 220.184272][ T33] audit: type=1800 audit(1793775338.481:124): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.978" name="file1" dev="loop2" ino=33 res=0 errno=-22 [ 220.259817][ T8592] MTD: Couldn't look up '/dev/nullb0': -15 [ 220.259849][ T8592] /dev/nullb0: Can't lookup blockdev [ 220.543555][ T8598] ip_tables: iptables: counters copy to user failed while replacing table [ 220.561356][ T8585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.561379][ T8585] block device autoloading is deprecated and will be removed. [ 220.620310][ T8585] EXT4-fs (md3): unable to read superblock [ 220.724257][ T8603] loop5: detected capacity change from 0 to 16 [ 220.748388][ T8603] erofs (device loop5): mounted with root inode @ nid 36. [ 220.778416][ T8603] syz.5.987: attempt to access beyond end of device [ 220.778416][ T8603] loop5: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 220.812295][ T8605] loop3: detected capacity change from 0 to 64 [ 220.833301][ T8603] syz.5.987: attempt to access beyond end of device [ 220.833301][ T8603] loop5: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 220.833496][ T33] audit: type=1800 audit(1793775339.131:125): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.987" name="file1" dev="loop5" ino=86 res=0 errno=-5 [ 220.887933][ T8603] syz.5.987: attempt to access beyond end of device [ 220.887933][ T8603] loop5: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 220.888624][ T33] audit: type=1800 audit(1793775339.181:126): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.987" name="file1" dev="loop5" ino=86 res=0 errno=-5 [ 221.208643][ T8613] loop4: detected capacity change from 0 to 1024 [ 221.425712][ T8613] hfsplus: xattr search failed [ 221.443900][ T8620] hfsplus: xattr search failed [ 221.496338][ T8624] loop0: detected capacity change from 0 to 64 [ 221.783243][ T8630] loop4: detected capacity change from 0 to 512 [ 221.822864][ T8630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.822955][ T8630] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.141117][ T8644] loop3: detected capacity change from 0 to 764 [ 222.382001][ T5755] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 222.504913][ T8657] loop3: detected capacity change from 0 to 2048 [ 222.537382][ T5755] usb 1-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 222.550886][ T8658] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.575376][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.575393][ T5755] usb 1-1: Product: syz [ 222.575400][ T5755] usb 1-1: Manufacturer: syz [ 222.575407][ T5755] usb 1-1: SerialNumber: syz [ 222.615836][ T5755] ums-karma 1-1:1.0: USB Mass Storage device detected [ 222.678816][ T5755] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 222.678816][ T5755] Please send a copy of this message to and [ 222.797795][ T8658] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 222.797817][ T8658] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 222.812278][ T8658] Remounting filesystem read-only [ 222.831872][ T5638] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 222.859618][ T8638] overlayfs: failed index dir cleanup (-512) [ 222.859630][ T8638] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 222.962469][ T5654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.075737][ T5755] scsi host1: usb-storage 1-1:1.0 [ 223.257680][ T8669] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.285863][ T8669] EXT4-fs (loop3): invalid journal inode [ 223.285936][ T8669] EXT4-fs (loop3): can't get journal size [ 223.307344][ T8669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 223.307846][ T8669] System zones: 1-12, 13-13 [ 223.310801][ T5748] usb 1-1: USB disconnect, device number 5 [ 223.325381][ T8669] EXT4-fs (loop3): 1 truncate cleaned up [ 223.343093][ T8669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.402295][ T8669] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 223.496699][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.707173][ T8672] set_capacity_and_notify: 2 callbacks suppressed [ 224.707260][ T8672] loop3: detected capacity change from 0 to 40427 [ 224.735742][ T8672] F2FS-fs (loop3): build fault injection rate: 14 [ 224.735758][ T8672] F2FS-fs (loop3): build fault injection type: 0x30e4 [ 224.737440][ T8672] F2FS-fs (loop3): invalid crc value [ 224.913224][ T8676] loop2: detected capacity change from 0 to 32768 [ 224.931425][ T8676] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 224.934547][ T8676] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1015 (8676) [ 225.058408][ T8676] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 225.058482][ T8676] BTRFS info (device loop2): using crc32c checksum algorithm [ 225.137762][ T8672] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.230193][ T8676] BTRFS info (device loop2): rebuilding free space tree [ 225.263578][ T8672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.393704][ T8676] BTRFS info (device loop2): disabling free space tree [ 225.393759][ T8676] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.393772][ T8676] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.435028][ T8676] BTRFS info (device loop2): enabling ssd optimizations [ 225.435064][ T8676] BTRFS info (device loop2): turning on async discard [ 225.435075][ T8676] BTRFS info (device loop2): force clearing of disk cache [ 225.435184][ T8676] BTRFS info (device loop2): use zstd compression, level 3 [ 225.440657][ T8672] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0 [ 225.547557][ T5755] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 225.568368][ T5638] syz-executor: attempt to access beyond end of device [ 225.568368][ T5638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.599856][ T33] audit: type=1800 audit(1793775343.891:127): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1015" name="bus" dev="loop2" ino=263 res=0 errno=-22 [ 225.636973][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 225.636992][ T5638] Tainted: [L]=SOFTLOCKUP [ 225.636996][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.637003][ T5638] Call Trace: [ 225.637008][ T5638] [ 225.637014][ T5638] dump_stack_lvl+0xe8/0x150 [ 225.637038][ T5638] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 225.637054][ T5638] f2fs_write_end_bio+0xf7d/0x1310 [ 225.637079][ T5638] __submit_merged_bio+0x258/0x6a0 [ 225.637090][ T5638] ? rcu_is_watching+0x16/0xb0 [ 225.637109][ T5638] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 225.637122][ T5638] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 225.637147][ T5638] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 225.637172][ T5638] ? __lock_acquire+0x747/0x2de0 [ 225.637196][ T5638] ? __lock_acquire+0x747/0x2de0 [ 225.637212][ T5638] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 225.637226][ T5638] ? __lock_acquire+0x747/0x2de0 [ 225.637261][ T5638] ? rcu_is_watching+0x16/0xb0 [ 225.637278][ T5638] ? rcu_is_watching+0x16/0xb0 [ 225.637291][ T5638] ? __kasan_check_byte+0x12/0x40 [ 225.637312][ T5638] ? is_bpf_text_address+0x292/0x2b0 [ 225.637324][ T5638] ? is_bpf_text_address+0x26/0x2b0 [ 225.637336][ T5638] ? kernel_text_address+0xa5/0xe0 [ 225.637352][ T5638] ? __kernel_text_address+0xd/0x30 [ 225.637371][ T5638] ? unwind_get_return_address+0x4d/0x90 [ 225.637384][ T5638] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 225.637398][ T5638] ? arch_stack_walk+0xfb/0x150 [ 225.637418][ T5638] ? stack_trace_save+0xa9/0x100 [ 225.637431][ T5638] ? __pfx_stack_trace_save+0x10/0x10 [ 225.637445][ T5638] ? check_path+0x21/0x40 [ 225.637467][ T5638] ? add_lock_to_list+0xc7/0x100 [ 225.637483][ T5638] ? lockdep_unlock+0x5c/0xd0 [ 225.637493][ T5638] ? __lock_acquire+0x1511/0x2de0 [ 225.637521][ T5638] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.637537][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 225.637548][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 225.637562][ T5638] do_writepages+0x338/0x560 [ 225.637581][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 225.637594][ T5638] filemap_fdatawrite+0x1e9/0x2f0 [ 225.637608][ T5638] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 225.637644][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 225.637657][ T5638] f2fs_sync_dirty_inodes+0x471/0x970 [ 225.637680][ T5638] f2fs_write_checkpoint+0x867/0x24d0 [ 225.637748][ T5638] kill_f2fs_super+0x2df/0x700 [ 225.637766][ T5638] ? rcu_do_enqueue+0x616/0x870 [ 225.637779][ T5638] ? lockdep_hardirqs_on+0x7b/0x110 [ 225.637792][ T5638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 225.637814][ T5638] ? __pfx_call_rcu+0x10/0x10 [ 225.637827][ T5638] ? shrinker_free+0x2a7/0x3b0 [ 225.637841][ T5638] deactivate_locked_super+0xbe/0x110 [ 225.637858][ T5638] cleanup_mnt+0x204/0x2a0 [ 225.637871][ T5638] task_work_run+0x1d9/0x260 [ 225.637886][ T5638] ? __pfx_task_work_run+0x10/0x10 [ 225.637904][ T5638] exit_to_user_mode_loop+0x204/0x770 [ 225.637918][ T5638] ? rcu_is_watching+0x16/0xb0 [ 225.637935][ T5638] do_syscall_64+0x328/0x520 [ 225.637946][ T5638] ? trace_irq_disable+0x3b/0x140 [ 225.637960][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.637973][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 225.637986][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.637996][ T5638] RIP: 0033:0x7f9498fa0d57 [ 225.638008][ T5638] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 225.638025][ T5638] RSP: 002b:00007ffd4ac79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 225.638037][ T5638] RAX: 0000000000000000 RBX: 00007f9499036fb3 RCX: 00007f9498fa0d57 [ 225.638044][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4ac790e0 [ 225.638050][ T5638] RBP: 00007ffd4ac790e0 R08: 00007ffd4ac7a0e0 R09: 00000000ffffffff [ 225.638057][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4ac7a170 [ 225.638063][ T5638] R13: 00007f9499036fb3 R14: 0000000000037047 R15: 00007ffd4ac7a1b0 [ 225.638080][ T5638] [ 225.783204][ T5755] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 225.801966][ T5638] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 225.872572][ T5755] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.872589][ T5755] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 225.872599][ T5755] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.872624][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 225.872637][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 225.950212][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.950229][ T5755] usb 6-1: Product: syz [ 225.950236][ T5755] usb 6-1: Manufacturer: syz [ 226.206494][ T5755] cdc_wdm 6-1:1.0: skipping garbage [ 226.206507][ T5755] cdc_wdm 6-1:1.0: skipping garbage [ 226.228783][ T5755] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 226.228833][ T5755] cdc_wdm 6-1:1.0: Unknown control protocol [ 226.309339][ T5639] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 226.542233][ T5755] usb 6-1: USB disconnect, device number 5 [ 226.627142][ T8708] loop0: detected capacity change from 0 to 4096 [ 226.643867][ T8708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.643900][ T8708] EXT4-fs (loop0): Test dummy encryption mode enabled [ 226.680736][ T8708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.859750][ T8688] loop4: detected capacity change from 0 to 32768 [ 226.884941][ T5640] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.914623][ T8688] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.030095][ T8688] XFS (loop4): Ending clean mount [ 227.112865][ T84] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.112980][ T84] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.112999][ T84] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.113016][ T84] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.238220][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 227.322726][ T5654] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.508764][ T33] audit: type=1807 audit(1793775345.801:128): action=measure uid>+L'f&vd¹Kuì\|¤RÑ>(/:}ùÆ”Šîö~A\poÜ%kèÎéEâCgIƒídä1°»wï@‘GGyÁP0E‹eìÆG9C]4ðÖ²M\AýlôpGõø¢ŸbŽžÖ res=0 [ 227.508796][ T33] audit: type=1802 audit(1793775345.801:129): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1026" res=0 errno=-22 [ 227.552544][ T8724] ima: policy update failed [ 227.560921][ T33] audit: type=1802 audit(1793775345.851:130): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1026" res=0 errno=-22 [ 227.843955][ T10] kernel write not supported for file /amidi2 (pid: 10 comm: kworker/0:0) [ 229.099289][ T8764] loop5: detected capacity change from 0 to 512 [ 229.125360][ T8764] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 229.125374][ T8764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.149541][ T8764] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1041: bad orphan inode 131083 [ 229.149560][ T8764] loop5: lost filesystem error report for type 5 error -117 [ 229.160745][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 229.160757][ C0] EXT4-fs (loop5): initial error at time 1793775347: ext4_orphan_get:1430 [ 229.160769][ C0] EXT4-fs (loop5): last error at time 1793775347: ext4_orphan_get:1430 [ 229.163097][ T8764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.269386][ T8764] EXT4-fs error (device loop5): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.5.1041: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 229.390585][ T8750] loop3: detected capacity change from 0 to 32768 [ 229.405184][ T8750] xfs: Deprecated parameter 'ikeep' [ 229.405196][ T8750] XFS: ikeep mount option is deprecated. [ 229.514604][ T8764] EXT4-fs error (device loop5) in ext4_delete_entry:2746: Corrupt filesystem [ 229.525891][ T8764] EXT4-fs warning (device loop5): ext4_rename_delete:3742: inode #2: comm syz.5.1041: Deleting old file: nlink 5, error=-117 [ 229.556492][ T8750] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 229.558200][ T8750] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.675713][ T8750] XFS (loop3): Ending clean mount [ 229.745180][ T8750] XFS (loop3): Quotacheck needed: Please wait. [ 229.811404][ T53] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 229.811438][ T53] XFS (loop3): Unmount and run xfs_repair [ 229.811445][ T53] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 229.811454][ T53] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 229.811462][ T53] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 229.811469][ T53] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 229.811476][ T53] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 229.811482][ T53] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 229.811488][ T53] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 229.811495][ T53] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 229.811501][ T53] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 229.811732][ T53] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 229.811931][ T53] loop3: lost filesystem error report for type 5 error -117 [ 230.034716][ T8750] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 230.066976][ T8750] loop3: lost filesystem error report for type 5 error -117 [ 230.158596][ T7148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.197397][ T8778] loop2: detected capacity change from 0 to 1024 [ 230.210613][ T8778] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.224524][ T8778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 230.224741][ T8778] EXT4-fs (loop2): orphan cleanup on readonly fs [ 230.273392][ T8778] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.1045: Freeing blocks not in datazone - block = 0, count = 4096 [ 230.273427][ T8778] loop2: lost filesystem error report for type 5 error -117 [ 230.281249][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 230.281323][ C0] EXT4-fs (loop2): initial error at time 1793775348: ext4_free_blocks:6717 [ 230.281336][ C0] EXT4-fs (loop2): last error at time 1793775348: ext4_free_blocks:6717 [ 230.430834][ T5638] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.448130][ T8778] EXT4-fs (loop2): Remounting filesystem read-only [ 230.448219][ T8778] EXT4-fs (loop2): 1 orphan inode deleted [ 230.449163][ T8778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.531069][ T5638] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 230.565243][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1045'. [ 230.565280][ T8778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1045'. [ 230.683740][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.807155][ T8801] loop3: detected capacity change from 0 to 32768 [ 231.827331][ T8802] loop5: detected capacity change from 0 to 32768 [ 231.857159][ T8801] JBD2: Ignoring recovery information on journal [ 231.903769][ T8802] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 231.945655][ T8802] JBD2: Ignoring recovery information on journal [ 231.986322][ T8801] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 232.085103][ T8802] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 232.117555][ T8799] loop2: detected capacity change from 0 to 40427 [ 232.192194][ T8799] F2FS-fs (loop2): invalid crc value [ 232.535289][ T8799] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 232.622495][ T8799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.726238][ T33] audit: type=1800 audit(1793775351.021:131): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1055" name="file1" dev="loop5" ino=17059 res=0 errno=-22 [ 232.819253][ T5638] ocfs2: Unmounting device (7,3) on (node local) [ 232.955683][ T7148] ocfs2: Unmounting device (7,5) on (node local) [ 233.483697][ T8841] netlink: 'syz.3.1069': attribute type 2 has an invalid length. [ 233.619082][ T8845] Bluetooth: MGMT ver 1.23 [ 233.853761][ T8857] loop2: detected capacity change from 0 to 8 [ 234.164296][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1081'. [ 234.164310][ T8867] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1081'. [ 234.164322][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1081'. [ 234.337383][ T8875] bridge0: port 3(veth0_to_bridge) entered blocking state [ 234.337481][ T8875] bridge0: port 3(veth0_to_bridge) entered disabled state [ 234.337601][ T8875] veth0_to_bridge: entered allmulticast mode [ 234.355778][ T197] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.373896][ T8875] veth0_to_bridge: entered promiscuous mode [ 234.374017][ T8875] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.374349][ T8875] bridge0: port 3(veth0_to_bridge) entered blocking state [ 234.374406][ T8875] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 234.501369][ T197] usb 3-1: Using ep0 maxpacket: 8 [ 234.502535][ T197] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.505608][ T197] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 234.505626][ T197] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.505639][ T197] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.505650][ T197] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.505673][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.570200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.570534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.570749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.571024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.571247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.571445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.571641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.571828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.572031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.572226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.571417][ C0] net_ratelimit: 23358 callbacks suppressed [ 239.571496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.571683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.571907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.572153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.572327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.572531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.572767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.572961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.573174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.573436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.778552][ C0] sched: DL replenish lagged too much [ 244.581258][ C0] net_ratelimit: 24328 callbacks suppressed [ 244.581274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.581497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.581666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.581885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.582106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.582267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.582495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.582754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.582932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.583123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.591256][ C0] net_ratelimit: 25453 callbacks suppressed [ 249.591271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.591503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.591730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.591957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.592228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.592462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.592627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.592833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.593062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.593230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.601123][ C0] net_ratelimit: 25871 callbacks suppressed [ 254.601146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.601341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.601614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.601800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.601990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.602207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.602364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.602551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.602779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.602944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.611318][ C0] net_ratelimit: 26007 callbacks suppressed [ 259.611340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.611568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.611729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.611931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.612147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.612305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.612551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.612783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.612971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.613159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.905666][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.911528][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.621233][ C0] net_ratelimit: 26085 callbacks suppressed [ 264.621249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.621412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.621600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.621903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.622072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.622261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.622478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.622666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.622877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.623138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.631263][ C0] net_ratelimit: 25919 callbacks suppressed [ 269.631279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.631449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.631636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.631874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.632033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.632219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.632498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.632663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.632872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.633088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.641090][ C0] net_ratelimit: 25915 callbacks suppressed [ 274.641111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.641389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.641550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.641751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.641968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.642128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.642314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.642536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.642707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.642953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.651094][ C0] net_ratelimit: 25967 callbacks suppressed [ 279.651110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.651329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.651488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.651688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.651962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.652122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.652308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.652555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.652730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.652917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.661184][ C0] net_ratelimit: 26256 callbacks suppressed [ 284.661200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.661362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.661548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.661783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.661943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.662185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.662402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.662635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.662846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.663060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.671150][ C0] net_ratelimit: 25397 callbacks suppressed [ 289.671166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.671338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.671531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.671802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.671966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.672157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.672382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.672544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.672749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.672969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.681101][ C0] net_ratelimit: 24698 callbacks suppressed [ 294.681117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.681287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.681477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.681711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.681873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.682130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.682351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.682512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.682718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.682952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.691001][ C0] net_ratelimit: 25842 callbacks suppressed [ 299.691017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.691213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.691485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.691668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.691856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.692091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.692251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.692437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.692727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.692887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.701099][ C0] net_ratelimit: 25868 callbacks suppressed [ 304.701115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.701283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.701508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 304.701681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.701896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.702105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.702328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 304.702485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.702715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.702874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.711062][ C0] net_ratelimit: 19846 callbacks suppressed [ 309.711078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.711243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.711485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 309.711662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.711859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.712634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.712798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.713024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 309.713185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.713375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.721050][ C0] net_ratelimit: 17893 callbacks suppressed [ 314.721066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 314.721233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.721431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.722183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.722356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.722569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.723479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.723732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 314.723949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.724141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.730889][ C0] net_ratelimit: 18924 callbacks suppressed [ 319.730906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.731104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 319.731272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.731463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.732154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.732315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.732514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.732751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.732937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 319.733099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.705727][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.711995][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.741032][ C0] net_ratelimit: 19079 callbacks suppressed [ 324.741049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.741265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 324.741432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.741633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.742292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.742548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.743160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.743378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.743629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 324.743801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.751087][ C0] net_ratelimit: 18831 callbacks suppressed [ 329.751103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.751270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.751478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.751700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.751891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 329.752109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.752301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.753046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.753210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.753400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.760802][ C0] net_ratelimit: 18518 callbacks suppressed [ 334.760818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.761514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.761733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.761931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.762152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.762397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 334.762575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.762765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.763478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.763698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.771121][ C0] net_ratelimit: 18828 callbacks suppressed [ 339.771137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.771298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.771537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.771767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.772004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:7b:6c:cf:d7:22, vlan:0) [ 339.772162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.772396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.773073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.773232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.773490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.130761][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 345.680831][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10/1:b..l.. P197/1:b..l.. P8863/1:b..l.. [ 345.696609][ C0] rcu: (detected by 0, t=10502 jiffies, g=55749, q=1077 ncpus=1) [ 345.704520][ C0] task:syz.2.1079 state:R running task stack:24776 pid:8863 tgid:8863 ppid:5639 task_flags:0x40044c flags:0x00080002 [ 345.718280][ C0] Call Trace: [ 345.721616][ C0] [ 345.724598][ C0] __schedule+0x17dd/0x5830 [ 345.729229][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.734255][ C0] ? __pfx___schedule+0x10/0x10 [ 345.739087][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 345.744460][ C0] preempt_schedule_common+0x7f/0xd0 [ 345.749762][ C0] preempt_schedule_thunk+0x16/0x40 [ 345.755045][ C0] _raw_spin_unlock+0x41/0x50 [ 345.759820][ C0] __zap_vma_range+0x3d52/0x4b80 [ 345.764835][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 345.770257][ C0] ? mas_find+0x6d6/0xcb0 [ 345.774695][ C0] unmap_vmas+0x38b/0x550 [ 345.779134][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 345.784073][ C0] ? mas_next_slot+0xc91/0xd70 [ 345.788893][ C0] exit_mmap+0x290/0xa40 [ 345.793191][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 345.797977][ C0] ? __pfx_exit_aio+0x10/0x10 [ 345.802691][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 345.808026][ C0] __mmput+0x118/0x420 [ 345.812177][ C0] exit_mm+0x18e/0x240 [ 345.816286][ C0] do_exit+0x6a8/0x2360 [ 345.820494][ C0] ? __pfx_do_exit+0x10/0x10 [ 345.825139][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.830171][ C0] do_group_exit+0x22d/0x2f0 [ 345.834743][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.839953][ C0] get_signal+0x136a/0x1430 [ 345.844512][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 345.850122][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 345.856329][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 345.861734][ C0] ? rcu_is_watching+0x16/0xb0 [ 345.866553][ C0] do_syscall_64+0x328/0x520 [ 345.871214][ C0] ? trace_irq_disable+0x3b/0x140 [ 345.876297][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.882420][ C0] ? clear_bhb_loop+0x70/0xc0 [ 345.887214][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.893164][ C0] RIP: 0033:0x7fe2a179fb19 [ 345.897634][ C0] RSP: 002b:00007fff1c7f3278 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 345.906115][ C0] RAX: 0000000000000000 RBX: 00000000000391f3 RCX: 00007fe2a179fb19 [ 345.914141][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2a1a25fac [ 345.922203][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 345.930209][ C0] R10: 00007fff1c7f3380 R11: 0000000000000246 R12: 00007fff1c7f33a0 [ 345.938237][ C0] R13: 00007fe2a1a25fac R14: 0000000000039ddd R15: 00007fff1c7f3380 [ 345.946270][ C0] [ 345.949356][ C0] task:kworker/0:2 state:R running task stack:21280 pid:197 tgid:197 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 345.963057][ C0] Workqueue: usb_hub_wq hub_event [ 345.968246][ C0] Call Trace: [ 345.971559][ C0] [ 345.974563][ C0] __schedule+0x17dd/0x5830 [ 345.979108][ C0] ? __driver_probe_device+0x1e8/0x360 [ 345.984593][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.990743][ C0] ? __lock_acquire+0x747/0x2de0 [ 345.995675][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 346.000413][ C0] ? __pfx___schedule+0x10/0x10 [ 346.005237][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 346.009983][ C0] preempt_schedule_notrace+0x56/0x90 [ 346.015328][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 346.021205][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.027335][ C0] ? __update_page_owner_free_handle+0x37/0x410 [ 346.033550][ C0] rcu_is_watching+0x81/0xb0 [ 346.038132][ C0] ? __update_page_owner_free_handle+0x37/0x410 [ 346.044355][ C0] __update_page_owner_free_handle+0x71/0x410 [ 346.050417][ C0] __reset_page_owner+0xd2/0x2a0 [ 346.055403][ C0] __free_frozen_pages+0xc97/0xd90 [ 346.060511][ C0] __slab_free+0x269/0x2c0 [ 346.064930][ C0] qlist_free_all+0x99/0x100 [ 346.069502][ C0] kasan_quarantine_reduce+0x148/0x160 [ 346.074940][ C0] __kasan_slab_alloc+0x22/0x80 [ 346.079782][ C0] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 346.085666][ C0] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 346.091710][ C0] ? __alloc_skb+0x27a/0x7a0 [ 346.096284][ C0] ? __alloc_skb+0x27a/0x7a0 [ 346.100881][ C0] __alloc_skb+0x27a/0x7a0 [ 346.105297][ C0] alloc_uevent_skb+0x7d/0x230 [ 346.110045][ C0] kobject_uevent_net_broadcast+0x2fa/0x560 [ 346.115918][ C0] kobject_uevent_env+0x566/0x9e0 [ 346.120924][ C0] device_add+0x544/0xb80 [ 346.125238][ C0] usb_set_configuration+0x1bb5/0x2260 [ 346.130695][ C0] usb_generic_driver_probe+0x8d/0x150 [ 346.136158][ C0] usb_probe_device+0x1c3/0x3b0 [ 346.140987][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 346.146332][ C0] really_probe+0x254/0xae0 [ 346.150812][ C0] __driver_probe_device+0x1e8/0x360 [ 346.156071][ C0] driver_probe_device+0x4f/0x240 [ 346.161076][ C0] __device_attach_driver+0x270/0x410 [ 346.166451][ C0] bus_for_each_drv+0x258/0x2f0 [ 346.171281][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 346.177149][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 346.182498][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.188280][ C0] __device_attach+0x2bd/0x430 [ 346.193018][ C0] ? __pfx___device_attach+0x10/0x10 [ 346.198276][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 346.203365][ C0] ? _raw_spin_unlock+0x28/0x50 [ 346.208194][ C0] device_initial_probe+0x9c/0x100 [ 346.213287][ C0] __bus_probe_device+0x126/0x220 [ 346.218305][ C0] ? bus_probe_device+0xd/0x20 [ 346.223046][ C0] device_add+0x7d7/0xb80 [ 346.227372][ C0] usb_new_device+0x9aa/0x1690 [ 346.232119][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 346.237309][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.242502][ C0] hub_event+0x28e8/0x4d30 [ 346.246908][ C0] ? kasan_save_track+0x51/0x90 [ 346.251782][ C0] ? __pfx_hub_event+0x10/0x10 [ 346.256542][ C0] ? rcu_is_watching+0x16/0xb0 [ 346.261292][ C0] ? process_scheduled_works+0x97a/0x1630 [ 346.267006][ C0] process_scheduled_works+0xc3d/0x1630 [ 346.272579][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.278550][ C0] ? assign_work+0x3cf/0x5d0 [ 346.283177][ C0] worker_thread+0xa47/0xfb0 [ 346.287765][ C0] ? __kthread_parkme+0x71/0x1f0 [ 346.292697][ C0] kthread+0x38b/0x480 [ 346.296756][ C0] ? __pfx_worker_thread+0x10/0x10 [ 346.301872][ C0] ? __pfx_kthread+0x10/0x10 [ 346.306446][ C0] ret_from_fork+0x514/0xb70 [ 346.311041][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 346.316151][ C0] ? __switch_to+0xc78/0x1410 [ 346.320806][ C0] ? __pfx_kthread+0x10/0x10 [ 346.325378][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.330146][ C0] [ 346.333143][ C0] task:kworker/0:0 state:R running task stack:22600 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 346.346691][ C0] Workqueue: events_power_efficient reg_check_chans_work [ 346.353699][ C0] Call Trace: [ 346.356953][ C0] [ 346.359865][ C0] __schedule+0x17dd/0x5830 [ 346.364355][ C0] ? lock_acquire+0x115/0x350 [ 346.369026][ C0] ? __pfx___schedule+0x10/0x10 [ 346.373886][ C0] preempt_schedule_irq+0x4b/0x90 [ 346.378884][ C0] irqentry_exit+0x14f/0x9b0 [ 346.383446][ C0] ? trace_irq_disable+0x3b/0x140 [ 346.388458][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.394423][ C0] RIP: 0010:queue_work_on+0x162/0x1d0 [ 346.399787][ C0] Code: 00 4d 85 ed 75 16 e8 0d 2e 3a 00 eb 15 e8 06 2e 3a 00 e8 61 61 79 0a 4d 85 ed 74 ea e8 f7 2d 3a 00 fb 65 48 8b 05 66 5b 53 13 <48> 3b 44 24 18 75 56 89 d8 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f [ 346.419374][ C0] RSP: 0018:ffffc900000f7a60 EFLAGS: 00000293 [ 346.425439][ C0] RAX: 3c4c3720f5426600 RBX: ffff888053d60601 RCX: ffff88801f2b3e80 [ 346.433390][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.441337][ C0] RBP: 0000000000000008 R08: ffffffff91be31bf R09: 1ffffffff237c637 [ 346.449288][ C0] R10: dffffc0000000000 R11: fffffbfff237c638 R12: 0000000000000000 [ 346.457238][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 001fffffffc00001 [ 346.465224][ C0] ? reg_check_chans_work+0x25/0x220 [ 346.470515][ C0] ? process_scheduled_works+0x97a/0x1630 [ 346.476237][ C0] reg_check_chans_work+0x10a/0x220 [ 346.481442][ C0] process_scheduled_works+0xc3d/0x1630 [ 346.486986][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.493022][ C0] ? assign_work+0x3cf/0x5d0 [ 346.497614][ C0] worker_thread+0xa47/0xfb0 [ 346.502199][ C0] kthread+0x38b/0x480 [ 346.506260][ C0] ? __pfx_worker_thread+0x10/0x10 [ 346.511359][ C0] ? __pfx_kthread+0x10/0x10 [ 346.515935][ C0] ret_from_fork+0x514/0xb70 [ 346.520510][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 346.525624][ C0] ? __switch_to+0xc78/0x1410 [ 346.530277][ C0] ? __pfx_kthread+0x10/0x10 [ 346.534846][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.539595][ C0] [ 346.542608][ C0] rcu: rcu_preempt kthread starved for 1523 jiffies! g55749 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 346.553512][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 346.563456][ C0] rcu: RCU grace-period kthread stack dump: [ 346.569318][ C0] task:rcu_preempt state:R running task stack:28152 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 346.582787][ C0] Call Trace: [ 346.586087][ C0] [ 346.589010][ C0] __schedule+0x17dd/0x5830 [ 346.593610][ C0] ? __lock_acquire+0x747/0x2de0 [ 346.598639][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 346.603772][ C0] ? __pfx___schedule+0x10/0x10 [ 346.608620][ C0] ? lock_acquire+0x115/0x350 [ 346.613385][ C0] ? schedule+0x90/0x2b0 [ 346.617700][ C0] schedule+0x164/0x2b0 [ 346.621950][ C0] schedule_timeout+0x152/0x2c0 [ 346.626823][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 346.632244][ C0] ? __pfx_process_timeout+0x10/0x10 [ 346.637568][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.643440][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 346.648978][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 346.654573][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 346.659450][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 346.665607][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 346.670937][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 346.676154][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.681989][ C0] rcu_gp_kthread+0x9c/0x340 [ 346.686590][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 346.691836][ C0] ? __kthread_parkme+0x71/0x1f0 [ 346.696763][ C0] ? __kthread_parkme+0x199/0x1f0 [ 346.701840][ C0] kthread+0x38b/0x480 [ 346.706003][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 346.711336][ C0] ? __pfx_kthread+0x10/0x10 [ 346.715913][ C0] ret_from_fork+0x514/0xb70 [ 346.720659][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 346.725856][ C0] ? __switch_to+0xc78/0x1410 [ 346.730556][ C0] ? __pfx_kthread+0x10/0x10 [ 346.735183][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.740036][ C0] [ 346.743111][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 346.749494][ C0] CPU: 0 UID: 0 PID: 3232 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 346.760803][ C0] Tainted: [L]=SOFTLOCKUP [ 346.765138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.775217][ C0] Workqueue: bat_events batadv_tt_purge [ 346.780860][ C0] RIP: 0010:stack_depot_save_flags+0x159/0x810 [ 346.787049][ C0] Code: 31 c5 c1 c0 18 29 c5 48 8b 05 c3 20 f2 16 8b 0d b5 20 f2 16 21 e9 48 c1 e1 04 4c 8d 24 08 65 48 ff 05 4b 1c b4 0f 4c 8b 3c 08 <4d> 39 e7 74 0a 44 88 6c 24 08 45 89 d5 eb 34 45 31 ff e9 87 00 00 [ 346.806629][ C0] RSP: 0018:ffffc90000006e08 EFLAGS: 00000282 [ 346.812704][ C0] RAX: ffff88823ae00000 RBX: 0000000000000820 RCX: 0000000000661a10 [ 346.820730][ C0] RDX: 0000000047e35d5e RSI: 0000000000000001 RDI: 000000009a690034 [ 346.828745][ C0] RBP: 000000001e3661a1 R08: 0000000013ab79ca R09: 00000000c5e50bd0 [ 346.836719][ C0] R10: 000000000000001b R11: ffffffff81b3b510 R12: ffff88823b461a10 [ 346.844699][ C0] R13: ffffffff82347e01 R14: ffffc90000006e60 R15: ffff888039af74a0 [ 346.852693][ C0] FS: 0000000000000000(0000) GS:ffff8881233fb000(0000) knlGS:0000000000000000 [ 346.861667][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.868235][ C0] CR2: 00007fdaf02efecb CR3: 00000000759ac000 CR4: 00000000003526f0 [ 346.876229][ C0] Call Trace: [ 346.879528][ C0] [ 346.882412][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 346.886984][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 346.892605][ C0] kasan_save_track+0x51/0x90 [ 346.897289][ C0] ? kasan_save_track+0x3f/0x90 [ 346.902116][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 346.907125][ C0] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 346.912736][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 346.917304][ C0] ? br_nf_forward_ip+0xc3/0xa30 [ 346.922225][ C0] ? nf_hook_slow+0xc5/0x220 [ 346.926852][ C0] ? NF_HOOK+0x23e/0x3f0 [ 346.931074][ C0] ? __br_forward+0x41e/0x5d0 [ 346.935727][ C0] ? br_flood+0x402/0x650 [ 346.940068][ C0] ? br_handle_frame_finish+0x11fc/0x1ae0 [ 346.945761][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 346.950845][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 346.956973][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 346.962490][ C0] ? br_handle_frame+0x1329/0x1600 [ 346.967573][ C0] ? __netif_receive_skb_core+0x989/0x30f0 [ 346.973357][ C0] ? process_backlog+0x727/0x18b0 [ 346.978358][ C0] ? __napi_poll+0xaa/0x330 [ 346.982836][ C0] ? net_rx_action+0x61d/0xf50 [ 346.987574][ C0] ? handle_softirqs+0x265/0x8d0 [ 346.992488][ C0] ? do_softirq+0x77/0xd0 [ 346.996793][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 347.002139][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 347.007050][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 347.012761][ C0] ? rescuer_thread+0x84a/0x12a0 [ 347.017688][ C0] ? kthread+0x38b/0x480 [ 347.021906][ C0] ? ret_from_fork+0x514/0xb70 [ 347.026655][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 347.031584][ C0] __kasan_slab_alloc+0x6c/0x80 [ 347.036416][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 347.041850][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 347.046411][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 347.052021][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 347.056592][ C0] skb_ext_add+0x1b6/0x8e0 [ 347.060984][ C0] ? br_nf_forward+0x478/0x18d0 [ 347.065811][ C0] br_nf_forward_ip+0xc3/0xa30 [ 347.070561][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 347.075682][ C0] nf_hook_slow+0xc5/0x220 [ 347.080082][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 347.085521][ C0] NF_HOOK+0x23e/0x3f0 [ 347.089572][ C0] ? NF_HOOK+0xa2/0x3f0 [ 347.093724][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 347.098295][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 347.103731][ C0] ? __skb_clone+0x4a2/0x760 [ 347.108300][ C0] ? br_handle_vlan+0x60/0x580 [ 347.113044][ C0] __br_forward+0x41e/0x5d0 [ 347.117530][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 347.122972][ C0] br_flood+0x402/0x650 [ 347.127132][ C0] br_handle_frame_finish+0x11fc/0x1ae0 [ 347.132676][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 347.138546][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 347.143394][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 347.148483][ C0] ? nf_hook_slow+0x176/0x220 [ 347.153135][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 347.158997][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 347.163907][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 347.169082][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 347.174513][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 347.180377][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 347.185556][ C0] ? lock_acquire+0x115/0x350 [ 347.190231][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 347.196189][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 347.202079][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 347.207425][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 347.212958][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 347.218847][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 347.225322][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 347.230503][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 347.235938][ C0] br_handle_frame+0x1329/0x1600 [ 347.240944][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 347.246216][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 347.252081][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 347.257362][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 347.262552][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 347.267811][ C0] __netif_receive_skb_core+0x989/0x30f0 [ 347.273434][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 347.279474][ C0] ? ip6_rcv_finish+0x265/0x280 [ 347.284306][ C0] ? NF_HOOK+0x336/0x3c0 [ 347.288537][ C0] ? process_backlog+0x3de/0x18b0 [ 347.293536][ C0] ? process_backlog+0x3de/0x18b0 [ 347.298543][ C0] process_backlog+0x727/0x18b0 [ 347.303374][ C0] ? process_backlog+0x3de/0x18b0 [ 347.308379][ C0] __napi_poll+0xaa/0x330 [ 347.312701][ C0] net_rx_action+0x61d/0xf50 [ 347.317277][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 347.322365][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 347.327374][ C0] ? net_tx_action+0x5bb/0xc30 [ 347.332115][ C0] ? net_tx_action+0xbff/0xc30 [ 347.336857][ C0] handle_softirqs+0x265/0x8d0 [ 347.341604][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 347.346514][ C0] do_softirq+0x77/0xd0 [ 347.352136][ C0] [ 347.355044][ C0] [ 347.357961][ C0] __local_bh_enable_ip+0x100/0x140 [ 347.363136][ C0] batadv_tt_purge+0x4ee/0xa40 [ 347.367897][ C0] ? process_scheduled_works+0x97a/0x1630 [ 347.373594][ C0] process_scheduled_works+0xc3d/0x1630 [ 347.379134][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.385092][ C0] ? assign_work+0x3af/0x5d0 [ 347.389722][ C0] rescuer_thread+0x84a/0x12a0 [ 347.394461][ C0] ? rescuer_thread+0xb8/0x12a0 [ 347.399296][ C0] kthread+0x38b/0x480 [ 347.403338][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 347.408510][ C0] ? __pfx_kthread+0x10/0x10 [ 347.413073][ C0] ret_from_fork+0x514/0xb70 [ 347.417640][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 347.422724][ C0] ? __switch_to+0xc78/0x1410 [ 347.427375][ C0] ? __pfx_kthread+0x10/0x10 [ 347.431939][ C0] ret_from_fork_asm+0x1a/0x30 [ 347.436684][ C0]