last executing test programs: 6m21.695853108s ago: executing program 32 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000002c0)='6', 0x1) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) 6m8.65255329s ago: executing program 1 (id=114): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) listen(r0, 0x50) 6m8.21539513s ago: executing program 1 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1bb) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0), 0x1000) preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/202, 0xca}], 0x1, 0x8, 0x10) 6m7.984151646s ago: executing program 1 (id=128): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @empty, 0x12008}, 0x1c) 6m7.812214639s ago: executing program 1 (id=132): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r0], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 6m7.448268288s ago: executing program 1 (id=136): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) 6m7.045754788s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000380)) ioctl(r0, 0x400c0930, 0x0) 6m6.571853119s ago: executing program 33 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000380)) ioctl(r0, 0x400c0930, 0x0) 5m53.380589844s ago: executing program 5 (id=209): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 5m53.123361261s ago: executing program 5 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000180)="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", 0x1cc}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="3562dbe57ffe110e218257b0f968530d0d52e222662e25d69ef919d31f7914573dc33990d01f64a3e2f80bf15a7d99c4ac36d1d7be0c8ac2e6a678f8a1e353177cb942b02c99677cfd389a24f68b7e57c12a09eeb3ac3bb8d3c27b80c2f10cf4756df527a69e95990af486bd74e076592e82cb984eee1f6f0cce2c4f01cd136677929f941e77f8ea73f9fe20bca5802a2e4c33319f12fbf12613abc52deb17e90469b24ffcf905f2df23ed", 0xab}], 0x1}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d40)="4b5f0c572a972b67d868a8b826c237a1ebe0024e78220571378ecda54d4fe9287340005f374b992da13843ce9e0e45639d0181aedb7fad51f183e2c91bdc2a66763894e8675134a9c59d8e385b7f271d50b440edda57b921b11edc256e2cdafb52b624d4246196ade6e64aba6b03d32e6fd02ad37bd3163a05c77f277173fd937a006efbf470928e26e826e6b6bfd1bb4d1ca06914974e074789c964baf3cbd9d6cad77934b251c0d19ecdbd656d11a18a5d91db913f3eaaf9b1186ac997592c3b", 0xc1}, {&(0x7f0000002e80)="39b410b8a8386ec66d33c2472e7a64a32f5dd709e713d8d86009011bfad4df627705a55b545a4c65addc2bba1ef017e198f4bb499a16e3a276e682ace12f2526287161b898859ace70c25734902996659508ac4855350da032d127dea3075cd4", 0x60}, {&(0x7f0000002f00)="411efa271d61be30533280ca9b9f925ca0c815af4f3cf2c0b0e3aa15137cc71903e2d98d0d088904f2e0607432cc84b5a12849d68049d96509c983874ef8fe4180ca4ea81c6d0151a18a2a5234d38534d9a9fd0111e367a69699d01c2f206fbd47e193dbfd3cae91e9fa6005b42bcd92969d4eb3f49eaaa4796d1b6fea8fe0c4316cb9faf0cfc072db20be383b8a0b7bb3a318f77b0c6229ab597b89a7fb55cc808581962aaad1cf", 0xa8}, {&(0x7f0000002fc0)="ae7f2b05827f15", 0x7}, {&(0x7f0000000380)="befb79c8a634e39a13ca28f6227d7e134940416ba7e99f769260f944bd5ebf4d9f33a2aaa2d00cd6212a4516649978af32c10f1bd5af401d005dd180e7d370a58b86a0bbe02283be07986b442500e7c012faf130d4bbf7be9bcfb926cecf3a1421541de68549dc85a411ff1729db0c361df36bbd32b3dd075508024c97af2cab7ebcbc76381cef319412be0ec1b188191a1374628b0179b6c9ea172278ccac1cdc12453555892cd1954417a31e4c893d121f243b692b5c4ef0b4ee51997b11c3ce6515bab3fabe11cee3f5ace9a0a72bbf51ba7d7114e9ae7dd3121d3a8c909e02635df7dffa73", 0xe7}], 0x5}}, {{0x0, 0x0, &(0x7f0000007700)}}, {{0x0, 0x0, &(0x7f0000008040)=[{0x0}, {0x0}, {&(0x7f0000007f40)='C', 0x1}], 0x3}}], 0x5, 0xc080) 5m52.931252815s ago: executing program 5 (id=214): mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, 0x1c) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) 5m52.759453079s ago: executing program 5 (id=217): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x221000c, &(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES64=r0], 0x0, 0x39f, &(0x7f00000006c0)="$eJzs3b9vW9UXAPATt42TfL+JMyAkQIirbixWEv6BRqiVEJFAoUalA+KVOMWKG0e2FeQKQQckVv4D9oqRDQnxD2SAnY0tC2OHqkb+ldqp0xYSx634fKToHb97z/O9sf10lqdzeOP7OzvbjeJ21ozclRS5iMg9iFjuRj0z/WOuG8/GsHvxduHGH29+9MnN99c3Nq5upnRt/fo7aymlpbd++fKrHy//2vzfxz8t/ZyPg+VPD/9a+/Pg1YPXDh9d/6LSSJVG2q01U5Zu1WrN7Fa1nLYqjZ1iSh9Wy1mjnCq7jXJ9ZHy7Wtvba6Vsd2txYa9ebjRStttKO+VWatZSs95K2e2sspuKxWJaXAiepXR/czNb78VzT5l35bwWxATU6+tZ5zecf2KkdH8qCwIApuq09f/sc9X/N3ND9f9cnFT/5yPU/2fi0vNNG67///VFeMF16v/Z/u93lPofAAAAAAAAAAAAAABeBg/a7UK73S4Mju3BQ8L911NeHhP2xOd/7G/a62Oyhh7cm4uofrdf2i/1jr3x9e2oRDXKsRKFeNi5LQz04mvvbVxdSV3LsXjnm27+5d8iShdG81ejEMvj81d7+ekoPzrHS7EwnL8Wn8Ur4/PXxubPxsoPQ/nFKMTvn0ctqrHVvb09zv96NaV3P9g4lp/vzgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv6GYBt6IXt/7/VLEfOz3+/cXH09YHu2P38s/6q+/EoV4OL4//8rY/vwX4/WL0907AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw0Wnd3smq1XD+vYNDzv3tmdhCcnDXTm37v2NB8jE7OP+s6pwxy/yhrvr/JMUOP2u12N7j97VksrPMuR2fmzvejPE1wKSKeMqfd/wee/r3+HxHDZy6MzslHxER3utQJchO48szJ37EzCc75RgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgKOm350XM9NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPSaN3dyarVcn2CwbT3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DL5OwAA//9YWAXd") syz_clone3(&(0x7f00000001c0)={0x23800000, &(0x7f0000000240)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r3, 0x2, &(0x7f0000000cc0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000580), 0x0, 0x1}]) 5m52.277134041s ago: executing program 5 (id=220): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r1, r1, 0x0) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 5m51.681426965s ago: executing program 5 (id=226): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 5m50.817713616s ago: executing program 34 (id=226): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4m11.146835618s ago: executing program 0 (id=986): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x81, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x7, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x19}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x1, 0x5, 0xdb}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15555616}) 4m9.543591736s ago: executing program 0 (id=1002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0xfffffffffffffffc, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 4m9.298672652s ago: executing program 0 (id=1006): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4m9.062721658s ago: executing program 0 (id=1009): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4c000, 0x14c) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x20, 0x0, 0x0, 0x1f) 4m8.745646055s ago: executing program 0 (id=1012): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6de", 0x31}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd07, &(0x7f0000000000)="0400000000000000000000007e01") 4m8.200587488s ago: executing program 0 (id=1015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='@') 4m7.763135668s ago: executing program 35 (id=1015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='@') 4m3.790116114s ago: executing program 2 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1bb) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0), 0x1000) preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/202, 0xca}], 0x1, 0x8, 0x10) 4m3.614891638s ago: executing program 2 (id=1040): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0xb) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x6180, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x61d8, 0x0) 4m3.334496334s ago: executing program 2 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2201, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) 4m3.151914919s ago: executing program 2 (id=1047): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r0], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 4m2.977033663s ago: executing program 2 (id=1048): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xc3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 4m1.091477448s ago: executing program 2 (id=1051): unshare(0x40200) r0 = semget(0x1, 0x1, 0x39c) semop(r0, &(0x7f0000000b00)=[{0x0, 0x800f, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9b, 0x1800}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 4m0.536887091s ago: executing program 36 (id=1051): unshare(0x40200) r0 = semget(0x1, 0x1, 0x39c) semop(r0, &(0x7f0000000b00)=[{0x0, 0x800f, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9b, 0x1800}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m26.970669597s ago: executing program 6 (id=1870): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2m26.02412221s ago: executing program 6 (id=1875): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m25.872466863s ago: executing program 6 (id=1876): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x21, 0xfffff034}]}, 0x10) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m25.304401277s ago: executing program 6 (id=1880): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', &(0x7f0000000240)='ext4\x00', 0x5, 0x3) 2m24.755050041s ago: executing program 6 (id=1882): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x135) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff0000000705010208"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000fc0)={{0x108, 0x0, 0x80, 0x235, 0x7a, 0x7, 0x17d, 0x7}, "a9f617d835675b2a85d0ac3fce8c32a811f27009"}, 0x34) 2m24.303469701s ago: executing program 6 (id=1886): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="400054060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m23.626360217s ago: executing program 37 (id=1886): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="400054060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m2.990658621s ago: executing program 8 (id=2019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m2.224025879s ago: executing program 8 (id=2025): mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m1.859426088s ago: executing program 8 (id=2029): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) fadvise64(r0, 0xdb, 0x2, 0x5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m1.539274105s ago: executing program 8 (id=2031): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f0000000340)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x6}]}, 0x54, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m59.993400182s ago: executing program 8 (id=2036): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 1m57.035382283s ago: executing program 8 (id=2046): writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x8040) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 1m56.477277836s ago: executing program 38 (id=2046): writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x8040) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 29.70032288s ago: executing program 3 (id=2626): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x29, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb0, 0x81, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x8, 0x27, {0x27, 0xd, "1ba57fb04d4f1e07d695f268e872852798b29747b8c634f26cda14d95e6688adb139f26a47"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 27.473608273s ago: executing program 3 (id=2633): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty, 0x6}}, 0x9, 0x3}, 0x90) 26.866569528s ago: executing program 3 (id=2636): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000001c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 24.840615436s ago: executing program 3 (id=2639): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 24.141986213s ago: executing program 3 (id=2643): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x80045440, &(0x7f00000004c0)) 23.562102957s ago: executing program 3 (id=2646): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e4a2c2da7f567a73dc9aa8a1e6f000000000000"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20000000) 13.982758156s ago: executing program 4 (id=2664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r1, &(0x7f0000001580), 0x49249249249256f, 0x40484) 12.478853631s ago: executing program 4 (id=2667): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x13, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000200)={0x2, 0x1, 0x10001}) 12.211259998s ago: executing program 7 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000001140)='rt_cache\x00', 0x0, 0x0) read(r1, &(0x7f0000001180)=""/4096, 0x1000) 10.46052187s ago: executing program 4 (id=2671): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1002a, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10.238719125s ago: executing program 7 (id=2672): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) 8.920069637s ago: executing program 7 (id=2673): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) open(0x0, 0x4c27e, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x3, 0x1000, 0x3c, 0x0, 0x0, 0x0, 0x0}) 8.524069316s ago: executing program 9 (id=2674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 8.283689312s ago: executing program 39 (id=2646): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df"], 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e4a2c2da7f567a73dc9aa8a1e6f000000000000"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20000000) 7.158893519s ago: executing program 4 (id=2676): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20"], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e"], 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) 6.510135254s ago: executing program 9 (id=2677): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) 6.237912391s ago: executing program 7 (id=2678): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582b779"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.404635641s ago: executing program 9 (id=2679): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 4.559809041s ago: executing program 9 (id=2680): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x20005}, &(0x7f0000000100)=0x8) 4.490256452s ago: executing program 4 (id=2681): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4077, 0xfed}], 0x1}, 0x0) 3.639829933s ago: executing program 9 (id=2682): syz_usb_connect(0x2, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffff4ed, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4}, {0xa, 0x4e23, 0xfb4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x10}, 0xffffffffffffffff, 0x3}}, 0x48) 2.833775752s ago: executing program 4 (id=2683): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xe, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x4, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) 1.168426092s ago: executing program 7 (id=2684): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x4) sendfile(r0, r1, &(0x7f0000000000)=0x3, 0x1001) 414.92562ms ago: executing program 9 (id=2685): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1a12}) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) 0s ago: executing program 7 (id=2686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="0800264f851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 313.859453][ T23] r8152-cfgselector 7-1: Unknown version 0x0000 [ 313.875554][T11117] BTRFS info (device loop8): using free space tree [ 313.884080][ T23] r8152-cfgselector 7-1: USB disconnect, device number 18 [ 314.008977][T11117] BTRFS info (device loop8): enabling ssd optimizations [ 314.034506][T11117] BTRFS info (device loop8): auto enabling async discard [ 314.107773][ T5774] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 314.114503][ T51] Bluetooth: hci0: command 0x0c3a tx timeout [ 314.216408][ T9447] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 314.265706][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.414955][T11147] loop7: detected capacity change from 0 to 32768 [ 314.616702][T11147] JBD2: Ignoring recovery information on journal [ 314.670486][ T23] IPVS: stopping estimator thread 0... [ 314.678941][T11147] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 314.719438][T11147] JBD2: bad block at offset 32 [ 314.790562][T11165] loop6: detected capacity change from 0 to 64 [ 314.814569][T11147] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 314.827959][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.008548][T11147] (syz.7.1657,11147,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 315.219892][ T9291] ocfs2: Unmounting device (7,7) on (node local) [ 315.226778][ T5885] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 315.306252][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.415784][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 315.431833][ T5885] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.443125][ T5885] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.456817][ T5885] usb 9-1: config 0 interface 0 has no altsetting 0 [ 315.480722][ T5885] usb 9-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 315.509189][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.558726][ T5885] usb 9-1: config 0 descriptor?? [ 315.991824][ T5885] input: HID 17ef:6009 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:17EF:6009.0009/input/input15 [ 316.108931][ T5885] lenovo 0003:17EF:6009.0009: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6009] on usb-dummy_hcd.8-1/input0 [ 316.155702][ T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 316.213101][ T23] usb 9-1: USB disconnect, device number 5 [ 316.280071][T11197] fido_id[11197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 316.308322][ T5782] udevd[5782]: Error opening device "/dev/input/event4": No such device [ 316.330365][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90010, key code 190): Inappropriate ioctl for device [ 316.345825][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.346785][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90011, key code 148): Inappropriate ioctl for device [ 316.370944][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90012, key code 152): Inappropriate ioctl for device [ 316.389485][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 316.398022][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90013, key code 236): Inappropriate ioctl for device [ 316.424591][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90014, key code 238): Inappropriate ioctl for device [ 316.439895][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.450847][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90015, key code 212): Inappropriate ioctl for device [ 316.466654][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90016, key code 227): Inappropriate ioctl for device [ 316.481657][ T9] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 316.491336][ T9] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 316.500074][ T9] usb 7-1: Product: syz [ 316.504383][ T9] usb 7-1: Manufacturer: syz [ 316.525653][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90017, key code 191): Inappropriate ioctl for device [ 316.549235][ T9] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 316.565742][ T9] usb 7-1: No streaming interface found for terminal 2. [ 316.574764][ T5782] udevd[5782]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90019, key code 205): Inappropriate ioctl for device [ 316.743453][ T28] audit: type=1400 audit(1792104430.936:352): apparmor="STATUS" operation="profile_load" info="not policy admin" error=-13 profile="unconfined" pid=11202 comm="syz.4.1678" [ 316.783100][ T5885] usb 7-1: USB disconnect, device number 19 [ 317.014848][T11200] loop7: detected capacity change from 0 to 32768 [ 317.062449][T11200] ea_get: invalid extended attribute [ 317.068288][T11200] ffff8880531a0c70: 04 00 00 00 .... [ 317.215397][ T9] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 317.392896][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.395590][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407952][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.418784][ T9] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.442222][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.455343][ T9] usb 9-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 317.474714][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.497029][ T9] usb 9-1: config 0 descriptor?? [ 317.866187][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.928074][ T9] ortek 0003:05A4:2000.000A: hidraw0: USB HID v10.01 Device [HID 05a4:2000] on usb-dummy_hcd.8-1/input0 [ 318.137273][ T5885] usb 9-1: USB disconnect, device number 6 [ 318.294297][T11232] loop6: detected capacity change from 0 to 1024 [ 318.418244][T11236] hfsplus: failed to extend attributes file [ 318.435796][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.692047][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.945862][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1697'. [ 319.466077][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.101672][T11277] loop6: detected capacity change from 0 to 256 [ 320.130410][T11277] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 320.293079][ T51] Bluetooth: hci1: unexpected event for opcode 0x041b [ 320.458398][T11278] loop8: detected capacity change from 0 to 32768 [ 320.504211][T11278] JBD2: Ignoring recovery information on journal [ 320.511785][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.633291][T11278] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 320.797571][ T28] audit: type=1800 audit(1792104434.996:353): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1708" name="file1" dev="loop8" ino=17059 res=0 errno=0 [ 320.909115][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.041808][ T5792] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 321.086007][ T5792] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.204816][ T9447] ocfs2: Unmounting device (7,8) on (node local) [ 321.550778][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.662326][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.672065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.872955][T11319] loop6: detected capacity change from 0 to 128 [ 321.922221][T11319] FAT-fs (loop6): bogus number of reserved sectors [ 321.944233][T11319] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 321.960840][T11319] FAT-fs (loop6): Can't find a valid FAT filesystem [ 322.325504][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 322.534547][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 322.547186][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 322.578745][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 221, changing to 11 [ 322.590198][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.611550][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26333, setting to 1024 [ 322.646605][ T9] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 322.674505][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.709248][T11319] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 322.735542][T11319] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 322.745764][T11319] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 322.760620][ T9] pl2303 7-1:1.0: pl2303 converter detected [ 322.788849][ T9] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 323.118128][T11325] loop7: detected capacity change from 0 to 32768 [ 323.126226][T11319] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 323.153397][T11319] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 323.170362][T11319] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 323.195580][T11319] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 323.214119][T11325] JBD2: Ignoring recovery information on journal [ 323.233766][T11319] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 323.377746][T11325] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 323.628658][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.669658][T11318] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 323.695551][ T28] audit: type=1800 audit(1792104437.886:354): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1725" name="file1" dev="loop7" ino=17059 res=0 errno=0 [ 323.723096][T11318] pl2303 ttyUSB0: error sending break = -32 [ 323.730314][ T790] usb 7-1: USB disconnect, device number 20 [ 323.741270][ T790] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 323.767436][ T790] pl2303 7-1:1.0: device disconnected [ 323.947460][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.014377][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1737'. [ 324.079201][T11355] loop8: detected capacity change from 0 to 2048 [ 324.097526][ T9291] ocfs2: Unmounting device (7,7) on (node local) [ 324.134841][T11355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.349360][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 324.360224][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 324.371619][ T5774] Bluetooth: hci1: hardware error 0x00 [ 324.387549][ T9447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.671472][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.066699][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.162956][T11379] loop7: detected capacity change from 0 to 1024 [ 325.198267][T11379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.220938][T11377] syzkaller1: entered promiscuous mode [ 325.233272][T11379] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 325.256651][T11379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 325.268972][T11379] System zones: 0-1, 3-36 [ 325.279253][T11377] syzkaller1: entered allmulticast mode [ 325.283593][T11379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.557105][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.716706][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.070587][T11386] loop6: detected capacity change from 0 to 32768 [ 326.161424][T11386] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 326.190194][T11403] loop7: detected capacity change from 0 to 4096 [ 326.334979][T11386] XFS (loop6): Ending clean mount [ 326.348951][T11403] ntfs3: loop7: ino=19, mi_enum_attr [ 326.354484][T11403] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 326.425402][ T5774] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 327.174349][T11430] loop8: detected capacity change from 0 to 32768 [ 327.261862][T11430] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 327.275014][T11430] JBD2: Ignoring recovery information on journal [ 327.344418][T11430] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 327.541329][T11430] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bitmap size 2331 but physical max of 448 [ 327.562542][T11430] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 327.572518][T11430] OCFS2: File system is now read-only. [ 327.578073][T11430] (syz.8.1762,11430,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 327.586257][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.594373][T11430] (syz.8.1762,11430,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 327.602591][T11430] (syz.8.1762,11430,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 327.611359][T11430] (syz.8.1762,11430,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 327.621288][T11430] (syz.8.1762,11430,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 327.633432][T11430] (syz.8.1762,11430,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 327.642070][T11430] (syz.8.1762,11430,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 327.651332][T11430] (syz.8.1762,11430,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 327.660356][T11430] (syz.8.1762,11430,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 327.669612][T11430] (syz.8.1762,11430,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 327.679407][T11430] (syz.8.1762,11430,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 327.689424][T11430] (syz.8.1762,11430,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 327.699483][T11430] (syz.8.1762,11430,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 327.709031][T11430] (syz.8.1762,11430,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 327.718413][T11430] (syz.8.1762,11430,0):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 327.726725][T11430] (syz.8.1762,11430,0):ocfs2_extend_allocation:592 ERROR: status = -30 [ 327.735064][T11430] (syz.8.1762,11430,0):ocfs2_extend_no_holes:1029 ERROR: status = -30 [ 327.743329][T11430] (syz.8.1762,11430,0):ocfs2_expand_nonsparse_inode:1625 ERROR: status = -30 [ 327.752715][T11430] (syz.8.1762,11430,0):ocfs2_write_begin_nolock:1692 ERROR: status = -30 [ 327.761312][T11430] (syz.8.1762,11430,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 327.846251][ T6877] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 328.082071][ T9447] ocfs2: Unmounting device (7,8) on (node local) [ 328.201839][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.284147][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.426634][T11429] loop7: detected capacity change from 0 to 32768 [ 328.459813][T11429] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 328.485920][T11429] JBD2: Ignoring recovery information on journal [ 328.552988][T11429] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 328.666295][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.745809][ T9291] ocfs2: Unmounting device (7,7) on (node local) [ 329.719989][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.845725][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1773'. [ 330.258572][T11476] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 330.583770][T11480] loop8: detected capacity change from 0 to 32768 [ 330.603145][T11480] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 330.728484][ T5782] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 330.745719][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.794493][T11488] loop8: detected capacity change from 0 to 16 [ 330.833769][T11488] erofs: (device loop8): mounted with root inode @ nid 36. [ 330.883374][ T5774] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 330.918151][T11488] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 330.941266][ T28] audit: type=1800 audit(1792104445.136:355): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1785" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 331.078938][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1794'. [ 331.178745][T11492] team1: entered promiscuous mode [ 331.186703][T11492] team1: entered allmulticast mode [ 331.197255][T11492] 8021q: adding VLAN 0 to HW filter on device team1 [ 331.230191][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.431254][T11501] batadv_slave_0: entered promiscuous mode [ 331.454636][T11500] batadv_slave_0: left promiscuous mode [ 331.649281][T11512] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 331.663754][T11513] loop8: detected capacity change from 0 to 512 [ 331.681598][T11513] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 331.694284][T11513] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 331.708075][T11513] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (20000) [ 331.718181][T11513] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 331.736742][T11513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.785968][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.001880][ T9447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.101129][T11524] loop8: detected capacity change from 0 to 64 [ 332.155411][T11524] hfs: small file entry [ 332.825878][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.071781][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.104851][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.149178][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.186200][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.203184][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.212138][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.497240][T11537] bond0: (slave vlan2): Opening slave failed [ 333.972175][T11548] tipc: Started in network mode [ 333.980150][T11548] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 333.992434][T11548] tipc: Enabled bearer , priority 0 [ 334.004638][T11548] tipc: Resetting bearer [ 334.074521][T11548] tipc: Disabling bearer [ 335.044883][T11581] loop7: detected capacity change from 0 to 256 [ 335.119886][T11583] FAULT_INJECTION: forcing a failure. [ 335.119886][T11583] name failslab, interval 1, probability 0, space 0, times 0 [ 335.153186][T11583] CPU: 0 PID: 11583 Comm: syz.4.1826 Not tainted syzkaller #0 [ 335.160746][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.170851][T11583] Call Trace: [ 335.174190][T11583] [ 335.177173][T11583] dump_stack_lvl+0x18c/0x250 [ 335.181923][T11583] ? show_regs_print_info+0x20/0x20 [ 335.187190][T11583] ? load_image+0x420/0x420 [ 335.191764][T11583] ? __might_sleep+0xe0/0xe0 [ 335.196424][T11583] ? __lock_acquire+0x7eb0/0x7eb0 [ 335.201505][T11583] should_fail_ex+0x394/0x4c0 [ 335.206259][T11583] should_failslab+0x9/0x20 [ 335.210843][T11583] slab_pre_alloc_hook+0x59/0x300 [ 335.215921][T11583] ? __lock_acquire+0x7eb0/0x7eb0 [ 335.220995][T11583] ? security_prepare_creds+0x4b/0x130 [ 335.226508][T11583] ? security_prepare_creds+0x4b/0x130 [ 335.232021][T11583] __kmem_cache_alloc_node+0x53/0x250 [ 335.237465][T11583] ? security_prepare_creds+0x4b/0x130 [ 335.242967][T11583] __kmalloc+0xa7/0x240 [ 335.247186][T11583] security_prepare_creds+0x4b/0x130 [ 335.252564][T11583] prepare_creds+0x427/0x5d0 [ 335.257225][T11583] cap_task_prctl+0x3d2/0xba0 [ 335.261956][T11583] security_task_prctl+0x79/0x100 [ 335.267021][T11583] __se_sys_prctl+0xc6/0x1510 [ 335.271743][T11583] ? __x64_sys_prctl+0xc0/0xc0 [ 335.276560][T11583] ? lockdep_hardirqs_on+0x98/0x150 [ 335.281790][T11583] ? __x64_sys_prctl+0x20/0xc0 [ 335.286594][T11583] do_syscall_64+0x55/0xb0 [ 335.291043][T11583] ? clear_bhb_loop+0x40/0x90 [ 335.295756][T11583] ? clear_bhb_loop+0x40/0x90 [ 335.300467][T11583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.306410][T11583] RIP: 0033:0x7f2f6a39e559 [ 335.310859][T11583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.330590][T11583] RSP: 002b:00007f2f6b216028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 335.339044][T11583] RAX: ffffffffffffffda RBX: 00007f2f6a625fa0 RCX: 00007f2f6a39e559 [ 335.347052][T11583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 335.355074][T11583] RBP: 00007f2f6a4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 335.363073][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.371073][T11583] R13: 00007f2f6a626038 R14: 00007f2f6a625fa0 R15: 00007ffc4e1900e8 [ 335.379263][T11583] [ 335.946147][ T5792] net_ratelimit: 78 callbacks suppressed [ 335.946164][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.617159][T11612] loop8: detected capacity change from 0 to 40427 [ 336.670562][T11612] F2FS-fs (loop8): Wrong secs_per_zone / total_sections (262145, 24) [ 336.680871][T11612] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 336.690899][T11612] F2FS-fs (loop8): invalid crc value [ 336.697172][T11612] F2FS-fs (loop8): invalid crc value [ 336.702826][T11612] F2FS-fs (loop8): Failed to get valid F2FS checkpoint [ 336.985752][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.311815][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.740624][T11638] loop8: detected capacity change from 0 to 32768 [ 337.794475][T11638] JBD2: Ignoring recovery information on journal [ 337.847869][T11638] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 337.866772][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.026397][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.233675][ T9447] ocfs2: Unmounting device (7,8) on (node local) [ 338.602421][T11649] loop7: detected capacity change from 0 to 1024 [ 338.619693][T11649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.636134][T11649] EXT4-fs: inline encryption not supported [ 338.690401][T11649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.887073][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.933544][T11654] loop8: detected capacity change from 0 to 1024 [ 339.003624][T11654] hfsplus: found bad thread record in catalog [ 339.023764][T11654] hfsplus: failed to load root directory [ 339.066061][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.248358][T11663] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 339.695355][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 339.839845][T11670] loop7: detected capacity change from 0 to 32768 [ 339.901931][T11670] JBD2: Ignoring recovery information on journal [ 339.922385][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.940697][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.951049][ T9] usb 9-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 339.960413][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.024432][T11670] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 340.107200][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.333601][ T9291] ocfs2: Unmounting device (7,7) on (node local) [ 340.355760][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.404272][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1864'. [ 340.646481][ T9] hid-sensor-hub 0003:8086:0000.000C: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.8-1/input0 [ 340.810649][T11684] loop6: detected capacity change from 0 to 512 [ 340.864930][T11684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 340.885589][T11684] System zones: 1-12 [ 340.885651][ T9] usb 9-1: USB disconnect, device number 7 [ 340.913177][T11684] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.1868: missing EA_INODE flag [ 340.947882][T11681] fido_id[11681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 340.968697][T11684] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1868: error while reading EA inode 12 err=-117 [ 340.994739][T11684] EXT4-fs (loop6): 1 orphan inode deleted [ 341.049662][T11684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.147844][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.244093][ T6877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.085844][ T5792] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 342.187432][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.279972][ T5792] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.305351][ T5792] usb 9-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 342.330080][ T5792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.991935][T11720] loop6: detected capacity change from 0 to 1024 [ 343.016889][T11720] EXT4-fs: Ignoring removed bh option [ 343.058275][T11720] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 343.152635][T11720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.226331][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.394115][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.435981][ T6877] EXT4-fs error (device loop6): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /374/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 343.484332][ T6877] EXT4-fs (loop6): Remounting filesystem read-only [ 343.752815][T11052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.756815][ T5792] aiptek 9-1:1.0: Aiptek using 400 ms programming speed [ 343.801616][ T5792] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input16 [ 343.880525][ C1] aiptek 9-1:1.0: aiptek_irq - usb_submit_urb failed with result -19 [ 343.889025][ T5792] usb 9-1: USB disconnect, device number 8 [ 344.151874][ T5027] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.235474][T11743] ªªªªª»: renamed from vlan0 (while UP) [ 344.275601][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.431247][ T5027] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.620840][ T5027] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.910196][ T5027] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.307079][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.357831][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.410826][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.440369][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.485693][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.507907][ T5027] tipc: Left network mode [ 345.513341][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.525438][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.629916][T11762] rxe_eth0 speed is unknown, defaulting to 1000 [ 346.347774][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.425598][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.916488][T11792] sctp: [Deprecated]: syz.8.1899 (pid 11792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.916488][T11792] Use struct sctp_sack_info instead [ 347.246078][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 347.255043][T11800] bond0: Unable to set up delay as MII monitoring is disabled [ 347.385865][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.430659][T11762] chnl_net:caif_netlink_parms(): no params data found [ 347.482102][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.626862][ T5774] Bluetooth: hci1: command tx timeout [ 347.938691][T11818] FAULT_INJECTION: forcing a failure. [ 347.938691][T11818] name failslab, interval 1, probability 0, space 0, times 0 [ 347.959867][T11762] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.979746][T11818] CPU: 0 PID: 11818 Comm: syz.7.1907 Not tainted syzkaller #0 [ 347.987388][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 347.989390][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.997472][T11818] Call Trace: [ 347.997483][T11818] [ 347.997493][T11818] dump_stack_lvl+0x18c/0x250 [ 347.997525][T11818] ? show_regs_print_info+0x20/0x20 [ 347.997548][T11818] ? load_image+0x420/0x420 [ 347.997581][T11818] ? __might_sleep+0xe0/0xe0 [ 347.997611][T11818] ? __lock_acquire+0x7eb0/0x7eb0 [ 347.997641][T11818] should_fail_ex+0x394/0x4c0 [ 347.997679][T11818] should_failslab+0x9/0x20 [ 347.997713][T11818] slab_pre_alloc_hook+0x59/0x300 [ 347.997741][T11818] kmem_cache_alloc+0x5a/0x2c0 [ 347.997773][T11818] ? create_new_namespaces+0x34/0x700 [ 348.040366][T11762] bridge_slave_0: entered allmulticast mode [ 348.044404][T11818] create_new_namespaces+0x34/0x700 [ 348.070791][T11818] ? bpf_lsm_capable+0x9/0x10 [ 348.075509][T11818] ? security_capable+0x89/0xb0 [ 348.080420][T11818] unshare_nsproxy_namespaces+0x11a/0x160 [ 348.086186][T11818] ksys_unshare+0x4fa/0x8f0 [ 348.090734][T11818] ? sighand_ctor+0x50/0x50 [ 348.095272][T11818] ? lock_chain_count+0x20/0x20 [ 348.100175][T11818] ? syscall_enter_from_user_mode+0x25/0x80 [ 348.106121][T11818] __x64_sys_unshare+0x38/0x40 [ 348.110932][T11818] do_syscall_64+0x55/0xb0 [ 348.115416][T11818] ? clear_bhb_loop+0x40/0x90 [ 348.120154][T11818] ? clear_bhb_loop+0x40/0x90 [ 348.124880][T11818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.130821][T11818] RIP: 0033:0x7ffb81d9e559 [ 348.135274][T11818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.154927][T11818] RSP: 002b:00007ffb82c4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 348.163378][T11818] RAX: ffffffffffffffda RBX: 00007ffb82025fa0 RCX: 00007ffb81d9e559 [ 348.171379][T11818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 348.179378][T11818] RBP: 00007ffb81e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 348.187393][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.195413][T11818] R13: 00007ffb82026038 R14: 00007ffb82025fa0 R15: 00007fffa0c62a18 [ 348.203444][T11818] [ 348.297946][T11762] bridge_slave_0: entered promiscuous mode [ 348.410757][ T5027] hsr_slave_0: left promiscuous mode [ 348.450526][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.477446][ T5027] hsr_slave_1: left promiscuous mode [ 348.489729][ T5027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.505392][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.520523][ T5027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.528313][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.543049][ T5027] bridge_slave_1: left allmulticast mode [ 348.551786][ T5027] bridge_slave_1: left promiscuous mode [ 348.564439][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.626553][ T5027] bridge_slave_0: left allmulticast mode [ 348.632288][ T5027] bridge_slave_0: left promiscuous mode [ 348.647074][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.784896][ T28] audit: type=1326 audit(1792104462.976:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.7.1910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb81d9e559 code=0x0 [ 348.830429][ T5027] veth1_macvtap: left promiscuous mode [ 348.837151][ T5027] veth0_macvtap: left promiscuous mode [ 348.846086][ T5027] veth1_vlan: left promiscuous mode [ 348.855192][ T5027] veth0_vlan: left promiscuous mode [ 349.472932][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.481167][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.715640][ T5774] Bluetooth: hci1: command tx timeout [ 349.913378][T11862] size and base must be multiples of 4 kiB [ 349.925455][T11862] CPU: 1 PID: 11862 Comm: syz.8.1921 Not tainted syzkaller #0 [ 349.933014][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.943129][T11862] Call Trace: [ 349.946992][T11862] [ 349.949984][T11862] dump_stack_lvl+0x18c/0x250 [ 349.954729][T11862] ? show_regs_print_info+0x20/0x20 [ 349.959985][T11862] ? load_image+0x420/0x420 [ 349.964543][T11862] ? __might_fault+0xaa/0x120 [ 349.969254][T11862] ? __might_fault+0xc6/0x120 [ 349.973993][T11862] mtrr_add+0xd0/0x100 [ 349.978086][T11862] mtrr_ioctl+0xc96/0x13a0 [ 349.982543][T11862] ? mtrr_close+0x200/0x200 [ 349.987079][T11862] ? __fget_files+0x28/0x460 [ 349.991719][T11862] ? mtrr_close+0x200/0x200 [ 349.996274][T11862] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 350.001798][T11862] ? proc_reg_poll+0x290/0x290 [ 350.006615][T11862] __se_sys_ioctl+0xfd/0x170 [ 350.011262][T11862] do_syscall_64+0x55/0xb0 [ 350.015715][T11862] ? clear_bhb_loop+0x40/0x90 [ 350.020409][T11862] ? clear_bhb_loop+0x40/0x90 [ 350.025106][T11862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.031026][T11862] RIP: 0033:0x7fcd03d9e559 [ 350.035456][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.055198][T11862] RSP: 002b:00007fcd04d52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.063663][T11862] RAX: ffffffffffffffda RBX: 00007fcd04025fa0 RCX: 00007fcd03d9e559 [ 350.071687][T11862] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 350.079701][T11862] RBP: 00007fcd03e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 350.087689][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.095714][T11862] R13: 00007fcd04026038 R14: 00007fcd04025fa0 R15: 00007ffc1c5e2958 [ 350.103742][T11862] [ 350.517226][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.660961][T11864] loop8: detected capacity change from 0 to 40427 [ 350.674721][T11864] F2FS-fs (loop8): Invalid segment/section count (24 != 24 * 3) [ 350.686702][T11864] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 350.696660][T11864] F2FS-fs (loop8): heap/no_heap options were deprecated [ 350.703683][T11864] F2FS-fs (loop8): Image doesn't support compression [ 350.716743][T11864] F2FS-fs (loop8): invalid crc value [ 350.738663][T11864] F2FS-fs (loop8): Found nat_bits in checkpoint [ 350.852391][T11864] F2FS-fs (loop8): Start checkpoint disabled! [ 350.910588][T11864] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 350.925138][T11864] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 351.097105][ T7269] kworker/u4:9: attempt to access beyond end of device [ 351.097105][ T7269] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 351.128709][ T7269] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 351.137614][ T7269] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 351.214537][ T5027] team0 (unregistering): Port device team_slave_1 removed [ 351.546514][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.804873][ T5774] Bluetooth: hci1: command tx timeout [ 352.114107][T11883] loop8: detected capacity change from 0 to 1024 [ 352.281432][ T1332] hfsplus: b-tree write err: -5, ino 8 [ 352.404514][T11762] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.412414][T11762] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.422471][T11762] bridge_slave_1: entered allmulticast mode [ 352.454546][T11762] bridge_slave_1: entered promiscuous mode [ 352.505769][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.586058][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.649161][T11762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.692525][T11762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.842350][T11762] team0: Port device team_slave_0 added [ 352.880646][T11762] team0: Port device team_slave_1 added [ 353.083011][T11762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.110596][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.176808][T11762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.210193][T11762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.228370][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.296463][T11762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.347974][T11907] loop7: detected capacity change from 0 to 64 [ 353.571481][T11762] hsr_slave_0: entered promiscuous mode [ 353.612239][T11762] hsr_slave_1: entered promiscuous mode [ 353.635666][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.875801][ T5774] Bluetooth: hci1: command tx timeout [ 354.076532][ T28] audit: type=1326 audit(1792104468.276:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.155736][ T28] audit: type=1326 audit(1792104468.276:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.246763][ T28] audit: type=1326 audit(1792104468.296:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.332084][T11762] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 354.345157][ T28] audit: type=1326 audit(1792104468.296:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.405332][ T28] audit: type=1326 audit(1792104468.316:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd03d5ed8e code=0x7ffc0000 [ 354.438341][T11762] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 354.478434][T11762] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 354.492792][ T28] audit: type=1326 audit(1792104468.316:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.542246][T11762] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 354.615452][ T28] audit: type=1326 audit(1792104468.316:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.667605][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.678482][ T28] audit: type=1326 audit(1792104468.316:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.784708][ T28] audit: type=1326 audit(1792104468.316:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 354.855924][ T28] audit: type=1326 audit(1792104468.316:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11925 comm="syz.8.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd03d9e559 code=0x7ffc0000 [ 355.052764][T11762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.149778][T11762] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.184109][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.191397][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.244628][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.251887][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.555143][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.707848][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.795628][ T5885] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 355.859140][T11973] loop7: detected capacity change from 0 to 1764 [ 355.901523][T11973] openvswitch: netlink: Actions may not be safe on all matching packets [ 355.998306][ T5885] usb 9-1: config 2 has an invalid interface number: 49 but max is 1 [ 356.015313][ T5885] usb 9-1: config 2 has an invalid interface number: 116 but max is 1 [ 356.045666][ T5885] usb 9-1: config 2 has no interface number 0 [ 356.064553][ T5885] usb 9-1: config 2 has no interface number 1 [ 356.071525][T11762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.091129][ T5885] usb 9-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 356.144324][ T5885] usb 9-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64 [ 356.181825][ T5885] usb 9-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.230659][ T5885] usb 9-1: config 2 interface 49 has no altsetting 0 [ 356.251019][ T5885] usb 9-1: config 2 interface 116 has no altsetting 0 [ 356.288553][ T5885] usb 9-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16 [ 356.300759][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.309990][ T5885] usb 9-1: Product: syz [ 356.314662][ T5885] usb 9-1: Manufacturer: syz [ 356.319938][ T5885] usb 9-1: SerialNumber: syz [ 356.416686][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1959'. [ 356.451647][T11987] netlink: 'syz.7.1959': attribute type 26 has an invalid length. [ 356.746323][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.778379][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:2.49/input/input17 [ 357.068194][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.088888][T11762] veth0_vlan: entered promiscuous mode [ 357.136371][T11762] veth1_vlan: entered promiscuous mode [ 357.246243][T11762] veth0_macvtap: entered promiscuous mode [ 357.285177][T11762] veth1_macvtap: entered promiscuous mode [ 357.348926][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.377550][ T5123] bcm5974 9-1:2.49: could not read from device [ 357.395816][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.397444][T12010] loop7: detected capacity change from 0 to 128 [ 357.413241][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.439396][T12010] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 357.445637][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.478902][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.516663][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.559335][ T5123] bcm5974 9-1:2.49: could not read from device [ 357.578203][T11762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.601744][ T5885] usb 9-1: USB disconnect, device number 9 [ 357.621424][ T5123] bcm5974 9-1:2.49: could not read from device [ 357.650874][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.695459][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.736226][T12010] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 357.736990][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.737010][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.737027][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.737042][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.770178][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.816978][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.826091][T12010] FAT-fs (loop7): Filesystem has been set read-only [ 357.859202][T11762] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.868198][T11762] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.877469][T11762] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.913107][T11762] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.081585][ T9291] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 358.201299][ T5027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.245431][ T5027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.340925][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.405370][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.586600][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.614836][T12030] loop8: detected capacity change from 0 to 512 [ 358.695471][T12030] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 358.742853][T12035] netlink: 'syz.7.1971': attribute type 1 has an invalid length. [ 358.791624][T12030] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.1970: iget: bad i_size value: 360287970189639680 [ 358.825932][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.849914][T12030] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1970: couldn't read orphan inode 15 (err -117) [ 358.941096][T12030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.112269][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1973'. [ 359.285407][ T9447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.866640][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.986782][T12044] loop7: detected capacity change from 0 to 32768 [ 360.044587][T12044] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.168205][T12044] XFS (loop7): Ending clean mount [ 360.275611][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 360.275628][ T28] audit: type=1800 audit(1792104474.466:380): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1972" name="file1" dev="loop7" ino=6150 res=0 errno=0 [ 360.566361][T12061] loop8: detected capacity change from 0 to 32768 [ 360.688320][T12061] JBD2: Ignoring recovery information on journal [ 360.806600][T12061] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 360.815906][ T9291] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.917693][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.265746][ T9447] ocfs2: Unmounting device (7,8) on (node local) [ 361.625786][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.946209][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.252553][T12130] FAULT_INJECTION: forcing a failure. [ 362.252553][T12130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.278690][T12130] CPU: 0 PID: 12130 Comm: syz.4.1996 Not tainted syzkaller #0 [ 362.286252][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.296362][T12130] Call Trace: [ 362.299694][T12130] [ 362.302702][T12130] dump_stack_lvl+0x18c/0x250 [ 362.307445][T12130] ? show_regs_print_info+0x20/0x20 [ 362.312735][T12130] ? load_image+0x420/0x420 [ 362.317326][T12130] ? __might_fault+0xaa/0x120 [ 362.322072][T12130] ? __lock_acquire+0x7eb0/0x7eb0 [ 362.327199][T12130] should_fail_ex+0x394/0x4c0 [ 362.331953][T12130] _copy_from_user+0x2f/0xe0 [ 362.336622][T12130] __se_sys_io_uring_setup+0x170/0x2b0 [ 362.342165][T12130] ? __x64_sys_io_uring_setup+0x60/0x60 [ 362.347789][T12130] ? lockdep_hardirqs_on+0x98/0x150 [ 362.353057][T12130] do_syscall_64+0x55/0xb0 [ 362.357528][T12130] ? clear_bhb_loop+0x40/0x90 [ 362.362270][T12130] ? clear_bhb_loop+0x40/0x90 [ 362.367038][T12130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.373009][T12130] RIP: 0033:0x7f2f6a39e559 [ 362.377487][T12130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.397152][T12130] RSP: 002b:00007f2f6b215fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 362.405610][T12130] RAX: ffffffffffffffda RBX: 0000200000000680 RCX: 00007f2f6a39e559 [ 362.413646][T12130] RDX: 0000200000000740 RSI: 0000200000000680 RDI: 00000000000034b9 [ 362.421662][T12130] RBP: 00007f2f6a4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 362.429667][T12130] R10: 0000200000000780 R11: 0000000000000206 R12: 0000200000000740 [ 362.437668][T12130] R13: 0000200000000780 R14: 0000200000000700 R15: 00007ffc4e1900e8 [ 362.445704][T12130] [ 362.995726][ T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.130547][T12139] loop7: detected capacity change from 0 to 8192 [ 363.185922][T12139] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 363.250646][T12139] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 363.262652][T12139] REISERFS (device loop7): using ordered data mode [ 363.270187][T12139] reiserfs: using flush barriers [ 363.299338][T12139] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 363.324038][T12139] REISERFS (device loop7): checking transaction log (loop7) [ 363.466981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.609997][T12139] REISERFS (device loop7): Using tea hash to sort names [ 363.635185][T12139] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 364.026016][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.666318][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.049514][T12198] loop9: detected capacity change from 0 to 16 [ 365.066439][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.119960][ T5782] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 365.203982][T12182] loop7: detected capacity change from 0 to 32768 [ 365.268191][T12182] JBD2: Ignoring recovery information on journal [ 365.294851][T12182] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 365.312346][T12182] JBD2: bad block at offset 32 [ 365.381930][T12182] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 365.545482][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 365.590601][T12213] loop9: detected capacity change from 0 to 128 [ 365.937166][ T9291] ocfs2: Unmounting device (7,7) on (node local) [ 366.107315][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.156516][T12222] overlayfs: workdir and upperdir must reside under the same mount [ 366.338751][T12228] loop9: detected capacity change from 0 to 512 [ 366.397580][T12228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.443198][T12228] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 366.476619][T12228] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 366.499192][T12228] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 366.536828][T12228] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 366.545139][T12228] EXT4-fs (loop9): orphan cleanup on readonly fs [ 366.601951][T12228] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.2027: bg 0: block 34: padding at end of block bitmap is not set [ 366.642355][T12228] Quota error (device loop9): write_blk: dquota write failed [ 366.675549][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.703588][T12228] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 366.732228][T12228] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.2027: Failed to acquire dquot type 1 [ 366.815986][T12228] EXT4-fs (loop9): 1 truncate cleaned up [ 366.825067][T12228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.060809][T12228] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 367.145842][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.167968][T12241] loop8: detected capacity change from 0 to 40427 [ 367.182248][T11762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.210675][T12241] F2FS-fs (loop8): invalid crc value [ 367.272520][T12241] F2FS-fs (loop8): Found nat_bits in checkpoint [ 367.365594][T12246] loop7: detected capacity change from 0 to 512 [ 367.486596][T12246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 367.517561][T12241] F2FS-fs (loop8): Start checkpoint disabled! [ 367.546864][T12246] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.573089][T12246] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 367.585810][T12241] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 367.595598][T12246] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 367.605919][T12246] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.2040: Failed to acquire dquot type 0 [ 367.705665][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.788039][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 368.162971][T12248] loop9: detected capacity change from 0 to 32768 [ 368.185950][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.198181][ T9447] syz-executor: attempt to access beyond end of device [ 368.198181][ T9447] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 368.243476][T12248] JBD2: Ignoring recovery information on journal [ 368.260401][ T9447] syz-executor: attempt to access beyond end of device [ 368.260401][ T9447] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 368.279951][T12248] jbd2_journal_bmap: journal block not found at offset 32 on loop9-75 [ 368.319809][T12248] JBD2: bad block at offset 32 [ 368.347059][T12248] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 368.498035][ T7274] kworker/u4:12: attempt to access beyond end of device [ 368.498035][ T7274] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 368.592292][ T7274] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 368.607742][ T7274] kworker/u4:12: attempt to access beyond end of device [ 368.607742][ T7274] loop8: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 368.659000][ T7274] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 368.670509][T11762] ocfs2: Unmounting device (7,9) on (node local) [ 368.739716][T12271] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 368.747167][T12271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.782287][T12275] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 368.788887][T12275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.824288][T12271] vhci_hcd vhci_hcd.0: Device attached [ 368.891723][T12275] vhci_hcd vhci_hcd.0: Device attached [ 368.944764][T12271] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(5) [ 368.951482][T12271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.026283][T12271] vhci_hcd vhci_hcd.0: Device attached [ 369.046791][T12275] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(8) [ 369.053395][T12275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.105558][ T5792] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 369.137982][T12275] vhci_hcd vhci_hcd.0: Device attached [ 369.155680][T12284] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(10) [ 369.162397][T12284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.242263][T12284] vhci_hcd vhci_hcd.0: Device attached [ 369.285597][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.294248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.319442][T12282] vhci_hcd: connection closed [ 369.324758][T12276] vhci_hcd: connection closed [ 369.325434][T12280] vhci_hcd: connection closed [ 369.332170][T12272] vhci_hcd: connection reset by peer [ 369.374062][T12278] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.388755][ T7275] vhci_hcd: stop threads [ 369.394725][ T7275] vhci_hcd: release socket [ 369.451374][ T7275] vhci_hcd: disconnect device [ 369.475800][ T7275] vhci_hcd: stop threads [ 369.480129][ T7275] vhci_hcd: release socket [ 369.486003][T12285] vhci_hcd: connection closed [ 369.512859][ T7275] vhci_hcd: disconnect device [ 369.539660][ T7275] vhci_hcd: stop threads [ 369.543998][ T7275] vhci_hcd: release socket [ 369.566011][ T7275] vhci_hcd: disconnect device [ 369.585418][ T7275] vhci_hcd: stop threads [ 369.589751][ T7275] vhci_hcd: release socket [ 369.594539][ T7275] vhci_hcd: disconnect device [ 369.615847][ T7275] vhci_hcd: stop threads [ 369.625506][ T7275] vhci_hcd: release socket [ 369.665777][ T7275] vhci_hcd: disconnect device [ 369.671701][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.258124][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.442354][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.624779][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.643462][T12291] loop7: detected capacity change from 0 to 32768 [ 370.755764][T12291] JBD2: Ignoring recovery information on journal [ 370.864997][T12291] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 371.521819][ T9291] ocfs2: Unmounting device (7,7) on (node local) [ 372.025631][T12314] loop7: detected capacity change from 0 to 1024 [ 372.357716][ T7269] hfsplus: b-tree write err: -5, ino 25 [ 372.373800][ T7269] hfsplus: b-tree write err: -5, ino 4 [ 372.385589][ T7269] hfsplus: b-tree write err: -5, ino 2 [ 372.662808][T12323] loop7: detected capacity change from 0 to 1024 [ 372.707070][T12323] EXT4-fs: Ignoring removed orlov option [ 372.785205][T12323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.846062][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.863513][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.877156][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.901731][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.914460][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 372.923070][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.003700][T12331] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.009038][T12323] EXT4-fs error (device loop7): ext4_rename:3861: inode #12: comm syz.7.2052: target of rename is already freed [ 373.242891][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.265748][ T5792] vhci_hcd: vhci_device speed not set [ 374.303112][ T49] hsr_slave_0: left promiscuous mode [ 374.309557][ T49] hsr_slave_1: left promiscuous mode [ 374.323782][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.348815][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.357475][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.364946][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.373224][ T49] bridge_slave_1: left allmulticast mode [ 374.379259][ T49] bridge_slave_1: left promiscuous mode [ 374.385082][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.398641][ T49] bridge_slave_0: left allmulticast mode [ 374.404486][ T49] bridge_slave_0: left promiscuous mode [ 374.415641][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.463099][ T49] veth1_macvtap: left promiscuous mode [ 374.472209][ T49] veth0_macvtap: left promiscuous mode [ 374.480636][ T49] veth1_vlan: left promiscuous mode [ 374.486585][ T49] veth0_vlan: left promiscuous mode [ 374.989035][ T5774] Bluetooth: hci0: command tx timeout [ 375.730433][ T49] team0 (unregistering): Port device team_slave_1 removed [ 375.807437][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.883576][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.468791][ T49] bond0 (unregistering): Released all slaves [ 376.634644][T12381] netlink: 'syz.9.2066': attribute type 64 has an invalid length. [ 376.676729][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.684378][T12381] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.807012][T12382] netlink: 'syz.9.2066': attribute type 64 has an invalid length. [ 377.010818][T12331] chnl_net:caif_netlink_parms(): no params data found [ 377.065587][ T5774] Bluetooth: hci0: command tx timeout [ 377.295854][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.303351][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.313448][T12331] bridge_slave_0: entered allmulticast mode [ 377.321346][T12331] bridge_slave_0: entered promiscuous mode [ 377.334805][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.358415][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.385332][T12331] bridge_slave_1: entered allmulticast mode [ 377.393019][T12331] bridge_slave_1: entered promiscuous mode [ 377.517762][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.559726][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.695919][T12409] loop7: detected capacity change from 0 to 1024 [ 377.739094][T12331] team0: Port device team_slave_0 added [ 377.886189][T12331] team0: Port device team_slave_1 added [ 377.906551][T12409] hfsplus: catalog searching failed [ 377.999262][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.039127][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.114665][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.165073][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.209774][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.210455][T12418] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 378.242296][T12418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.309429][T12418] vhci_hcd vhci_hcd.0: Device attached [ 378.315545][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.344128][T12421] vhci_hcd: connection closed [ 378.351623][ T7269] vhci_hcd: stop threads [ 378.391269][ T7269] vhci_hcd: release socket [ 378.406799][ T7269] vhci_hcd: disconnect device [ 378.505203][T12331] hsr_slave_0: entered promiscuous mode [ 378.524507][T12331] hsr_slave_1: entered promiscuous mode [ 378.534417][T12331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.543588][T12331] Cannot create hsr debugfs directory [ 378.552878][T12433] netlink: 'syz.7.2077': attribute type 64 has an invalid length. [ 378.564059][T12433] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.572034][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.641945][T12434] netlink: 'syz.7.2077': attribute type 64 has an invalid length. [ 378.838168][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844576][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.145725][ T5774] Bluetooth: hci0: command tx timeout [ 379.970324][T12465] jffs2: notice: (12465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 380.270065][T12473] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 380.276851][T12473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.334926][T12473] vhci_hcd vhci_hcd.0: Device attached [ 380.358108][T12474] vhci_hcd: connection closed [ 380.362862][T11733] vhci_hcd: stop threads [ 380.393084][T11733] vhci_hcd: release socket [ 380.402766][T11733] vhci_hcd: disconnect device [ 381.188056][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2090'. [ 381.208409][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2090'. [ 381.225404][ T5774] Bluetooth: hci0: command tx timeout [ 381.231727][T12331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.309957][T12331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.351466][T12331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.385931][T12331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.775179][T12512] loop7: detected capacity change from 0 to 512 [ 381.797440][T12331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.840954][T12331] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.845899][T12512] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 381.936547][T12512] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.2094: casefold flag without casefold feature [ 381.976882][T12512] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.2094: couldn't read orphan inode 15 (err -117) [ 382.002377][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.009640][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.071389][T12512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.084423][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.091698][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.146474][T12518] loop9: detected capacity change from 0 to 1024 [ 382.208781][T12512] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.2094: bg 0: block 5: invalid block bitmap [ 382.290623][T12522] CacheFiles: mkdir cache failed with error -105 [ 382.371963][T12522] CacheFiles: Failed to register: -105 [ 382.583421][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.833707][T12537] loop7: detected capacity change from 0 to 512 [ 383.061170][T12543] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2102'. [ 383.121137][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.323710][T12331] veth0_vlan: entered promiscuous mode [ 383.336697][T12551] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 383.351142][T12551] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 383.378370][T12331] veth1_vlan: entered promiscuous mode [ 383.509150][T12331] veth0_macvtap: entered promiscuous mode [ 383.570338][T12331] veth1_macvtap: entered promiscuous mode [ 383.605513][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.632192][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.655192][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.693379][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.718903][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.742472][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.762190][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.813032][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.835467][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.854455][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.887532][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.917537][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.931592][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.944079][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.974495][T12569] loop9: detected capacity change from 0 to 512 [ 383.992224][T12331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.011349][T12331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.025600][T12569] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 384.042183][T12331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.052347][T12331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.076623][T12569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0082] [ 384.139818][T12569] EXT4-fs (loop9): 1 truncate cleaned up [ 384.169341][T12569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.280403][T11733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.302396][T11733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.393370][T12569] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 384.403895][T12574] loop7: detected capacity change from 0 to 512 [ 384.412410][T11730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.435640][T11730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.601354][T11762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.609600][T12580] jffs2: notice: (12580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 384.734819][T12574] EXT4-fs (loop7): 1 orphan inode deleted [ 384.755953][ T7269] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 384.779289][T12574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.798235][ T7269] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 384.823365][T12574] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.159113][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.940947][T12619] loop3: detected capacity change from 0 to 128 [ 385.973871][T12619] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.067027][T12619] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 386.201135][T12619] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 386.229791][T12619] FAT-fs (loop3): Filesystem has been set read-only [ 386.238213][T12627] jffs2: notice: (12627) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 386.610773][T12633] loop3: detected capacity change from 0 to 2048 [ 386.663033][T12633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.684031][T12639] loop9: detected capacity change from 0 to 1024 [ 386.887024][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2128'. [ 386.914255][T12639] hfsplus: unknown catalog record type 0 [ 386.958990][T12639] hfsplus: unknown catalog record type 0 [ 387.011144][T12633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.207643][T11733] hfsplus: unknown catalog record type 0 [ 387.214173][T11733] hfsplus: unknown catalog record type 0 [ 387.743894][T12672] loop3: detected capacity change from 0 to 2048 [ 387.762282][T12669] loop9: detected capacity change from 0 to 4096 [ 387.819217][T12672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.039317][T12669] ntfs: volume version 3.1. [ 388.855322][ T28] audit: type=1326 audit(1792104503.046:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.3.2150" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f351219e559 code=0x0 [ 388.975121][T12712] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 389.137960][T12717] rxe_eth0 speed is unknown, defaulting to 1000 [ 389.162413][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2154'. [ 389.855451][T12739] kAFS: bad VL server IP address [ 390.209503][T12754] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 390.332599][T12761] loop9: detected capacity change from 0 to 256 [ 390.592971][T12766] loop7: detected capacity change from 0 to 4096 [ 390.690177][T12766] NILFS (loop7): invalid segment: Checksum error in segment payload [ 390.705544][T12766] NILFS (loop7): trying rollback from an earlier position [ 390.773262][T12766] NILFS (loop7): recovery complete [ 390.819388][T12773] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.974935][T12766] NILFS (loop7): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 391.142645][T12773] NILFS (loop7): writing node/leaf block does not appear in b-tree (ino=3) at key=0, level=0 [ 391.159915][T12773] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=3) [ 391.246785][T12773] Remounting filesystem read-only [ 391.257772][ T42] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 391.280768][ T42] NILFS (loop7): discard dirty block: blocknr=12, size=1024 [ 391.312444][ T42] NILFS (loop7): discard dirty block: blocknr=13, size=1024 [ 391.332660][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 391.349529][T12784] loop5: detected capacity change from 0 to 7 [ 391.354813][ T42] NILFS (loop7): discard dirty block: blocknr=14, size=1024 [ 391.363193][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.382733][T12784] Dev loop5: unable to read RDB block 7 [ 391.404954][T12784] loop5: unable to read partition table [ 391.410361][ T42] NILFS (loop7): discard dirty page: offset=131072, ino=3 [ 391.435714][T12784] loop5: partition table beyond EOD, truncated [ 391.450237][T12784] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 391.473802][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.503484][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.531844][ T42] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 391.533201][T12785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.566216][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.575396][ T42] NILFS (loop7): discard dirty page: offset=163840, ino=3 [ 391.582778][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.632664][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.661947][ T42] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 391.675814][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.705575][ T42] NILFS (loop7): discard dirty page: offset=0, ino=12 [ 391.714835][ T42] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 391.731398][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.786107][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.795051][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.846648][ T42] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 391.870602][ T42] NILFS (loop7): discard dirty block: blocknr=5, size=1024 [ 391.884419][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.903979][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.921267][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 391.960918][ T42] NILFS (loop7): discard dirty page: offset=0, ino=13 [ 391.977341][ T42] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 391.992469][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.010961][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.034804][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.070705][ T42] NILFS (loop7): discard dirty page: offset=0, ino=5 [ 392.085131][ T42] NILFS (loop7): discard dirty block: blocknr=11, size=1024 [ 392.104458][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.122042][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.140918][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.168715][ T42] NILFS (loop7): discard dirty page: offset=0, ino=4 [ 392.186168][ T42] NILFS (loop7): discard dirty block: blocknr=10, size=1024 [ 392.201792][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.221314][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.237486][ T42] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 392.261069][ T9291] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 392.302277][ T9291] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 392.322359][ T9291] NILFS (loop7): discard dirty block: blocknr=6, size=1024 [ 392.343733][ T9291] NILFS (loop7): discard dirty block: blocknr=7, size=1024 [ 392.363059][ T9291] NILFS (loop7): discard dirty block: blocknr=8, size=1024 [ 392.380490][ T9291] NILFS (loop7): discard dirty block: blocknr=9, size=1024 [ 392.784373][T12814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 393.386447][T12830] FAULT_INJECTION: forcing a failure. [ 393.386447][T12830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.446898][T12830] CPU: 1 PID: 12830 Comm: syz.9.2184 Not tainted syzkaller #0 [ 393.454551][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 393.464758][T12830] Call Trace: [ 393.468134][T12830] [ 393.471161][T12830] dump_stack_lvl+0x18c/0x250 [ 393.475916][T12830] ? show_regs_print_info+0x20/0x20 [ 393.481194][T12830] ? load_image+0x420/0x420 [ 393.485765][T12830] ? __might_fault+0xaa/0x120 [ 393.490503][T12830] ? __lock_acquire+0x7eb0/0x7eb0 [ 393.495605][T12830] should_fail_ex+0x394/0x4c0 [ 393.500364][T12830] _copy_from_user+0x2f/0xe0 [ 393.505039][T12830] __sys_bpf+0x23e/0x890 [ 393.509389][T12830] ? bpf_link_show_fdinfo+0x560/0x560 [ 393.514850][T12830] ? lock_chain_count+0x20/0x20 [ 393.519788][T12830] __x64_sys_bpf+0x7c/0x90 [ 393.524273][T12830] do_syscall_64+0x55/0xb0 [ 393.528754][T12830] ? clear_bhb_loop+0x40/0x90 [ 393.533489][T12830] ? clear_bhb_loop+0x40/0x90 [ 393.538276][T12830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.544247][T12830] RIP: 0033:0x7fd02ad9e559 [ 393.548728][T12830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.568402][T12830] RSP: 002b:00007fd02bc88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.576871][T12830] RAX: ffffffffffffffda RBX: 00007fd02b025fa0 RCX: 00007fd02ad9e559 [ 393.584876][T12830] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 0000000000000000 [ 393.592889][T12830] RBP: 00007fd02ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 393.601067][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.609080][T12830] R13: 00007fd02b026038 R14: 00007fd02b025fa0 R15: 00007ffd00a6c558 [ 393.617109][T12830] [ 393.620182][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.231349][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2194'. [ 394.411842][T12866] loop3: detected capacity change from 0 to 1024 [ 394.636339][T12873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.194250][T12894] loop3: detected capacity change from 0 to 128 [ 395.342855][T12894] syz.3.2202: attempt to access beyond end of device [ 395.342855][T12894] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 395.492609][T12894] syz.3.2202: attempt to access beyond end of device [ 395.492609][T12894] loop3: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 395.611223][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.620086][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.628160][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.636199][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.644181][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.652219][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.660236][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.668246][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 395.676248][T12902] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 397.164660][T12958] loop3: detected capacity change from 0 to 4096 [ 397.219879][T12960] loop7: detected capacity change from 0 to 2048 [ 397.274769][T12958] ntfs: volume version 3.1. [ 397.299237][T12960] loop7: p2 p3 < > p4 < p5 > [ 397.309329][T12960] loop7: partition table partially beyond EOD, truncated [ 397.327974][T12960] loop7: p2 start 53543428 is beyond EOD, truncated [ 397.345685][T12960] loop7: p3 start 4284289 is beyond EOD, truncated [ 397.406392][T12960] loop7: p5 start 53543428 is beyond EOD, truncated [ 397.515312][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2226'. [ 397.541282][T12967] netlink: 'syz.9.2226': attribute type 7 has an invalid length. [ 397.580932][T12967] netlink: 'syz.9.2226': attribute type 8 has an invalid length. [ 397.616027][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2226'. [ 397.719783][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'. [ 398.230593][T12979] loop9: detected capacity change from 0 to 4096 [ 398.344706][T12987] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.554462][T12979] NILFS (loop9): nilfs_palloc_freev (ino=3): entry number 4093 already freed [ 398.574322][T12979] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean [ 398.700680][T12994] netlink: 'syz.7.2235': attribute type 4 has an invalid length. [ 398.725793][T12994] netlink: 'syz.7.2235': attribute type 4 has an invalid length. [ 398.759142][T12994] netlink: 203268 bytes leftover after parsing attributes in process `syz.7.2235'. [ 400.411688][T13059] loop3: detected capacity change from 0 to 256 [ 400.458781][T13059] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 401.263797][T13083] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 401.282249][T13086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 401.750617][T13101] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.2269'. [ 403.292037][T13149] loop7: detected capacity change from 0 to 1764 [ 403.334199][T13129] loop3: detected capacity change from 0 to 40427 [ 403.349686][T13149] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 403.376445][T13151] Bluetooth: MGMT ver 1.22 [ 403.398331][T13129] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 403.469073][T13129] F2FS-fs (loop3): invalid crc value [ 403.501616][T13129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 403.696462][T13129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 403.937676][T13152] f2fs_ckpt-7:3: attempt to access beyond end of device [ 403.937676][T13152] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.009249][T13152] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 404.732341][T13161] loop7: detected capacity change from 0 to 32768 [ 404.857754][ T28] audit: type=1800 audit(1792104775.054:382): pid=13161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2287" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 404.996735][T13179] sctp: [Deprecated]: syz.9.2292 (pid 13179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.996735][T13179] Use struct sctp_sack_info instead [ 405.050741][ T28] audit: type=1800 audit(1792104775.254:383): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2287" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 405.880237][T13203] binder: binder_mmap: 13201 200000000000-200000003000 bad vm_flags failed -1 [ 406.573129][T13219] loop3: detected capacity change from 0 to 512 [ 406.682799][T13219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.746424][T13219] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.092598][T12331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.530711][T13247] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2309'. [ 407.866803][T13262] net_ratelimit: 99 callbacks suppressed [ 407.866822][T13262] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 407.960662][T13269] loop9: detected capacity change from 0 to 164 [ 407.973017][T13268] loop7: detected capacity change from 0 to 1024 [ 408.082075][T13268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 408.330675][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 408.503895][T13285] fuse: Bad value for 'fd' [ 409.045762][T13297] loop7: detected capacity change from 0 to 8192 [ 409.143122][T13301] loop9: detected capacity change from 0 to 8192 [ 409.296718][T13308] loop3: detected capacity change from 0 to 1024 [ 409.535700][T13308] hfsplus: catalog searching failed [ 409.713693][ T5027] hfsplus: b-tree write err: -5, ino 3 [ 409.768677][T12331] hfsplus: node 4:3 still has 1 user(s)! [ 410.267785][T13334] loop7: detected capacity change from 0 to 512 [ 410.337401][T13334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.386117][T13334] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.671685][T13341] loop9: detected capacity change from 0 to 1024 [ 410.725686][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.296046][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 411.507971][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.529781][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.561890][ T5891] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 411.589509][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.634813][ T5891] usb 4-1: config 0 descriptor?? [ 411.812939][T13385] hsr0: entered allmulticast mode [ 411.828690][T13385] hsr_slave_0: entered allmulticast mode [ 411.834423][T13385] hsr_slave_1: entered allmulticast mode [ 411.870935][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2351'. [ 411.928786][T13385] hsr_slave_0: left promiscuous mode [ 411.952166][T13385] hsr_slave_1: left promiscuous mode [ 412.091419][T13385] hsr0 (unregistering): left allmulticast mode [ 412.119958][ T5891] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 412.141634][T13390] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 412.169103][ T5891] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 412.190534][ T5891] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 412.209406][ T5891] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 412.227255][ T5891] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 412.510852][ T5891] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 412.619864][ T5891] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 412.843328][ T5891] usb 4-1: USB disconnect, device number 2 [ 413.016805][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2359'. [ 413.071409][T13411] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 413.637977][T13409] loop9: detected capacity change from 0 to 131072 [ 413.654190][T13409] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945) [ 413.663246][T13409] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 413.696925][T13409] F2FS-fs (loop9): invalid crc value [ 413.739291][T13409] F2FS-fs (loop9): Found nat_bits in checkpoint [ 413.806117][T13409] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 413.813296][T13409] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 413.987552][T13409] F2FS-fs (loop9): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 414.459210][T13445] tipc: Started in network mode [ 414.464163][T13445] tipc: Node identity 4, cluster identity 4711 [ 414.506156][T13445] tipc: Node number set to 4 [ 415.149460][T13465] Invalid argument reading file caps for ./file0 [ 416.256464][T13507] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2386'. [ 416.266036][T13507] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.2386'. [ 416.544285][T13519] kernel read not supported for file /file1 (pid: 13519 comm: syz.9.2389) [ 416.587295][ T28] audit: type=1800 audit(1792104787.789:384): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2389" name="file1" dev="mqueue" ino=34538 res=0 errno=0 [ 416.845659][T13524] ipvlan2: entered promiscuous mode [ 416.947905][T13524] team0: Device ipvlan2 failed to register rx_handler [ 417.444669][T13542] loop3: detected capacity change from 0 to 8192 [ 417.492623][T13542] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 417.505877][T13546] loop9: detected capacity change from 0 to 4096 [ 417.513664][T13546] EXT4-fs: Ignoring removed nobh option [ 417.522706][T13546] EXT4-fs: Ignoring removed bh option [ 417.529702][T13546] EXT4-fs (loop9): Test dummy encryption mode enabled [ 417.589735][T13542] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 417.594588][T13546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.636220][T13542] REISERFS (device loop3): using ordered data mode [ 417.665441][T13542] reiserfs: using flush barriers [ 417.707394][T13546] EXT4-fs (loop9): shut down requested (2) [ 417.784706][T13542] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 417.829511][T11762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.889923][T13542] REISERFS (device loop3): checking transaction log (loop3) [ 417.908410][T13556] loop7: detected capacity change from 0 to 8192 [ 417.957147][T13542] REISERFS (device loop3): Using r5 hash to sort names [ 418.024007][ T28] audit: type=1800 audit(1792104789.209:385): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2401" name="file1" dev="loop7" ino=1048806 res=0 errno=0 [ 418.042918][T13542] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 418.131654][T13542] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 418.201760][T11733] tipc: Subscription rejected, illegal request [ 418.762433][T13572] netlink: 63 bytes leftover after parsing attributes in process `syz.3.2404'. [ 418.794716][T13573] device-mapper: ioctl: name not supplied when creating device [ 419.030881][T13583] loop7: detected capacity change from 0 to 256 [ 419.493214][T13599] veth0: entered promiscuous mode [ 419.522850][T13598] veth0: left promiscuous mode [ 419.543562][T13597] loop3: detected capacity change from 0 to 4096 [ 419.570551][T13597] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 419.644059][T13597] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 419.698790][T13597] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 420.852261][T13636] FAULT_INJECTION: forcing a failure. [ 420.852261][T13636] name fail_futex, interval 1, probability 0, space 0, times 1 [ 420.908978][T13636] CPU: 1 PID: 13636 Comm: syz.9.2427 Not tainted syzkaller #0 [ 420.916533][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.926648][T13636] Call Trace: [ 420.929981][T13636] [ 420.933063][T13636] dump_stack_lvl+0x18c/0x250 [ 420.937815][T13636] ? show_regs_print_info+0x20/0x20 [ 420.943089][T13636] ? load_image+0x420/0x420 [ 420.947680][T13636] should_fail_ex+0x394/0x4c0 [ 420.952480][T13636] get_futex_key+0x136/0x1030 [ 420.957221][T13636] ? futex_wait_queue+0x9d/0x1b0 [ 420.962246][T13636] ? futex_setup_timer+0xc0/0xc0 [ 420.967265][T13636] futex_requeue+0x246/0x13c0 [ 420.972050][T13636] ? futex_unqueue+0xcb/0xf0 [ 420.976712][T13636] ? put_task_struct+0xc0/0xc0 [ 420.981543][T13636] ? futex_wait_setup+0x270/0x270 [ 420.986665][T13636] do_futex+0x32b/0x3e0 [ 420.990896][T13636] ? __ia32_sys_get_robust_list+0x110/0x110 [ 420.996867][T13636] __se_sys_futex+0x3a9/0x440 [ 421.001650][T13636] ? __x64_sys_futex+0xf0/0xf0 [ 421.006480][T13636] ? __x64_sys_futex+0x21/0xf0 [ 421.011312][T13636] do_syscall_64+0x55/0xb0 [ 421.015785][T13636] ? clear_bhb_loop+0x40/0x90 [ 421.020515][T13636] ? clear_bhb_loop+0x40/0x90 [ 421.025250][T13636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.031258][T13636] RIP: 0033:0x7fd02ad9e559 [ 421.035732][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.055429][T13636] RSP: 002b:00007fd02bc88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.063906][T13636] RAX: ffffffffffffffda RBX: 00007fd02b025fa0 RCX: 00007fd02ad9e559 [ 421.071940][T13636] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000000 [ 421.079970][T13636] RBP: 00007fd02ae358b0 R08: 0000000000000000 R09: 0000000000000001 [ 421.088002][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.096056][T13636] R13: 00007fd02b026038 R14: 00007fd02b025fa0 R15: 00007ffd00a6c558 [ 421.104193][T13636] [ 421.117825][T13634] loop3: detected capacity change from 0 to 8192 [ 421.194171][T13634] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 421.284312][T13634] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 421.336448][T13634] REISERFS (device loop3): using ordered data mode [ 421.375684][T13634] reiserfs: using flush barriers [ 421.392881][T13628] loop7: detected capacity change from 0 to 32768 [ 421.418050][T13628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2424 (13628) [ 421.424447][T13634] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 421.494280][T13628] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.527085][T13628] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 421.536324][T13634] REISERFS (device loop3): checking transaction log (loop3) [ 421.554240][T13628] BTRFS info (device loop7): setting nodatacow, compression disabled [ 421.573514][T13628] BTRFS info (device loop7): setting datasum, datacow enabled [ 421.600584][T13628] BTRFS info (device loop7): force clearing of disk cache [ 421.638506][T13628] BTRFS info (device loop7): turning on sync discard [ 421.665098][T13628] BTRFS info (device loop7): enabling ssd optimizations [ 421.698472][T13628] BTRFS info (device loop7): using spread ssd allocation scheme [ 421.748312][T13628] BTRFS info (device loop7): not using ssd optimizations [ 421.788883][T13628] BTRFS info (device loop7): not using spread ssd allocation scheme [ 421.837841][T13628] BTRFS info (device loop7): using free space tree [ 421.910197][T13634] REISERFS (device loop3): Using tea hash to sort names [ 421.951640][T13634] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 422.034416][T13628] BTRFS info (device loop7): rebuilding free space tree [ 422.495980][T13680] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 422.772390][ T9291] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.877460][T13692] loop9: detected capacity change from 0 to 16 [ 422.909438][T13692] erofs: (device loop9): mounted with root inode @ nid 36. [ 423.411584][T13702] ip_tables: iptables: counters copy to user failed while replacing table [ 423.492543][T13702] ip_tables: iptables: counters copy to user failed while replacing table [ 423.684628][T13712] loop9: detected capacity change from 0 to 128 [ 423.746167][T13712] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 423.835281][T13712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.075945][T13722] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2445'. [ 424.229597][T13727] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 424.653599][T13741] loop9: detected capacity change from 0 to 128 [ 425.548805][T13774] loop7: detected capacity change from 0 to 512 [ 425.573253][T13774] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 425.614948][T13774] EXT4-fs (loop7): invalid journal inode [ 425.627395][T13774] EXT4-fs (loop7): can't get journal size [ 425.659428][T13774] EXT4-fs (loop7): 1 truncate cleaned up [ 425.668964][T13774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.735915][ T5862] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 425.882216][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.962220][ T5862] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 425.994094][ T5862] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 425.996427][ T8891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 426.058250][ T5862] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 426.078003][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.108430][ T5862] usb 10-1: Product: syz [ 426.112785][ T5862] usb 10-1: Manufacturer: syz [ 426.128272][ T5862] usb 10-1: SerialNumber: syz [ 426.146716][ T5862] usb 10-1: config 0 descriptor?? [ 426.163708][T13769] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 426.171940][T13769] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 426.217718][ T8891] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 426.240235][ T8891] usb 4-1: config 0 has no interface number 0 [ 426.254221][ T8891] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 426.263722][ T8891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.272440][ T5774] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 426.280997][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.321565][ T8891] usb 4-1: config 0 descriptor?? [ 426.332747][ T8891] ums-realtek 4-1:0.6: USB Mass Storage device detected [ 426.411690][T13769] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 426.472016][T13769] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 426.588037][ T5792] usb 4-1: USB disconnect, device number 3 [ 426.906895][ T5862] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 427.311869][ T5862] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 427.365450][ T5862] usb 10-1: USB disconnect, device number 2 [ 429.275436][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 429.475540][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 429.495207][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 429.528923][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 429.555578][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.571184][ T9] usb 4-1: Product: syz [ 429.577818][ T9] usb 4-1: Manufacturer: syz [ 429.582731][ T9] usb 4-1: SerialNumber: syz [ 429.618366][ T9] usb 4-1: config 0 descriptor?? [ 429.646401][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 429.652427][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 429.689811][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 429.728054][ T9] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 429.765640][ T9] usbtouchscreen: probe of 4-1:0.0 failed with error -8 [ 430.085605][ T5792] usb 4-1: USB disconnect, device number 4 [ 430.436506][T13905] loop9: detected capacity change from 0 to 1764 [ 430.529733][T12411] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.277518][T13930] jffs2: notice: (13930) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 431.440738][T13938] netlink: 'syz.9.2504': attribute type 1 has an invalid length. [ 432.753185][T13982] loop3: detected capacity change from 0 to 64 [ 432.795357][ T5792] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 432.988627][ T5792] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.048103][ T5792] usb 10-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 433.067958][ T5792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.103775][ T5792] usb 10-1: Product: syz [ 433.122930][ T5792] usb 10-1: Manufacturer: syz [ 433.145754][ T5792] usb 10-1: SerialNumber: syz [ 433.171524][ T5792] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 433.582210][ T5792] gspca_mr97310a: reg read [21] error -71 [ 433.605657][ T5792] mr97310a: probe of 10-1:1.0 failed with error -71 [ 433.630814][ T5792] usb 10-1: USB disconnect, device number 3 [ 433.702383][T13984] loop7: detected capacity change from 0 to 32768 [ 433.745747][T13984] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.2518 (13984) [ 433.811579][T13984] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 433.844983][T13984] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 433.875156][T13984] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 433.911763][T13984] BTRFS info (device loop7): use zstd compression, level 3 [ 433.941521][T13984] BTRFS info (device loop7): force clearing of disk cache [ 433.963728][T13984] BTRFS info (device loop7): enabling disk space caching [ 433.985015][T13984] BTRFS info (device loop7): disk space caching is enabled [ 434.103924][T13984] BTRFS info (device loop7): enabling ssd optimizations [ 434.156020][T13984] BTRFS info (device loop7): auto enabling async discard [ 434.207061][T13984] BTRFS info (device loop7): rebuilding free space tree [ 434.235483][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 434.321981][T13984] BTRFS info (device loop7): disabling free space tree [ 434.336521][ C1] hrtimer: interrupt took 1820204 ns [ 434.346194][T13984] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 434.375567][T13984] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 434.495036][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.534803][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.575085][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.635345][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.644535][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.692436][ T9] usb 4-1: config 0 descriptor?? [ 434.833552][ T9291] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 435.201446][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 435.212183][ T9] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 435.242822][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 435.551717][T14029] loop4: detected capacity change from 0 to 7 [ 435.572506][ T8891] usb 4-1: USB disconnect, device number 5 [ 435.701310][T14029] Dev loop4: unable to read RDB block 7 [ 435.745403][T14029] loop4: unable to read partition table [ 435.776765][T14027] fido_id[14027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 435.795683][T14029] loop4: partition table beyond EOD, truncated [ 435.837751][T14029] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 435.988558][ T5138] Dev loop4: unable to read RDB block 7 [ 436.010059][ T5138] loop4: unable to read partition table [ 436.035614][ T5138] loop4: partition table beyond EOD, truncated [ 437.651831][T14061] loop3: detected capacity change from 0 to 512 [ 437.746919][T14061] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.883104][T14061] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 437.974902][T14061] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2534: bg 0: block 248: padding at end of block bitmap is not set [ 438.014598][T14061] Quota error (device loop3): write_blk: dquota write failed [ 438.045701][T14061] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 438.086815][T14061] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2534: Failed to acquire dquot type 1 [ 438.135743][T14061] EXT4-fs (loop3): 1 truncate cleaned up [ 438.142878][T14061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 438.229006][T14074] loop9: detected capacity change from 0 to 128 [ 438.329823][T14061] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 438.340739][T14074] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.360677][T14061] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 438.370592][T14061] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2534: Failed to acquire dquot type 1 [ 438.402886][T14074] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 438.644581][T12331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 438.728434][T11762] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.666291][T14094] input: syz1 as /devices/virtual/input/input23 [ 440.284436][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.292665][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.191089][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 442.276596][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 442.884262][T14146] loop9: detected capacity change from 0 to 512 [ 443.064594][T14146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.154678][T14146] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.246456][T14146] EXT4-fs warning (device loop9): verify_group_input:169: Last group not full [ 443.478545][T14160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 443.554989][T11762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.688531][T14164] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2562'. [ 444.733405][T14183] loop7: detected capacity change from 0 to 256 [ 444.856843][T14183] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 445.471050][T14194] input: syz0 as /devices/virtual/input/input24 [ 445.523849][T14197] loop9: detected capacity change from 0 to 256 [ 446.268601][T14204] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2577'. [ 447.230881][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 447.436215][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 447.455626][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 447.497493][ T9] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 447.541788][ T9] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 447.594600][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.631142][ T9] usb 10-1: Product: syz [ 447.663669][ T9] usb 10-1: Manufacturer: syz [ 447.677420][ T9] usb 10-1: SerialNumber: syz [ 447.945898][ T9] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 447.990414][ T9] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 448.447279][ T9] usb 10-1: USB disconnect, device number 4 [ 448.582840][T12411] udevd[12411]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.093048][T14293] 9pnet: p9_errstr2errno: server reported unknown error LÒ‰ [ 452.343085][T14315] loop9: detected capacity change from 0 to 2048 [ 452.411429][T14315] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 452.484610][T14315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.506354][ T5792] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 453.736611][ T5792] usb 10-1: Using ep0 maxpacket: 32 [ 453.763846][ T5792] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 453.805516][ T5792] usb 10-1: config 0 has no interface number 0 [ 453.851807][ T5792] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 453.885398][ T5792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.925708][ T5792] usb 10-1: Product: syz [ 453.931920][ T5792] usb 10-1: Manufacturer: syz [ 453.962407][ T5792] usb 10-1: SerialNumber: syz [ 454.090580][ T5792] usb 10-1: config 0 descriptor?? [ 454.095804][T14344] loop3: detected capacity change from 0 to 512 [ 454.215747][ T5792] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 454.443874][T14347] loop7: detected capacity change from 0 to 2048 [ 454.462969][ T5792] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 454.584280][T14347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.599416][ T5792] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.180757][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 455.192247][ T5864] usb 10-1: USB disconnect, device number 5 [ 455.230149][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 455.354742][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 455.411510][ T5864] quatech2 10-1:0.51: device disconnected [ 455.995431][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 456.203142][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.247737][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.294363][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.358879][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.384441][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.414247][ T8] usb 4-1: config 0 descriptor?? [ 456.896613][ T8] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 456.969413][ T8] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 457.337586][ T8] usb 4-1: USB disconnect, device number 6 [ 457.743227][ T28] audit: type=1326 audit(1792104828.939:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.4.2620" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6a39e559 code=0x0 [ 458.945691][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 459.067805][T14412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 459.184318][ T9] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 459.218895][ T9] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.253866][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 459.283837][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 459.303522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.346487][ T9] usb 4-1: config 0 descriptor?? [ 459.352429][T14406] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 459.790598][ T9] dragonrise 0003:0079:0006.0010: unknown main item tag 0x7 [ 459.820004][ T9] dragonrise 0003:0079:0006.0010: unknown global tag 0xc [ 459.835963][ T9] dragonrise 0003:0079:0006.0010: item 0 2 1 12 parsing failed [ 459.854846][ T9] dragonrise 0003:0079:0006.0010: parse failed [ 459.895015][ T9] dragonrise: probe of 0003:0079:0006.0010 failed with error -22 [ 459.974399][T14410] loop9: detected capacity change from 0 to 40427 [ 460.023989][T14410] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x7ffff [ 460.058894][ T9] usb 4-1: USB disconnect, device number 7 [ 460.066885][T14410] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x30e4 [ 460.116798][T14410] F2FS-fs (loop9): invalid crc value [ 460.148566][T14410] F2FS-fs (loop9): Found nat_bits in checkpoint [ 460.248390][T14410] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 460.311030][T14410] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 460.357590][T14410] F2FS-fs (loop9): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 460.412399][T14410] F2FS-fs (loop9): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0 [ 462.486087][ T9] smpboot: CPU 1 is now offline [ 464.923474][T14463] xt_hashlimit: size too large, truncated to 1048576 [ 465.006739][T14463] xt_hashlimit: max too large, truncated to 1048576 [ 467.705373][T13728] Bluetooth: hci1: command 0x0406 tx timeout [ 471.391772][ T5774] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 472.179120][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.178557][T14527] loop7: detected capacity change from 0 to 512 [ 473.228089][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.399146][T14527] EXT4-fs: Ignoring removed i_version option [ 473.636602][T14527] EXT4-fs: Ignoring removed oldalloc option [ 473.784747][T14527] EXT4-fs (loop7): Test dummy encryption mode enabled [ 474.176907][T14527] EXT4-fs (loop7): 1 truncate cleaned up [ 474.191730][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.288108][T14527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.778132][ T28] audit: type=1800 audit(1792104845.979:387): pid=14527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2662" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 474.894982][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.976083][T14544] "syz.4.2664" (14544) uses obsolete ecb(arc4) skcipher [ 476.141985][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.533974][T14563] loop9: detected capacity change from 0 to 2048 [ 477.853547][T14563] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.886226][T14571] netlink: 'syz.4.2671': attribute type 32 has an invalid length. [ 479.048762][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2671'. [ 479.742923][T11762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.163763][T14580] loop7: detected capacity change from 0 to 2048 [ 480.216988][T14571] bond1: Setting coupled_control to off (0) [ 480.618408][T14580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.944228][T14580] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.131154][T14571] syz.4.2671 (14571) used greatest stack depth: 18152 bytes left [ 482.013947][ T9291] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.724252][T13728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.740069][T13728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.764071][T13728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.786339][T13728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.803164][T13728] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 483.815761][T13728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.447433][T14605] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.263072][ T5856] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 485.595719][ T5856] usb 10-1: not running at top speed; connect to a high speed hub [ 485.671513][ T5856] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.775708][ T5856] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 485.868587][T13728] Bluetooth: hci4: command tx timeout [ 485.889269][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.066913][ T5856] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 486.264631][ T5856] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 486.478545][T14616] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 487.026001][ T5856] usb 10-1: USB disconnect, device number 6 [ 487.129646][ T5856] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 487.237739][ T5856] cyberjack 10-1:1.0: device disconnected [ 487.955582][T13728] Bluetooth: hci4: command tx timeout [ 488.276606][ T12] ------------[ cut here ]------------ [ 488.284231][ T12] WARNING: CPU: 0 PID: 12 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 488.296931][ T12] Modules linked in: [ 488.301873][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 488.311231][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.323778][ T12] Workqueue: iou_exit io_ring_exit_work [ 488.330781][ T12] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 488.338027][ T12] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 488.362306][ T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293 [ 488.369888][ T12] RAX: ffffffff8a8a8179 RBX: ffff88802fdc6000 RCX: ffff88801ca6da00 [ 488.379806][ T12] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 488.389868][ T12] RBP: ffffc90000117bb0 R08: ffffc900001179c7 R09: 1ffff92000022f38 [ 488.399950][ T12] R10: dffffc0000000000 R11: fffff52000022f39 R12: dffffc0000000000 [ 488.410000][ T12] R13: 00000001000048be R14: 00000001000048c1 R15: ffff88802fdc6510 [ 488.420249][ T12] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 488.431582][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.439898][ T12] CR2: 00007ffb82b556c8 CR3: 0000000063082000 CR4: 00000000003506f0 [ 488.449790][ T12] Call Trace: [ 488.453862][ T12] [ 488.457630][ T12] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 488.464920][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.471419][ T12] ? process_scheduled_works+0x975/0x1600 [ 488.478591][ T12] ? process_scheduled_works+0x975/0x1600 [ 488.485736][ T12] process_scheduled_works+0xa60/0x1600 [ 488.492632][ T12] ? worker_attach_to_pool+0x370/0x370 [ 488.499446][ T12] ? assign_work+0x3cc/0x5d0 [ 488.505175][ T12] worker_thread+0xa5e/0xfe0 [ 488.510981][ T12] kthread+0x2fa/0x390 [ 488.516386][ T12] ? pr_cont_work+0x550/0x550 [ 488.522233][ T12] ? kthread_blkcg+0xd0/0xd0 [ 488.527990][ T12] ret_from_fork+0x48/0x80 [ 488.533470][ T12] ? kthread_blkcg+0xd0/0xd0 [ 488.539201][ T12] ret_from_fork_asm+0x11/0x20 [ 488.545147][ T12] [ 488.548987][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 488.556273][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 488.563652][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.573717][ T12] Workqueue: iou_exit io_ring_exit_work [ 488.579282][ T12] Call Trace: [ 488.582588][ T12] [ 488.585542][ T12] dump_stack_lvl+0x18c/0x250 [ 488.590270][ T12] ? show_regs_print_info+0x20/0x20 [ 488.595487][ T12] ? load_image+0x420/0x420 [ 488.600032][ T12] panic+0x2ca/0x720 [ 488.603939][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 488.608457][ T12] ? ret_from_fork_asm+0x11/0x20 [ 488.613411][ T12] __warn+0x2e0/0x470 [ 488.617403][ T12] ? io_ring_exit_work+0x3b9/0x830 [ 488.622527][ T12] ? io_ring_exit_work+0x3b9/0x830 [ 488.627670][ T12] report_bug+0x2be/0x4f0 [ 488.632010][ T12] ? io_ring_exit_work+0x3b9/0x830 [ 488.637138][ T12] ? io_ring_exit_work+0x3b9/0x830 [ 488.642258][ T12] ? io_ring_exit_work+0x3bb/0x830 [ 488.647468][ T12] handle_bug+0xcf/0x120 [ 488.651722][ T12] exc_invalid_op+0x1a/0x50 [ 488.656239][ T12] asm_exc_invalid_op+0x1a/0x20 [ 488.661095][ T12] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 488.666831][ T12] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 488.686461][ T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293 [ 488.692552][ T12] RAX: ffffffff8a8a8179 RBX: ffff88802fdc6000 RCX: ffff88801ca6da00 [ 488.700568][ T12] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 488.708547][ T12] RBP: ffffc90000117bb0 R08: ffffc900001179c7 R09: 1ffff92000022f38 [ 488.716525][ T12] R10: dffffc0000000000 R11: fffff52000022f39 R12: dffffc0000000000 [ 488.724500][ T12] R13: 00000001000048be R14: 00000001000048c1 R15: ffff88802fdc6510 [ 488.732489][ T12] ? io_ring_exit_work+0x3b9/0x830 [ 488.737649][ T12] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 488.743478][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.748694][ T12] ? process_scheduled_works+0x975/0x1600 [ 488.754429][ T12] ? process_scheduled_works+0x975/0x1600 [ 488.760163][ T12] process_scheduled_works+0xa60/0x1600 [ 488.765756][ T12] ? worker_attach_to_pool+0x370/0x370 [ 488.771236][ T12] ? assign_work+0x3cc/0x5d0 [ 488.775861][ T12] worker_thread+0xa5e/0xfe0 [ 488.780492][ T12] kthread+0x2fa/0x390 [ 488.784589][ T12] ? pr_cont_work+0x550/0x550 [ 488.789280][ T12] ? kthread_blkcg+0xd0/0xd0 [ 488.793882][ T12] ret_from_fork+0x48/0x80 [ 488.798309][ T12] ? kthread_blkcg+0xd0/0xd0 [ 488.802925][ T12] ret_from_fork_asm+0x11/0x20 [ 488.807717][ T12] [ 488.810812][ T12] Kernel Offset: disabled [ 488.815277][ T12] Rebooting in 86400 seconds..