last executing test programs: 2.204047336s ago: executing program 3 (id=360): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.997251039s ago: executing program 3 (id=361): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec071, r1, 0x59ac8000) 1.519918809s ago: executing program 4 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r2 = dup(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x4000, 0x0}, 0x10) 1.480894238s ago: executing program 1 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd0f, &(0x7f0000000280)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70") 1.416602081s ago: executing program 4 (id=368): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) 1.378034777s ago: executing program 1 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 1.343761182s ago: executing program 4 (id=370): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@jqfmt_vfsold}, {@acl}, {@noload}, {@acl}, {@nodelalloc}]}, 0xfe, 0x478, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file0/file0\x00', 0x22042, 0x20) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000940)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000014c0)={0x17c04, 0xffffffffffffffff, 0xeb, 0x100000002, 0x20, 0xfbf}) 1.217890166s ago: executing program 1 (id=371): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000280)={[{@time_offset={'time_offset', 0x3d, 0x7}}, {@discard}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0xd}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@zero_size_dir}, {@time_offset={'time_offset', 0x3d, 0xd6}}, {@allow_utime={'allow_utime', 0x3d, 0xe}}]}, 0x1, 0x1547, &(0x7f0000004880)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDawiA2dlrildEkhgihopXxXx8TQwXr4sRYqQYJd7IPlq8KcaIsWKcGC+SxQQxUbwlJom3xWTxjpgipooUMU1MF++KGWKmmCXeE7PF+2KOmCvmifkiVXwgFoiFIk18KBaJj0S6WCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIj8VO8YnYJXaLPeJTsVd8JvaJz8V+8YU4IL4UGeIrcVB8LQ6Jb8Rh8a04Ir4TR8UxcVx8L06IH8RJcUqcFmfEWfGjOCd+EueFFyBRCimlkoGMkdlkrMwuc8irZE4ZXHx2r5Fx8lqZR14n88p8Mr8sIONlQVlIammklSRDWVgWkVF5vSwqb5DFZHFZQpaUTpaSpeWNsoy8SZaVN8ty8hZZXt4qK8iKspKsLG+TVeTtEiIX9lFd1pA1ZS15l0yEu2UdeY+sK++V9eR9sr68XzaQD8iG8kHZSD4kG8uHZRP5iGwqm8nmsoVsKR+VreRjsrVsI9vKdrK9fFx2kE/IBPmk7Cj9xVPkadlFPiO7ymdlN9ld9pA/yfPSy16yt4Q+IPvKF2Q/2V8OiAUA+ZIcJF+Wg+UrMkkOkUPlq3KYfE0Ol6/LEXKkHCXfkKPlm3KMHCvHyfEyWU6QE+VbcpJ8W06W78gpcqpMkdPkADnw555mSfmH+W/9Rv7gn/e+UW6Sm+UWuVVuk9vlDvmx3Cl3yl1yl9wj98i9cq/cJ/fJ/XK/PCAPyAyZIQ/Kg/KQPCQPy8PyiDwij8pj8oz8Xp6QP8iT8pQ8Jc/Is/KsPHfxOQCFSiiplApUjMqmYlV2lUNdpXKqq1UulVtF1DUqLvNdWF2n8qp8Kr8qoOJVQVVIaWWUVaRCVVgVUVF1PV48YVQJVVI5VUqVVjdeyFfXqjx/nK+KqhtUMVX8F/mXxpf4O+NrqVqqVqqVaq1aq7aqrWqv2qsOqoNKUAmqo+qoOqlOqrPqrLqoLqqr6qq6qW6qh+qheqqeqpfqpRJVouqrXlD9VH81QL2oBqqX1CA1SA1Wg1WSSlJD1VA1TA1Tw9VwNUKNUKPUKDVajVZj1Bg1To1TySpZTVQT1SQ1SU1Wk9UUNUWlqBQ1XU1XM9QMNUvNUrPVbDVHzVHz1DyVqlLVArVApak0tUgtUulqsVqslqqlarlarlaqlWq1Wq3WqrVqvVqv0tUmtUltUVvUNrVN7VA71E61U+1Su9QetUftVXvVPrVP7Vf71QF1QGWoDHVQHVSH1CF1WB1WR9QRdVQdVcfVcXVCnVAn1Ul1Wp1WZ9VZdU6dU+fV+cxpXyACEahABTFBTBAbxAY5ghxBziBnkCvIFUSCSBAXxAV5guuCvEG+IH9QIIgPCgaFAh2YwAbiYtGjwfVB0eCGoFhQPCgRlAxcUCooHdwYlAluCsoGNwflgluC8sGtQYWgYlApqBzcFlQJbg+qBncE1YI7g+pBjaBmUCu4K6gd3B3UCe4J6gb3BvWC+4L6wf1Bg+CBoGHwYNAoeChoHDwcNAkeCZoGzYLmQYug5d/av/cn8z3meuneOlH30X31C7qf7q8H6Bf1QP2SHqRf1oP1KzpJD9FD9at6mH5ND9ev6xF6pB6l39Cj9Zt6jB6rx+nxOllP0BP1W3qSfltP1u/oKXqqTtHT9HT9rp6hZ+pZ+j09W7+v5+i5ep6er1P1B3qBXqjT9Id6kf5Ip+vFeoleqpfp5XqFXqlX6dV6jV6r1+n1CvRGvUlv1lv0Vr1Nb9c79Md6p/5E79K79R79qd6rP9P79Od6v/5CH9Bf6gz9lT6ov9aH9Df6sP5WH9Hf6aP6mD6uv9cn9A/6pD6lT+sz+qz+UZ/TP+nz2mdO7jM/3o0yysSYGBNrYk0Ok8PkNDlNLpPLREzExJk4k8fkMXlNXpPf5DfxJt4UMoVMJjJkCpvCJmqipqgpaoqZYqaEKWGccaa0KW3KmDKmrClryplyprwpbyqYCqaSqWRuM7eZ283t5g5zh7nT3GlqmBqmlqllapvapo6pY+qauqaeqWfqm/qmgWlgGpqGppFpZBqbxqaJaWKamqamuWluWpqWppVpZVqb1qataWvam/amg+lgEkyC6Wg6mk6mk+lsOpsupovparqabqab6WF6mJ6mp+lleplEk2j6mr6mn+lnBpgBZqAZaAaZQWawGWySTJIZaoaaYWaYGW6GmxFmpBmVOVE1b5oxZqwZZ8abZJNsJpqJZpKZZCabyWaKmWJSTIqZbqabGWaGmWVmmdlmtplj5ph5Zp5JNalmgVlg0kyaWWQWmXSTbpaYJWaZWWZWmBVmlVll1pg1Zh2sMxvMBrPJbDJbzBazzWwzO8wOs9PsNLvMLrPH7DF7zV6PAGa/2W8OmAMmw2SYg+agOWQOmcPmsDlijpij5qg5bo6bE+aEOWlOmtPmtDlr8l38vPQm1ma3OexVNqe92uayue2/xvltARtvC9pCVtu8Nt8vYmOtLWaL2xK2pHW2lC1tb/xVXMFWtJVsZXubrWJvt1V/Fde2d9s69h5b195ra9m7fhHXs/fZ+vZh2wARwDazjWwL29g+bJvYR2xT28w2ty1se/u47WCfsAn2SdvRPvWreIFdaFfZ1XaNXWt32d32tD1jD9lv7Fn7o+1le9uB9iU7yL5sB9tXbJId8qt4lH3DjrZv2jF2rB1nx/8qnmKn2hQ7zU6379oZduav4lT7gZ1t0+wcO9fOs/N/jjPHlGY/tIvsRzbdBrDELrXL7HK7wq68NFaf2663G+xGu9N+YrfYrXab3W53XJoI2912j/3U7rWf2YP2a7vffmEP2MM2w371c5x5fIftt/aI/c4etcfscfu9PWF/UJeyM4/9e/uTPW+9BUICkqQooBjKRrGUnXLQVZSTrqZclJsidA3F0bWUh66jvJSP8lMBiqeCVIg0GbJEFFJhKkJRup4uDa8ElSRHpag03Uhl6CYqSzdTObqFytOtVIEqUiWqTLdRFbqdqtIdVI3upOpUg2pSLbqLatPdVIfuobp0L9Wj+6g+3U8N6AFqSA9SI3qIGtPD1IQeoabUjJpTC2pJj1IreoxaUxtqS+2oPT1OHegJSqAnqSM9RZ3oH9SZnqYu9Ax1pWepG3WnHvQc9aTnqRf1pkTqQ33pBepH/WkAvUgD6SUaRC/TYHqFkmgIDaVXaRi9RsPpdRpBI2kUvUGj6U0aQ2NpHI2nZJpAE+ktmkRv02R6h6bQVEqhaTSd3qUZNJNm0Xs0m96nOTSX5tF8SqUPaAEtpDT6kBbRR5ROi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQx7STPqFdtJv20Ke0lz6jffQ57acv6AB9SRn0FR2kr+kQfUOH6Vvfm76jo3SMjtP3dIJ+oJN0ik7TGTpLP9I5+onOkycIMRShDFUYhDFhtjA2zB7mCK8Kc4ZXh7nC3GEkvCaMC68N84TXhXnDfGH+sEAYHxYMC4U6NKENKQzDwmGRMBpeHxYNbwiLhcXDEmHJ0IWlwtLhjWGZ8KawbHhzWC68JSwf3hpWCCuGD99bObwtrBLeHlYN7wirhXeG1cMaYc2wVnhXWDu8O6wT3hPWDe8Ny4b3hfXD+8MG4QNhw/DBsFH4UNg4fDhsEj4SNg2bhc3DFmHL8NGwVfhY2DpsE7YN24Xtw8fDDuETYUL4ZNgxfOrn9fct/P31iWGfsG/4QvhC6P09cl50fjQ1+kF0QXRhNC36YXRR9KNoenRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T7WtnAoRNOOuUCF+OyuViX3eVwV7mc7mqXy+V2EXeNi3PXujzuOpfX5XP5XQEX7wq6Qk4746wjF7rCroiLuutdUXeDK+aKuxKupHOulCvtWriWrqVr5R5zrV0b19a1c+3c4+5x94R7wj3pOrqnXCf3D9fZPe26uGfcM+5Z1811dz3cc66nm5Drwmsy0fV1fV0/188NcAPcQDfQDXKD3GA32CW5JDfUDXXD3DA33A13I9wIN8qNcqPdaDfGjXHj3DiX7JLdRDfRTXKT3GQ32U1xU1yKS3HT3XQ3w81wVWZe2MscN8fNc/Ncqkt1C1zmnDHNLXKLXLpLd0vcErfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt9PtdLt87gudur1un9vn9rv97oD70mW4r9xB97U75L5xh9237oj7zh11x9xx97074X5wJ90pd9qdcWfdj+6c+8mdd94lRyZEJkbeikyKvB2ZHHknMiUyNZISmRaZHnk3MiMyMzIr8l5kduT9yJzI3Mi8yPxIauSDyILIwkha5MPIoshHkfTI4siSyNLIssjyiPcFt4S+sC/io/56X9Tf4Iv54r6EL+mdL+VL+xt9GX+TL+tv9uX8Lb68v9VX8BV9Jf+Ib+qb+ea+hW/pH/Wt/GO+tW/j2/p2vr1/3HfwT/gE/6Tv6J/ynfw/fGf/tO/in/Fd/bO+m+/ue/jnfE//vO/le/tE38cH8ILv5/v7Af5FP9C/5Af5l/1g/4pP8kP8UP+qH+Zf88P9636EH+lHxbzhR1+6RIbxPtlP8BP9W36Sf9tP9u/4KX6qT/HT/HT/rp/hZ/pZ/j0/27/v5/i5fp6f71P9B36BX+jT/Id+kf/Ip/vFl24q+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sd/mO/03/id/ndfo//1O/1n/l9/nO/33/hD/gvfYb/yh/0X/tD/ht/2H/rj/jv/FF/zB/33/sT/gd/0p/yp/0Zf9b/6M/5n/x5/p81xhhjjLE/ZcLlpvjlmgu38/v8Ro74p437AsDVWwtk/PP6zBnlurwX2v1FfPsIADzZu+uDl5bq1RMTEy9umy4hKDIX4NJvgjLFwOV4MbSFxyEB2kCZ3xx/f9H9LP1B/9FbAHL8U04sXI4v9/85ACb+Rv+Pthu1oHx4Ou7/0/9cgGJFLudkh8vxYmj78/2VNlD2d8afr9UfjD/7F8kArf8pJydcig9e/LaGzPGXhsfgKUj4xZaMMcYYY4wxxtgF/UWlzpeuPy/9xedvXZ/Hq8s52eBy/EfX54wxxhhjjDHGGLvynu7e44lHExLadP6vN6r+t7L+dKMJ/E/1zI3fbHgPcOkRBQB/sUOAzIb8dx7F5n/LvpIuvnT+ddWyMz6A/x2l/DsaV/iNiTHGGGOMMfa3uzzp/+Xj6koNiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+HV8ndqWPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/l8AAAD//1CkAH8=") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") 1.216386322s ago: executing program 2 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d08, &(0x7f0000000a00)) 1.0603612s ago: executing program 0 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./tracing\x00', &(0x7f0000000a80)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./tracing/set_event\x00', 0x1, 0x0) write(r0, &(0x7f0000000fc0)='!*ys:ev', 0x7) 1.060185313s ago: executing program 2 (id=374): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) 929.210778ms ago: executing program 4 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0xc0010000, 0x0, 0x7}]}) 914.49272ms ago: executing program 3 (id=376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000540)={0x20004, r0}) fchmod(r2, 0xe2) 824.17036ms ago: executing program 2 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) 767.331708ms ago: executing program 3 (id=378): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000"], 0x38, 0x0) msgsnd(r0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2800) 716.838681ms ago: executing program 0 (id=379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)='8', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)='d', 0x1}], 0x1}}], 0x2, 0x44042) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x5, 0xb2ad}, 0x8) 648.752199ms ago: executing program 1 (id=380): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0) 583.328059ms ago: executing program 2 (id=381): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 540.043672ms ago: executing program 3 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000000000000000086ddffff2800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 526.747797ms ago: executing program 0 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x6d5f37783c783095, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000) 485.286319ms ago: executing program 4 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x50}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) 445.119517ms ago: executing program 1 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0xe0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 417.519076ms ago: executing program 3 (id=386): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x5, 0x5505, &(0x7f0000000380)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) dup2(r0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x3) 387.551635ms ago: executing program 0 (id=387): r0 = socket(0x11, 0x3, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1}, 0x4) 385.41198ms ago: executing program 2 (id=388): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x9, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x20004, 0x7, 0x8, 0x0, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x5, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x2000401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x100, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x8000, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 256.684314ms ago: executing program 1 (id=389): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5dda974614690373}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c040) 227.013713ms ago: executing program 4 (id=390): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x200002, &(0x7f0000000280), 0x1, 0xb80, &(0x7f0000000e80)="$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") r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001a40)={0x6000000d}) 225.878106ms ago: executing program 0 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7) 152.64047ms ago: executing program 2 (id=392): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x17, 0x49, "cb2738166a4406cbcb75f259e53ce7390256507e92cf500192bfca94c10299a5701cdee79030fae1fc42f93231c923f063013020b6778002cb8eac6a3c43189acf7089e518b9c6f595"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=393): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001080)={r1, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000001140)=0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 72.603553][ T5625] cgroup: Unknown subsys name 'net' [ 72.734636][ T5625] cgroup: Unknown subsys name 'cpuset' [ 72.744429][ T5625] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.362490][ T5625] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.651450][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.653767][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.654785][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.656721][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.658353][ T5651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.659165][ T5651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.660233][ T5651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.660983][ T5651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.668017][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.668936][ T5653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.670594][ T5653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.671252][ T5653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.684341][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.684636][ T5653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.692274][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.692761][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.694966][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.695580][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.708057][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.709081][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.709571][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.711236][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.723648][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.730073][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.745579][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.760007][ T5647] rdma_rxe: Failed to create IPv6 UDP tunnel [ 77.765061][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.768531][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.772548][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.789166][ T5637] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.825324][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.959603][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.129749][ T5635] infiniband rxe0: set active [ 78.131493][ T5635] infiniband rxe0: added rxe_eth0 [ 78.149986][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 78.150018][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 78.150050][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 78.186398][ T5635] RDS/IB: rxe0: added [ 78.186693][ T5635] smc: adding ib device rxe0 with port count 1 [ 78.186770][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 78.226768][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.253527][ T197] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.273191][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.563806][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.672232][ T5643] Bluetooth: hci2: command tx timeout [ 78.752194][ T5643] Bluetooth: hci1: command tx timeout [ 78.752201][ T5645] Bluetooth: hci0: command tx timeout [ 78.831851][ T5645] Bluetooth: hci4: command tx timeout [ 78.831998][ T5645] Bluetooth: hci3: command tx timeout [ 79.015142][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.260597][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.268759][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.268936][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.269135][ T5636] bridge_slave_0: entered allmulticast mode [ 79.292581][ T5636] bridge_slave_0: entered promiscuous mode [ 79.305145][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.305278][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.305419][ T5647] bridge_slave_0: entered allmulticast mode [ 79.308262][ T5647] bridge_slave_0: entered promiscuous mode [ 79.367870][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.367993][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.368127][ T5636] bridge_slave_1: entered allmulticast mode [ 79.370528][ T5636] bridge_slave_1: entered promiscuous mode [ 79.399440][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.399562][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.399716][ T5647] bridge_slave_1: entered allmulticast mode [ 79.401926][ T5647] bridge_slave_1: entered promiscuous mode [ 79.404861][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.404962][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.405341][ T5638] bridge_slave_0: entered allmulticast mode [ 79.410427][ T5638] bridge_slave_0: entered promiscuous mode [ 79.483141][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.483580][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.483716][ T5638] bridge_slave_1: entered allmulticast mode [ 79.486340][ T5638] bridge_slave_1: entered promiscuous mode [ 79.515542][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.515665][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.515793][ T5637] bridge_slave_0: entered allmulticast mode [ 79.520756][ T5637] bridge_slave_0: entered promiscuous mode [ 79.560559][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.561634][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.561773][ T5637] bridge_slave_1: entered allmulticast mode [ 79.564155][ T5637] bridge_slave_1: entered promiscuous mode [ 79.599890][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.622237][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.643083][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.645510][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.647913][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.648044][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.670104][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.722372][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.745758][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.788787][ T5647] team0: Port device team_slave_0 added [ 79.828751][ T5636] team0: Port device team_slave_0 added [ 79.848298][ T5647] team0: Port device team_slave_1 added [ 79.850939][ T5638] team0: Port device team_slave_0 added [ 79.855043][ T5636] team0: Port device team_slave_1 added [ 79.875616][ T5637] team0: Port device team_slave_0 added [ 79.900874][ T5638] team0: Port device team_slave_1 added [ 79.925369][ T5637] team0: Port device team_slave_1 added [ 79.967735][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.967749][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.967764][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.983634][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.983649][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.983670][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.028531][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.028547][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.028588][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.040753][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.040769][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.040791][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.047321][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.047337][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.047358][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.049647][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.049660][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.049679][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.071923][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.071939][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.071961][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.073560][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.073571][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.073592][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.240916][ T5647] hsr_slave_0: entered promiscuous mode [ 80.242999][ T5647] hsr_slave_1: entered promiscuous mode [ 80.289624][ T5636] hsr_slave_0: entered promiscuous mode [ 80.290993][ T5636] hsr_slave_1: entered promiscuous mode [ 80.292393][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 80.292471][ T5636] Cannot create hsr debugfs directory [ 80.302920][ T5637] hsr_slave_0: entered promiscuous mode [ 80.304329][ T5637] hsr_slave_1: entered promiscuous mode [ 80.305095][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 80.305113][ T5637] Cannot create hsr debugfs directory [ 80.385754][ T5638] hsr_slave_0: entered promiscuous mode [ 80.386857][ T5638] hsr_slave_1: entered promiscuous mode [ 80.387622][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 80.387640][ T5638] Cannot create hsr debugfs directory [ 80.751954][ T5643] Bluetooth: hci2: command tx timeout [ 80.831948][ T5643] Bluetooth: hci0: command tx timeout [ 80.831958][ T5645] Bluetooth: hci1: command tx timeout [ 80.911840][ T5643] Bluetooth: hci3: command tx timeout [ 80.911881][ T5643] Bluetooth: hci4: command tx timeout [ 80.983400][ T5647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.989311][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.990017][ T5647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.996607][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.998565][ T5647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.009671][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.034829][ T5647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.038989][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.091476][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.091582][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.091677][ T5635] bridge_slave_0: entered allmulticast mode [ 81.092707][ T5635] bridge_slave_0: entered promiscuous mode [ 81.102387][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.102495][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.102701][ T5635] bridge_slave_1: entered allmulticast mode [ 81.107065][ T5635] bridge_slave_1: entered promiscuous mode [ 81.181164][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.182685][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.189281][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.203485][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.231298][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.235046][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.235822][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.238338][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.239783][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.246326][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.294389][ T5635] team0: Port device team_slave_0 added [ 81.312913][ T5635] team0: Port device team_slave_1 added [ 81.359319][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.359336][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.359357][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.410446][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.418534][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.419428][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.424828][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.426500][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.426513][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.426534][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.434953][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.444016][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.465586][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.484294][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.568661][ T5635] hsr_slave_0: entered promiscuous mode [ 81.569505][ T5635] hsr_slave_1: entered promiscuous mode [ 81.569973][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 81.569994][ T5635] Cannot create hsr debugfs directory [ 81.607453][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.668015][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.671796][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.672761][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.682640][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.724017][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.726784][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.770056][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.770436][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.776673][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.839733][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.839828][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.885613][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.916887][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.916955][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.966203][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.029050][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.029119][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.036620][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.060146][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.083544][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.090831][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.107432][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.122616][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.127075][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.127195][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.164535][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.169536][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.349332][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.488211][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.523535][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.523635][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.547715][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.564241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.564385][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.683272][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.752828][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.752950][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.771376][ T5637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.771399][ T5637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.831485][ T5645] Bluetooth: hci2: command tx timeout [ 82.834553][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.834676][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.912986][ T5643] Bluetooth: hci0: command tx timeout [ 82.913092][ T5645] Bluetooth: hci1: command tx timeout [ 82.919875][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.993450][ T5643] Bluetooth: hci3: command tx timeout [ 82.993547][ T5645] Bluetooth: hci4: command tx timeout [ 83.036867][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.088722][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.088839][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.148268][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.148384][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.399678][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.681102][ T5647] veth0_vlan: entered promiscuous mode [ 83.716288][ T5647] veth1_vlan: entered promiscuous mode [ 83.786315][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.935357][ T5647] veth0_macvtap: entered promiscuous mode [ 83.963999][ T5647] veth1_macvtap: entered promiscuous mode [ 84.030155][ T5636] veth0_vlan: entered promiscuous mode [ 84.063559][ T5636] veth1_vlan: entered promiscuous mode [ 84.100661][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.119001][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.130488][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.174521][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.174723][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.174783][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.243812][ T5636] veth0_macvtap: entered promiscuous mode [ 84.291582][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.296196][ T5636] veth1_macvtap: entered promiscuous mode [ 84.445307][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.490025][ T5637] veth0_vlan: entered promiscuous mode [ 84.504526][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.556347][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.561411][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.561429][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.585780][ T5637] veth1_vlan: entered promiscuous mode [ 84.676314][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676364][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676399][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.734681][ T90] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.734739][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.734753][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.803702][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.894829][ T5637] veth0_macvtap: entered promiscuous mode [ 84.911662][ T5645] Bluetooth: hci2: command tx timeout [ 84.940134][ T5637] veth1_macvtap: entered promiscuous mode [ 84.992708][ T5643] Bluetooth: hci0: command tx timeout [ 84.992761][ T5645] Bluetooth: hci1: command tx timeout [ 85.000150][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.000173][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.072392][ T5643] Bluetooth: hci3: command tx timeout [ 85.072450][ T5645] Bluetooth: hci4: command tx timeout [ 85.129146][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.130913][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.130932][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.163647][ T5647] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.168312][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.169928][ T5635] veth0_vlan: entered promiscuous mode [ 85.323319][ T90] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.324956][ T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.325260][ T155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.326153][ T155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.375886][ T5635] veth1_vlan: entered promiscuous mode [ 85.510576][ T5638] veth0_vlan: entered promiscuous mode [ 85.569604][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.569627][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.611940][ T5635] veth0_macvtap: entered promiscuous mode [ 85.659302][ T5635] veth1_macvtap: entered promiscuous mode [ 85.676643][ T5638] veth1_vlan: entered promiscuous mode [ 85.689357][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.689381][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.818319][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.868020][ T5848] loop3: detected capacity change from 0 to 256 [ 85.901713][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.919107][ T5638] veth0_macvtap: entered promiscuous mode [ 85.998972][ T5638] veth1_macvtap: entered promiscuous mode [ 86.030426][ T5848] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 86.030976][ T5848] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 86.162217][ T90] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.162394][ T90] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.162812][ T90] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.162978][ T90] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.177071][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.291511][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.372525][ T5860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.372620][ T5860] block device autoloading is deprecated and will be removed. [ 86.451281][ T4370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.454941][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.454963][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.488105][ T5860] md: ram2 does not have a valid v1.88 superblock, not importing! [ 86.488223][ T5860] md: md_import_device returned -22 [ 86.490722][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.625589][ T5866] loop1: detected capacity change from 0 to 512 [ 86.637773][ T5866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.663398][ T5866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 86.663664][ T5866] System zones: 1-2, 4-12, 8-8 [ 86.666122][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.666141][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.682596][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.722208][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.722862][ T5866] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.13: iget: bad i_size value: 38620345925642 [ 86.723495][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.727344][ T5866] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.730111][ T5866] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.13: couldn't read orphan inode 15 (err -117) [ 86.730216][ T5866] loop1: lost filesystem error report for type 5 error -117 [ 86.792965][ T5866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.828741][ T5866] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.13: bg 0: block 5: invalid block bitmap [ 86.835538][ T5866] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 86.835570][ T5866] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.835570][ T5866] [ 86.835584][ T5866] EXT4-fs (loop1): Total free blocks count 0 [ 86.835595][ T5866] EXT4-fs (loop1): Free/Dirty block details [ 86.835629][ T5866] EXT4-fs (loop1): free_blocks=0 [ 86.835671][ T5866] EXT4-fs (loop1): dirty_blocks=2 [ 86.835683][ T5866] EXT4-fs (loop1): Block reservation details [ 86.835693][ T5866] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 86.914315][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.934984][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.175177][ T33] cfg80211: failed to load regulatory.db [ 87.248949][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.248971][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.340316][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.340339][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.522546][ T5742] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.681323][ T5742] usb 2-1: Using ep0 maxpacket: 32 [ 87.684941][ T5742] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 87.706871][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.755834][ T5742] usb 2-1: config 0 descriptor?? [ 87.822615][ T5888] loop2: detected capacity change from 0 to 64 [ 88.027486][ T5742] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 88.146335][ T5742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.162544][ T5742] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 88.168959][ T5742] usb 2-1: media controller created [ 88.343240][ T5742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.458204][ T5891] loop4: detected capacity change from 0 to 256 [ 88.465876][ T5742] az6027: usb out operation failed. (-71) [ 88.477529][ T5891] exfat: Deprecated parameter 'utf8' [ 88.477563][ T5891] exfat: Deprecated parameter 'namecase' [ 88.477635][ T5891] exfat: Deprecated parameter 'utf8' [ 88.484580][ T5742] az6027: usb out operation failed. (-71) [ 88.484596][ T5742] stb0899_attach: Driver disabled by Kconfig [ 88.484619][ T5742] az6027: no front-end attached [ 88.484619][ T5742] [ 88.494421][ T5742] az6027: usb out operation failed. (-71) [ 88.494438][ T5742] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 88.524003][ T5742] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 88.582756][ T5742] dvb-usb: schedule remote query interval to 400 msecs. [ 88.582784][ T5742] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 88.602834][ T5891] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 88.712425][ T5742] usb 2-1: USB disconnect, device number 2 [ 88.990268][ T5902] jffs2: notice: (5902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.016100][ T5903] loop0: detected capacity change from 0 to 512 [ 89.028272][ T5903] ======================================================= [ 89.028272][ T5903] WARNING: The mand mount option has been deprecated and [ 89.028272][ T5903] and is ignored by this kernel. Remove the mand [ 89.028272][ T5903] option from the mount to silence this warning. [ 89.028272][ T5903] ======================================================= [ 89.119805][ T5742] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 89.137104][ T5903] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.24: inode has both inline data and extents flags [ 89.137137][ T5903] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.154018][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 89.154044][ C0] EXT4-fs (loop0): initial error at time 1793292375: ext4_orphan_get:1404: inode 15 [ 89.154076][ C0] EXT4-fs (loop0): last error at time 1793292375: ext4_orphan_get:1404: inode 15 [ 89.181107][ T5903] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.24: couldn't read orphan inode 15 (err -117) [ 89.181142][ T5903] loop0: lost filesystem error report for type 5 error -117 [ 89.220249][ T5903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.278847][ T5903] EXT4-fs (loop0): shut down requested (0) [ 89.496457][ T5647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.556750][ T5918] loop3: detected capacity change from 0 to 512 [ 89.571317][ T5918] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 89.571335][ T5918] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.744721][ T5918] EXT4-fs (loop3): 1 orphan inode deleted [ 89.758209][ T5918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.767494][ T5918] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.790038][ T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.790207][ T13] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 89.961234][ T5369] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.991612][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.394753][ T5923] loop0: detected capacity change from 0 to 32768 [ 90.401873][ T5923] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 90.419351][ T5923] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.30 (5923) [ 90.463125][ T5742] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.585576][ T5923] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 90.585617][ T5923] BTRFS info (device loop0): using crc32c checksum algorithm [ 90.638226][ T5742] usb 4-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 90.662808][ T5742] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.662843][ T5742] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 90.664186][ T5742] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.664215][ T5742] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 90.727615][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.727644][ T5742] usb 4-1: Product: syz [ 90.727658][ T5742] usb 4-1: Manufacturer: syz [ 90.727671][ T5742] usb 4-1: SerialNumber: syz [ 90.805758][ T5742] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 90.860107][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.861284][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.893683][ T5952] bridge0: entered allmulticast mode [ 90.904439][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.904564][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.905652][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.905791][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.906339][ T5952] bridge0: entered promiscuous mode [ 90.972435][ T5742] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 90.975923][ T5923] BTRFS info (device loop0): rebuilding free space tree [ 91.010284][ T5742] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 91.041373][ T5929] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 91.086572][ T5752] usb 4-1: USB disconnect, device number 2 [ 91.113798][ T5923] BTRFS info (device loop0): disabling free space tree [ 91.113946][ T5923] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.113971][ T5923] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.175911][ T5923] BTRFS info (device loop0): enabling ssd optimizations [ 91.175941][ T5923] BTRFS info (device loop0): turning on async discard [ 91.175957][ T5923] BTRFS info (device loop0): force clearing of disk cache [ 91.175974][ T5923] BTRFS info (device loop0): use zstd compression, level 3 [ 91.272346][ T5752] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 91.296493][ T5752] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 91.308630][ T5752] ti_usb_3410_5052 4-1:2.0: device disconnected [ 91.400570][ T197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.429307][ T5647] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.530005][ T5968] ipvlan2: entered allmulticast mode [ 91.530030][ T5968] batadv_slave_1: entered allmulticast mode [ 91.566956][ T197] usb 2-1: New USB device found: idVendor=045e, idProduct=00e3, bcdDevice=0.00 [ 91.570880][ T197] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 91.570911][ T197] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 91.570933][ T197] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.570955][ T197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.570998][ T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.600170][ T197] usb 2-1: config 0 descriptor?? [ 91.611897][ T5961] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.638011][ T5968] batman_adv: batadv0: Adding interface: ipvlan2 [ 91.638028][ T5968] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.638053][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.638067][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.638081][ T5968] batman_adv: batadv0: Interface activated: ipvlan2 [ 91.919360][ T5978] random: crng reseeded on system resumption [ 92.122275][ T197] microsoft 0003:045E:00E3.0001: ignoring exceeding usage max [ 92.276868][ T197] microsoft 0003:045E:00E3.0001: hidraw0: USB HID v0.10 Joystick [HID 045e:00e3] on usb-dummy_hcd.1-1/input0 [ 92.356835][ T197] usb 2-1: USB disconnect, device number 3 [ 92.515492][ T5985] loop4: detected capacity change from 0 to 4096 [ 92.540065][ T5985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.540091][ T5985] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.576001][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.707903][ T5987] fido_id[5987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 92.743034][ T5985] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 92.748338][ T5991] loop0: detected capacity change from 0 to 512 [ 92.824097][ T5991] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 92.824125][ T5991] loop0: lost filesystem error report for type 5 error -12 [ 92.830400][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 92.830423][ C0] EXT4-fs (loop0): initial error at time 1793292379: ext4_process_orphan:346 [ 92.830447][ C0] EXT4-fs (loop0): last error at time 1793292379: ext4_process_orphan:346 [ 92.866209][ T5985] fscrypt: AES-256-XTS using blk-crypto-fallback [ 92.886533][ T5991] EXT4-fs (loop0): 2 truncates cleaned up [ 92.898701][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.025019][ T5985] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 93.077782][ T5979] loop2: detected capacity change from 0 to 40427 [ 93.084713][ T5647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.119556][ T5979] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 93.119592][ T5979] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 93.162839][ T5979] F2FS-fs (loop2): invalid crc value [ 93.197678][ T5999] loop1: detected capacity change from 0 to 1024 [ 93.255108][ T6001] loop0: detected capacity change from 0 to 2048 [ 93.283763][ T5999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.283893][ T5999] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.326181][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.327832][ T34] audit: type=1800 audit(1793292379.966:2): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="bus" dev="loop1" ino=18 res=0 errno=-22 [ 93.327884][ T34] audit: type=1800 audit(1793292379.966:3): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="bus" dev="loop1" ino=18 res=0 errno=-22 [ 93.482417][ T6001] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 93.485332][ T6001] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 467 with error 28 [ 93.485367][ T6001] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.485367][ T6001] [ 93.485383][ T6001] EXT4-fs (loop0): Total free blocks count 0 [ 93.485396][ T6001] EXT4-fs (loop0): Free/Dirty block details [ 93.485414][ T6001] EXT4-fs (loop0): free_blocks=4096 [ 93.485432][ T6001] EXT4-fs (loop0): dirty_blocks=512 [ 93.485486][ T6001] EXT4-fs (loop0): Block reservation details [ 93.485499][ T6001] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 93.682002][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.682678][ T90] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 93.737111][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.776154][ T5979] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 93.819534][ T5979] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 93.819731][ T5979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.052576][ T5635] syz-executor: attempt to access beyond end of device [ 94.052576][ T5635] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.053486][ T5635] CPU: 1 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 94.053513][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.053525][ T5635] Call Trace: [ 94.053534][ T5635] [ 94.053542][ T5635] dump_stack_lvl+0xe8/0x150 [ 94.053582][ T5635] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 94.053620][ T5635] f2fs_write_end_bio+0x2b5/0x15d0 [ 94.053644][ T5635] ? blkg_put+0x22/0x240 [ 94.053669][ T5635] ? blkg_put+0x18d/0x240 [ 94.053694][ T5635] ? bio_endio+0x984/0xac0 [ 94.053716][ T5635] ? f2fs_write_end_io+0x258/0x300 [ 94.053742][ T5635] __submit_merged_bio+0x258/0x6a0 [ 94.053771][ T5635] ? rcu_is_watching+0x16/0xb0 [ 94.053812][ T5635] f2fs_submit_merged_write+0x2cc/0x610 [ 94.053851][ T5635] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 94.053895][ T5635] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.053919][ T5635] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 94.053959][ T5635] f2fs_writeback_node_caches+0xf8c/0x1160 [ 94.054016][ T5635] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 94.054094][ T5635] ? f2fs_write_checkpoint+0xe25/0x24d0 [ 94.054125][ T5635] ? up_write+0x19d/0x4a0 [ 94.054153][ T5635] f2fs_write_checkpoint+0xe5b/0x24d0 [ 94.054224][ T5635] kill_f2fs_super+0x2df/0x700 [ 94.054252][ T5635] ? rcu_do_enqueue+0x616/0x870 [ 94.054275][ T5635] ? lockdep_hardirqs_on+0x7b/0x110 [ 94.054298][ T5635] ? __pfx_kill_f2fs_super+0x10/0x10 [ 94.054340][ T5635] ? __pfx_call_rcu+0x10/0x10 [ 94.054367][ T5635] ? shrinker_free+0x2a7/0x3b0 [ 94.054393][ T5635] deactivate_locked_super+0xbe/0x110 [ 94.054421][ T5635] cleanup_mnt+0x204/0x2a0 [ 94.054455][ T5635] task_work_run+0x1d9/0x260 [ 94.054483][ T5635] ? __pfx_task_work_run+0x10/0x10 [ 94.054519][ T5635] exit_to_user_mode_loop+0x204/0x770 [ 94.054544][ T5635] ? rcu_is_watching+0x16/0xb0 [ 94.054578][ T5635] do_syscall_64+0x328/0x520 [ 94.054600][ T5635] ? trace_irq_disable+0x3b/0x140 [ 94.054624][ T5635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.054643][ T5635] ? clear_bhb_loop+0x70/0xc0 [ 94.054668][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.054687][ T5635] RIP: 0033:0x7fb5dd5a0797 [ 94.054706][ T5635] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.054721][ T5635] RSP: 002b:00007ffde8941028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.054742][ T5635] RAX: 0000000000000000 RBX: 00007fb5dd635f63 RCX: 00007fb5dd5a0797 [ 94.054755][ T5635] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde89410e0 [ 94.054766][ T5635] RBP: 00007ffde89410e0 R08: 00007ffde89420e0 R09: 00000000ffffffff [ 94.054779][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde8942170 [ 94.054790][ T5635] R13: 00007fb5dd635f63 R14: 0000000000016e65 R15: 00007ffde89421b0 [ 94.054827][ T5635] [ 94.062573][ T5635] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 94.078374][ T6012] mmap: syz.1.48 (6012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.302730][ T6011] loop0: detected capacity change from 0 to 4096 [ 94.415811][ T6011] ntfs3(loop0): ino=3, mi_enum_attr [ 94.659711][ T6015] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.453027][ T6013] loop4: detected capacity change from 0 to 40427 [ 95.486240][ T6013] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 95.486266][ T6013] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 95.522980][ T6013] F2FS-fs (loop4): invalid crc value [ 95.651472][ T6019] loop2: detected capacity change from 0 to 32768 [ 95.718383][ T6019] [ 95.718383][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.718383][ T6019] [ 95.804426][ T34] audit: type=1800 audit(1793292382.447:4): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.50" name="file1" dev="loop2" ino=4 res=0 errno=-22 [ 95.847574][ T6013] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 95.849803][ T6019] [ 95.849803][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.849803][ T6019] [ 95.874338][ T6019] [ 95.874338][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.874338][ T6019] [ 95.892172][ T127] [ 95.892172][ T127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.892172][ T127] [ 95.894029][ T6013] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 95.894055][ T6013] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 95.996419][ T5638] syz-executor: attempt to access beyond end of device [ 95.996419][ T5638] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 96.018674][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 96.018704][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.018715][ T5638] Call Trace: [ 96.018722][ T5638] [ 96.018730][ T5638] dump_stack_lvl+0xe8/0x150 [ 96.018767][ T5638] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 96.018802][ T5638] f2fs_write_end_bio+0x118e/0x15d0 [ 96.018843][ T5638] __submit_merged_bio+0x258/0x6a0 [ 96.018870][ T5638] ? rcu_is_watching+0x16/0xb0 [ 96.018905][ T5638] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 96.018937][ T5638] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 96.018990][ T5638] f2fs_write_data_pages+0x2a13/0x36e0 [ 96.019052][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.019096][ T5638] ? is_bpf_text_address+0x292/0x2b0 [ 96.019115][ T5638] ? is_bpf_text_address+0x26/0x2b0 [ 96.019164][ T5638] ? stack_trace_save+0xa9/0x100 [ 96.019188][ T5638] ? __pfx_stack_trace_save+0x10/0x10 [ 96.019231][ T5638] ? lockdep_unlock+0x5c/0xd0 [ 96.019250][ T5638] ? __lock_acquire+0x1511/0x2de0 [ 96.019305][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.019327][ T5638] do_writepages+0x338/0x560 [ 96.019365][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 96.019392][ T5638] filemap_fdatawrite+0x1e9/0x2f0 [ 96.019418][ T5638] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 96.019489][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 96.019514][ T5638] f2fs_sync_dirty_inodes+0x471/0x970 [ 96.019555][ T5638] f2fs_write_checkpoint+0x867/0x24d0 [ 96.019618][ T5638] kill_f2fs_super+0x2df/0x700 [ 96.019646][ T5638] ? rcu_do_enqueue+0x616/0x870 [ 96.019669][ T5638] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.019691][ T5638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 96.019730][ T5638] ? __pfx_call_rcu+0x10/0x10 [ 96.019753][ T5638] ? shrinker_free+0x2a7/0x3b0 [ 96.019777][ T5638] deactivate_locked_super+0xbe/0x110 [ 96.019804][ T5638] cleanup_mnt+0x204/0x2a0 [ 96.019836][ T5638] task_work_run+0x1d9/0x260 [ 96.019864][ T5638] ? __pfx_task_work_run+0x10/0x10 [ 96.019897][ T5638] exit_to_user_mode_loop+0x204/0x770 [ 96.019923][ T5638] ? rcu_is_watching+0x16/0xb0 [ 96.019953][ T5638] do_syscall_64+0x328/0x520 [ 96.019975][ T5638] ? trace_irq_disable+0x3b/0x140 [ 96.020000][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.020018][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 96.020042][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.020061][ T5638] RIP: 0033:0x7ff6d5fa0797 [ 96.020081][ T5638] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 96.020105][ T5638] RSP: 002b:00007ffeba9f2ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.020127][ T5638] RAX: 0000000000000000 RBX: 00007ff6d6035f63 RCX: 00007ff6d5fa0797 [ 96.020140][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeba9f2f60 [ 96.020149][ T5638] RBP: 00007ffeba9f2f60 R08: 00007ffeba9f3f60 R09: 00000000ffffffff [ 96.020161][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeba9f3ff0 [ 96.020172][ T5638] R13: 00007ff6d6035f63 R14: 000000000001766b R15: 00007ffeba9f4030 [ 96.020206][ T5638] [ 96.117530][ T5635] [ 96.117530][ T5635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.117530][ T5635] [ 96.123996][ T5638] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 96.124110][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 96.124130][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.124140][ T5638] Call Trace: [ 96.124147][ T5638] [ 96.124154][ T5638] dump_stack_lvl+0xe8/0x150 [ 96.124187][ T5638] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 96.124220][ T5638] f2fs_write_end_bio+0x118e/0x15d0 [ 96.124258][ T5638] __submit_merged_bio+0x258/0x6a0 [ 96.124283][ T5638] ? rcu_is_watching+0x16/0xb0 [ 96.124314][ T5638] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 96.124342][ T5638] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 96.124391][ T5638] f2fs_write_data_pages+0x2a13/0x36e0 [ 96.124446][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.124477][ T5638] ? is_bpf_text_address+0x292/0x2b0 [ 96.124495][ T5638] ? is_bpf_text_address+0x26/0x2b0 [ 96.124539][ T5638] ? stack_trace_save+0xa9/0x100 [ 96.124560][ T5638] ? __pfx_stack_trace_save+0x10/0x10 [ 96.124606][ T5638] ? lockdep_unlock+0x5c/0xd0 [ 96.124624][ T5638] ? __lock_acquire+0x1511/0x2de0 [ 96.124673][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.124693][ T5638] do_writepages+0x338/0x560 [ 96.124722][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 96.124744][ T5638] filemap_fdatawrite+0x1e9/0x2f0 [ 96.124772][ T5638] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 96.124836][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 96.124858][ T5638] f2fs_sync_dirty_inodes+0x471/0x970 [ 96.124894][ T5638] f2fs_write_checkpoint+0x867/0x24d0 [ 96.124950][ T5638] kill_f2fs_super+0x2df/0x700 [ 96.124974][ T5638] ? rcu_do_enqueue+0x616/0x870 [ 96.124995][ T5638] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.125017][ T5638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 96.125053][ T5638] ? __pfx_call_rcu+0x10/0x10 [ 96.125075][ T5638] ? shrinker_free+0x2a7/0x3b0 [ 96.125097][ T5638] deactivate_locked_super+0xbe/0x110 [ 96.125122][ T5638] cleanup_mnt+0x204/0x2a0 [ 96.125151][ T5638] task_work_run+0x1d9/0x260 [ 96.125176][ T5638] ? __pfx_task_work_run+0x10/0x10 [ 96.125207][ T5638] exit_to_user_mode_loop+0x204/0x770 [ 96.125231][ T5638] ? rcu_is_watching+0x16/0xb0 [ 96.125260][ T5638] do_syscall_64+0x328/0x520 [ 96.125280][ T5638] ? trace_irq_disable+0x3b/0x140 [ 96.125302][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.125320][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 96.125342][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.125358][ T5638] RIP: 0033:0x7ff6d5fa0797 [ 96.125376][ T5638] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 96.125390][ T5638] RSP: 002b:00007ffeba9f2ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.125410][ T5638] RAX: 0000000000000000 RBX: 00007ff6d6035f63 RCX: 00007ff6d5fa0797 [ 96.125421][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeba9f2f60 [ 96.125432][ T5638] RBP: 00007ffeba9f2f60 R08: 00007ffeba9f3f60 R09: 00000000ffffffff [ 96.125444][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeba9f3ff0 [ 96.125455][ T5638] R13: 00007ff6d6035f63 R14: 000000000001766b R15: 00007ffeba9f4030 [ 96.125485][ T5638] [ 96.133967][ T5635] [ 96.133967][ T5635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.133967][ T5635] [ 96.146292][ T5638] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 96.718198][ T6032] loop2: detected capacity change from 0 to 1024 [ 96.778163][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.970236][ T6032] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 96.970721][ T6032] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.54: missing EA_INODE flag [ 97.049084][ T6032] EXT4-fs (loop2): Remounting filesystem read-only [ 97.254709][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.307253][ T6030] loop1: detected capacity change from 0 to 40427 [ 97.384893][ T6030] F2FS-fs (loop1): invalid crc value [ 97.422777][ T6038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.498869][ T6038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.557798][ T6038] EXT4-fs (loop2): shut down requested (2) [ 97.640339][ T6028] set_capacity_and_notify: 1 callbacks suppressed [ 97.640364][ T6028] loop0: detected capacity change from 0 to 32768 [ 97.643141][ T6028] xfs: Deprecated parameter 'ikeep' [ 97.643159][ T6028] XFS: ikeep mount option is deprecated. [ 97.718504][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.808154][ T6028] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 97.865651][ T6030] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 97.888611][ T6030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.025046][ T6028] XFS (loop0): Ending clean mount [ 98.025679][ T5637] syz-executor: attempt to access beyond end of device [ 98.025679][ T5637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.053829][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 98.053858][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.053871][ T5637] Call Trace: [ 98.053880][ T5637] [ 98.053889][ T5637] dump_stack_lvl+0xe8/0x150 [ 98.053926][ T5637] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 98.053961][ T5637] f2fs_write_end_bio+0x118e/0x15d0 [ 98.054004][ T5637] __submit_merged_bio+0x258/0x6a0 [ 98.054031][ T5637] ? rcu_is_watching+0x16/0xb0 [ 98.054064][ T5637] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 98.054095][ T5637] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 98.054147][ T5637] f2fs_write_data_pages+0x2a13/0x36e0 [ 98.054209][ T5637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.054229][ T5637] ? is_bpf_text_address+0x26/0x2b0 [ 98.054261][ T5637] ? arch_stack_walk+0xfb/0x150 [ 98.054318][ T5637] ? add_lock_to_list+0xc7/0x100 [ 98.054347][ T5637] ? lockdep_unlock+0x5c/0xd0 [ 98.054372][ T5637] ? __lock_acquire+0x1511/0x2de0 [ 98.054424][ T5637] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.054467][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 98.054487][ T5637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.054510][ T5637] do_writepages+0x338/0x560 [ 98.054541][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 98.054567][ T5637] filemap_fdatawrite+0x1e9/0x2f0 [ 98.054593][ T5637] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 98.054658][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 98.054681][ T5637] f2fs_sync_dirty_inodes+0x471/0x970 [ 98.054720][ T5637] f2fs_write_checkpoint+0x867/0x24d0 [ 98.054781][ T5637] kill_f2fs_super+0x2df/0x700 [ 98.054810][ T5637] ? rcu_do_enqueue+0x616/0x870 [ 98.054834][ T5637] ? lockdep_hardirqs_on+0x7b/0x110 [ 98.054858][ T5637] ? __pfx_kill_f2fs_super+0x10/0x10 [ 98.054897][ T5637] ? __pfx_call_rcu+0x10/0x10 [ 98.054922][ T5637] ? shrinker_free+0x2a7/0x3b0 [ 98.054946][ T5637] deactivate_locked_super+0xbe/0x110 [ 98.054974][ T5637] cleanup_mnt+0x204/0x2a0 [ 98.055006][ T5637] task_work_run+0x1d9/0x260 [ 98.055034][ T5637] ? __pfx_task_work_run+0x10/0x10 [ 98.055069][ T5637] exit_to_user_mode_loop+0x204/0x770 [ 98.055095][ T5637] ? rcu_is_watching+0x16/0xb0 [ 98.055126][ T5637] do_syscall_64+0x328/0x520 [ 98.055149][ T5637] ? trace_irq_disable+0x3b/0x140 [ 98.055174][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.055193][ T5637] ? clear_bhb_loop+0x70/0xc0 [ 98.055216][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.055235][ T5637] RIP: 0033:0x7f128eba0797 [ 98.055254][ T5637] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.055268][ T5637] RSP: 002b:00007ffd1d852058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.055290][ T5637] RAX: 0000000000000000 RBX: 00007f128ec35f63 RCX: 00007f128eba0797 [ 98.055303][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1d852110 [ 98.055314][ T5637] RBP: 00007ffd1d852110 R08: 00007ffd1d853110 R09: 00000000ffffffff [ 98.055325][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1d8531a0 [ 98.055336][ T5637] R13: 00007f128ec35f63 R14: 0000000000017e59 R15: 00007ffd1d8531e0 [ 98.055370][ T5637] [ 98.058627][ T5637] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.406514][ T5647] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 98.970578][ T6062] loop3: detected capacity change from 0 to 32768 [ 98.991040][ T6062] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 98.991074][ T6062] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.069002][ T6062] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 99.088220][ T6070] loop1: detected capacity change from 0 to 1024 [ 99.093459][ T197] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.093478][ T197] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.195347][ T6072] loop2: detected capacity change from 0 to 2048 [ 99.196251][ T6070] hfsplus: invalid length 1280 has been corrected to 255 [ 99.253934][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.358549][ T6071] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.496868][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.608933][ T197] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 515ms [ 99.622055][ T197] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.622801][ T6062] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 99.661911][ T6079] loop1: detected capacity change from 0 to 4096 [ 99.697786][ T6079] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 99.920138][ T6079] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 100.044249][ T6085] loop0: detected capacity change from 0 to 4096 [ 100.313241][ T6089] capability: warning: `syz.2.70' uses 32-bit capabilities (legacy support in use) [ 100.334997][ T6089] program syz.2.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.631053][ T6097] loop1: detected capacity change from 0 to 256 [ 100.679215][ T6097] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 101.276608][ T6095] loop2: detected capacity change from 0 to 40427 [ 101.291662][ T6095] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 101.291693][ T6095] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.457129][ T6095] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.485105][ T6095] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.485138][ T6095] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.555498][ T34] audit: type=1800 audit(1793292388.197:5): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="bus" dev="loop2" ino=10 res=0 errno=-22 [ 101.605096][ T5635] syz-executor: attempt to access beyond end of device [ 101.605096][ T5635] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.623964][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 101.623995][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.624006][ T5635] Call Trace: [ 101.624014][ T5635] [ 101.624023][ T5635] dump_stack_lvl+0xe8/0x150 [ 101.624059][ T5635] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 101.624097][ T5635] f2fs_write_end_bio+0x118e/0x15d0 [ 101.624140][ T5635] __submit_merged_bio+0x258/0x6a0 [ 101.624169][ T5635] ? rcu_is_watching+0x16/0xb0 [ 101.624204][ T5635] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 101.624236][ T5635] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 101.624292][ T5635] f2fs_write_data_pages+0x2a13/0x36e0 [ 101.624355][ T5635] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.624375][ T5635] ? is_bpf_text_address+0x26/0x2b0 [ 101.624409][ T5635] ? arch_stack_walk+0xfb/0x150 [ 101.624473][ T5635] ? add_lock_to_list+0xc7/0x100 [ 101.624504][ T5635] ? lockdep_unlock+0x5c/0xd0 [ 101.624524][ T5635] ? __lock_acquire+0x1511/0x2de0 [ 101.624585][ T5635] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.624618][ T5635] ? do_raw_spin_unlock+0xf5/0x200 [ 101.624638][ T5635] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.624671][ T5635] do_writepages+0x338/0x560 [ 101.624705][ T5635] ? do_raw_spin_unlock+0xf5/0x200 [ 101.624731][ T5635] filemap_fdatawrite+0x1e9/0x2f0 [ 101.624758][ T5635] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.624832][ T5635] ? do_raw_spin_unlock+0xf5/0x200 [ 101.624857][ T5635] f2fs_sync_dirty_inodes+0x471/0x970 [ 101.624900][ T5635] f2fs_write_checkpoint+0x867/0x24d0 [ 101.624964][ T5635] kill_f2fs_super+0x2df/0x700 [ 101.624992][ T5635] ? rcu_do_enqueue+0x616/0x870 [ 101.625016][ T5635] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.625039][ T5635] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.625080][ T5635] ? __pfx_call_rcu+0x10/0x10 [ 101.625106][ T5635] ? shrinker_free+0x2a7/0x3b0 [ 101.625131][ T5635] deactivate_locked_super+0xbe/0x110 [ 101.625157][ T5635] cleanup_mnt+0x204/0x2a0 [ 101.625191][ T5635] task_work_run+0x1d9/0x260 [ 101.625220][ T5635] ? __pfx_task_work_run+0x10/0x10 [ 101.625255][ T5635] exit_to_user_mode_loop+0x204/0x770 [ 101.625280][ T5635] ? rcu_is_watching+0x16/0xb0 [ 101.625313][ T5635] do_syscall_64+0x328/0x520 [ 101.625335][ T5635] ? trace_irq_disable+0x3b/0x140 [ 101.625361][ T5635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.625381][ T5635] ? clear_bhb_loop+0x70/0xc0 [ 101.625406][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.625425][ T5635] RIP: 0033:0x7fb5dd5a0797 [ 101.625445][ T5635] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.625461][ T5635] RSP: 002b:00007ffde8941028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.625484][ T5635] RAX: 0000000000000000 RBX: 00007fb5dd635f63 RCX: 00007fb5dd5a0797 [ 101.625498][ T5635] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde89410e0 [ 101.625509][ T5635] RBP: 00007ffde89410e0 R08: 00007ffde89420e0 R09: 00000000ffffffff [ 101.625523][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde8942170 [ 101.625535][ T5635] R13: 00007fb5dd635f63 R14: 0000000000018c3d R15: 00007ffde89421b0 [ 101.625578][ T5635] [ 101.631345][ T5635] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 101.910920][ T6126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.010487][ T5752] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.078203][ T6102] loop3: detected capacity change from 0 to 32768 [ 102.098160][ T6102] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.68 (6102) [ 102.169414][ T5752] usb 1-1: Using ep0 maxpacket: 32 [ 102.170604][ T5752] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 102.172968][ T5752] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 102.172993][ T5752] usb 1-1: config 0 has no interface number 0 [ 102.173039][ T5752] usb 1-1: config 0 interface 12 has no altsetting 0 [ 102.183270][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.183298][ T5752] usb 1-1: Product: syz [ 102.183311][ T5752] usb 1-1: Manufacturer: syz [ 102.183325][ T5752] usb 1-1: SerialNumber: syz [ 102.188986][ T6102] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 102.189017][ T6102] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 102.252837][ T5752] usb 1-1: config 0 descriptor?? [ 102.485525][ T6102] BTRFS info (device loop3): enabling ssd optimizations [ 102.485568][ T6102] BTRFS info (device loop3): turning on async discard [ 102.485584][ T6102] BTRFS info (device loop3): enabling free space tree [ 102.804927][ T5636] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 103.141272][ T5752] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 103.141340][ T5752] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 103.141355][ T5752] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 103.141445][ T5752] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 103.167857][ T5752] usb 1-1: USB disconnect, device number 2 [ 103.501539][ T6154] loop2: detected capacity change from 0 to 32768 [ 103.505294][ T6154] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.90 (6154) [ 103.548011][ T6154] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.548048][ T6154] BTRFS info (device loop2): using blake2b checksum algorithm [ 103.661923][ T6154] BTRFS info (device loop2): enabling ssd optimizations [ 103.661956][ T6154] BTRFS info (device loop2): turning on async discard [ 103.661972][ T6154] BTRFS info (device loop2): enabling free space tree [ 103.661990][ T6154] BTRFS info (device loop2): use zlib compression, level 3 [ 103.759276][ T6181] loop3: detected capacity change from 0 to 1024 [ 103.792383][ T5635] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.885731][ T6181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 104.065779][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 104.255560][ T6201] jffs2: notice: (6201) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.289157][ T5752] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.430710][ T5752] usb 2-1: Using ep0 maxpacket: 16 [ 104.431704][ T5752] usb 2-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 104.433607][ T5752] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 104.437509][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.437535][ T5752] usb 2-1: Product: syz [ 104.437548][ T5752] usb 2-1: Manufacturer: syz [ 104.437561][ T5752] usb 2-1: SerialNumber: syz [ 104.503068][ T5752] r8152-cfgselector 2-1: Unknown version 0x0000 [ 104.503094][ T5752] r8152-cfgselector 2-1: config 0 descriptor?? [ 104.697422][ T6212] loop0: detected capacity change from 0 to 16 [ 104.750635][ T5752] r8152-cfgselector 2-1: Needed 2 retries to read version [ 104.750696][ T5752] r8152-cfgselector 2-1: Unknown version 0x1ce0 [ 104.754908][ T6212] erofs (device loop0): mounted with root inode @ nid 36. [ 104.756221][ T5752] r8152-cfgselector 2-1: No union descriptors [ 104.807224][ T6214] netlink: 'syz.2.108': attribute type 4 has an invalid length. [ 104.807250][ T6214] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 104.807339][ T6214] netlink: 212 bytes leftover after parsing attributes in process `syz.2.108'. [ 104.807355][ T6214] NCSI netlink: No device for ifindex 0 [ 104.980101][ T5752] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 105.253765][ T6228] loop3: detected capacity change from 0 to 2048 [ 105.308029][ T6228] Alternate GPT is invalid, using primary GPT. [ 105.308179][ T6228] loop3: p2 p3 p7 [ 105.691096][ T6241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.805988][ T6244] loop1: detected capacity change from 0 to 512 [ 105.817788][ T6244] EXT4-fs: Ignoring removed i_version option [ 105.817843][ T6244] EXT4-fs: Ignoring removed oldalloc option [ 105.834699][ T6244] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.862675][ T6244] EXT4-fs (loop1): 1 truncate cleaned up [ 105.879861][ T6244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.956973][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 105.964945][ T6244] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.036892][ T6251] loop4: detected capacity change from 0 to 512 [ 106.052813][ T6235] ftl_cs: FTL header not found. [ 106.075238][ T6244] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 106.183863][ T6235] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 106.235624][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.290051][ T6256] netlink: 'syz.2.125': attribute type 8 has an invalid length. [ 106.426674][ T6259] jffs2: notice: (6259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.751336][ T6275] /dev/loop0: Can't open blockdev [ 106.844967][ T6280] loop1: detected capacity change from 0 to 512 [ 106.869351][ T6280] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 106.869373][ T6280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.897709][ T6280] EXT4-fs (loop1): 1 truncate cleaned up [ 106.906056][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.954090][ T6280] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 107.140573][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.487709][ T6299] loop3: detected capacity change from 0 to 128 [ 107.515596][ T6299] FAT-fs (loop3): bogus sectors per cluster 7 [ 107.515622][ T6299] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 107.515636][ T6299] FAT-fs (loop3): Can't find a valid FAT filesystem [ 107.878697][ T6315] kAFS: bad VL server IP address [ 108.027933][ T6321] netlink: 'syz.4.154': attribute type 11 has an invalid length. [ 108.496751][ T6330] netlink: 68 bytes leftover after parsing attributes in process `syz.4.158'. [ 108.496779][ T6330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.158'. [ 108.523778][ T6328] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 108.523807][ T6328] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 108.526349][ T6328] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 108.526638][ T6328] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 108.620111][ T6317] loop1: detected capacity change from 0 to 32768 [ 108.636074][ T6317] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.151 (6317) [ 108.666681][ T6317] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.666717][ T6317] BTRFS info (device loop1): using sha256 checksum algorithm [ 108.753283][ T6317] BTRFS info (device loop1): setting nodatasum [ 108.753313][ T6317] BTRFS info (device loop1): enabling ssd optimizations [ 108.753331][ T6317] BTRFS info (device loop1): turning on flush-on-commit [ 108.753346][ T6317] BTRFS info (device loop1): turning on async discard [ 108.753361][ T6317] BTRFS info (device loop1): enabling free space tree [ 109.173619][ T5637] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.265857][ T6361] input: syz1 as /devices/virtual/input/input7 [ 109.636366][ T34] audit: type=1400 audit(1793292396.278:6): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=6368 comm="syz.0.170" name="p" offset=33 [ 109.727787][ T6366] loop2: detected capacity change from 0 to 4096 [ 110.155030][ T6358] loop3: detected capacity change from 0 to 40427 [ 110.186800][ T6358] F2FS-fs (loop3): invalid crc value [ 110.218199][ T11] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 110.384490][ T11] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.399565][ T11] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.399601][ T11] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.399624][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.404270][ T11] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.404297][ T11] usb 1-1: Product: syz [ 110.404311][ T11] usb 1-1: Manufacturer: syz [ 110.404325][ T11] usb 1-1: SerialNumber: syz [ 110.420538][ T11] usb 1-1: config 0 descriptor?? [ 110.601027][ T11] usb 1-1: selecting invalid altsetting 0 [ 110.623726][ T6387] loop2: detected capacity change from 0 to 256 [ 110.653011][ T6387] exfat: Deprecated parameter 'namecase' [ 110.653060][ T6387] exfat: Deprecated parameter 'namecase' [ 110.653135][ T6387] exfat: Deprecated parameter 'namecase' [ 110.656100][ T6372] loop4: detected capacity change from 0 to 32768 [ 110.740494][ T6372] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.766090][ T6387] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 110.800706][ T6358] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.879633][ T6358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.901817][ T6372] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 110.939337][ T6372] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30 [ 110.979050][ T6372] XFS (loop4): Ending clean mount [ 111.055091][ T5636] syz-executor: attempt to access beyond end of device [ 111.055091][ T5636] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.078709][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 111.078736][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.078746][ T5636] Call Trace: [ 111.078754][ T5636] [ 111.078762][ T5636] dump_stack_lvl+0xe8/0x150 [ 111.078796][ T5636] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 111.078829][ T5636] f2fs_write_end_bio+0x118e/0x15d0 [ 111.078866][ T5636] __submit_merged_bio+0x258/0x6a0 [ 111.078891][ T5636] ? rcu_is_watching+0x16/0xb0 [ 111.078921][ T5636] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 111.078950][ T5636] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 111.079001][ T5636] f2fs_write_data_pages+0x2a13/0x36e0 [ 111.079054][ T5636] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.079070][ T5636] ? is_bpf_text_address+0x26/0x2b0 [ 111.079100][ T5636] ? arch_stack_walk+0xfb/0x150 [ 111.079151][ T5636] ? add_lock_to_list+0xc7/0x100 [ 111.079177][ T5636] ? lockdep_unlock+0x5c/0xd0 [ 111.079197][ T5636] ? __lock_acquire+0x1511/0x2de0 [ 111.079247][ T5636] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.079278][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 111.079298][ T5636] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.079320][ T5636] do_writepages+0x338/0x560 [ 111.079353][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 111.079388][ T5636] filemap_fdatawrite+0x1e9/0x2f0 [ 111.079414][ T5636] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 111.079485][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 111.079509][ T5636] f2fs_sync_dirty_inodes+0x471/0x970 [ 111.079550][ T5636] f2fs_write_checkpoint+0x867/0x24d0 [ 111.079614][ T5636] kill_f2fs_super+0x2df/0x700 [ 111.079641][ T5636] ? rcu_do_enqueue+0x616/0x870 [ 111.079664][ T5636] ? lockdep_hardirqs_on+0x7b/0x110 [ 111.079687][ T5636] ? __pfx_kill_f2fs_super+0x10/0x10 [ 111.079724][ T5636] ? __pfx_call_rcu+0x10/0x10 [ 111.079748][ T5636] ? shrinker_free+0x2a7/0x3b0 [ 111.079772][ T5636] deactivate_locked_super+0xbe/0x110 [ 111.079797][ T5636] cleanup_mnt+0x204/0x2a0 [ 111.079828][ T5636] task_work_run+0x1d9/0x260 [ 111.079856][ T5636] ? __pfx_task_work_run+0x10/0x10 [ 111.079890][ T5636] exit_to_user_mode_loop+0x204/0x770 [ 111.079915][ T5636] ? rcu_is_watching+0x16/0xb0 [ 111.079948][ T5636] do_syscall_64+0x328/0x520 [ 111.079970][ T5636] ? trace_irq_disable+0x3b/0x140 [ 111.079995][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.080013][ T5636] ? clear_bhb_loop+0x70/0xc0 [ 111.080038][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.080056][ T5636] RIP: 0033:0x7fce1b3a0797 [ 111.080076][ T5636] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 111.080091][ T5636] RSP: 002b:00007fff9ef3c288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 111.080114][ T5636] RAX: 0000000000000000 RBX: 00007fce1b435f63 RCX: 00007fce1b3a0797 [ 111.080127][ T5636] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9ef3c340 [ 111.080139][ T5636] RBP: 00007fff9ef3c340 R08: 00007fff9ef3d340 R09: 00000000ffffffff [ 111.080151][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9ef3d3d0 [ 111.080163][ T5636] R13: 00007fce1b435f63 R14: 000000000001b10b R15: 00007fff9ef3d410 [ 111.080197][ T5636] [ 111.081683][ T11] usb 1-1: USB disconnect, device number 3 [ 111.083178][ T5636] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 111.130910][ T6372] XFS (loop4): User initiated shutdown received. [ 111.133620][ T6372] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 111.133663][ T6372] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 111.159851][ T6372] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 111.273063][ T5638] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.296581][ T6385] loop1: detected capacity change from 0 to 32768 [ 111.310785][ T6385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.176 (6385) [ 111.355778][ T6385] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.355810][ T6385] BTRFS info (device loop1): using sha256 checksum algorithm [ 111.644627][ T6385] BTRFS info (device loop1): enabling ssd optimizations [ 111.644657][ T6385] BTRFS info (device loop1): turning on async discard [ 111.644673][ T6385] BTRFS info (device loop1): enabling free space tree [ 111.644690][ T6385] BTRFS info (device loop1): use zlib compression, level 3 [ 111.901092][ T5637] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.009926][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.662576][ T6429] netlink: 'syz.3.178': attribute type 96 has an invalid length. [ 113.015335][ T6434] xt_hashlimit: size too large, truncated to 1048576 [ 113.114684][ T6437] loop4: detected capacity change from 0 to 512 [ 113.116889][ T6437] EXT4-fs: Ignoring removed bh option [ 113.184068][ T6437] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.188: inode #13: comm syz.4.188: iget: illegal inode # [ 113.184103][ T6437] loop4: lost filesystem error report for type 5 error -117 [ 113.187301][ T6437] EXT4-fs (loop4): Remounting filesystem read-only [ 113.205352][ T6437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.286996][ T6423] loop1: detected capacity change from 0 to 32768 [ 113.331548][ T6416] loop2: detected capacity change from 0 to 32768 [ 113.411774][ T6416] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 113.432086][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.563512][ T6416] XFS (loop2): Ending clean mount [ 113.624828][ T6423] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.640098][ T6454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.682820][ T6423] (syz.1.183,6423,1):ocfs2_reflink_ioctl:4476 ERROR: status = -2 [ 113.820080][ T5635] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 113.987481][ T6458] si4713 0-0063: IRQ not configured. Using timeouts. [ 113.999163][ T6458] si4713 0-0063: Error while sending command 0x01 [ 114.000087][ T6458] si4713 0-0063: Failed to probe device information. [ 114.025476][ T6458] si4713 0-0063: probe with driver si4713 failed with error -5 [ 114.026241][ T6458] i2c i2c-0: new_device: Instantiated device si4713 at 0x63 [ 114.126108][ T5637] ocfs2: Unmounting device (7,1) on (node local) [ 114.182257][ T6462] loop5: detected capacity change from 0 to 7 [ 114.720329][ T6462] Dev loop5: unable to read RDB block 7 [ 114.720377][ T6462] loop5: unable to read partition table [ 114.720606][ T6462] loop5: partition table beyond EOD, truncated [ 114.720646][ T6462] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 114.979842][ T6485] loop4: detected capacity change from 0 to 1024 [ 115.032092][ T6485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.032223][ T6485] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.036383][ T6471] loop2: detected capacity change from 0 to 32768 [ 115.081475][ T6471] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.117780][ T6471] XFS (loop2): Ending clean mount [ 115.140472][ T6471] XFS (loop2): Quotacheck needed: Please wait. [ 115.214988][ T6485] EXT4-fs (loop4): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 115.262519][ T6485] EXT4-fs: Ignoring removed bh option [ 115.262623][ T6485] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 115.269067][ T6485] System zones: 0-1, 3-8 [ 115.269113][ T6485] EXT4-fs (loop4): re-mounted 00000000-0000-0006-0000-000000000000. [ 115.432380][ T6471] XFS (loop2): Quotacheck: Done. [ 115.450131][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.462686][ T6501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.515227][ T6498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.515251][ T6498] block device autoloading is deprecated and will be removed. [ 115.779585][ T5635] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.331485][ T6515] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 116.331830][ T6515] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 116.398370][ T6515] CIFS: VFS: Error connecting to socket. Aborting operation. [ 116.398548][ T6515] CIFS: VFS: cifs_mount failed w/return code = -111 [ 116.735624][ T6509] loop3: detected capacity change from 0 to 32768 [ 116.764723][ T6509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.209 (6509) [ 116.800653][ T6509] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.800690][ T6509] BTRFS info (device loop3): using sha256 checksum algorithm [ 116.957951][ T6509] BTRFS info (device loop3): enabling ssd optimizations [ 116.957985][ T6509] BTRFS info (device loop3): turning on async discard [ 116.958001][ T6509] BTRFS info (device loop3): enabling free space tree [ 116.981743][ T6535] loop2: detected capacity change from 0 to 1024 [ 117.287134][ T6536] loop1: detected capacity change from 0 to 4096 [ 117.306586][ T6536] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 117.401869][ T6536] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 117.415020][ T6549] batadv_slave_0: entered promiscuous mode [ 117.416065][ T5636] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.421734][ T6548] batadv_slave_0: left promiscuous mode [ 117.433581][ T6535] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.433602][ T6535] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.454244][ T6536] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 117.558795][ T6546] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.558816][ T6546] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.907031][ T6558] loop3: detected capacity change from 0 to 512 [ 117.926122][ T6558] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 117.926143][ T6558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.986844][ T6558] EXT4-fs (loop3): 1 truncate cleaned up [ 118.016109][ T6558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.133103][ T6558] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 118.350169][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.451959][ T6566] netlink: 136 bytes leftover after parsing attributes in process `syz.1.223'. [ 119.058920][ T6561] loop2: detected capacity change from 0 to 40427 [ 119.071864][ T6561] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 119.071890][ T6561] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.080802][ T6561] F2FS-fs (loop2): Image doesn't support compression [ 119.086313][ T6561] F2FS-fs (loop2): invalid crc value [ 119.489446][ T5369] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.518802][ T6561] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 119.541737][ T6561] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 119.541769][ T6561] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 119.542015][ T6561] F2FS-fs (loop2): Start checkpoint disabled! [ 119.631572][ T6561] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 119.646101][ T6561] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.646130][ T6561] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 119.667635][ T5369] usb 2-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 119.671263][ T5369] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 119.671293][ T5369] usb 2-1: Product: syz [ 119.671308][ T5369] usb 2-1: SerialNumber: syz [ 119.704898][ T5369] usb 2-1: config 0 descriptor?? [ 119.850939][ T13] kworker/u8:0: attempt to access beyond end of device [ 119.850939][ T13] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.859496][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 119.859521][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.859533][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 119.859572][ T13] Call Trace: [ 119.859579][ T13] [ 119.859587][ T13] dump_stack_lvl+0xe8/0x150 [ 119.859618][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 119.859651][ T13] f2fs_write_end_bio+0x118e/0x15d0 [ 119.859688][ T13] __submit_merged_bio+0x258/0x6a0 [ 119.859714][ T13] ? rcu_is_watching+0x16/0xb0 [ 119.859746][ T13] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 119.859775][ T13] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 119.859834][ T13] f2fs_write_data_pages+0x2a13/0x36e0 [ 119.859889][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.859926][ T13] ? stack_trace_save+0xa9/0x100 [ 119.860001][ T13] ? __lock_acquire+0x747/0x2de0 [ 119.860045][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.860065][ T13] do_writepages+0x338/0x560 [ 119.860092][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 119.860117][ T13] ? writeback_sb_inodes+0x450/0x1af0 [ 119.860143][ T13] __writeback_single_inode+0x136/0x1220 [ 119.860168][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 119.860191][ T13] writeback_sb_inodes+0x9de/0x1af0 [ 119.860210][ T13] ? __lock_acquire+0x747/0x2de0 [ 119.860246][ T13] ? lock_acquire+0x115/0x350 [ 119.860274][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 119.860337][ T13] ? rcu_is_watching+0x16/0xb0 [ 119.860362][ T13] ? queue_io+0x2d3/0x470 [ 119.860385][ T13] wb_writeback+0x41c/0xad0 [ 119.860409][ T13] ? queue_io+0x231/0x470 [ 119.860435][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 119.860453][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.860487][ T13] wb_workfn+0x431/0x10f0 [ 119.860532][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 119.860563][ T13] ? trace_hrtimer_start+0x82/0x200 [ 119.860590][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.860617][ T13] ? lock_acquire+0x115/0x350 [ 119.860647][ T13] ? rcu_is_watching+0x16/0xb0 [ 119.860674][ T13] ? process_scheduled_works+0x97a/0x1630 [ 119.860700][ T13] process_scheduled_works+0xc3d/0x1630 [ 119.860758][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.860790][ T13] ? assign_work+0x3cf/0x5d0 [ 119.860828][ T13] worker_thread+0xa47/0xfb0 [ 119.860874][ T13] kthread+0x38b/0x480 [ 119.860895][ T13] ? __pfx_worker_thread+0x10/0x10 [ 119.860919][ T13] ? __pfx_kthread+0x10/0x10 [ 119.860940][ T13] ret_from_fork+0x514/0xb70 [ 119.860963][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 119.860983][ T13] ? __switch_to+0xc78/0x1410 [ 119.861012][ T13] ? __pfx_kthread+0x10/0x10 [ 119.861034][ T13] ret_from_fork_asm+0x1a/0x30 [ 119.861070][ T13] [ 119.864185][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.174142][ T5369] hso 2-1:0.0: Failed to find BULK eps [ 120.192473][ T5369] usb 2-1: USB disconnect, device number 5 [ 121.005942][ T6598] loop1: detected capacity change from 0 to 64 [ 121.219908][ T6600] hfs: request for non-existent node 65538 in B*Tree [ 121.219931][ T6600] hfs: request for non-existent node 65538 in B*Tree [ 121.219942][ T6600] hfs: fail to find leaf node: node ID 65538 [ 121.225777][ T34] audit: type=1800 audit(1793292407.870:7): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.237" name="file1" dev="loop1" ino=21 res=0 errno=-22 [ 121.404797][ T6595] loop3: detected capacity change from 0 to 32768 [ 121.484905][ T6605] program syz.0.239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.555265][ T6607] loop2: detected capacity change from 0 to 128 [ 121.751900][ T6614] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 122.427949][ T5369] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.799907][ T6623] loop3: detected capacity change from 0 to 32768 [ 122.802097][ T6623] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.245 (6623) [ 122.826931][ T6623] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 122.826964][ T6623] BTRFS info (device loop3): using sha256 checksum algorithm [ 122.876814][ T5369] usb 3-1: Using ep0 maxpacket: 16 [ 122.880216][ T5369] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 122.882310][ T5369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.882361][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.882398][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.882417][ T5369] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.882439][ T5369] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.883750][ T5369] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.883774][ T5369] usb 3-1: Manufacturer: syz [ 122.890345][ T5369] usb 3-1: config 0 descriptor?? [ 122.995868][ T6623] BTRFS info (device loop3): turning off barriers [ 122.995929][ T6623] BTRFS info (device loop3): enabling free space tree [ 123.357113][ T5369] rc_core: IR keymap rc-hauppauge not found [ 123.357136][ T5369] Registered IR keymap rc-empty [ 123.357687][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.377229][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.384691][ T5636] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 123.401798][ T5369] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 123.414002][ T5369] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 123.447606][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.485174][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.497296][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.518106][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.537597][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.558622][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.576728][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.604679][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.617618][ T6647] loop1: detected capacity change from 0 to 1024 [ 123.617967][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.636656][ T5369] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 123.672206][ T5369] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 123.672232][ T5369] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 123.840636][ T5369] usb 3-1: USB disconnect, device number 2 [ 124.569266][ T6668] loop2: detected capacity change from 0 to 2048 [ 124.570386][ T6668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.699244][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.772767][ T34] audit: type=1804 audit(1793292411.420:8): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.260" name="/newroot/50/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 124.890185][ T6681] Attempt to restore checkpoint with obsolete wellknown handles [ 124.936400][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.974162][ T34] audit: type=1400 audit(1793292411.620:9): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6684 comm="syz.3.267" name="unknown" offset=80 [ 125.129763][ T6688] loop1: detected capacity change from 0 to 512 [ 125.142768][ T6688] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 125.190752][ T6694] loop2: detected capacity change from 0 to 512 [ 125.221855][ T6694] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.256111][ T6688] EXT4-fs (loop1): 1 orphan inode deleted [ 125.275756][ T6688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.294792][ T6688] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.322416][ T65] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.322593][ T65] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1 [ 125.350644][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.350777][ T6694] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.387792][ T6688] EXT4-fs (loop1): shut down requested (2) [ 125.463749][ T6698] capability: warning: `syz.2.266' uses deprecated v2 capabilities in a way that may be insecure [ 125.519443][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.701084][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.712813][ T5369] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.784047][ T5369] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.829176][ T6704] loop1: detected capacity change from 0 to 512 [ 125.922060][ T6704] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 125.926241][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.926268][ C1] EXT4-fs (loop1): initial error at time 1793292412: ext4_mb_generate_buddy:1315 [ 125.926293][ C1] EXT4-fs (loop1): last error at time 1793292412: ext4_mb_generate_buddy:1315 [ 125.993991][ T6704] EXT4-fs (loop1): Remounting filesystem read-only [ 126.026077][ T6704] EXT4-fs (loop1): 1 truncate cleaned up [ 126.049829][ T6704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.866233][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.923041][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.046665][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 127.049835][ T11] usb 1-1: New USB device found: idVendor=07fd, idProduct=0004, bcdDevice=d4.a5 [ 127.051453][ T11] usb 1-1: config 9 has an invalid interface number: 216 but max is 0 [ 127.051479][ T11] usb 1-1: config 9 has no interface number 0 [ 127.054034][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.054057][ T11] usb 1-1: Product: syz [ 127.054070][ T11] usb 1-1: Manufacturer: syz [ 127.054082][ T11] usb 1-1: SerialNumber: syz [ 127.406926][ T6732] loop2: detected capacity change from 0 to 24 [ 127.408096][ T6732] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 127.472700][ T6732] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 127.489760][ T6734] process 'syz.4.285' launched '/dev/fd/4' with NULL argv: empty string added [ 127.514234][ T11] usb 1-1: USB disconnect, device number 4 [ 127.775662][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.002349][ T6747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.290'. [ 128.073353][ T6738] loop2: detected capacity change from 0 to 32768 [ 128.086212][ T6738] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.287 (6738) [ 128.104967][ T6738] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 128.105003][ T6738] BTRFS info (device loop2): using blake2b checksum algorithm [ 128.254203][ T6738] BTRFS info (device loop2): enabling ssd optimizations [ 128.254235][ T6738] BTRFS info (device loop2): turning on async discard [ 128.254251][ T6738] BTRFS info (device loop2): enabling free space tree [ 128.254269][ T6738] BTRFS info (device loop2): use zstd compression, level 3 [ 128.311743][ T34] audit: type=1800 audit(1793292414.961:10): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.287" name="file1" dev="loop2" ino=260 res=0 errno=-22 [ 128.684330][ T6775] loop1: detected capacity change from 0 to 2048 [ 128.718854][ T6775] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.872484][ T6782] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.924384][ T5635] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 128.929046][ T6775] syz.1.296: attempt to access beyond end of device [ 128.929046][ T6775] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 129.455892][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.605862][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 129.606782][ T11] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 129.613480][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.641718][ T11] usb 3-1: config 0 descriptor?? [ 129.869470][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 129.878498][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.884245][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 129.884301][ T11] usb 3-1: media controller created [ 129.921188][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.000979][ T6811] loop3: detected capacity change from 0 to 2048 [ 130.015128][ T6811] EXT4-fs: Ignoring removed i_version option [ 130.070710][ T6811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.074348][ T6811] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.090178][ T11] az6027: usb out operation failed. (-71) [ 130.094894][ T11] az6027: usb out operation failed. (-71) [ 130.094912][ T11] stb0899_attach: Driver disabled by Kconfig [ 130.094921][ T11] az6027: no front-end attached [ 130.094921][ T11] [ 130.097431][ T11] az6027: usb out operation failed. (-71) [ 130.097444][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 130.106060][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 130.137463][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 130.137487][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 130.142301][ T11] usb 3-1: USB disconnect, device number 3 [ 130.358333][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.412662][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 130.492068][ T6825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.318'. [ 130.897427][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 131.156649][ T6842] loop3: detected capacity change from 0 to 4096 [ 131.198052][ T6843] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.255235][ T6842] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 131.333426][ T6846] ip_tables: iptables: counters copy to user failed while replacing table [ 131.492507][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 131.766824][ T6859] loop2: detected capacity change from 0 to 4096 [ 131.795212][ T6859] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 131.861565][ T6864] overlayfs: invalid origin (0000) [ 131.931915][ T6859] ntfs3(loop2): ino=19, mi_enum_attr [ 131.975422][ T6867] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 132.039954][ T6859] ntfs3(loop2): failed to convert "c46c" to cp936 [ 132.058806][ T6871] warning: `syz.0.340' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.139149][ T6859] ntfs3(loop2): ino=20, mi_enum_attr [ 132.301980][ T6876] tap0: tun_chr_ioctl cmd 2147767506 [ 132.637733][ T6891] Bluetooth: MGMT ver 1.23 [ 132.786857][ T6855] loop1: detected capacity change from 0 to 32768 [ 132.824763][ T6855] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.928525][ T6855] XFS (loop1): Ending clean mount [ 132.992359][ T6855] XFS (loop1): syz.1.332 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 133.085443][ T5369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.088970][ T5637] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 133.239078][ T5369] usb 1-1: Using ep0 maxpacket: 8 [ 133.245129][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.245217][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249728][ T5369] usb 1-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 133.280009][ T5369] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.280037][ T5369] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.280060][ T5369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.280082][ T5369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.280106][ T5369] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.282073][ T5369] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 133.282095][ T5369] usb 1-1: Manufacturer: syz [ 133.282109][ T5369] usb 1-1: SerialNumber: syz [ 133.309918][ T5369] usb 1-1: config 0 descriptor?? [ 133.348882][ T6906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.389113][ T5369] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 133.644812][ T5742] usb 1-1: USB disconnect, device number 5 [ 133.848669][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 133.998291][ T6939] ip_tables: iptables: counters copy to user failed while replacing table [ 134.169360][ T6944] loop4: detected capacity change from 0 to 512 [ 134.195909][ T6944] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.370: inode has both inline data and extents flags [ 134.195944][ T6944] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.197332][ T6944] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.370: couldn't read orphan inode 15 (err -117) [ 134.197361][ T6944] loop4: lost filesystem error report for type 5 error -117 [ 134.202367][ T6944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.338322][ T6944] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 134.366914][ T6950] loop1: detected capacity change from 0 to 256 [ 134.489288][ T6950] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 134.514372][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.109901][ T90] IPVS: starting estimator thread 0... [ 135.195439][ T6983] IPVS: using max 31 ests per chain, 74400 per kthread [ 135.495547][ T6981] loop3: detected capacity change from 0 to 40427 [ 135.509154][ T6981] F2FS-fs (loop3): invalid crc value [ 135.610162][ T6981] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 135.623025][ T6981] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 194.661452][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.661518][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.858114][ T7013] Bluetooth: hci3: command 0x0406 tx timeout [ 201.864214][ T5651] Bluetooth: hci2: command 0x0406 tx timeout [ 201.866408][ T5652] Bluetooth: hci4: command 0x0406 tx timeout [ 201.868389][ T5652] Bluetooth: hci1: command 0x0406 tx timeout [ 256.092068][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092146][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.208523][ T36] INFO: task kworker/u8:0:13 blocked in I/O wait for more than 143 seconds. [ 277.208551][ T36] Not tainted syzkaller #0 [ 277.208562][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.208571][ T36] task:kworker/u8:0 state:D stack:21768 pid:13 tgid:13 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 277.208630][ T36] Workqueue: writeback wb_workfn (flush-8:0) [ 277.208680][ T36] Call Trace: [ 277.208688][ T36] [ 277.208702][ T36] __schedule+0x17dd/0x5830 [ 277.208728][ T36] ? blk_mq_flush_plug_list+0x415/0x540 [ 277.208780][ T36] ? __blk_flush_plug+0x416/0x4d0 [ 277.208811][ T36] ? __pfx___schedule+0x10/0x10 [ 277.208844][ T36] ? schedule+0x90/0x2b0 [ 277.208871][ T36] schedule+0x164/0x2b0 [ 277.208897][ T36] io_schedule+0x7f/0xd0 [ 277.208920][ T36] bit_wait_io+0x13/0x110 [ 277.208946][ T36] __wait_on_bit_lock+0xc9/0x5a0 [ 277.208976][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 277.209003][ T36] out_of_line_wait_on_bit_lock+0x13b/0x190 [ 277.209030][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 277.209053][ T36] ? __pfx_out_of_line_wait_on_bit_lock+0x10/0x10 [ 277.209082][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 277.209122][ T36] do_get_write_access+0x1b7/0x10c0 [ 277.209170][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 277.209201][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 277.209240][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 277.209315][ T36] ext4_mb_mark_context+0x171/0xec0 [ 277.209344][ T36] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 277.209362][ T36] ? ext4_sb_block_valid+0x16d/0x560 [ 277.209381][ T36] ? ext4_sb_block_valid+0x484/0x560 [ 277.209399][ T36] ext4_mb_mark_diskspace_used+0x338/0x760 [ 277.209421][ T36] ext4_mb_new_blocks+0x1062/0x4520 [ 277.209443][ T36] ? trace_kmalloc+0x2a/0xf0 [ 277.209462][ T36] ? __read_extent_tree_block+0x257/0x860 [ 277.209477][ T36] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 277.209498][ T36] ? ext4_ext_find_goal+0xf0/0x1e0 [ 277.209512][ T36] ext4_ext_map_blocks+0x1427/0x5480 [ 277.209537][ T36] ? stack_trace_save+0xa9/0x100 [ 277.209552][ T36] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 277.209569][ T36] ? stack_depot_save_flags+0x33/0x810 [ 277.209589][ T36] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 277.209611][ T36] ? down_write+0x166/0x200 [ 277.209629][ T36] ext4_map_create_blocks+0x116/0x530 [ 277.209646][ T36] ? ext4_fc_track_inode+0xf3/0x3f0 [ 277.209659][ T36] ext4_map_blocks+0xe8e/0x1c60 [ 277.209687][ T36] ? __pfx_ext4_map_blocks+0x10/0x10 [ 277.209700][ T36] ? kmem_cache_alloc_noprof+0x151/0x600 [ 277.209720][ T36] ? ext4_inode_journal_mode+0x3d6/0x4d0 [ 277.209739][ T36] ext4_do_writepages+0x1978/0x44a0 [ 277.209791][ T36] ? __pfx_ext4_do_writepages+0x10/0x10 [ 277.209811][ T36] ? __lock_acquire+0x747/0x2de0 [ 277.209828][ T36] ? filemap_get_folios_tag+0x639/0x720 [ 277.209864][ T36] ? filemap_get_folios_tag+0x118/0x720 [ 277.209890][ T36] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 277.209910][ T36] ? lock_acquire+0x115/0x350 [ 277.210115][ T36] ext4_writepages+0x1fe/0x4e0 [ 277.210146][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 277.210183][ T36] ? do_raw_spin_unlock+0xf5/0x200 [ 277.210196][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 277.210210][ T36] do_writepages+0x338/0x560 [ 277.210223][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.210238][ T36] ? reacquire_held_locks+0x117/0x1a0 [ 277.210254][ T36] ? writeback_sb_inodes+0x450/0x1af0 [ 277.210271][ T36] __writeback_single_inode+0x136/0x1220 [ 277.210295][ T36] ? do_raw_spin_unlock+0xf5/0x200 [ 277.210309][ T36] writeback_sb_inodes+0x9de/0x1af0 [ 277.210338][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 277.210372][ T36] ? __pfx_down_read_trylock+0x10/0x10 [ 277.210390][ T36] ? __pfx___up_read+0x10/0x10 [ 277.210408][ T36] __writeback_inodes_wb+0x114/0x250 [ 277.210427][ T36] wb_writeback+0x42f/0xad0 [ 277.210442][ T36] ? queue_io+0x231/0x470 [ 277.210459][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 277.210471][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.210492][ T36] wb_workfn+0xc92/0x10f0 [ 277.210521][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 277.210553][ T36] ? lock_acquire+0x115/0x350 [ 277.210572][ T36] ? rcu_is_watching+0x16/0xb0 [ 277.210591][ T36] ? process_scheduled_works+0x97a/0x1630 [ 277.210609][ T36] process_scheduled_works+0xc3d/0x1630 [ 277.210644][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.210665][ T36] ? assign_work+0x3cf/0x5d0 [ 277.210685][ T36] worker_thread+0xa47/0xfb0 [ 277.210712][ T36] kthread+0x38b/0x480 [ 277.210726][ T36] ? __pfx_worker_thread+0x10/0x10 [ 277.210742][ T36] ? __pfx_kthread+0x10/0x10 [ 277.210756][ T36] ret_from_fork+0x514/0xb70 [ 277.210772][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 277.210789][ T36] ? __switch_to+0xc78/0x1410 [ 277.210808][ T36] ? __pfx_kthread+0x10/0x10 [ 277.210822][ T36] ret_from_fork_asm+0x1a/0x30 [ 277.210845][ T36] [ 277.210928][ T36] [ 277.210928][ T36] Showing all locks held in the system: [ 277.210934][ T36] locks held by kworker/u8:0/13: 6, on CPU#1: [ 277.210944][ T36] #0: ffff888021a9c948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 277.210980][ T36] #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 277.211014][ T36] #2: ffff888038670100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 277.211048][ T36] #3: ffff888038668cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 277.211084][ T36] #4: ffff888038306950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 277.211115][ T36] #5: ffff888013680b28 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0xacb/0x1c60 [ 277.211150][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 277.211159][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 277.211204][ T36] locks held by getty/5395: 2, on CPU#1: [ 277.211212][ T36] #0: ffff8880347300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 277.211242][ T36] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 277.211282][ T36] locks held by syz-executor/5625: 2, on CPU#1: [ 277.211291][ T36] #0: ffff8880279ca948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 277.211318][ T36] #1: ffff888038670570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 277.211347][ T36] locks held by kworker/u9:4/5645: 2, on CPU#0: [ 277.211355][ T36] #0: ffff888028b42148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 277.211402][ T36] #1: ffffc90003ecfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 277.211438][ T36] locks held by syz.3.386/6978: 2, on CPU#1: [ 277.211446][ T36] #0: ffff888055678588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 277.211473][ T36] #1: ffff888038670570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 277.211501][ T36] locks held by syz.1.389/6986: 2, on CPU#1: [ 277.211530][ T36] #0: ffff88802c58c948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 277.211558][ T36] #1: ffff888038670570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 277.211586][ T36] locks held by syz.4.390/6989: 2, on CPU#0: [ 277.211594][ T36] #0: ffff88802faa6948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 277.211621][ T36] #1: ffff888038670570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 277.211649][ T36] locks held by syz.2.392/6992: 2, on CPU#1: [ 277.211657][ T36] #0: ffff888023345900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 277.211686][ T36] #1: ffff888038670478 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 277.211721][ T36] locks held by syz.0.393/6993: 2, on CPU#1: [ 277.211729][ T36] #0: ffff888023340f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 277.211758][ T36] #1: ffff888038670478 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 277.211799][ T36] [ 277.211802][ T36] ============================================= [ 277.211802][ T36] [ 277.211808][ T36] NMI backtrace for cpu 0 [ 277.211817][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 277.211830][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.211837][ T36] Call Trace: [ 277.211842][ T36] [ 277.211846][ T36] dump_stack_lvl+0xe8/0x150 [ 277.211865][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 277.211878][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.211892][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 277.211906][ T36] sys_info+0x135/0x170 [ 277.211922][ T36] watchdog+0x1073/0x10f0 [ 277.211941][ T36] ? watchdog+0x209/0x10f0 [ 277.211960][ T36] kthread+0x38b/0x480 [ 277.211973][ T36] ? __pfx_watchdog+0x10/0x10 [ 277.211987][ T36] ? __pfx_kthread+0x10/0x10 [ 277.212000][ T36] ret_from_fork+0x514/0xb70 [ 277.212014][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 277.212027][ T36] ? __switch_to+0xc78/0x1410 [ 277.212045][ T36] ? __pfx_kthread+0x10/0x10 [ 277.212059][ T36] ret_from_fork_asm+0x1a/0x30 [ 277.212078][ T36] [ 277.212082][ T36] Sending NMI from CPU 0 to CPUs 1: [ 277.212122][ C1] NMI backtrace for cpu 1 [ 277.212136][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 277.212154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.212164][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 277.212187][ C1] Code: 3b 93 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 db 24 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 277.212201][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000242 [ 277.212217][ C1] RAX: 0000000000125fb9 RBX: ffffffff819ca3e0 RCX: 8000000000000001 [ 277.212230][ C1] RDX: 0000000000000001 RSI: ffffffff8e6a8d60 RDI: ffffffff8c8ea380 [ 277.212241][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 277.212253][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 277.212265][ C1] R13: 1ffff11003e5e3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 277.212277][ C1] FS: 0000000000000000(0000) GS:ffff88812350d000(0000) knlGS:0000000000000000 [ 277.212291][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.212303][ C1] CR2: 0000559972006168 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 277.212320][ C1] Call Trace: [ 277.212326][ C1] [ 277.212332][ C1] default_idle+0x9/0x20 [ 277.212353][ C1] default_idle_call+0x72/0xb0 [ 277.212375][ C1] do_idle+0x2e0/0x540 [ 277.212397][ C1] ? __pfx_do_idle+0x10/0x10 [ 277.212416][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.212437][ C1] cpu_startup_entry+0x43/0x60 [ 277.212456][ C1] start_secondary+0x101/0x110 [ 277.212474][ C1] common_startup_64+0x13e/0x157 [ 277.212505][ C1] [ 277.213102][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 278.282401][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 278.291866][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 278.302009][ T36] Call Trace: [ 278.305296][ T36] [ 278.308236][ T36] vpanic+0x26f/0x710 [ 278.312236][ T36] panic+0xc5/0xd0 [ 278.315957][ T36] ? __pfx_panic+0x10/0x10 [ 278.320385][ T36] ? wq_watchdog_touch+0xf9/0x160 [ 278.325434][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 278.331600][ T36] watchdog+0x10e7/0x10f0 [ 278.335944][ T36] ? watchdog+0x209/0x10f0 [ 278.340370][ T36] kthread+0x38b/0x480 [ 278.344442][ T36] ? __pfx_watchdog+0x10/0x10 [ 278.349122][ T36] ? __pfx_kthread+0x10/0x10 [ 278.353725][ T36] ret_from_fork+0x514/0xb70 [ 278.358332][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 278.363460][ T36] ? __switch_to+0xc78/0x1410 [ 278.368176][ T36] ? __pfx_kthread+0x10/0x10 [ 278.372863][ T36] ret_from_fork_asm+0x1a/0x30 [ 278.377647][ T36] [ 278.381023][ T36] Kernel Offset: disabled [ 278.385477][ T36] Rebooting in 86400 seconds..