last executing test programs: 48.115055081s ago: executing program 1 (id=386): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000700)={0x4, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 48.055684296s ago: executing program 1 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060093eae687115f746f5f7465616d0000000400cc00080005000c000000140004"], 0x58}}, 0x0) 47.91980863s ago: executing program 1 (id=379): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0x20000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 46.990555617s ago: executing program 1 (id=388): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000280)={[{@bsdgroups}, {@sysvgroups}, {@barrier}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f00000006c0)="$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") mount$overlay(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x0, &(0x7f00000010c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x8000, 0x0) getdents64(r0, 0x0, 0x0) 46.515739819s ago: executing program 1 (id=394): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 45.916086784s ago: executing program 1 (id=400): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0003}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000100)={0x180801400, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) 45.281589859s ago: executing program 32 (id=400): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0003}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000100)={0x180801400, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) 4.977442053s ago: executing program 3 (id=684): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000740)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 3.733828376s ago: executing program 3 (id=691): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x4, 0x1, 0x2, 0x4, 0x2, "00000300"}) 3.688593172s ago: executing program 5 (id=692): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) 3.429704159s ago: executing program 3 (id=696): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x14c98, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.647645906s ago: executing program 4 (id=702): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) 2.528414836s ago: executing program 4 (id=705): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.463066752s ago: executing program 3 (id=707): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x35, &(0x7f0000000280)=[{&(0x7f0000000300)={0x14, 0x58, 0x30d, 0x70bd26, 0x0, "", [@nested={0x4, 0xf8}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c5}, 0x40000) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.283549847s ago: executing program 0 (id=708): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)="9ddb00", 0x3}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.175763704s ago: executing program 0 (id=710): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file2\x00', 0x210008, &(0x7f0000000480)=ANY=[], 0x5, 0x18e, &(0x7f0000002780)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@filename='./file0/file0\x00', 0x0, 0x0) 2.139983116s ago: executing program 2 (id=711): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x100001, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 2.016874867s ago: executing program 2 (id=712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007fc0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 1.956232658s ago: executing program 2 (id=713): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) 1.640113525s ago: executing program 2 (id=714): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.639599472s ago: executing program 5 (id=715): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) 1.515721161s ago: executing program 2 (id=716): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) 1.465580132s ago: executing program 5 (id=717): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 'bond0\x00'}}, 0x1e) 1.227580956s ago: executing program 0 (id=718): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1.184372454s ago: executing program 4 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) 1.163131149s ago: executing program 5 (id=720): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="23d4f0db956cc311583fcba9e76989814392376ce811a012bb40", 0x7}], 0x1, 0x0, 0x0, 0x8008011}, 0x20048851) 1.015609099s ago: executing program 0 (id=721): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x1, 0x22e, &(0x7f0000000940)="$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") prctl$PR_GET_FPEMU(0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0x60) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.015424403s ago: executing program 4 (id=722): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000080)={'full'}, 0xfffffdef) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 911.80162ms ago: executing program 5 (id=723): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r0, r1+10000000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 854.024545ms ago: executing program 0 (id=724): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 679.778586ms ago: executing program 3 (id=725): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002400)={r0, &(0x7f0000001300), &(0x7f0000002300)=""/222}, 0x20) 506.777675ms ago: executing program 3 (id=726): syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x4c2, &(0x7f0000000100)="$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") r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xffffffbe, 0x2, 0x83, 0x3af}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) io_uring_enter(r0, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 456.978524ms ago: executing program 4 (id=727): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001940)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x2, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a80)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), &(0x7f0000001b40), 0x4, 0x2000000000000357}}, 0x3c) 184.427743ms ago: executing program 0 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 184.184188ms ago: executing program 4 (id=729): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@my=0x1}, 0x1, 0x0, 0x8}) 93.980166ms ago: executing program 2 (id=730): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=731): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) kernel console output (not intermixed with test programs): 0): Enslaving as an active interface with an up link [ 80.498568][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.498676][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.498800][ T5605] bridge_slave_0: entered allmulticast mode [ 80.502756][ T5605] bridge_slave_0: entered promiscuous mode [ 80.555221][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.555422][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.555572][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.555698][ T5605] bridge_slave_1: entered allmulticast mode [ 80.557671][ T5605] bridge_slave_1: entered promiscuous mode [ 80.562246][ T5616] team0: Port device team_slave_0 added [ 80.631659][ T5616] team0: Port device team_slave_1 added [ 80.648811][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.648826][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.648852][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.657699][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.657714][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.657737][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.692071][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.753502][ T5602] team0: Port device team_slave_0 added [ 80.756935][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.757885][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.757898][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.757921][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.791964][ T5602] team0: Port device team_slave_1 added [ 80.793289][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.793302][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.793325][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.845984][ T5605] team0: Port device team_slave_0 added [ 80.854330][ T5603] hsr_slave_0: entered promiscuous mode [ 80.855383][ T5603] hsr_slave_1: entered promiscuous mode [ 80.892119][ T5605] team0: Port device team_slave_1 added [ 80.920534][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.920553][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.920575][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.922715][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.922729][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.922750][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.992629][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.992647][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.992685][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.004083][ T5616] hsr_slave_0: entered promiscuous mode [ 81.005507][ T5616] hsr_slave_1: entered promiscuous mode [ 81.006249][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 81.006348][ T5616] Cannot create hsr debugfs directory [ 81.056833][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.056850][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.056873][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.162456][ T5604] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.200377][ T5602] hsr_slave_0: entered promiscuous mode [ 81.202068][ T5602] hsr_slave_1: entered promiscuous mode [ 81.202764][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 81.204293][ T5602] Cannot create hsr debugfs directory [ 81.281875][ T5605] hsr_slave_0: entered promiscuous mode [ 81.282973][ T5605] hsr_slave_1: entered promiscuous mode [ 81.283716][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 81.283733][ T5605] Cannot create hsr debugfs directory [ 81.728079][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.734852][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.735810][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.748217][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.759863][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.761871][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.780063][ T4925] Bluetooth: hci2: command tx timeout [ 81.780095][ T4925] Bluetooth: hci0: command tx timeout [ 81.784631][ T55] Bluetooth: hci3: command tx timeout [ 81.784658][ T55] Bluetooth: hci4: command tx timeout [ 81.795285][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.821957][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.859662][ T4925] Bluetooth: hci1: command tx timeout [ 81.965588][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.974162][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.992431][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.004697][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.014344][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.022838][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.025112][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.053704][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.233612][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.233714][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.233986][ T5604] bridge_slave_0: entered allmulticast mode [ 82.234919][ T5604] bridge_slave_0: entered promiscuous mode [ 82.264257][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.264359][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.265305][ T5604] bridge_slave_1: entered allmulticast mode [ 82.266490][ T5604] bridge_slave_1: entered promiscuous mode [ 82.310865][ T5602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.313541][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.314296][ T5602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.318513][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.319258][ T5602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.331051][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.334545][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.353334][ T5602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.363600][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.369337][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.419158][ T5604] team0: Port device team_slave_0 added [ 82.422429][ T5604] team0: Port device team_slave_1 added [ 82.464304][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.464320][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.464341][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.484636][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.484652][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.484692][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.535970][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.563137][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.572756][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.593738][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.597385][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.616845][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.623186][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.634541][ T5604] hsr_slave_0: entered promiscuous mode [ 82.635112][ T5604] hsr_slave_1: entered promiscuous mode [ 82.635743][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 82.635755][ T5604] Cannot create hsr debugfs directory [ 82.639277][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.651459][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.718701][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.766139][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.766238][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.814458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.814561][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.817920][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.914372][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.940237][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.967944][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.968049][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.995171][ T5603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.995193][ T5603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.026627][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.054332][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.054435][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.067198][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.082866][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.084612][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.084735][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.104440][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.114025][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.114904][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.131188][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.132034][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.138871][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.204889][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.204997][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.356803][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.468552][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.487523][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.487644][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.515851][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.515965][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.684714][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.794418][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.824548][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.824730][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.860694][ T4925] Bluetooth: hci4: command tx timeout [ 83.860728][ T4925] Bluetooth: hci3: command tx timeout [ 83.860750][ T4925] Bluetooth: hci0: command tx timeout [ 83.860770][ T4925] Bluetooth: hci2: command tx timeout [ 83.879794][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.879900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.942087][ T55] Bluetooth: hci1: command tx timeout [ 84.029273][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.242705][ T5603] veth0_vlan: entered promiscuous mode [ 84.268187][ T5603] veth1_vlan: entered promiscuous mode [ 84.318409][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.432698][ T5603] veth0_macvtap: entered promiscuous mode [ 84.459081][ T5603] veth1_macvtap: entered promiscuous mode [ 84.563753][ T5616] veth0_vlan: entered promiscuous mode [ 84.581380][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.617187][ T5616] veth1_vlan: entered promiscuous mode [ 84.626716][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.655970][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.752018][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.752844][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.752883][ T45] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.752917][ T45] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.924264][ T5616] veth0_macvtap: entered promiscuous mode [ 84.959366][ T5616] veth1_macvtap: entered promiscuous mode [ 84.983461][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.983490][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.004374][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.095086][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.114946][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.116858][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.116877][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.169925][ T45] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.219420][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.279926][ T1433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.329281][ T5605] veth0_vlan: entered promiscuous mode [ 85.402833][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.420744][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.420765][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.446684][ T5605] veth1_vlan: entered promiscuous mode [ 85.515035][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.515055][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.542014][ T1036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.564778][ T5602] veth0_vlan: entered promiscuous mode [ 85.587959][ T5604] veth0_vlan: entered promiscuous mode [ 85.616383][ T5602] veth1_vlan: entered promiscuous mode [ 85.642804][ T5604] veth1_vlan: entered promiscuous mode [ 85.725459][ T5605] veth0_macvtap: entered promiscuous mode [ 85.767344][ T5605] veth1_macvtap: entered promiscuous mode [ 85.780235][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.801271][ T5829] raw_sendmsg: syz.1.8 forgot to set AF_INET. Fix it! [ 85.828180][ T5602] veth0_macvtap: entered promiscuous mode [ 85.847712][ T5604] veth0_macvtap: entered promiscuous mode [ 85.873160][ T5602] veth1_macvtap: entered promiscuous mode [ 85.884313][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.886289][ T5604] veth1_macvtap: entered promiscuous mode [ 85.924401][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.941099][ T55] Bluetooth: hci2: command tx timeout [ 85.941133][ T55] Bluetooth: hci0: command tx timeout [ 85.941154][ T55] Bluetooth: hci3: command tx timeout [ 85.941176][ T55] Bluetooth: hci4: command tx timeout [ 85.979786][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.980672][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.980712][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.980741][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.994826][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.013518][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.020924][ T4925] Bluetooth: hci1: command tx timeout [ 86.023182][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.064604][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.119823][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.119871][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.119904][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.119937][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.131264][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.131980][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.261926][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.278619][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.278639][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.311211][ T1433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.312861][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.375188][ T1433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.375208][ T1433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.423679][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.423698][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.425680][ T26] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 86.456702][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.554621][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.554641][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.645075][ T1433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.645116][ T1433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.671356][ T5844] loop1: detected capacity change from 0 to 256 [ 86.714112][ T32] audit: type=1800 audit(1792600137.072:2): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="file1" dev="loop1" ino=3 res=0 errno=-22 [ 86.792986][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.793007][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.901233][ T9] cfg80211: failed to load regulatory.db [ 86.995647][ T26] usb 4-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (183) [ 87.197542][ T26] usb 4-1: failed to fetch extended address, random address set [ 87.197593][ T26] usb 4-1: atusb_probe: initialization failed, error = -524 [ 87.197982][ T26] atusb 4-1:1.0: probe with driver atusb failed with error -524 [ 87.240748][ T26] usb 4-1: USB disconnect, device number 2 [ 87.427391][ T5855] loop1: detected capacity change from 0 to 32768 [ 87.440149][ T5855] ======================================================= [ 87.440149][ T5855] WARNING: The mand mount option has been deprecated and [ 87.440149][ T5855] and is ignored by this kernel. Remove the mand [ 87.440149][ T5855] option from the mount to silence this warning. [ 87.440149][ T5855] ======================================================= [ 87.634907][ T5864] loop2: detected capacity change from 0 to 2048 [ 87.703846][ T5864] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 87.740255][ T5864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.912972][ T5862] loop0: detected capacity change from 0 to 32768 [ 87.970046][ T5862] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.098782][ T5878] loop2: detected capacity change from 0 to 1024 [ 88.106870][ T5878] EXT4-fs: Ignoring removed bh option [ 88.127981][ T5862] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 88.223073][ T5862] XFS (loop0): Starting recovery (logdev: internal) [ 88.256822][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.331218][ T5862] XFS (loop0): Ending recovery (logdev: internal) [ 88.359257][ T5885] netlink: 277 bytes leftover after parsing attributes in process `syz.1.23'. [ 88.432047][ T5878] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.535393][ T5862] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8 [ 88.535442][ T5862] XFS (loop0): Unmount and run xfs_repair [ 88.578588][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.654313][ T5604] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.674652][ T5604] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 88.710397][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27'. [ 88.712220][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27'. [ 88.778531][ T32] audit: type=1326 audit(1792600139.132:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.778777][ T32] audit: type=1326 audit(1792600139.132:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.779402][ T32] audit: type=1326 audit(1792600139.132:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.779674][ T32] audit: type=1326 audit(1792600139.142:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.831346][ T32] audit: type=1326 audit(1792600139.192:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.853072][ T32] audit: type=1326 audit(1792600139.212:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.853118][ T32] audit: type=1326 audit(1792600139.212:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 88.853153][ T32] audit: type=1326 audit(1792600139.212:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.30" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148ad9f559 code=0x7ffc0000 [ 89.024060][ T5861] loop4: detected capacity change from 0 to 32768 [ 89.067096][ T5903] process 'syz.3.32' launched './file0' with NULL argv: empty string added [ 89.088708][ T5861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (5861) [ 89.236705][ T5861] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.236764][ T5861] BTRFS info (device loop4): using sha256 checksum algorithm [ 89.426455][ T5861] BTRFS info (device loop4): enabling ssd optimizations [ 89.426495][ T5861] BTRFS info (device loop4): turning on sync discard [ 89.426511][ T5861] BTRFS info (device loop4): enabling free space tree [ 89.426539][ T5861] BTRFS info (device loop4): use zlib compression, level 3 [ 89.623212][ T32] audit: type=1400 audit(1792600139.972:11): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5930 comm="syz.0.38" name="unknown" offset=16 [ 89.650526][ T5905] loop2: detected capacity change from 0 to 32768 [ 89.659123][ T5905] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.33 (5905) [ 89.715150][ T5905] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 89.715183][ T5905] BTRFS info (device loop2): using blake2b checksum algorithm [ 89.827113][ T5905] BTRFS info (device loop2): enabling ssd optimizations [ 89.827138][ T5905] BTRFS info (device loop2): turning on async discard [ 89.827153][ T5905] BTRFS info (device loop2): enabling free space tree [ 89.827170][ T5905] BTRFS info (device loop2): use zlib compression, level 3 [ 90.230985][ T5933] loop3: detected capacity change from 0 to 32768 [ 90.298139][ T5933] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 2527549c-4658-4019-922c-22ddeb44be91 [ 90.298216][ T5933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.39 (5933) [ 90.327372][ T5933] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.327407][ T5933] BTRFS info (device loop3): using sha256 checksum algorithm [ 90.450511][ T5933] BTRFS info (device loop3): enabling ssd optimizations [ 90.450539][ T5933] BTRFS info (device loop3): turning on async discard [ 90.450554][ T5933] BTRFS info (device loop3): enabling free space tree [ 90.618544][ T5933] capability: warning: `syz.3.39' uses deprecated v2 capabilities in a way that may be insecure [ 90.637765][ T5605] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 90.773758][ T5616] BTRFS info (device loop3): last unmount of filesystem 2527549c-4658-4019-922c-22ddeb44be91 [ 90.841837][ T5602] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.890699][ T5965] loop0: detected capacity change from 0 to 4096 [ 90.944444][ T5965] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 91.145044][ T5965] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 91.187655][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.344147][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.465838][ T6019] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.681987][ T5999] loop2: detected capacity change from 0 to 32768 [ 92.805972][ T5999] ea_get: invalid extended attribute [ 92.805988][ T5999] ffff888056570bf0: 04 00 00 00 .... [ 93.038377][ T32] audit: type=1400 audit(1792600143.392:12): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6025 comm="syz.3.60" name="p" offset=48 [ 93.043057][ T52] rds_connect_path_complete: Cannot transition to state UP, current state is 2 [ 93.370973][ T6033] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.374792][ T6041] bond0: option slaves: interface -bave_0 does not exist! [ 93.500643][ T6043] cougar: G6 mapped to space [ 93.651178][ T6051] loop4: detected capacity change from 0 to 1024 [ 93.787564][ T6051] hfsplus: bad catalog entry type [ 93.794793][ T6055] loop0: detected capacity change from 0 to 128 [ 93.883966][ T6055] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 93.884305][ T6055] hpfs: filesystem error: improperly stopped [ 93.884323][ T6055] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 93.884336][ T6055] hpfs: You really don't want any checks? You are crazy... [ 93.884353][ T6055] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 93.884365][ T6055] hpfs: code page support is disabled [ 93.885011][ T6055] hpfs: hpfs_map_4sectors(): unaligned read [ 93.885167][ T6055] hpfs: hpfs_map_4sectors(): unaligned read [ 93.885177][ T6055] hpfs: filesystem error: unable to find root dir [ 93.972674][ T6055] hpfs: hpfs_map_4sectors(): unaligned read [ 93.972856][ T6055] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 94.053514][ T6059] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 94.689068][ T1159] IPVS: starting estimator thread 0... [ 94.729269][ T6083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.782400][ T6084] IPVS: using max 34 ests per chain, 81600 per kthread [ 94.901338][ T6073] loop0: detected capacity change from 0 to 32768 [ 94.957820][ T6073] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.048524][ T6073] XFS (loop0): Ending clean mount [ 95.152193][ T5604] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.318434][ T6106] loop4: detected capacity change from 0 to 1024 [ 95.568256][ T6110] loop1: detected capacity change from 0 to 1024 [ 95.633742][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.741474][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.237880][ T6146] rnbd_client L203: map_device: Unknown parameter or missing value 'pa' [ 96.377940][ T6153] loop0: detected capacity change from 0 to 256 [ 96.468141][ T32] audit: type=1800 audit(1792600146.822:13): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.109" name="file1" dev="loop0" ino=4 res=0 errno=-22 [ 96.555113][ T6156] atomic_op ffff888055b139e0 conn xmit_atomic 0000000000000000 [ 96.649955][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.652859][ T6163] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 96.803244][ T9] usb 2-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 96.806842][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.806873][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 96.826648][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.826672][ T9] usb 2-1: Product: syz [ 96.826685][ T9] usb 2-1: Manufacturer: syz [ 96.826699][ T9] usb 2-1: SerialNumber: syz [ 96.902667][ T9] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 96.974273][ T6171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.983147][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 96.983402][ T9] input input5: usb_submit_urb failed [ 97.027700][ T9] input: failed to attach handler kbd to device input5, error: -5 [ 97.045794][ T4959] input input5: usb_submit_urb failed [ 97.047212][ T6180] macvtap1: entered allmulticast mode [ 97.051338][ T9] scsi host1: usb-storage 2-1:1.0 [ 97.067953][ T6180] veth0_to_bond: entered promiscuous mode [ 97.067977][ T6180] veth0_to_bond: entered allmulticast mode [ 97.086455][ T4959] input input5: usb_submit_urb failed [ 97.096216][ T6180] team0: Device macvtap1 failed to register rx_handler [ 97.118284][ T6180] veth0_to_bond: left allmulticast mode [ 97.118315][ T6180] veth0_to_bond: left promiscuous mode [ 97.168569][ T6184] loop2: detected capacity change from 0 to 128 [ 97.179184][ T6184] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.196663][ T9] usb 2-1: USB disconnect, device number 2 [ 97.211282][ T6184] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.794857][ T6210] loop2: detected capacity change from 0 to 512 [ 97.813661][ T6210] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.813683][ T6210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 97.813904][ T6210] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.813994][ T6210] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.135: iget: bad i_size value: 12154761577498 [ 97.814194][ T6210] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.817165][ T6210] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.135: couldn't read orphan inode 13 (err -117) [ 97.817359][ T6210] loop2: lost filesystem error report for type 5 error -117 [ 97.827689][ T6210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.850084][ T6210] CacheFiles: Failed to register: -30 [ 97.861166][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.929601][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.014354][ T9] usb 2-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 98.016910][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.016942][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.047135][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.047162][ T9] usb 2-1: Product: syz [ 98.047175][ T9] usb 2-1: SerialNumber: syz [ 98.071977][ T9] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 98.103778][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 98.103863][ T9] input input6: usb_submit_urb failed [ 98.109176][ T9] input: failed to attach handler kbd to device input6, error: -5 [ 98.133394][ T4959] input input6: usb_submit_urb failed [ 98.137744][ T9] scsi host1: usb-storage 2-1:1.0 [ 98.152018][ T4959] input input6: usb_submit_urb failed [ 98.206351][ T6222] loop0: detected capacity change from 0 to 1024 [ 98.241631][ T5613] input input6: usb_submit_urb failed [ 98.271418][ T4959] input input6: usb_submit_urb failed [ 98.323110][ T26] usb 2-1: USB disconnect, device number 3 [ 98.351450][ T6222] hfsplus: bad catalog file entry [ 98.395257][ T1433] hfsplus: bad catalog file entry [ 98.631885][ T6229] macvtap1: entered allmulticast mode [ 98.632298][ T6229] veth0_to_bond: entered promiscuous mode [ 98.632313][ T6229] veth0_to_bond: entered allmulticast mode [ 98.643451][ T6229] team0: Device macvtap1 failed to register rx_handler [ 98.667071][ T6229] veth0_to_bond: left allmulticast mode [ 98.667102][ T6229] veth0_to_bond: left promiscuous mode [ 98.833675][ T6225] loop2: detected capacity change from 0 to 32768 [ 98.875132][ T6225] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.951974][ T6225] XFS (loop2): Ending clean mount [ 99.002927][ T6225] XFS (loop2): Quotacheck needed: Please wait. [ 99.078207][ T6225] XFS (loop2): Quotacheck: Done. [ 99.145158][ T5605] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.588634][ T6271] netlink: 284 bytes leftover after parsing attributes in process `syz.4.157'. [ 99.907624][ T6284] loop1: detected capacity change from 0 to 512 [ 99.974361][ T6283] loop0: detected capacity change from 0 to 2048 [ 99.992972][ T6283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.023322][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.023494][ T6284] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.247036][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.741883][ T6312] loop1: detected capacity change from 0 to 512 [ 100.786238][ T6311] loop2: detected capacity change from 0 to 2048 [ 100.857588][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.882785][ T6311] EXT4-fs (loop2): shut down requested (2) [ 100.954747][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.030445][ T5793] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 102.192458][ T5793] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.193755][ T5793] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 102.193785][ T5793] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64 [ 102.193810][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.200243][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.200268][ T5793] usb 5-1: Product: syz [ 102.200280][ T5793] usb 5-1: Manufacturer: syz [ 102.200293][ T5793] usb 5-1: SerialNumber: syz [ 102.222391][ T5793] usb 5-1: config 0 descriptor?? [ 102.224718][ T6357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.291995][ T5793] usb 5-1: selecting invalid altsetting 0 [ 102.598247][ T6373] NFSD: Failed to start, no listeners configured. [ 102.653137][ T6380] comedi comedi4: bad chanlist[0]=0x000000d1 chan=209 range length=2 [ 102.672300][ T5793] usb 5-1: USB disconnect, device number 2 [ 102.891229][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.088161][ T6382] loop1: detected capacity change from 0 to 32768 [ 103.151718][ T6382] JBD2: Ignoring recovery information on journal [ 103.327252][ T6382] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 103.571576][ T6395] input: syz0 as /devices/virtual/input/input7 [ 103.798523][ T5603] ocfs2: Unmounting device (7,1) on (node local) [ 104.150981][ T6407] kvm [6406]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2 [ 104.159416][ T6409] kvm_intel: kvm [6408]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x8001 [ 104.224638][ T6411] pimreg1: tun_chr_ioctl cmd 1074025677 [ 104.224794][ T6411] pimreg1: linktype set to 779 [ 104.757436][ T4925] Bluetooth: unknown link type 128 [ 104.939410][ T6418] loop4: detected capacity change from 0 to 32768 [ 104.961636][ T6418] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.018558][ T6418] XFS (loop4): Ending clean mount [ 105.108920][ T5602] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.502546][ T6429] loop1: detected capacity change from 0 to 32768 [ 105.559995][ T6429] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.639128][ T6429] XFS (loop1): Ending clean mount [ 105.781325][ T5603] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.859671][ T1574] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.880333][ T6393] syz.2.208 (6393): drop_caches: 3 [ 106.020722][ T1574] usb 5-1: Using ep0 maxpacket: 8 [ 106.022193][ T1574] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.023637][ T1574] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.023683][ T1574] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.023704][ T1574] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.023726][ T1574] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.023747][ T1574] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.023785][ T1574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.180500][ T6471] macvtap1: entered allmulticast mode [ 106.185810][ T6471] veth0_to_bond: entered promiscuous mode [ 106.185853][ T6471] veth0_to_bond: entered allmulticast mode [ 106.193268][ T6471] team0: Device macvtap1 failed to register rx_handler [ 106.208107][ T6471] veth0_to_bond: left allmulticast mode [ 106.208137][ T6471] veth0_to_bond: left promiscuous mode [ 106.261769][ T1574] usb 5-1: GET_CAPABILITIES returned 0 [ 106.261813][ T1574] usbtmc 5-1:16.0: can't read capabilities [ 106.283219][ T6475] vcan0: tx drop: invalid da for name 0x0000000000020000 [ 106.491552][ T1574] usb 5-1: USB disconnect, device number 3 [ 106.628644][ T6489] pimreg: entered allmulticast mode [ 106.631125][ T5727] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.670577][ T6493] Zero length message leads to an empty skb [ 106.799569][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 106.801283][ T5727] usb 4-1: New USB device found: idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 106.806749][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.806773][ T5727] usb 4-1: Product: syz [ 106.806786][ T5727] usb 4-1: Manufacturer: syz [ 106.806799][ T5727] usb 4-1: SerialNumber: syz [ 106.824815][ T4925] Bluetooth: hci2: command tx timeout [ 106.857020][ T5727] usb 4-1: config 0 descriptor?? [ 106.895222][ T5727] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 107.291267][ T5727] gspca_topro: reg_w err -71 [ 107.324541][ T5727] gspca_topro: Sensor soi763a [ 107.359874][ T6512] loop0: detected capacity change from 0 to 16 [ 107.394340][ T5727] usb 4-1: USB disconnect, device number 3 [ 107.452643][ T6512] erofs (device loop0): mounted with root inode @ nid 36. [ 107.783216][ T6519] Bluetooth: MGMT ver 1.23 [ 107.806024][ T6491] syz.1.246 (6491): drop_caches: 3 [ 107.913717][ T6524] netlink: 248 bytes leftover after parsing attributes in process `syz.4.259'. [ 107.913766][ T6524] netlink: 7 bytes leftover after parsing attributes in process `syz.4.259'. [ 108.839231][ T6547] loop0: detected capacity change from 0 to 32768 [ 108.889916][ T6547] JBD2: Ignoring recovery information on journal [ 108.962609][ T6547] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.169421][ T5604] ocfs2: Unmounting device (7,0) on (node local) [ 109.286937][ T6568] loop1: detected capacity change from 0 to 1024 [ 109.380247][ T6568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.397966][ T6572] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.627552][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.179483][ T6584] xt_hashlimit: size too large, truncated to 1048576 [ 110.700967][ T6554] syz.3.271 (6554): drop_caches: 3 [ 110.974647][ T6601] loop2: detected capacity change from 0 to 512 [ 111.451229][ T6607] mmap: syz.4.293 (6607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.483938][ T1574] libceph: connect (1)[c::]:6789 error -101 [ 111.484341][ T1574] libceph: mon0 (1)[c::]:6789 connect error [ 111.508416][ T1574] libceph: connect (1)[c::]:6789 error -101 [ 111.509163][ T6604] ceph: No mds server is up or the cluster is laggy [ 111.524220][ T1574] libceph: mon0 (1)[c::]:6789 connect error [ 111.851286][ T6600] loop3: detected capacity change from 0 to 32768 [ 111.904533][ T6600] JBD2: Ignoring recovery information on journal [ 111.910738][ T6622] device-mapper: ioctl: Invalid ioctl structure: name c, dev 30 [ 112.008171][ T6629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 112.008205][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 112.008227][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 112.075665][ T6600] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 112.416480][ T6637] loop1: detected capacity change from 0 to 512 [ 112.471976][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 112.497341][ T6637] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.497363][ T6637] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 112.497374][ T6637] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.497385][ T6637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.550667][ T6637] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.302: bad orphan inode 131083 [ 112.550697][ T6637] loop1: lost filesystem error report for type 5 error -117 [ 112.559554][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 112.559578][ C1] EXT4-fs (loop1): initial error at time 1792600162: ext4_orphan_get:1430 [ 112.559613][ C1] EXT4-fs (loop1): last error at time 1792600162: ext4_orphan_get:1430 [ 112.586418][ T6637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.833169][ T6637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.854873][ T1574] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.891366][ T6647] loop2: detected capacity change from 0 to 512 [ 113.012856][ T1574] usb 5-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 113.018526][ T1574] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.018574][ T1574] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.021906][ T1574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.021933][ T1574] usb 5-1: Product: syz [ 113.021947][ T1574] usb 5-1: Manufacturer: syz [ 113.021959][ T1574] usb 5-1: SerialNumber: syz [ 113.065182][ T1574] zaurus 5-1:1.0: probe with driver zaurus failed with error -22 [ 113.137657][ T32] audit: type=1400 audit(1792600163.492:14): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6649 comm="syz.3.305" name="p" offset=58 [ 113.159118][ T6651] WARNING! power/level is deprecated; use power/control instead [ 113.279361][ T1574] usb 5-1: USB disconnect, device number 4 [ 113.441543][ T6659] loop1: detected capacity change from 0 to 512 [ 113.490266][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.640611][ T26] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 113.645836][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.651818][ T26] usb 3-1: config 0 descriptor?? [ 113.872527][ T26] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 113.959298][ T6555] syz.1.282 (6555) used greatest stack depth: 18984 bytes left [ 114.269679][ T26] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 114.269706][ T26] [drm] Initialized udl on minor 1 [ 114.293005][ T26] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 114.305301][ T26] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 114.386303][ T6690] loop1: detected capacity change from 0 to 128 [ 114.387890][ T6690] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.395356][ T6690] FAT-fs (loop1): bogus number of reserved sectors [ 114.395377][ T6690] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 114.395391][ T6690] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.422750][ T6690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.466165][ T6692] bpf: Bad value for 'gid' [ 114.502162][ T5751] usb 3-1: USB disconnect, device number 2 [ 114.695492][ T6702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.333'. [ 114.808094][ T6706] loop1: detected capacity change from 0 to 256 [ 114.974841][ T6709] syz_tun: entered allmulticast mode [ 114.994293][ T6708] syz_tun: left allmulticast mode [ 115.227352][ T6716] loop4: detected capacity change from 0 to 764 [ 115.333805][ T6716] rock: directory entry would overflow storage [ 115.333820][ T6716] rock: sig=0x5245, size=8, remaining=5 [ 115.537150][ T6729] loop1: detected capacity change from 0 to 1024 [ 115.788213][ T6737] NFSD: Failed to start, no listeners configured. [ 115.990321][ T6747] loop4: detected capacity change from 0 to 512 [ 116.037555][ T6747] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.353: iget: bad i_size value: 38620345925642 [ 116.037590][ T6747] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.039541][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 116.039562][ C1] EXT4-fs (loop4): initial error at time 1792600166: ext4_orphan_get:1404: inode 15 [ 116.039587][ C1] EXT4-fs (loop4): last error at time 1792600166: ext4_orphan_get:1404: inode 15 [ 116.042721][ T6747] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 116.042749][ T6747] loop4: lost filesystem error report for type 5 error -117 [ 116.104001][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.207909][ T6753] EXT4-fs (loop4): shut down requested (1) [ 116.386037][ T6748] loop2: detected capacity change from 0 to 32768 [ 116.398083][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.422742][ T6748] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.354 (6748) [ 116.436507][ T6757] netlink: 64 bytes leftover after parsing attributes in process `syz.0.356'. [ 116.478375][ T6748] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.478408][ T6748] BTRFS info (device loop2): using sha256 checksum algorithm [ 116.640723][ T6748] BTRFS info (device loop2): enabling ssd optimizations [ 116.640750][ T6748] BTRFS info (device loop2): turning on async discard [ 116.640764][ T6748] BTRFS info (device loop2): enabling free space tree [ 116.772634][ T6777] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 116.914889][ T5605] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.096832][ T6790] loop3: detected capacity change from 0 to 1024 [ 117.389756][ T5751] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 117.521246][ T6799] phram: parameter too long [ 117.562583][ T5751] usb 1-1: not running at top speed; connect to a high speed hub [ 117.562618][ T5751] usb 1-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 117.566057][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.566083][ T5751] usb 1-1: Product: syz [ 117.566097][ T5751] usb 1-1: Manufacturer: syz [ 117.566110][ T5751] usb 1-1: SerialNumber: syz [ 117.587894][ T5751] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 117.671985][ T5751] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 117.697616][ T5751] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 117.728542][ T5751] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 117.737715][ T5727] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 117.754505][ T26] kernel read not supported for file /video9 (pid: 26 comm: kworker/1:0) [ 117.758271][ T5751] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 117.907010][ T5727] usb 5-1: not running at top speed; connect to a high speed hub [ 117.907046][ T5727] usb 5-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 117.935285][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 117.935337][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.978840][ T6800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 117.990818][ T5727] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 118.037925][ T5727] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB4 [ 118.399839][ T6822] netlink: 'syz.1.378': attribute type 11 has an invalid length. [ 118.435253][ T26] usb 5-1: USB disconnect, device number 5 [ 118.477606][ T6819] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.517132][ T26] cyberjack ttyUSB4: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB4 [ 118.524297][ T26] cyberjack 5-1:1.0: device disconnected [ 119.286300][ T6843] loop4: detected capacity change from 0 to 4096 [ 119.498414][ T6847] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 119.525749][ T6850] loop1: detected capacity change from 0 to 512 [ 119.526742][ T6850] EXT4-fs: Ignoring removed nobh option [ 119.636242][ T6850] EXT4-fs (loop1): 1 truncate cleaned up [ 119.708966][ T6850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.903632][ T5603] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 119.907189][ T5603] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 120.029598][ T5727] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.070581][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 120.145945][ T10] usb 1-1: USB disconnect, device number 2 [ 120.186902][ T5727] usb 5-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 120.199032][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.199064][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.215714][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.215740][ T5727] usb 5-1: Product: syz [ 120.215753][ T5727] usb 5-1: Manufacturer: syz [ 120.215766][ T5727] usb 5-1: SerialNumber: syz [ 120.245673][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 120.282321][ T5727] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 120.284157][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.308302][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 120.319267][ T5727] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 120.319347][ T5727] input input10: usb_submit_urb failed [ 120.347372][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 120.364657][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 120.388258][ T10] keyspan 1-1:1.0: device disconnected [ 120.421237][ T5727] input: failed to attach handler kbd to device input10, error: -5 [ 120.456786][ T4959] input input10: usb_submit_urb failed [ 120.471395][ T4959] input input10: usb_submit_urb failed [ 120.483528][ T5727] scsi host1: usb-storage 5-1:1.0 [ 120.584462][ T6878] loop3: detected capacity change from 0 to 512 [ 120.606799][ T5727] usb 5-1: USB disconnect, device number 6 [ 120.686070][ T6878] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 120.693635][ T89] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.814586][ T6878] EXT4-fs (loop3): 1 truncate cleaned up [ 120.884933][ T6878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.985058][ T32] audit: type=1800 audit(1792600171.332:15): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 121.018808][ T89] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.106222][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.188533][ T89] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.190342][ T5727] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.339183][ T89] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.347068][ T5727] usb 5-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 121.349800][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.349841][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.355360][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.355384][ T5727] usb 5-1: Product: syz [ 121.355398][ T5727] usb 5-1: SerialNumber: syz [ 121.424035][ T5727] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 121.439901][ T5727] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 121.444341][ T5727] input input11: usb_submit_urb failed [ 121.468756][ T5727] input: failed to attach handler kbd to device input11, error: -5 [ 121.483618][ T4959] input input11: usb_submit_urb failed [ 121.489353][ T5727] scsi host1: usb-storage 5-1:1.0 [ 121.505077][ T4959] input input11: usb_submit_urb failed [ 121.676766][ T5613] input input11: usb_submit_urb failed [ 121.710654][ T26] usb 5-1: USB disconnect, device number 7 [ 121.718549][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.719344][ T4959] input input11: usb_submit_urb failed [ 121.746034][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.754830][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.763164][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.763842][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.789056][ T4959] input input11: usb_submit_urb failed [ 122.012619][ T89] bridge_slave_1: left allmulticast mode [ 122.012671][ T89] bridge_slave_1: left promiscuous mode [ 122.014675][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.056861][ T89] bridge_slave_0: left allmulticast mode [ 122.056886][ T89] bridge_slave_0: left promiscuous mode [ 122.057121][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.765153][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.768061][ T6938] loop4: detected capacity change from 0 to 8 [ 122.816055][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.838921][ T89] bond0 (unregistering): Released all slaves [ 123.640401][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.791059][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 123.793416][ T26] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.813578][ T26] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.813612][ T26] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.813645][ T26] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.813669][ T26] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.813709][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.859595][ T55] Bluetooth: hci0: command tx timeout [ 123.917594][ T6906] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.118326][ T26] usb 3-1: GET_CAPABILITIES returned 0 [ 124.118374][ T26] usbtmc 3-1:16.0: can't read capabilities [ 124.343965][ T26] usb 3-1: USB disconnect, device number 3 [ 124.827141][ T6984] loop0: detected capacity change from 0 to 32768 [ 124.879636][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.447'. [ 124.885862][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.447'. [ 124.903791][ T6984] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 124.972329][ T6984] XFS (loop0): Ending clean mount [ 125.089113][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.182797][ T5604] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 125.443918][ T89] hsr_slave_0: left promiscuous mode [ 125.451765][ T89] hsr_slave_1: left promiscuous mode [ 125.452943][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.452978][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.488619][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.488653][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.567818][ T89] veth1_macvtap: left promiscuous mode [ 125.567874][ T89] veth0_macvtap: left promiscuous mode [ 125.567977][ T89] veth1_vlan: left promiscuous mode [ 125.568061][ T89] veth0_vlan: left promiscuous mode [ 125.939938][ T55] Bluetooth: hci0: command tx timeout [ 125.957905][ T7013] loop4: detected capacity change from 0 to 40427 [ 126.077432][ T7013] F2FS-fs (loop4): build fault injection rate: 174 [ 126.077463][ T7013] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 126.105986][ T7013] F2FS-fs (loop4): invalid crc value [ 126.236429][ T7033] capability: warning: `syz.0.455' uses 32-bit capabilities (legacy support in use) [ 126.621873][ T7013] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 126.666478][ T7013] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.667890][ T89] team0 (unregistering): Port device team_slave_1 removed [ 126.727254][ T89] team0 (unregistering): Port device team_slave_0 removed [ 126.961405][ T26] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 127.133252][ T26] usb 4-1: not running at top speed; connect to a high speed hub [ 127.133288][ T26] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 127.134294][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 127.134338][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.157741][ T7052] loop2: detected capacity change from 0 to 512 [ 127.168943][ T7043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.197570][ T26] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 127.209987][ T7052] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.463: iget: bad i_size value: 38620345925642 [ 127.210023][ T7052] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.219108][ T7052] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.463: couldn't read orphan inode 15 (err -117) [ 127.219141][ T7052] loop2: lost filesystem error report for type 5 error -117 [ 127.221672][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 127.221695][ C1] EXT4-fs (loop2): initial error at time 1792600177: ext4_orphan_get:1404: inode 15 [ 127.221723][ C1] EXT4-fs (loop2): last error at time 1792600177: ext4_orphan_get:1409 [ 127.232191][ T7052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.306734][ T7054] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 127.326099][ T26] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 127.385957][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 122 with error 28 [ 127.385989][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.385989][ T12] [ 127.386004][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 127.386016][ T12] EXT4-fs (loop2): Free/Dirty block details [ 127.386048][ T12] EXT4-fs (loop2): free_blocks=0 [ 127.386078][ T12] EXT4-fs (loop2): dirty_blocks=124 [ 127.386089][ T12] EXT4-fs (loop2): Block reservation details [ 127.386100][ T12] EXT4-fs (loop2): i_reserved_data_blocks=124 [ 127.391679][ T7059] EXT4-fs (loop2): shut down requested (1) [ 127.547674][ T10] usb 4-1: USB disconnect, device number 4 [ 127.610278][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 127.634007][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.634113][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.634267][ T6906] bridge_slave_0: entered allmulticast mode [ 127.644819][ T6906] bridge_slave_0: entered promiscuous mode [ 127.662230][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.662331][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.668234][ T10] cyberjack 4-1:1.0: device disconnected [ 127.669121][ T6906] bridge_slave_1: entered allmulticast mode [ 127.723158][ T6906] bridge_slave_1: entered promiscuous mode [ 127.830922][ T6906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.837174][ T6906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.976106][ T6906] team0: Port device team_slave_0 added [ 127.995717][ T6906] team0: Port device team_slave_1 added [ 128.021525][ T55] Bluetooth: hci0: command tx timeout [ 128.094507][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.094525][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.094549][ T6906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.115486][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.115504][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.115529][ T6906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.221756][ T6906] hsr_slave_0: entered promiscuous mode [ 128.222749][ T6906] hsr_slave_1: entered promiscuous mode [ 128.369038][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 128.464345][ T6906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.476417][ T6906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.484682][ T6906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.488911][ T6906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.492806][ T6906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.516137][ T6906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.517915][ T6906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.524274][ T6906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.621380][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.654306][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.669026][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.669120][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.695258][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.695389][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.056233][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 129.224532][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.526908][ T6906] veth0_vlan: entered promiscuous mode [ 129.548189][ T6906] veth1_vlan: entered promiscuous mode [ 129.585946][ T6906] veth0_macvtap: entered promiscuous mode [ 129.603091][ T6906] veth1_macvtap: entered promiscuous mode [ 129.625353][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.648015][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.710052][ T45] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.711560][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.711600][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.711624][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.785263][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.785284][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.825467][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.825487][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.868507][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 130.099709][ T55] Bluetooth: hci0: command tx timeout [ 130.655613][ T7159] overlayfs: unescaped trailing colons in lowerdir mount option. [ 130.750370][ T7140] loop4: detected capacity change from 0 to 32768 [ 130.795422][ T7140] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.866687][ T7140] XFS (loop4): Ending clean mount [ 131.144047][ T5602] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.634734][ T7173] loop5: detected capacity change from 0 to 32768 [ 131.685892][ T7173] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 131.856897][ T7173] XFS (loop5): Ending clean mount [ 131.894108][ T7173] XFS (loop5): Quotacheck needed: Please wait. [ 131.974688][ T52] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 [ 131.974735][ T52] XFS (loop5): Unmount and run xfs_repair [ 131.974747][ T52] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 131.974762][ T52] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 131.974788][ T52] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 131.974801][ T52] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 131.974813][ T52] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03 ....9.y......... [ 131.974825][ T52] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 131.974837][ T52] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 ................ [ 131.974849][ T52] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.974861][ T52] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.975123][ T52] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 4 error 74 [ 131.975261][ T52] loop5: lost filesystem error report for type 5 error -117 [ 131.996511][ T7173] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 132.013826][ T7173] loop5: lost filesystem error report for type 5 error -117 [ 132.203038][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 132.203070][ T7207] netlink: 14 bytes leftover after parsing attributes in process `syz.0.487'. [ 132.266017][ T7184] loop4: detected capacity change from 0 to 65536 [ 132.331874][ T6906] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 132.334727][ T6906] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 132.362341][ T7184] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.466524][ T7184] XFS (loop4): Ending clean mount [ 132.521808][ T7184] XFS (loop4): Quotacheck needed: Please wait. [ 132.656047][ T7184] XFS (loop4): Quotacheck: Done. [ 132.735823][ T7190] loop2: detected capacity change from 0 to 32768 [ 132.793574][ T7190] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.870053][ T7190] XFS (loop2): Ending clean mount [ 132.959202][ T5602] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.982072][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982155][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.029703][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.090292][ T5605] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 133.199824][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.200579][ T26] usb 6-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 133.222577][ T26] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 133.222610][ T26] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 133.222646][ T26] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 133.271255][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.271281][ T26] usb 6-1: Product: syz [ 133.271293][ T26] usb 6-1: Manufacturer: syz [ 133.271305][ T26] usb 6-1: SerialNumber: syz [ 133.304754][ T26] usb 6-1: config 0 descriptor?? [ 133.305419][ T7218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 133.305525][ T7218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 133.319248][ T26] usb 6-1: ucan: probing device on interface #0 [ 133.382547][ T5751] usb 1-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 133.395248][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.395277][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 133.397985][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.398010][ T5751] usb 1-1: Product: syz [ 133.398024][ T5751] usb 1-1: Manufacturer: syz [ 133.398061][ T5751] usb 1-1: SerialNumber: syz [ 133.457283][ T5751] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 133.492266][ T5751] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 133.492378][ T5751] input input12: usb_submit_urb failed [ 133.518154][ T5751] input: failed to attach handler kbd to device input12, error: -5 [ 133.531450][ T4959] input input12: usb_submit_urb failed [ 133.538152][ T5751] scsi host1: usb-storage 1-1:1.0 [ 133.573414][ T4959] input input12: usb_submit_urb failed [ 133.630482][ T5727] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 133.700976][ T5620] input input12: usb_submit_urb failed [ 133.707408][ T10] usb 1-1: USB disconnect, device number 3 [ 133.724864][ T4959] input input12: usb_submit_urb failed [ 133.738087][ T4959] input input12: usb_submit_urb failed [ 133.780664][ T5727] usb 4-1: New USB device found: idVendor=1038, idProduct=1410, bcdDevice=0.00 [ 133.781655][ T5727] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 133.781694][ T5727] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 133.781718][ T5727] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 133.781742][ T5727] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.781772][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.787095][ T5727] usb 4-1: config 0 descriptor?? [ 133.787818][ T7236] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 133.973652][ T26] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 134.052072][ T7249] loop4: detected capacity change from 0 to 512 [ 134.197621][ T9] usb 6-1: USB disconnect, device number 2 [ 134.221130][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.243952][ T5727] steelseries 0003:1038:1410.0001: unknown main item tag 0x2 [ 134.243990][ T5727] steelseries 0003:1038:1410.0001: unknown main item tag 0x3 [ 134.244016][ T5727] steelseries 0003:1038:1410.0001: unknown main item tag 0x1 [ 134.244047][ T5727] steelseries 0003:1038:1410.0001: unknown main item tag 0x2 [ 134.245658][ T5727] steelseries 0003:1038:1410.0001: not enough fields in HID_OUTPUT_REPORT 0 [ 134.370517][ T10] usb 1-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 134.371886][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.371905][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.378647][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.378673][ T10] usb 1-1: Product: syz [ 134.378687][ T10] usb 1-1: SerialNumber: syz [ 134.406920][ T10] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 134.429197][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 134.429280][ T10] input input13: usb_submit_urb failed [ 134.443321][ T9] usb 4-1: USB disconnect, device number 5 [ 134.476375][ T10] input: failed to attach handler kbd to device input13, error: -5 [ 134.477923][ T4959] input input13: usb_submit_urb failed [ 134.484869][ T10] scsi host1: usb-storage 1-1:1.0 [ 134.493585][ T4959] input input13: usb_submit_urb failed [ 134.547953][ T7260] loop4: detected capacity change from 0 to 512 [ 134.554149][ T7260] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 134.554167][ T7260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.574548][ T7260] EXT4-fs (loop4): 1 truncate cleaned up [ 134.591710][ T7260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.625901][ T32] audit: type=1800 audit(1792600184.982:16): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.501" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 134.650901][ T5613] input input13: usb_submit_urb failed [ 134.654278][ T10] usb 1-1: USB disconnect, device number 4 [ 134.686840][ T4959] input input13: usb_submit_urb failed [ 134.688334][ T4959] input input13: usb_submit_urb failed [ 134.699698][ T7264] loop2: detected capacity change from 0 to 512 [ 134.731667][ T7264] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.502: inode has both inline data and extents flags [ 134.731689][ T7264] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.733854][ T7264] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.502: couldn't read orphan inode 15 (err -117) [ 134.733881][ T7264] loop2: lost filesystem error report for type 5 error -117 [ 134.735430][ T7264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.906985][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.922740][ T7268] kAFS: bad VL server IP address [ 135.048483][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.070844][ T7274] loop5: detected capacity change from 0 to 2048 [ 135.147199][ T7277] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.175609][ T7275] bridge_slave_0: left allmulticast mode [ 135.175635][ T7275] bridge_slave_0: left promiscuous mode [ 135.191520][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.295990][ T7275] bridge_slave_1: left allmulticast mode [ 135.296018][ T7275] bridge_slave_1: left promiscuous mode [ 135.297227][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.352190][ T7275] bond0: (slave bond_slave_0): Releasing backup interface [ 135.415183][ T7275] bond0: (slave bond_slave_1): Releasing backup interface [ 135.486855][ T7275] team0: Port device team_slave_0 removed [ 135.527101][ T7275] team0: Port device team_slave_1 removed [ 135.527708][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.527722][ T7275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.563143][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.563160][ T7275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.573324][ T7275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.730047][ T5751] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.879923][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 135.887643][ T5751] usb 1-1: New USB device found: idVendor=1b1c, idProduct=1b27, bcdDevice=0.00 [ 135.888986][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.912535][ T5751] usb 1-1: config 0 descriptor?? [ 136.330383][ T7305] loop4: detected capacity change from 0 to 512 [ 136.331012][ T5751] hid (null): report_id 0 is invalid [ 136.378444][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 136.378481][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 136.378510][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 136.392241][ T7305] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.518: inode has both inline data and extents flags [ 136.392275][ T7305] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.392611][ T7305] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.518: couldn't read orphan inode 15 (err -117) [ 136.392636][ T7305] loop4: lost filesystem error report for type 5 error -117 [ 136.400259][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.404954][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 136.404988][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 136.405014][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 136.405052][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: report_id 0 is invalid [ 136.405067][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: item 0 1 1 8 parsing failed [ 136.405795][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: parse failed (reason: -22) [ 136.405905][ T5751] hid-corsair-void 0003:1B1C:1B27.0002: probe with driver hid-corsair-void failed with error -22 [ 136.543931][ T5751] usb 1-1: USB disconnect, device number 5 [ 136.629265][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.721887][ T7314] loop2: detected capacity change from 0 to 64 [ 136.934974][ T7317] netlink: 34 bytes leftover after parsing attributes in process `syz.5.521'. [ 137.068053][ T7313] loop4: detected capacity change from 0 to 32768 [ 137.100197][ T7313] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.158868][ T7313] XFS (loop4): Ending clean mount [ 137.369627][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 137.413262][ T5602] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.487509][ T7337] phram: not enough arguments [ 137.500026][ T10] usb 6-1: device descriptor read/64, error -71 [ 137.734141][ T7319] loop3: detected capacity change from 0 to 40427 [ 137.754764][ T7319] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 137.754790][ T7319] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.771462][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 138.553872][ T7349] loop4: detected capacity change from 0 to 131072 [ 138.559700][ T10] usb 6-1: device descriptor read/64, error -71 [ 138.575717][ T7349] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 138.575746][ T7349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.577197][ T7349] F2FS-fs (loop4): invalid crc value [ 138.638483][ T7349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.659044][ T7349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.659074][ T7349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 138.673695][ T10] usb usb6-port1: attempt power cycle [ 138.683721][ T7319] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.744787][ T7319] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.744815][ T7319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.775932][ T7362] loop0: detected capacity change from 0 to 512 [ 138.809271][ T7362] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.534: inode has both inline data and extents flags [ 138.809305][ T7362] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.809601][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 138.809626][ C1] EXT4-fs (loop0): initial error at time 1792600189: ext4_orphan_get:1404: inode 15 [ 138.809650][ C1] EXT4-fs (loop0): last error at time 1792600189: ext4_orphan_get:1404: inode 15 [ 138.826205][ T7362] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.534: couldn't read orphan inode 15 (err -117) [ 138.826237][ T7362] loop0: lost filesystem error report for type 5 error -117 [ 138.853840][ T7362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.902415][ T7365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 139.013094][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 139.035641][ T10] usb 6-1: device descriptor read/8, error -71 [ 139.119040][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.283618][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 139.312805][ T10] usb 6-1: device descriptor read/8, error -71 [ 139.420317][ T10] usb usb6-port1: unable to enumerate USB device [ 139.548442][ T7379] program syz.2.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.816411][ T7388] loop2: detected capacity change from 0 to 2048 [ 139.846378][ T7388] NILFS (loop2): invalid segment: Magic number mismatch [ 139.846405][ T7388] NILFS (loop2): trying rollback from an earlier position [ 140.039797][ T7388] NILFS (loop2): recovery complete [ 140.050729][ T7393] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.328191][ T7395] loop5: detected capacity change from 0 to 512 [ 140.384142][ T7395] EXT4-fs (loop5): 1 truncate cleaned up [ 140.400319][ T7395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.451504][ T32] audit: type=1800 audit(1792600190.812:17): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.541" name="file1" dev="loop5" ino=15 res=0 errno=-22 [ 140.490907][ T7395] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.541: bg 0: block 465: padding at end of block bitmap is not set [ 140.545604][ T7395] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 140.545638][ T7395] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.545638][ T7395] [ 140.545653][ T7395] EXT4-fs (loop5): Total free blocks count 0 [ 140.545666][ T7395] EXT4-fs (loop5): Free/Dirty block details [ 140.545687][ T7395] EXT4-fs (loop5): free_blocks=0 [ 140.545707][ T7395] EXT4-fs (loop5): dirty_blocks=8 [ 140.545719][ T7395] EXT4-fs (loop5): Block reservation details [ 140.545731][ T7395] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 140.623933][ T7371] loop0: detected capacity change from 0 to 32768 [ 140.664331][ T7371] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.743924][ T7371] XFS (loop0): Ending clean mount [ 140.779450][ T6906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.997619][ T5604] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.046552][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'. [ 141.335098][ T7433] loop5: detected capacity change from 0 to 512 [ 141.351272][ T7433] EXT4-fs: Ignoring removed oldalloc option [ 141.354585][ T7433] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 141.354603][ T7433] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.377456][ T7433] EXT4-fs (loop5): 1 truncate cleaned up [ 141.379012][ T7433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.583108][ T6906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.705423][ T45] IPVS: starting estimator thread 0... [ 141.790661][ T7445] IPVS: using max 35 ests per chain, 84000 per kthread [ 142.161640][ T7443] loop5: detected capacity change from 0 to 32768 [ 142.199447][ T7443] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 142.299868][ T7443] XFS (loop5): Ending clean mount [ 142.492300][ T6906] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 142.669587][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.789595][ T5751] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.832688][ T26] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 142.833687][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.833709][ T26] usb 4-1: config 0 has no interface number 0 [ 142.837489][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.837512][ T26] usb 4-1: Product: syz [ 142.837525][ T26] usb 4-1: Manufacturer: syz [ 142.837538][ T26] usb 4-1: SerialNumber: syz [ 142.889715][ T26] usb 4-1: config 0 descriptor?? [ 142.962564][ T5751] usb 5-1: Using ep0 maxpacket: 16 [ 142.964636][ T5751] usb 5-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 142.966154][ T5751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.966199][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.966248][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.966268][ T5751] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.966289][ T5751] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.967633][ T5751] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.967656][ T5751] usb 5-1: Manufacturer: syz [ 143.056824][ T5751] usb 5-1: config 0 descriptor?? [ 143.109392][ T26] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.157042][ T26] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.157672][ T26] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.157728][ T26] usb 4-1: media controller created [ 143.247679][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.491258][ T5751] rc_core: IR keymap rc-hauppauge not found [ 143.491278][ T5751] Registered IR keymap rc-empty [ 143.492058][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.518719][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.536590][ T5751] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 143.557471][ T5751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 143.572355][ T7472] loop2: detected capacity change from 0 to 32768 [ 143.590580][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.611300][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.629904][ T7472] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 143.629906][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.659698][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.690360][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.710637][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.730098][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.734837][ T7472] XFS (loop2): Ending clean mount [ 143.752816][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.773169][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.789669][ T5751] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 143.814414][ T5751] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 143.814439][ T5751] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 143.819041][ T7472] XFS (loop2): Quotacheck needed: Please wait. [ 143.946347][ T52] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 [ 143.946393][ T52] XFS (loop2): Unmount and run xfs_repair [ 143.946406][ T52] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 143.946422][ T52] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 143.946435][ T52] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 143.946447][ T52] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 143.946459][ T52] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03 ....9.y......... [ 143.946471][ T52] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 143.946484][ T52] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 ................ [ 143.946496][ T52] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.946508][ T52] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.946522][ T52] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 4 error 74 [ 143.946658][ T52] loop2: lost filesystem error report for type 5 error -117 [ 143.984225][ T10] usb 5-1: USB disconnect, device number 8 [ 144.009729][ T7472] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 144.009984][ T7472] loop2: lost filesystem error report for type 5 error -117 [ 144.178789][ T5605] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 144.197192][ T5605] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 144.350950][ T26] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 144.476859][ T26] usb 4-1: USB disconnect, device number 6 [ 145.396294][ T7516] loop2: detected capacity change from 0 to 32768 [ 145.439112][ T7516] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.525861][ T7546] loop3: detected capacity change from 0 to 512 [ 145.575336][ T7546] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.573: inode has both inline data and extents flags [ 145.575369][ T7546] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.577184][ T7546] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.573: couldn't read orphan inode 15 (err -117) [ 145.577215][ T7546] loop3: lost filesystem error report for type 5 error -117 [ 145.580788][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 145.580813][ C0] EXT4-fs (loop3): initial error at time 2000000001: ext4_orphan_get:1404: inode 15 [ 145.580842][ C0] EXT4-fs (loop3): last error at time 2000000001: ext4_orphan_get:1409 [ 145.592517][ T7516] XFS (loop2): Ending clean mount [ 145.660758][ T7546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.111982][ T5605] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.131936][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.349957][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.500698][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 146.505055][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.505107][ T26] usb 1-1: New USB device found: idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 146.506432][ T26] usb 1-1: config 1 has an invalid interface number: 151 but max is 0 [ 146.506454][ T26] usb 1-1: config 1 has no interface number 0 [ 146.506482][ T26] usb 1-1: config 1 interface 151 has no altsetting 0 [ 146.512744][ T26] usb 1-1: string descriptor 0 read error: -22 [ 146.512875][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.540554][ T26] gspca_main: pac7311-2.14.0 probing 093a:260e [ 146.829657][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.955248][ T26] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 146.955345][ T26] pac7311 1-1:1.151: probe with driver pac7311 failed with error -71 [ 146.957746][ T26] usb 1-1: USB disconnect, device number 6 [ 147.000268][ T10] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.002568][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.008225][ T10] usb 5-1: config 0 descriptor?? [ 147.060643][ T5751] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.084260][ T7577] loop3: detected capacity change from 0 to 32768 [ 147.106248][ T7577] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 147.158856][ T7577] XFS (loop3): Ending clean mount [ 147.172643][ T7577] XFS (loop3): Quotacheck needed: Please wait. [ 147.198923][ T12] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 [ 147.198971][ T12] XFS (loop3): Unmount and run xfs_repair [ 147.198983][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 147.199020][ T12] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 147.199034][ T12] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 147.199043][ T12] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 147.199053][ T12] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03 ....9.y......... [ 147.199064][ T12] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 147.199075][ T12] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 ................ [ 147.199087][ T12] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.199099][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.199112][ T12] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 4 error 74 [ 147.199250][ T12] loop3: lost filesystem error report for type 5 error -117 [ 147.231337][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 147.234838][ T5751] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1b27, bcdDevice=0.00 [ 147.235832][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.248252][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 147.271348][ T5751] usb 3-1: config 0 descriptor?? [ 147.276309][ T7577] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 147.276561][ T7577] loop3: lost filesystem error report for type 5 error -117 [ 147.387047][ T5616] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 147.391714][ T5616] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 147.474658][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 147.474683][ T10] [drm] Initialized udl on minor 1 [ 147.638406][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 147.638744][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 147.705835][ T5751] hid (null): report_id 0 is invalid [ 147.717155][ T5751] hid_parser_main: 1 callbacks suppressed [ 147.717179][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717208][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717241][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717268][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717293][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717317][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717342][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: unknown main item tag 0x0 [ 147.717367][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: report_id 0 is invalid [ 147.717381][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: item 0 1 1 8 parsing failed [ 147.718074][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: parse failed (reason: -22) [ 147.718179][ T5751] hid-corsair-void 0003:1B1C:1B27.0003: probe with driver hid-corsair-void failed with error -22 [ 147.845043][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.845571][ T31] usb 5-1: USB disconnect, device number 9 [ 147.868215][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 147.913312][ T10] usb 3-1: USB disconnect, device number 4 [ 147.989650][ T5751] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.140729][ T5751] usb 4-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 148.141731][ T5751] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 148.141759][ T5751] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 148.141787][ T5751] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 148.143583][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.143597][ T5751] usb 4-1: Product: syz [ 148.143604][ T5751] usb 4-1: Manufacturer: syz [ 148.143611][ T5751] usb 4-1: SerialNumber: syz [ 148.146480][ T5751] usb 4-1: config 0 descriptor?? [ 148.147763][ T7591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.147904][ T7591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.149296][ T5751] usb 4-1: ucan: probing device on interface #0 [ 148.775757][ T5751] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 149.003731][ T31] usb 4-1: USB disconnect, device number 7 [ 149.311252][ T7593] loop0: detected capacity change from 0 to 131072 [ 149.314593][ T7593] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 149.314618][ T7593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 149.330327][ T7593] F2FS-fs (loop0): invalid crc value [ 149.455106][ T7593] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 149.459627][ T7593] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 149.459651][ T7593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 149.715979][ T7613] netlink: 144 bytes leftover after parsing attributes in process `syz.2.592'. [ 149.763614][ T7615] loop5: detected capacity change from 0 to 512 [ 149.798464][ T7615] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.588: inode has both inline data and extents flags [ 149.798497][ T7615] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.799573][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 149.799596][ C0] EXT4-fs (loop5): initial error at time 2000000005: ext4_orphan_get:1404: inode 15 [ 149.799622][ C0] EXT4-fs (loop5): last error at time 2000000005: ext4_orphan_get:1404: inode 15 [ 149.803094][ T7615] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.588: couldn't read orphan inode 15 (err -117) [ 149.803131][ T7615] loop5: lost filesystem error report for type 5 error -117 [ 149.816627][ T7615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.120870][ T6906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.823021][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.969607][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 150.971077][ T10] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.973529][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.980549][ T10] usb 5-1: config 0 descriptor?? [ 151.139650][ T5727] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.176352][ T7632] loop0: detected capacity change from 0 to 32768 [ 151.207140][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 151.214171][ T7632] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 151.245400][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.258976][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 151.259041][ T10] usb 5-1: media controller created [ 151.273591][ T5607] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 151.300170][ T7632] XFS (loop0): Ending clean mount [ 151.301220][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.315217][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 151.326689][ T7632] XFS (loop0): Quotacheck needed: Please wait. [ 151.340999][ T5727] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 151.342668][ T5727] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.342698][ T5727] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.345933][ T5727] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 151.345956][ T5727] usb 4-1: Product: syz [ 151.345968][ T5727] usb 4-1: Manufacturer: syz [ 151.367742][ T52] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 [ 151.368597][ T52] XFS (loop0): Unmount and run xfs_repair [ 151.368615][ T52] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 151.368630][ T52] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 151.368643][ T52] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 151.368656][ T52] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 151.368667][ T52] 00000030: 00 00 00 00 39 a9 79 c7 00 00 00 0d 00 00 00 03 ....9.y......... [ 151.368679][ T52] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 151.368690][ T52] 00000050: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 ................ [ 151.368702][ T52] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.368713][ T52] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.368727][ T52] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 4 error 74 [ 151.368850][ T52] loop0: lost filesystem error report for type 5 error -117 [ 151.393697][ T7632] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 151.396531][ T7632] loop0: lost filesystem error report for type 5 error -117 [ 151.485181][ T5607] usb 6-1: Using ep0 maxpacket: 32 [ 151.515581][ T5607] usb 6-1: New USB device found: idVendor=1b1c, idProduct=1b27, bcdDevice=0.00 [ 151.570994][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.577045][ T5607] usb 6-1: config 0 descriptor?? [ 151.608998][ T5727] hub 4-1:4.0: USB hub found [ 151.615716][ T10] az6027: usb out operation failed. (-71) [ 151.617091][ T10] az6027: usb out operation failed. (-71) [ 151.617105][ T10] stb0899_attach: Driver disabled by Kconfig [ 151.617114][ T10] az6027: no front-end attached [ 151.617114][ T10] [ 151.618624][ T10] az6027: usb out operation failed. (-71) [ 151.618638][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 151.619463][ T5604] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 151.622155][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 151.636031][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 151.636053][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 151.642176][ T10] usb 5-1: USB disconnect, device number 10 [ 151.651753][ T5604] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 151.864305][ T5727] hub 4-1:4.0: 2 ports detected [ 151.939422][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 152.046327][ T5607] hid (null): report_id 0 is invalid [ 152.069124][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 152.069161][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 152.069188][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 152.069269][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: report_id 0 is invalid [ 152.069284][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: item 0 1 1 8 parsing failed [ 152.075283][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: parse failed (reason: -22) [ 152.075387][ T5607] hid-corsair-void 0003:1B1C:1B27.0004: probe with driver hid-corsair-void failed with error -22 [ 152.257859][ T10] usb 6-1: USB disconnect, device number 7 [ 152.263563][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.412756][ T9] usb 3-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 152.413831][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 152.413854][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 152.413866][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 152.415740][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.415762][ T9] usb 3-1: Product: syz [ 152.415775][ T9] usb 3-1: Manufacturer: syz [ 152.415786][ T9] usb 3-1: SerialNumber: syz [ 152.418597][ T9] usb 3-1: config 0 descriptor?? [ 152.419491][ T7649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.420933][ T7649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.422577][ T9] usb 3-1: ucan: probing device on interface #0 [ 152.488852][ T5727] usb 4-1: USB disconnect, device number 8 [ 153.035435][ T9] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 153.259899][ T31] usb 3-1: USB disconnect, device number 5 [ 153.666865][ T7658] loop3: detected capacity change from 0 to 32768 [ 153.720127][ T7658] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 153.781936][ T7658] XFS (loop3): Ending clean mount [ 154.137109][ T5616] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 154.295965][ T7678] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 155.433431][ T5793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.581348][ T5793] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 155.582317][ T5793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.582372][ T5793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 155.586529][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.586551][ T5793] usb 1-1: Product: syz [ 155.586565][ T5793] usb 1-1: Manufacturer: syz [ 155.586577][ T5793] usb 1-1: SerialNumber: syz [ 155.659441][ T5793] cdc_mbim 1-1:1.0: skipping garbage [ 155.813241][ T7714] loop5: detected capacity change from 0 to 2048 [ 155.829047][ T7714] NILFS (loop5): invalid segment: Magic number mismatch [ 155.829071][ T7714] NILFS (loop5): trying rollback from an earlier position [ 155.861171][ T7714] NILFS (loop5): recovery complete [ 155.861932][ T7708] loop3: detected capacity change from 0 to 40427 [ 155.867675][ T7708] F2FS-fs (loop3): build fault injection rate: 174 [ 155.867694][ T7708] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 155.899564][ T7708] F2FS-fs (loop3): invalid crc value [ 155.915251][ T7717] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.017280][ T7708] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 156.091479][ T7708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 156.523240][ T5793] cdc_mbim 1-1:1.0: SET_CRC_MODE failed [ 156.523629][ T5793] cdc_mbim 1-1:1.0: SET_NTB_FORMAT failed [ 156.547386][ T5793] cdc_mbim 1-1:1.0: bind() failure [ 156.560076][ T5793] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 156.560123][ T5793] cdc_ncm 1-1:1.1: bind() failure [ 156.580870][ T5793] usb 1-1: USB disconnect, device number 7 [ 156.668734][ T7737] program syz.4.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.789435][ T7741] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 157.199039][ T7760] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.927275][ T7767] loop0: detected capacity change from 0 to 32768 [ 157.990798][ T7767] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 158.054482][ T7767] XFS (loop0): Ending clean mount [ 158.241050][ T7794] loop2: detected capacity change from 0 to 1024 [ 158.272170][ T5604] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 158.448062][ T32] audit: type=1800 audit(2000000013.980:18): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.654" name="file1" dev="loop2" ino=20 res=0 errno=-22 [ 158.538511][ T7801] loop5: detected capacity change from 0 to 256 [ 158.821859][ T7803] warning: `syz.5.658' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.078854][ T7811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.663'. [ 159.605266][ T7833] loop0: detected capacity change from 0 to 64 [ 159.738429][ T32] audit: type=1800 audit(2000000015.270:19): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.671" name="file1" dev="loop0" ino=21 res=0 errno=-22 [ 159.921643][ T7841] program syz.3.675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.969752][ T5751] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 160.120529][ T7845] loop0: detected capacity change from 0 to 64 [ 160.121431][ T5751] usb 6-1: Using ep0 maxpacket: 16 [ 160.122243][ T5751] usb 6-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 160.124339][ T5751] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.124368][ T5751] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.124388][ T5751] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 160.124412][ T5751] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.124443][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.154643][ T5751] usb 6-1: config 0 descriptor?? [ 160.325866][ T7845] MINIX-fs: mounting file system with errors, running fsck is recommended [ 160.556486][ T7839] loop4: detected capacity change from 0 to 32768 [ 160.591719][ T7839] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.664077][ T5751] hid (null): report_id 34376 is invalid [ 160.664133][ T5751] hid (null): invalid report_size 29285 [ 160.664329][ T5751] hid (null): invalid report_size 29285 [ 160.664387][ T5751] hid (null): report_id 34376 is invalid [ 160.664431][ T5751] hid (null): report_id 0 is invalid [ 160.664457][ T5751] hid (null): global environment stack underflow [ 160.664481][ T5751] hid (null): unknown global tag 0xc [ 160.664661][ T5751] hid (null): unknown global tag 0xe [ 160.664675][ T5751] hid (null): unknown global tag 0xc [ 160.879812][ T5751] usb 6-1: USB disconnect, device number 8 [ 160.888503][ T7839] XFS (loop4): Ending clean mount [ 160.918088][ T7844] loop3: detected capacity change from 0 to 32768 [ 160.937386][ T7839] XFS (loop4): Quotacheck needed: Please wait. [ 161.006586][ T7844] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 161.128744][ T7839] XFS (loop4): Quotacheck: Done. [ 161.141438][ T7844] XFS (loop3): Ending clean mount [ 161.285757][ T5602] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.357901][ T5616] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 161.834222][ T7877] loop2: detected capacity change from 0 to 64 [ 161.900431][ T7878] loop5: detected capacity change from 0 to 2048 [ 161.928151][ T7878] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 161.928176][ T7878] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.928193][ T7878] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 161.928209][ T7878] EXT4-fs (loop5): group descriptors corrupted! [ 162.018393][ T7877] Trying to free block not in datazone [ 162.018410][ T7877] Trying to free block not in datazone [ 162.045145][ T7877] Trying to free block not in datazone [ 162.126978][ T7885] loop3: detected capacity change from 0 to 256 [ 162.404483][ T7888] loop5: detected capacity change from 0 to 512 [ 162.405484][ T7888] EXT4-fs: Ignoring removed bh option [ 162.441417][ T7888] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 162.469083][ T7888] EXT4-fs (loop5): 1 truncate cleaned up [ 162.492573][ T7888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.722720][ T6906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.080577][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 163.183124][ T7909] loop4: detected capacity change from 0 to 256 [ 163.229688][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 163.230596][ T9] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 163.232028][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.232056][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 163.232076][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 163.232096][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.234212][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.234234][ T9] usb 6-1: SerialNumber: syz [ 163.315721][ T7909] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d) [ 163.333198][ T7896] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.333338][ T7896] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.334848][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 163.334872][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 163.543290][ T7896] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.543440][ T7896] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.833347][ T7920] loop2: detected capacity change from 0 to 1024 [ 163.862193][ T7922] Bluetooth: MGMT ver 1.23 [ 164.016110][ T9] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 164.146210][ T7931] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.267649][ T7937] loop0: detected capacity change from 0 to 64 [ 164.269629][ T5793] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.286533][ T9] usb 6-1: USB disconnect, device number 9 [ 164.300850][ T9] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 164.422476][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 164.423602][ T5793] usb 4-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 164.424726][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 164.424768][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.472811][ T5793] usb 4-1: config 0 descriptor?? [ 164.474910][ T7929] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.905126][ T5793] hid (null): unknown global tag 0xc [ 164.942082][ T5793] hid_parser_main: 4 callbacks suppressed [ 164.942105][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942135][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942161][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942187][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942213][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942238][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942263][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942287][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942313][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.942339][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown main item tag 0x0 [ 164.949236][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: unknown global tag 0xc [ 164.949259][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: item 0 1 1 12 parsing failed [ 164.955265][ T5793] aquacomputer_d5next 0003:0C70:F00D.0006: probe with driver aquacomputer_d5next failed with error -22 [ 165.110109][ T5793] usb 4-1: USB disconnect, device number 9 [ 165.347014][ T7961] loop0: detected capacity change from 0 to 128 [ 165.444109][ T7950] loop2: detected capacity change from 0 to 32768 [ 165.461458][ T7950] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.716 (7950) [ 165.485015][ T7950] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 165.485047][ T7950] BTRFS info (device loop2): using blake2b checksum algorithm [ 165.597518][ T7950] BTRFS info (device loop2): enabling ssd optimizations [ 165.597546][ T7950] BTRFS info (device loop2): turning on async discard [ 165.597562][ T7950] BTRFS info (device loop2): enabling free space tree [ 165.597579][ T7950] BTRFS info (device loop2): use zstd compression, level 3 [ 165.710957][ T7984] xt_hashlimit: size too large, truncated to 1048576 [ 165.784547][ T7986] xt_hashlimit: size too large, truncated to 1048576 [ 165.975331][ T7990] loop3: detected capacity change from 0 to 512 [ 165.987489][ T7990] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 166.060834][ T7990] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #17: comm syz.3.726: iget: immutable or append flags not allowed on symlinks [ 166.060869][ T7990] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 166.063623][ T7990] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.726: couldn't read orphan inode 17 (err -117) [ 166.063655][ T7990] loop3: lost filesystem error report for type 5 error -117 [ 166.073127][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.303689][ T5605] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 170.419945][ T7994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 194.422866][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422920][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.623854][ T4925] Bluetooth: hci4: command 0x0406 tx timeout [ 201.624705][ T4925] Bluetooth: hci1: command 0x0406 tx timeout [ 201.626413][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 201.626852][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 225.875086][ T4974] udevd[4974]: worker [5613] /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/net/usb0 is taking a long time [ 247.699678][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 255.871306][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.871404][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.302560][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.302621][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.304468][ T34] INFO: task kworker/u8:0:12 blocked in I/O wait for more than 143 seconds. [ 317.304734][ T34] Tainted: G L syzkaller #0 [ 317.304746][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.304756][ T34] task:kwor ** replaying previous printk message ** [ 317.304756][ T34] task:kworker/u8:0 state:D stack:21768 pid:12 tgid:12 ppid:2 task_flags:0x4248160 flags:0x00080000 [ 317.304806][ T34] Workqueue: writeback wb_workfn (flush-8:0) [ 317.304852][ T34] Call Trace: [ 317.304862][ T34] [ 317.304876][ T34] __schedule+0x17dd/0x5820 [ 317.304902][ T34] ? blk_mq_flush_plug_list+0x415/0x540 [ 317.304937][ T34] ? folios_put_refs+0x9f0/0xb30 [ 317.304963][ T34] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 317.304994][ T34] ? __blk_flush_plug+0x416/0x4d0 [ 317.305017][ T34] ? __pfx___schedule+0x10/0x10 [ 317.305048][ T34] ? schedule+0x90/0x2b0 [ 317.305081][ T34] schedule+0x164/0x2b0 [ 317.305106][ T34] io_schedule+0x7f/0xd0 [ 317.305130][ T34] rq_qos_wait+0x266/0x360 [ 317.305159][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 317.305180][ T34] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 317.305202][ T34] ? __pfx_rq_qos_wait+0x10/0x10 [ 317.305227][ T34] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 317.305254][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 317.305290][ T34] wbt_wait+0x326/0x550 [ 317.305315][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 317.305336][ T34] ? __pfx_dd_bio_merge+0x10/0x10 [ 317.305366][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 317.305384][ T34] __rq_qos_throttle+0x6b/0xb0 [ 317.305409][ T34] blk_mq_submit_bio+0x1697/0x2c40 [ 317.305432][ T34] ? blk_mq_submit_bio+0x490/0x2c40 [ 317.305452][ T34] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 317.305464][ T34] ? blk_cgroup_bio_start+0x5d7/0x670 [ 317.305481][ T34] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 317.305497][ T34] ? __submit_bio+0x7e/0x340 [ 317.305511][ T34] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 317.305527][ T34] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 317.305550][ T34] ext4_io_submit+0x11b/0x190 [ 317.305568][ T34] ext4_do_writepages+0xc24/0x44a0 [ 317.305594][ T34] ? kfree+0x1c5/0x650 [ 317.305603][ T34] ? ieee80211_inform_bss+0xc59/0x1150 [ 317.305625][ T34] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 317.305637][ T34] ? __pfx_ext4_do_writepages+0x10/0x10 [ 317.305649][ T34] ? __lock_acquire+0x747/0x2de0 [ 317.305664][ T34] ? __lock_acquire+0x747/0x2de0 [ 317.305679][ T34] ? __lock_acquire+0x747/0x2de0 [ 317.305695][ T34] ? lock_acquire+0x115/0x350 [ 317.305717][ T34] ext4_writepages+0x1fe/0x4e0 [ 317.305735][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 317.305757][ T34] ? unwind_next_frame+0x8f/0x2550 [ 317.305772][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 317.305789][ T34] do_writepages+0x338/0x560 [ 317.305809][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 317.305822][ T34] ? writeback_sb_inodes+0x450/0x1af0 [ 317.305836][ T34] __writeback_single_inode+0x136/0x1220 [ 317.305849][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 317.305866][ T34] writeback_sb_inodes+0x9de/0x1af0 [ 317.305878][ T34] ? __lock_acquire+0x747/0x2de0 [ 317.305919][ T34] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 317.305949][ T34] ? __pfx_down_read_trylock+0x10/0x10 [ 317.305972][ T34] __writeback_inodes_wb+0x114/0x240 [ 317.305988][ T34] wb_writeback+0x42f/0xad0 [ 317.305999][ T34] ? queue_io+0x2b1/0x470 [ 317.306013][ T34] ? __pfx_wb_writeback+0x10/0x10 [ 317.306022][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.306050][ T34] wb_workfn+0xc92/0x10f0 [ 317.306091][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 317.306118][ T34] ? lock_acquire+0x115/0x350 [ 317.306134][ T34] ? rcu_is_watching+0x16/0xb0 [ 317.306149][ T34] ? process_scheduled_works+0x97a/0x1630 [ 317.306164][ T34] process_scheduled_works+0xc3d/0x1630 [ 317.306194][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.306212][ T34] ? assign_work+0x3cf/0x5d0 [ 317.306228][ T34] worker_thread+0xa47/0xfb0 [ 317.306256][ T34] kthread+0x38b/0x480 [ 317.306268][ T34] ? __pfx_worker_thread+0x10/0x10 [ 317.306281][ T34] ? __pfx_kthread+0x10/0x10 [ 317.306292][ T34] ret_from_fork+0x514/0xb70 [ 317.306305][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 317.306315][ T34] ? __switch_to+0xc78/0x1410 [ 317.306332][ T34] ? __pfx_kthread+0x10/0x10 [ 317.306344][ T34] ret_from_fork_asm+0x1a/0x30 [ 317.306363][ T34] [ 317.306434][ T34] INFO: task jbd2/sda1-8:4937 blocked in I/O wait for more than 143 seconds. [ 317.306444][ T34] Tainted: G L syzkaller #0 [ 317.306449][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.306454][ T34] task:jbd2/sda1-8 state:D stack:25288 pid:4937 tgid:4937 ppid:2 task_flags:0x240040 flags:0x00080000 [ 317.306483][ T34] Call Trace: [ 317.306486][ T34] [ 317.306493][ T34] __schedule+0x17dd/0x5820 [ 317.306513][ T34] ? percpu_ref_put_many+0x18e/0x240 [ 317.306529][ T34] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 317.306544][ T34] ? __pfx___schedule+0x10/0x10 [ 317.306562][ T34] ? schedule+0x90/0x2b0 [ 317.306578][ T34] schedule+0x164/0x2b0 [ 317.306591][ T34] io_schedule+0x7f/0xd0 [ 317.306604][ T34] bit_wait_io+0x13/0x110 [ 317.306618][ T34] __wait_on_bit+0xac/0x300 [ 317.306631][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.306646][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.306659][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.306672][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.306686][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.306702][ T34] ? __wait_on_buffer+0xe/0x80 [ 317.306720][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 317.306735][ T34] ? trace_hrtimer_start+0x82/0x200 [ 317.306765][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 317.306784][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.306812][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 317.306825][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.306837][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 317.306852][ T34] kjournald2+0x3bc/0x740 [ 317.306876][ T34] ? __pfx_kjournald2+0x10/0x10 [ 317.306891][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 317.306906][ T34] ? __kthread_parkme+0x71/0x1f0 [ 317.306922][ T34] ? __kthread_parkme+0x199/0x1f0 [ 317.306939][ T34] kthread+0x38b/0x480 [ 317.306950][ T34] ? __pfx_kjournald2+0x10/0x10 [ 317.306963][ T34] ? __pfx_kthread+0x10/0x10 [ 317.306975][ T34] ret_from_fork+0x514/0xb70 [ 317.306987][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 317.306998][ T34] ? __switch_to+0xc78/0x1410 [ 317.307014][ T34] ? __pfx_kthread+0x10/0x10 [ 317.307025][ T34] ret_from_fork_asm+0x1a/0x30 [ 317.307044][ T34] [ 317.307054][ T34] INFO: task syz-executor:5592 blocked in I/O wait for more than 143 seconds. [ 317.307069][ T34] Tainted: G L syzkaller #0 [ 317.307074][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.307079][ T34] task:syz-executor state:D stack:22312 pid:5592 tgid:5592 ppid:5591 task_flags:0x440100 flags:0x00080000 [ 317.307104][ T34] Call Trace: [ 317.307108][ T34] [ 317.307114][ T34] __schedule+0x17dd/0x5820 [ 317.307133][ T34] ? lock_acquire+0x115/0x350 [ 317.307151][ T34] ? __pfx___schedule+0x10/0x10 [ 317.307168][ T34] ? schedule+0x90/0x2b0 [ 317.307181][ T34] schedule+0x164/0x2b0 [ 317.307194][ T34] io_schedule+0x7f/0xd0 [ 317.307207][ T34] bit_wait_io+0x13/0x110 [ 317.307221][ T34] __wait_on_bit+0xac/0x300 [ 317.307233][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.307248][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.307261][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.307274][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.307288][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.307308][ T34] do_get_write_access+0x658/0x10c0 [ 317.307329][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 317.307343][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 317.307361][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 317.307374][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 317.307384][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 317.307399][ T34] ext4_reserve_inode_write+0x294/0x360 [ 317.307418][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 317.307435][ T34] ext4_dirty_inode+0xd0/0x110 [ 317.307449][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 317.307462][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 317.307480][ T34] file_update_time_flags+0x399/0x440 [ 317.307497][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 317.307519][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 317.307532][ T34] ? __lock_acquire+0x747/0x2de0 [ 317.307548][ T34] do_page_mkwrite+0x147/0x310 [ 317.307562][ T34] do_wp_page+0x1a85/0x4b60 [ 317.307589][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 317.307601][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.307617][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.307638][ T34] handle_mm_fault+0x15c1/0x3540 [ 317.307656][ T34] ? handle_mm_fault+0xee/0x3540 [ 317.307677][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 317.307690][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 317.307704][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 317.307730][ T34] do_user_addr_fault+0xb35/0x1480 [ 317.307749][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 317.307761][ T34] exc_page_fault+0x6a/0xc0 [ 317.307775][ T34] asm_exc_page_fault+0x26/0x30 [ 317.307786][ T34] RIP: 0033:0x7fdf3dc7dae2 [ 317.307803][ T34] RSP: 002b:00007fffda85e000 EFLAGS: 00010202 [ 317.307812][ T34] RAX: 00007fdf3bc44000 RBX: 0000555561a515c0 RCX: 0000000000000002 [ 317.307819][ T34] RDX: 0000000000001a7b RSI: 0000555561a496c8 RDI: 0000000000000004 [ 317.307826][ T34] RBP: 00007fffda85e500 R08: 0000555561a497e8 R09: 00000000000000a5 [ 317.307833][ T34] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffda85e340 [ 317.307840][ T34] R13: 00007fffda85e130 R14: 585858582e7a7973 R15: 00007fffda85e080 [ 317.307857][ T34] [ 317.307888][ T34] INFO: task syz.3.726:7989 blocked in I/O wait for more than 143 seconds. [ 317.307897][ T34] Tainted: G L syzkaller #0 [ 317.307902][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.307907][ T34] task:syz.3.726 state:D stack:24552 pid:7989 tgid:7989 ppid:5616 task_flags:0x440040 flags:0x00080002 [ 317.307932][ T34] Call Trace: [ 317.307936][ T34] [ 317.307942][ T34] __schedule+0x17dd/0x5820 [ 317.307961][ T34] ? __lock_acquire+0x747/0x2de0 [ 317.307979][ T34] ? __pfx___schedule+0x10/0x10 [ 317.307996][ T34] ? schedule+0x90/0x2b0 [ 317.308010][ T34] schedule+0x164/0x2b0 [ 317.308022][ T34] io_schedule+0x7f/0xd0 [ 317.308035][ T34] bit_wait_io+0x13/0x110 [ 317.308049][ T34] __wait_on_bit+0xac/0x300 [ 317.308061][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.308081][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.308094][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.308107][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.308122][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.308141][ T34] do_get_write_access+0x658/0x10c0 [ 317.308162][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 317.308175][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 317.308192][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 317.308205][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 317.308215][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 317.308230][ T34] ext4_reserve_inode_write+0x294/0x360 [ 317.308249][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 317.308265][ T34] ext4_dirty_inode+0xd0/0x110 [ 317.308279][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 317.308293][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 317.308310][ T34] file_update_time_flags+0x399/0x440 [ 317.308326][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 317.308345][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 317.308360][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 317.308380][ T34] do_page_mkwrite+0x147/0x310 [ 317.308393][ T34] do_pte_missing+0x70f/0x3570 [ 317.308409][ T34] ? handle_mm_fault+0xee/0x3540 [ 317.308425][ T34] handle_mm_fault+0x1a2a/0x3540 [ 317.308443][ T34] ? handle_mm_fault+0xee/0x3540 [ 317.308464][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 317.308477][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 317.308498][ T34] ? sched_clock_cpu+0x74/0x440 [ 317.308514][ T34] do_user_addr_fault+0xb35/0x1480 [ 317.308532][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 317.308544][ T34] exc_page_fault+0x6a/0xc0 [ 317.308558][ T34] asm_exc_page_fault+0x26/0x30 [ 317.308570][ T34] RIP: 0033:0x7f5a71874332 [ 317.308579][ T34] RSP: 002b:00007ffd9f10c1f0 EFLAGS: 00010202 [ 317.308587][ T34] RAX: 0000000000010008 RBX: 00007f5a72755720 RCX: 0000000000000000 [ 317.308594][ T34] RDX: 0000001b33214000 RSI: 0000000000000008 RDI: 00007f5a72755720 [ 317.308601][ T34] RBP: 00000000000007b5 R08: 00007f5a71c10000 R09: 00007f5a71c26038 [ 317.308608][ T34] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8bf1b0be [ 317.308614][ T34] R13: 00007f5a71c26038 R14: 00000000000001b5 R15: ffffffffffff0000 [ 317.308623][ T34] ? mas_empty_area_rev+0x87e/0x1e60 [ 317.308642][ T34] [ 317.308647][ T34] INFO: task syz.0.728:7996 blocked in I/O wait for more than 143 seconds. [ 317.308655][ T34] Tainted: G L syzkaller #0 [ 317.308661][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.308665][ T34] task:syz.0.728 state:D stack:26936 pid:7996 tgid:7996 ppid:5604 task_flags:0x440040 flags:0x00080002 [ 317.308692][ T34] Call Trace: [ 317.308695][ T34] [ 317.308701][ T34] __schedule+0x17dd/0x5820 [ 317.308727][ T34] ? __pfx___schedule+0x10/0x10 [ 317.308745][ T34] ? schedule+0x90/0x2b0 [ 317.308758][ T34] schedule+0x164/0x2b0 [ 317.308771][ T34] io_schedule+0x7f/0xd0 [ 317.308784][ T34] bit_wait_io+0x13/0x110 [ 317.308798][ T34] __wait_on_bit+0xac/0x300 [ 317.308810][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.308825][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.308839][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.308851][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.308865][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.308885][ T34] do_get_write_access+0x658/0x10c0 [ 317.308906][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 317.308919][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 317.308936][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 317.308955][ T34] ext4_reserve_inode_write+0x294/0x360 [ 317.308994][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 317.309011][ T34] ext4_dirty_inode+0xd0/0x110 [ 317.309025][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 317.309039][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 317.309053][ T34] ? mnt_get_write_access+0x216/0x280 [ 317.309072][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.309085][ T34] touch_atime+0x568/0x670 [ 317.309098][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.309112][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 317.309127][ T34] mmap_region+0xef9/0x2840 [ 317.309142][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.309158][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.309175][ T34] ? lock_acquire+0x115/0x350 [ 317.309187][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.309202][ T34] ? __pfx_mmap_region+0x10/0x10 [ 317.309216][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.309231][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.309243][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 317.309255][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.309282][ T34] ? lock_acquire+0x115/0x350 [ 317.309331][ T34] ? mt_find+0x186/0x630 [ 317.309347][ T34] ? mt_find+0x5ff/0x630 [ 317.309363][ T34] ? mt_find+0x186/0x630 [ 317.309377][ T34] ? __pfx_mt_find+0x10/0x10 [ 317.309394][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 317.309408][ T34] ? security_mmap_addr+0x71/0x240 [ 317.309419][ T34] ? shmem_mapping+0xd/0x50 [ 317.309428][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 317.309440][ T34] do_mmap+0xe0a/0x1300 [ 317.309459][ T34] ? __pfx_do_mmap+0x10/0x10 [ 317.309478][ T34] ? vm_mmap_pgoff+0x1ed/0x520 [ 317.315938][ T34] ? down_write_killable+0x179/0x230 [ 317.315974][ T34] ? lock_acquire+0x115/0x350 [ 317.315998][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 317.316025][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 317.316059][ T34] vm_mmap_pgoff+0x27a/0x520 [ 317.316097][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 317.316119][ T34] ? __fget_files+0x2a/0x420 [ 317.316144][ T34] ? __fget_files+0x3a2/0x420 [ 317.316164][ T34] ? __fget_files+0x2a/0x420 [ 317.316187][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 317.316219][ T34] do_syscall_64+0x166/0x520 [ 317.316241][ T34] ? trace_irq_disable+0x3b/0x140 [ 317.316264][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.316283][ T34] ? clear_bhb_loop+0x70/0xc0 [ 317.316306][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.316326][ T34] RIP: 0033:0x7f8d6459f2c2 [ 317.316342][ T34] RSP: 002b:00007ffd9ad04478 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 317.316363][ T34] RAX: ffffffffffffffda RBX: 0000001b32964000 RCX: 00007f8d6459f2c2 [ 317.316377][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32964000 [ 317.316389][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 317.316401][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000094 [ 317.316413][ T34] R13: 00000000000927c0 R14: 00000000000288b4 R15: 00007ffd9ad04750 [ 317.316445][ T34] [ 317.316454][ T34] INFO: task syz.4.729:7997 blocked in I/O wait for more than 143 seconds. [ 317.316471][ T34] Tainted: G L syzkaller #0 [ 317.316482][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.316491][ T34] task:syz.4.729 state:D stack:26936 pid:7997 tgid:7997 ppid:5602 task_flags:0x440040 flags:0x00080002 [ 317.316538][ T34] Call Trace: [ 317.316544][ T34] [ 317.316556][ T34] __schedule+0x17dd/0x5820 [ 317.316599][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 317.316629][ T34] ? __pfx___schedule+0x10/0x10 [ 317.316661][ T34] ? schedule+0x90/0x2b0 [ 317.316685][ T34] schedule+0x164/0x2b0 [ 317.316709][ T34] io_schedule+0x7f/0xd0 [ 317.316732][ T34] bit_wait_io+0x13/0x110 [ 317.316758][ T34] __wait_on_bit+0xac/0x300 [ 317.316780][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.316806][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.316831][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.316853][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.316880][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.316915][ T34] do_get_write_access+0x658/0x10c0 [ 317.316954][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 317.316979][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 317.317011][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 317.317045][ T34] ext4_reserve_inode_write+0x294/0x360 [ 317.317089][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 317.317120][ T34] ext4_dirty_inode+0xd0/0x110 [ 317.317145][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 317.317169][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 317.317194][ T34] ? mnt_get_write_access+0x216/0x280 [ 317.317220][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.317262][ T34] touch_atime+0x568/0x670 [ 317.317284][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.317312][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 317.317354][ T34] mmap_region+0xef9/0x2840 [ 317.342187][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.342226][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.342257][ T34] ? lock_acquire+0x115/0x350 [ 317.342281][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.342306][ T34] ? __pfx_mmap_region+0x10/0x10 [ 317.342332][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.342358][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.342381][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 317.342403][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.342455][ T34] ? lock_acquire+0x115/0x350 [ 317.342547][ T34] ? mt_find+0x186/0x630 [ 317.342585][ T34] ? mt_find+0x5ff/0x630 [ 317.342612][ T34] ? mt_find+0x186/0x630 [ 317.342637][ T34] ? __pfx_mt_find+0x10/0x10 [ 317.342669][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 317.342691][ T34] ? security_mmap_addr+0x71/0x240 [ 317.342712][ T34] ? shmem_mapping+0xd/0x50 [ 317.342729][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 317.342750][ T34] do_mmap+0xe0a/0x1300 [ 317.342783][ T34] ? __pfx_do_mmap+0x10/0x10 [ 317.342818][ T34] ? vm_mmap_pgoff+0x1ed/0x520 [ 317.342859][ T34] ? down_write_killable+0x179/0x230 [ 317.342885][ T34] ? lock_acquire+0x115/0x350 [ 317.342905][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 317.342931][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 317.342964][ T34] vm_mmap_pgoff+0x27a/0x520 [ 317.342992][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 317.343014][ T34] ? __fget_files+0x2a/0x420 [ 317.343039][ T34] ? __fget_files+0x3a2/0x420 [ 317.343057][ T34] ? __fget_files+0x2a/0x420 [ 317.343081][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 317.343112][ T34] do_syscall_64+0x166/0x520 [ 317.343134][ T34] ? trace_irq_disable+0x3b/0x140 [ 317.343157][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.343176][ T34] ? clear_bhb_loop+0x70/0xc0 [ 317.343199][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.343216][ T34] RIP: 0033:0x7f6982f9f2c2 [ 317.343233][ T34] RSP: 002b:00007ffd53880b38 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 317.343254][ T34] RAX: ffffffffffffffda RBX: 0000001b32d64000 RCX: 00007f6982f9f2c2 [ 317.343267][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32d64000 [ 317.343279][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 317.343291][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000085 [ 317.343303][ T34] R13: 00000000000927c0 R14: 00000000000288dd R15: 00007ffd53880e10 [ 317.343333][ T34] [ 317.343343][ T34] INFO: task syz.5.731:7998 blocked in I/O wait for more than 143 seconds. [ 317.343360][ T34] Tainted: G L syzkaller #0 [ 317.343370][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.343379][ T34] task:syz.5.731 state:D stack:26936 pid:7998 tgid:7998 ppid:6906 task_flags:0x440040 flags:0x00080002 [ 317.343429][ T34] Call Trace: [ 317.343436][ T34] [ 317.343447][ T34] __schedule+0x17dd/0x5820 [ 317.343498][ T34] ? __pfx___schedule+0x10/0x10 [ 317.343530][ T34] ? schedule+0x90/0x2b0 [ 317.343553][ T34] schedule+0x164/0x2b0 [ 317.343584][ T34] io_schedule+0x7f/0xd0 [ 317.343607][ T34] bit_wait_io+0x13/0x110 [ 317.343632][ T34] __wait_on_bit+0xac/0x300 [ 317.343654][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.343679][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.343704][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.343726][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.343752][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.343787][ T34] do_get_write_access+0x658/0x10c0 [ 317.343827][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 317.343851][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 317.343883][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 317.343923][ T34] ext4_reserve_inode_write+0x294/0x360 [ 317.343958][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 317.343989][ T34] ext4_dirty_inode+0xd0/0x110 [ 317.344014][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 317.344038][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 317.344063][ T34] ? mnt_get_write_access+0x216/0x280 [ 317.344087][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.344109][ T34] touch_atime+0x568/0x670 [ 317.344131][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.344158][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 317.344186][ T34] mmap_region+0xef9/0x2840 [ 317.344209][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.344237][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.344268][ T34] ? lock_acquire+0x115/0x350 [ 317.344290][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.344314][ T34] ? __pfx_mmap_region+0x10/0x10 [ 317.344339][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.344365][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.344388][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 317.344410][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.344460][ T34] ? lock_acquire+0x115/0x350 [ 317.344550][ T34] ? mt_find+0x186/0x630 [ 317.344585][ T34] ? mt_find+0x5ff/0x630 [ 317.344612][ T34] ? mt_find+0x186/0x630 [ 317.344636][ T34] ? __pfx_mt_find+0x10/0x10 [ 317.344667][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 317.344689][ T34] ? security_mmap_addr+0x71/0x240 [ 317.344709][ T34] ? shmem_mapping+0xd/0x50 [ 317.344725][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 317.344746][ T34] do_mmap+0xe0a/0x1300 [ 317.344778][ T34] ? __pfx_do_mmap+0x10/0x10 [ 317.344813][ T34] ? vm_mmap_pgoff+0x1ed/0x520 [ 317.344831][ T34] ? down_write_killable+0x179/0x230 [ 317.344856][ T34] ? lock_acquire+0x115/0x350 [ 317.344877][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 317.344902][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 317.344934][ T34] vm_mmap_pgoff+0x27a/0x520 [ 317.344961][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 317.344991][ T34] ? __fget_files+0x2a/0x420 [ 317.345015][ T34] ? __fget_files+0x3a2/0x420 [ 317.345034][ T34] ? __fget_files+0x2a/0x420 [ 317.345058][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 317.345088][ T34] do_syscall_64+0x166/0x520 [ 317.345109][ T34] ? trace_irq_disable+0x3b/0x140 [ 317.345131][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.345150][ T34] ? clear_bhb_loop+0x70/0xc0 [ 317.345172][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.345190][ T34] RIP: 0033:0x7f6881d9f2c2 [ 317.345205][ T34] RSP: 002b:00007fff1dc25858 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 317.345223][ T34] RAX: ffffffffffffffda RBX: 0000001b32e64000 RCX: 00007f6881d9f2c2 [ 317.345237][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32e64000 [ 317.345250][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 317.345262][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000033 [ 317.345274][ T34] R13: 00000000000927c0 R14: 00000000000289a5 R15: 00007fff1dc25b30 [ 317.345303][ T34] [ 317.345311][ T34] INFO: task syz.2.730:7999 blocked in I/O wait for more than 143 seconds. [ 317.345327][ T34] Tainted: G L syzkaller #0 [ 317.345337][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.345346][ T34] task:syz.2.730 state:D stack:26936 pid:7999 tgid:7999 ppid:5605 task_flags:0x440040 flags:0x00080002 [ 317.345393][ T34] Call Trace: [ 317.345399][ T34] [ 317.345410][ T34] __schedule+0x17dd/0x5820 [ 317.345459][ T34] ? __pfx___schedule+0x10/0x10 [ 317.345490][ T34] ? schedule+0x90/0x2b0 [ 317.345513][ T34] schedule+0x164/0x2b0 [ 317.345536][ T34] io_schedule+0x7f/0xd0 [ 317.345559][ T34] bit_wait_io+0x13/0x110 [ 317.345589][ T34] __wait_on_bit+0xac/0x300 [ 317.345612][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.345636][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 317.345661][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 317.345683][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 317.345709][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 317.345744][ T34] do_get_write_access+0x658/0x10c0 [ 317.345782][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 317.345806][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 317.345837][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 317.345871][ T34] ext4_reserve_inode_write+0x294/0x360 [ 317.345904][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 317.345936][ T34] ext4_dirty_inode+0xd0/0x110 [ 317.345960][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 317.345983][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 317.346007][ T34] ? mnt_get_write_access+0x216/0x280 [ 317.346036][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.346059][ T34] touch_atime+0x568/0x670 [ 317.346079][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 317.346106][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 317.346133][ T34] mmap_region+0xef9/0x2840 [ 317.346160][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.346187][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 317.346217][ T34] ? lock_acquire+0x115/0x350 [ 317.346240][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.346264][ T34] ? __pfx_mmap_region+0x10/0x10 [ 317.346288][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.346315][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.346338][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 317.346360][ T34] ? __page_table_check_zero+0x6c/0x430 [ 317.346410][ T34] ? lock_acquire+0x115/0x350 [ 317.346511][ T34] ? mt_find+0x186/0x630 [ 317.346540][ T34] ? mt_find+0x5ff/0x630 [ 317.346574][ T34] ? mt_find+0x186/0x630 [ 317.346599][ T34] ? __pfx_mt_find+0x10/0x10 [ 317.346631][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 317.346651][ T34] ? security_mmap_addr+0x71/0x240 [ 317.346671][ T34] ? shmem_mapping+0xd/0x50 [ 317.346687][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 317.346709][ T34] do_mmap+0xe0a/0x1300 [ 317.346741][ T34] ? __pfx_do_mmap+0x10/0x10 [ 317.346777][ T34] ? vm_mmap_pgoff+0x1ed/0x520 [ 317.346795][ T34] ? down_write_killable+0x179/0x230 [ 317.346820][ T34] ? lock_acquire+0x115/0x350 [ 317.346840][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 317.346866][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 317.346899][ T34] vm_mmap_pgoff+0x27a/0x520 [ 317.346927][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 317.346949][ T34] ? __fget_files+0x2a/0x420 [ 317.346973][ T34] ? __fget_files+0x3a2/0x420 [ 317.346992][ T34] ? __fget_files+0x2a/0x420 [ 317.347016][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 317.347047][ T34] do_syscall_64+0x166/0x520 [ 317.347068][ T34] ? trace_irq_disable+0x3b/0x140 [ 317.347089][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.347108][ T34] ? clear_bhb_loop+0x70/0xc0 [ 317.347131][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.347149][ T34] RIP: 0033:0x7f148ad9f2c2 [ 317.347163][ T34] RSP: 002b:00007ffc63617468 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 317.347181][ T34] RAX: ffffffffffffffda RBX: 0000001b32b64000 RCX: 00007f148ad9f2c2 [ 317.347195][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32b64000 [ 317.347207][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 317.347219][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000009a [ 317.347231][ T34] R13: 00000000000927c0 R14: 0000000000028742 R15: 00007ffc63617740 [ 317.347261][ T34] [ 317.347284][ T34] [ 317.347284][ T34] Showing all locks held in the system: [ 317.347293][ T34] locks held by kworker/u8:0/12: 4, on CPU#0: [ 317.347307][ T34] #0: ffff888021adc948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 317.347361][ T34] #1: ffffc90000117c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 317.347410][ T34] #2: ffff8880375320e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 317.347459][ T34] #3: ffff8880375cccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 317.347512][ T34] locks held by pr/ttyS0/33: 2, last CPU#1: [ 317.347525][ T34] #0: ffffffff8fc33f58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 317.347579][ T34] #1: ffffffff9bda46b8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 317.347629][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 317.347641][ T34] #0: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 317.347722][ T34] locks held by getty/5362: 2, on CPU#1: [ 317.347735][ T34] #0: ffff888036d140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.347784][ T34] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 317.347823][ T34] locks held by syz-executor/5592: 3, on CPU#0: [ 317.347836][ T34] #0: ffff88807e28a6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 317.347879][ T34] #1: ffff888037532558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 317.347933][ T34] #2: ffff888037530950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 317.347977][ T34] locks held by udevd/5613: 1, on CPU#1: [ 317.347997][ T34] #0: ffff8880351d56a8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa5c/0x13b0 [ 317.348063][ T34] locks held by syz.3.726/7989: 3, on CPU#1: [ 317.348075][ T34] #0: ffff888076550bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 317.348123][ T34] #1: ffff888037532558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 317.348172][ T34] #2: ffff888037530950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 317.348214][ T34] locks held by syz.0.728/7996: 3, on CPU#0: [ 317.348227][ T34] #0: ffff888078519bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 317.348269][ T34] #1: ffff888037532460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 317.348317][ T34] #2: ffff888037530950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 317.348360][ T34] locks held by syz.4.729/7997: 3, on CPU#1: [ 317.348373][ T34] #0: ffff88807ca85900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 317.348414][ T34] #1: ffff888037532460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 317.348462][ T34] #2: ffff888037530950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 317.348504][ T34] locks held by syz.5.731/7998: 3, on CPU#0: [ 317.348516][ T34] #0: ffff88807851c080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 317.348558][ T34] #1: ffff888037532460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 317.348617][ T34] #2: ffff888037530950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 317.348658][ T34] locks held by syz.2.730/7999: 3, on CPU#1: [ 317.348670][ T34] #0: ffff88807851ccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 317.348712][ T34] #1: ffff888037532460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 317.348760][ T34] #2: ffff888037530950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 317.348803][ T34] [ 317.348807][ T34] ============================================= [ 317.348807][ T34] [ 317.348824][ T34] NMI backtrace for cpu 0 [ 317.348847][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 317.348872][ T34] Tainted: [L]=SOFTLOCKUP [ 317.348879][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 317.348889][ T34] Call Trace: [ 317.348896][ T34] [ 317.348904][ T34] dump_stack_lvl+0xe8/0x150 [ 317.348931][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 317.348950][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.348971][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 317.349000][ T34] sys_info+0x135/0x170 [ 317.349024][ T34] watchdog+0x1073/0x10f0 [ 317.349053][ T34] ? watchdog+0x209/0x10f0 [ 317.349080][ T34] kthread+0x38b/0x480 [ 317.349099][ T34] ? __pfx_watchdog+0x10/0x10 [ 317.349118][ T34] ? __pfx_kthread+0x10/0x10 [ 317.349138][ T34] ret_from_fork+0x514/0xb70 [ 317.349160][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 317.349178][ T34] ? __switch_to+0xc78/0x1410 [ 317.349205][ T34] ? __pfx_kthread+0x10/0x10 [ 317.349225][ T34] ret_from_fork_asm+0x1a/0x30 [ 317.349258][ T34] [ 317.349264][ T34] Sending NMI from CPU 0 to CPUs 1: [ 317.349346][ C1] NMI backtrace for cpu 1 [ 317.349360][ C1] CPU: 1 UID: 0 PID: 33 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.349384][ C1] Tainted: [L]=SOFTLOCKUP [ 317.349391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 317.349400][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 317.349421][ C1] Code: e8 1e 00 45 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff c9 bb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 3c 79 06 cc 44 89 f9 80 e1 07 [ 317.349437][ C1] RSP: 0018:ffffc90000a978b8 EFLAGS: 00000002 [ 317.349452][ C1] RAX: 1ffffffff37b4800 RBX: 00000000000003fd RCX: 0000000000000000 [ 317.349464][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 317.349475][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 317.349486][ C1] R10: dffffc0000000000 R11: ffffffff85840c00 R12: dffffc0000000000 [ 317.349499][ C1] R13: 0000000000000000 R14: ffffffff9bda46e0 R15: 0000000000000000 [ 317.349509][ C1] FS: 0000000000000000(0000) GS:ffff888123b6a000(0000) knlGS:0000000000000000 [ 317.349523][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.349534][ C1] CR2: 00005619f1824660 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 317.349550][ C1] Call Trace: [ 317.349556][ C1] [ 317.349564][ C1] wait_for_lsr+0x184/0x2f0 [ 317.349594][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 317.349622][ C1] serial8250_console_write+0xa7e/0x1200 [ 317.349639][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 317.349665][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 317.349681][ C1] ? __schedule+0x17f3/0x5820 [ 317.349708][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 317.349738][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 317.349762][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 317.349791][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 317.349812][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 317.349835][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 317.349854][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 317.349878][ C1] ? __kthread_parkme+0x71/0x1f0 [ 317.349902][ C1] ? __kthread_parkme+0x199/0x1f0 [ 317.349929][ C1] kthread+0x38b/0x480 [ 317.349946][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 317.349964][ C1] ? __pfx_kthread+0x10/0x10 [ 317.349982][ C1] ret_from_fork+0x514/0xb70 [ 317.350001][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 317.350017][ C1] ? __switch_to+0xc78/0x1410 [ 317.350041][ C1] ? __pfx_kthread+0x10/0x10 [ 317.350065][ C1] ret_from_fork_asm+0x1a/0x30 [ 317.350090][ C1] [ 317.350955][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 320.980528][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 320.991307][ T34] Tainted: [L]=SOFTLOCKUP [ 320.995631][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.005689][ T34] Call Trace: [ 321.008977][ T34] [ 321.011903][ T34] vpanic+0x26f/0x710 [ 321.015893][ T34] panic+0xc5/0xd0 [ 321.019615][ T34] ? __pfx_panic+0x10/0x10 [ 321.024033][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 321.029489][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 321.034865][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 321.041015][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 321.047169][ T34] watchdog+0x10e7/0x10f0 [ 321.051510][ T34] ? watchdog+0x209/0x10f0 [ 321.055929][ T34] kthread+0x38b/0x480 [ 321.059998][ T34] ? __pfx_watchdog+0x10/0x10 [ 321.064681][ T34] ? __pfx_kthread+0x10/0x10 [ 321.069276][ T34] ret_from_fork+0x514/0xb70 [ 321.073866][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 321.078972][ T34] ? __switch_to+0xc78/0x1410 [ 321.083654][ T34] ? __pfx_kthread+0x10/0x10 [ 321.088248][ T34] ret_from_fork_asm+0x1a/0x30 [ 321.093015][ T34] [ 321.096372][ T34] Kernel Offset: disabled [ 321.100698][ T34] Rebooting in 86400 seconds..