last executing test programs: 1m21.450243174s ago: executing program 0 (id=131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m21.287976694s ago: executing program 0 (id=133): socket$packet(0x11, 0x3, 0x300) r0 = io_uring_setup(0x7801, &(0x7f0000000040)={0x0, 0xbb0e, 0x800, 0x1, 0x81}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000800)=[{0x4, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) 1m21.076830762s ago: executing program 0 (id=136): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r2, 0xccc5, 0x1}, &(0x7f0000000080)=0xc) 1m20.915445331s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 1m20.573636113s ago: executing program 0 (id=142): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) 1m19.950056617s ago: executing program 0 (id=150): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file3\x00', 0x80d808, 0x0, 0x7e, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) lstat(&(0x7f0000000480)='./file3\x00', 0x0) 1m19.37850236s ago: executing program 32 (id=150): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file3\x00', 0x80d808, 0x0, 0x7e, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) lstat(&(0x7f0000000480)='./file3\x00', 0x0) 31.870228988s ago: executing program 1 (id=527): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2c1, &(0x7f0000000740)="$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") setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x4006, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, 0x0, 0x0, 0x16, 0x0, "024c08f6beaae211e04128017b8f9720fc434ce01e58499892b786263c721a4dd042fac0c78d10b9206d1cf9577ea4d8b709afd0a6d76f775344852e83a4fab66ac4883fbf7d17e0d8245a4aa8714ae3"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8042, 0x90) 31.598065137s ago: executing program 1 (id=531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) 31.150313499s ago: executing program 1 (id=536): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977720a89"], 0xa) 30.849231733s ago: executing program 1 (id=543): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 30.341288616s ago: executing program 1 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='devices\n\x00', 0x8) 28.597242222s ago: executing program 1 (id=561): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) 28.067082138s ago: executing program 33 (id=561): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) 4.012058062s ago: executing program 5 (id=741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r0, 0x1) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0) 3.922414048s ago: executing program 5 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/r!', 0x15) 3.807263369s ago: executing program 5 (id=743): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0x100}, 0x3c, [0x8000, 0x6, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x56, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x8, 0x7, 0x81, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x80004c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x80007, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x4, 0x9, 0x5, 0x2, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2, 0x9, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0x2, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x2006, 0x80a2eb, 0x1, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1fd, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x0, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x8, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x4, 0x30b1d68f, 0xa1f, 0xcb, 0xba, 0x1, 0x6c1b, 0x0, 0x1, 0x5, 0xb1e, 0xd7, 0x200, 0xe, 0xa77e]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.651287407s ago: executing program 5 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/serio/drivers/atkbd/bind_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='me', 0x2) 3.456261423s ago: executing program 5 (id=746): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}, {@barrier}]}, 0xfe, 0x559a, &(0x7f00000144c0)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") open(0x0, 0x14927e, 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 1.714454619s ago: executing program 2 (id=759): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 1.491842359s ago: executing program 2 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}}, 0x0) 1.274490018s ago: executing program 2 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip', 0x29) 1.128731875s ago: executing program 4 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) 1.040906771s ago: executing program 2 (id=770): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000000000600000000", @ANYRES32=0x0, @ANYBLOB="b0d40100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.040825641s ago: executing program 3 (id=771): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 873.095701ms ago: executing program 4 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x100, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x7ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) 872.983781ms ago: executing program 3 (id=773): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 836.272688ms ago: executing program 2 (id=774): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4d3, &(0x7f0000000a40)="$eJzs20tsW0UXwPFzfG33xs334T5IW1S1lkAitLRN4pK2ChLqgwikPiBtQFQ8FGqnmDpxFaeQVC3NEtix6JIlWxasEFtUiSVigYJQF0ilGzZeEXZBc992nNghjp00/1/VzL3jY2dmjq9n5soRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgcubV03392ulWAACAdrp4eaQvy/wPAMCWcoX9PwAAwFaiYsnvonLkRkUvOOcu+3xh8tbM6Lnh+k/rUlGJieXEm/92/0D2+EuDJ0765crPb7V9cunyldOZs6WJm1P5cjmfy4xOFq6VcvmmX2Gtz691yBmAzHa5lRsfL2cGjmarHp5JP962vSc9NPje2aQfO3puePhyJCae+M+/fYnlVvhJseQFUfn4+2/1oojEZO1j0eC901LW0qoupxOHnE6Mnht2OlIsjE1Omwc15kXFqsck6Y9RG3KxJjER0y5NtmbPlhBLfhCVM8cqeskbT+eVDzs3hptqTyfEzdZVRHplE+RsA9smlnwgKg+OpeUNb1yd/CdF7nS6cVh3ce/6L2lF33Q+D8z1ZD42z7+VeX1yvBSJ1Zh3RW2i+aGOrvV76eTSqg3+2WSLJZecK76iI3Kw081Bm3WJJROikvzqE2ddIc669KmhEwcOnoquMPY0eB0Te9S7uJqZkxPe0kFj5l/r+4Xm2GrJn6Ky8JvtnPf6c4DI3OJKT/yjLc3DelNLiqLyz92KqrMvtYN9qRXZ3wc2+9y/vu3vss+Wbs5OFa5/NF338ZR9+sPy9NTYtfoPu3vXqj1to31srdjqtmQpdXd8n39aCZ7n7QH+556FrfnmTvhe6K0pfdH7Gs0cN72LXcU6yrRJ1ZJHojL+/l53npHUqsdmKzD5HxaVcuVn9TPt5T/unkXy/3I4frZWlwEnt/9372v5a4l9V3cvV78e+TdtMvl/R1TO/L3Xu6fh5r/2fpGJ6xGVd+/v9+JiSRMX97vjvuJ4oZjvM7GLorLzJz9WnNiUF7srjO03sWVR+eJBdex2L3Z3GDtgYudF5eGv9WOfDmOzJnbW5Othxo9NmdgDXmxPGHv0WqmYazSsJv8DovL2vdfU7/Oy+Y9c/3M1ZWBJzlc+blX+05G6OS+vV738xxvk/0tRmf1rv99vZ+z9t9UO52eYf7NW/u5+day/odwZxvY3261OM/nfISqPX5kP+uz1zTsNMxTN/zPx6jIY1w7lf0ekLu21q85uHDXKs7dvjBWL+SkO2n6wraZmYdHVql9heznufE+XHNgboxkcLH/Q4Q8mtIWZ/0fMrD5oqb+O8eb/bvcsXDEtfBbO/0M1ZaBD8//OSN2Qt2pJxEXs6YmbiT0idnn29pHCxNj1/PX8ZPb4YN/AqeN92ZOJpL+4C4+aHrsngcn/YVG5++MvwT6mev1Xf/2fqikDHcr/rmifqtY1TQ/FlmTy3y0qg4/mg/3mSut/f//f+2x1GVx/Hcr/7khd2mtX9yrHAgAAAAAAAAAAAAAAAAA2k5Ra8pyozIy8qP7fEDXz/b9cTRlo/fe/3K+xN/j+V0+kLtemv2tY1UADAAAAAAAAAAC0SUws+VpUnpeK3jMV3SIXoiWeaP8GAAD//65ORoc=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 759.752211ms ago: executing program 4 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x50}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 739.923815ms ago: executing program 3 (id=776): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001400)=""/18, 0x1c) 563.786207ms ago: executing program 4 (id=777): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61f0, 0x0) 545.217621ms ago: executing program 3 (id=778): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x5, 0x0, 0x8000000, 0x0, 0x6}) 383.68823ms ago: executing program 4 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 335.618699ms ago: executing program 3 (id=780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 238.373886ms ago: executing program 5 (id=781): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x90) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x80000002, 0x1, 0x2, 0xfffffff5, 0x50, "c7eded010000000000000000804000"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x3) 85.569424ms ago: executing program 4 (id=782): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143943, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) 85.494464ms ago: executing program 2 (id=783): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x100000000000030a, 0x0, 0x0, 0x80}, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 3 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) write(r0, &(0x7f0000000d40)="6018687f", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 83.034553][ T5764] cgroup: Unknown subsys name 'net' [ 83.167542][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.836218][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.537914][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.538209][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.553754][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.554758][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.569301][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.569632][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.592292][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.605136][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.613805][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.614702][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.621815][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.633976][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.640967][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.649810][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.657221][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.667520][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.670309][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.683345][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.691647][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.699413][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.710050][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.725237][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.739052][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.742336][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.285716][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.456769][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.572395][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.621526][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.629613][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.636980][ T5781] bridge_slave_0: entered allmulticast mode [ 87.645655][ T5781] bridge_slave_0: entered promiscuous mode [ 87.660620][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.678754][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.685996][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.693513][ T5781] bridge_slave_1: entered allmulticast mode [ 87.701117][ T5781] bridge_slave_1: entered promiscuous mode [ 87.826671][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.836925][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.844716][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.852404][ T5780] bridge_slave_0: entered allmulticast mode [ 87.860961][ T5780] bridge_slave_0: entered promiscuous mode [ 87.874717][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.881932][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.889682][ T5780] bridge_slave_1: entered allmulticast mode [ 87.897174][ T5780] bridge_slave_1: entered promiscuous mode [ 87.917847][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.993988][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.001535][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.009054][ T5777] bridge_slave_0: entered allmulticast mode [ 88.016172][ T5777] bridge_slave_0: entered promiscuous mode [ 88.047866][ T5781] team0: Port device team_slave_0 added [ 88.056702][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.069224][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.076376][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.086055][ T5777] bridge_slave_1: entered allmulticast mode [ 88.093705][ T5777] bridge_slave_1: entered promiscuous mode [ 88.104144][ T5781] team0: Port device team_slave_1 added [ 88.110774][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.117930][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.125841][ T5775] bridge_slave_0: entered allmulticast mode [ 88.133381][ T5775] bridge_slave_0: entered promiscuous mode [ 88.143292][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.183953][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.194059][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.201324][ T5775] bridge_slave_1: entered allmulticast mode [ 88.208381][ T5775] bridge_slave_1: entered promiscuous mode [ 88.254267][ T5780] team0: Port device team_slave_0 added [ 88.285133][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.305823][ T5780] team0: Port device team_slave_1 added [ 88.312808][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.320413][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.346653][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.360728][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.367717][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.394288][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.408241][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.421450][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.433404][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.513735][ T5777] team0: Port device team_slave_0 added [ 88.521247][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.528228][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.554563][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.590616][ T5777] team0: Port device team_slave_1 added [ 88.597076][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.604335][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.630445][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.645851][ T5775] team0: Port device team_slave_0 added [ 88.663902][ T5775] team0: Port device team_slave_1 added [ 88.712833][ T5781] hsr_slave_0: entered promiscuous mode [ 88.719905][ T5781] hsr_slave_1: entered promiscuous mode [ 88.740717][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.747726][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.774385][ T5782] Bluetooth: hci1: command tx timeout [ 88.782227][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.794990][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.802496][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.829486][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.833390][ T5782] Bluetooth: hci2: command tx timeout [ 88.840688][ T5792] Bluetooth: hci0: command tx timeout [ 88.845869][ T5782] Bluetooth: hci3: command tx timeout [ 88.880227][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.887240][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.913586][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.935514][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.945927][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.975193][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.023274][ T5780] hsr_slave_0: entered promiscuous mode [ 89.029897][ T5780] hsr_slave_1: entered promiscuous mode [ 89.036219][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.044400][ T5780] Cannot create hsr debugfs directory [ 89.094193][ T5775] hsr_slave_0: entered promiscuous mode [ 89.101075][ T5775] hsr_slave_1: entered promiscuous mode [ 89.107259][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.115773][ T5775] Cannot create hsr debugfs directory [ 89.216683][ T5777] hsr_slave_0: entered promiscuous mode [ 89.223364][ T5777] hsr_slave_1: entered promiscuous mode [ 89.229821][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.237382][ T5777] Cannot create hsr debugfs directory [ 89.619297][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.634825][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.651464][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.675548][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.722268][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.743357][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.755721][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.772571][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.853801][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.866203][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.885766][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.897301][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.054085][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.065460][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.077514][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.088997][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.116319][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.168358][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.233513][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.241207][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.252625][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.259856][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.287968][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.352343][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.373328][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.390649][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.397855][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.435880][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.460243][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.470554][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.477682][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.521979][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.529257][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.563316][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.570564][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.604112][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.687965][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.695230][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.731601][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.738914][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.819622][ T5086] Bluetooth: hci1: command tx timeout [ 90.899018][ T5086] Bluetooth: hci3: command tx timeout [ 90.909314][ T5086] Bluetooth: hci0: command tx timeout [ 90.914782][ T5086] Bluetooth: hci2: command tx timeout [ 91.051531][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.216545][ T5775] veth0_vlan: entered promiscuous mode [ 91.250220][ T5775] veth1_vlan: entered promiscuous mode [ 91.314095][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.353263][ T5775] veth0_macvtap: entered promiscuous mode [ 91.404556][ T5775] veth1_macvtap: entered promiscuous mode [ 91.434517][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.487738][ T5780] veth0_vlan: entered promiscuous mode [ 91.502456][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.516154][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.554633][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564727][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.574191][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583474][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597404][ T5780] veth1_vlan: entered promiscuous mode [ 91.660079][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.679699][ T5781] veth0_vlan: entered promiscuous mode [ 91.754044][ T5781] veth1_vlan: entered promiscuous mode [ 91.815377][ T5777] veth0_vlan: entered promiscuous mode [ 91.825745][ T5780] veth0_macvtap: entered promiscuous mode [ 91.832335][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.848231][ T5777] veth1_vlan: entered promiscuous mode [ 91.856507][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.892769][ T5780] veth1_macvtap: entered promiscuous mode [ 91.912322][ T5781] veth0_macvtap: entered promiscuous mode [ 91.945613][ T5781] veth1_macvtap: entered promiscuous mode [ 91.976669][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.989452][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.006309][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.017547][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.030521][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.058188][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.069097][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.083887][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.095352][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.112114][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.132812][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.145193][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.164363][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.176093][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.187042][ T788] cfg80211: failed to load regulatory.db [ 92.192991][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205662][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.214539][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.228025][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.240191][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.250334][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.262232][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.274962][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.311228][ T5777] veth0_macvtap: entered promiscuous mode [ 92.326001][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.335879][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.347408][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.361077][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385087][ T5777] veth1_macvtap: entered promiscuous mode [ 92.472452][ T5848] Bluetooth: MGMT ver 1.22 [ 92.504152][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.516483][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.533495][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.544188][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.555414][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.566230][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.578164][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.589904][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.601176][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.611522][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.622187][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.632658][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.645442][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.657671][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.713102][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.727149][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.729961][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.756667][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.765921][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.774989][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.844969][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.854842][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.899011][ T5086] Bluetooth: hci1: command tx timeout [ 92.907000][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.942300][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.979632][ T5782] Bluetooth: hci3: command tx timeout [ 92.985217][ T5086] Bluetooth: hci2: command tx timeout [ 93.040053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.047972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.175833][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.203398][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.324515][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.347510][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.399493][ T5822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.479991][ T5845] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.593825][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.621317][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.644528][ T5822] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 93.669318][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.693137][ T5822] usb 2-1: config 0 descriptor?? [ 93.705674][ T5845] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 93.735662][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.751133][ T5845] usb 4-1: config 0 descriptor?? [ 93.764634][ T5845] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 93.973521][ T5845] gp8psk: usb in 128 operation failed. [ 94.120578][ T5868] syz.2.10[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.163571][ T5822] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 94.176479][ T5822] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 94.188385][ T5845] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 94.206003][ T5822] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 94.219175][ T5822] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 94.226639][ T5822] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 94.256819][ T5822] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 94.373434][ T5822] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 140 [ 94.394934][ T5845] gp8psk: usb in 149 operation failed. [ 94.403432][ T5822] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 94.404285][ T5845] gp8psk: failed to get FPGA version [ 94.437069][ T5822] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 94.455333][ T5845] gp8psk: usb in 138 operation failed. [ 94.471867][ T5845] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 94.482657][ T5822] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 94.500028][ T5086] Bluetooth: hci0: command tx timeout [ 94.517077][ T5845] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 94.527202][ T5822] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 94.591037][ T5845] usb 4-1: USB disconnect, device number 2 [ 94.707549][ T5844] usb 2-1: USB disconnect, device number 2 [ 94.909863][ T5868] loop2: detected capacity change from 0 to 32768 [ 94.949203][ T5868] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (5868) [ 94.979945][ T5086] Bluetooth: hci1: command tx timeout [ 95.044881][ T5868] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 95.059522][ T5086] Bluetooth: hci3: command tx timeout [ 95.075675][ T5868] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 95.105568][ T5868] BTRFS info (device loop2): using free space tree [ 95.268978][ T5868] BTRFS info (device loop2): enabling ssd optimizations [ 95.276010][ T5868] BTRFS info (device loop2): auto enabling async discard [ 95.457306][ T5899] loop1: detected capacity change from 0 to 128 [ 95.474861][ T5897] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 95.626485][ C0] Illegal XDP return value 16128 on prog (id 3) dev lo, expect packet loss! [ 95.658104][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 95.714726][ T5899] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 95.736716][ T5899] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 95.773481][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 95.849138][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 95.894312][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 95.934532][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 95.989110][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 96.040855][ T5780] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 96.053893][ T5899] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 96.069284][ T5899] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 96.303995][ T5795] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop2 scanned by udevd (5795) [ 96.684357][ T5918] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 97.105276][ T5928] capability: warning: `syz.0.31' uses 32-bit capabilities (legacy support in use) [ 97.115089][ T5926] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 97.126099][ T5930] loop1: detected capacity change from 0 to 512 [ 97.129975][ T5926] ucsi_ccg: probe of 0-0008 failed with error -110 [ 97.167055][ T5926] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 97.187681][ T5928] program syz.0.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.217633][ T5930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.485770][ T5924] loop3: detected capacity change from 0 to 32768 [ 97.508334][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.533432][ T5924] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 97.823945][ T5945] loop1: detected capacity change from 0 to 2048 [ 97.863752][ T5789] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 97.897118][ T5947] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.950086][ T5946] loop0: detected capacity change from 0 to 2048 [ 97.982074][ T5946] NILFS (loop0): invalid segment: Magic number mismatch [ 98.001771][ T5946] NILFS (loop0): trying rollback from an earlier position [ 98.026188][ T5946] NILFS (loop0): recovery complete [ 98.033156][ T5948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.123353][ T27] audit: type=1800 audit(1790267081.239:2): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="bus" dev="loop1" ino=2097152 res=0 errno=0 [ 98.151720][ T5949] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 98.214216][ T27] audit: type=1800 audit(1790267081.239:3): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 98.488958][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.703575][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.721375][ T5823] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 98.753657][ T5823] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 98.771186][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.785129][ T5823] usb 4-1: Product: syz [ 98.790481][ T5823] usb 4-1: Manufacturer: syz [ 98.796529][ T5823] usb 4-1: SerialNumber: syz [ 99.085010][ T5823] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.666308][ T5823] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 99.777813][ T5823] usb 4-1: USB disconnect, device number 3 [ 99.832329][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.039661][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.329285][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 100.563177][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 100.783461][ T6003] loop1: detected capacity change from 0 to 4096 [ 100.800747][ T6003] ======================================================= [ 100.800747][ T6003] WARNING: The mand mount option has been deprecated and [ 100.800747][ T6003] and is ignored by this kernel. Remove the mand [ 100.800747][ T6003] option from the mount to silence this warning. [ 100.800747][ T6003] ======================================================= [ 100.880472][ T6003] ntfs3: loop1: ino=19, mi_enum_attr [ 100.886443][ T6003] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 100.982152][ T6003] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 101.029081][ T6003] ntfs3: loop1: ino=5, mi_enum_attr [ 101.042129][ T6003] ntfs3: loop1: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to update [ 101.070413][ T6003] ntfs3: loop1: ino=5, mi_enum_attr [ 101.086627][ T6003] ntfs3: loop1: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to write [ 101.357507][ T6015] pimreg: tun_chr_ioctl cmd 2148553947 [ 102.219159][ T6047] binder: 6046:6047 ioctl c0306201 200000000300 returned -14 [ 102.568845][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.776299][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.790549][ T8] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.822157][ T8] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.850805][ T6063] Falling back ldisc for ttyS3. [ 102.892710][ T8] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 102.909183][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.917265][ T8] usb 2-1: Product: syz [ 102.942179][ T8] usb 2-1: Manufacturer: syz [ 102.946861][ T8] usb 2-1: SerialNumber: syz [ 103.086102][ T27] audit: type=1326 audit(1790267086.209:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.0.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2ef79e159 code=0x0 [ 103.419886][ C0] usb 2-1: received EP1 urb->status = -2 [ 103.425702][ T8] usb 2-1: unable to init card! (ret=-110) [ 103.432778][ T8] snd-usb-caiaq: probe of 2-1:1.0 failed with error -110 [ 103.511667][ T6084] loop2: detected capacity change from 0 to 64 [ 103.547414][ T6084] hfs: request for non-existent node 131072 in B*Tree [ 103.555333][ T6084] hfs: request for non-existent node 131072 in B*Tree [ 103.623227][ T5844] usb 2-1: USB disconnect, device number 3 [ 103.748941][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 103.837338][ T6088] loop2: detected capacity change from 0 to 1024 [ 103.959951][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 103.978899][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.003271][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 104.038096][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 104.057883][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.074220][ T8] usb 4-1: config 0 descriptor?? [ 104.116008][ T6082] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.145905][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 104.560236][ T8] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 104.567569][ T8] hid-steam 0003:28DE:1205.0002: unknown main item tag 0xd [ 104.596884][ T8] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x4 [ 104.621866][ T8] hid-steam 0003:28DE:1205.0002: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 104.778048][ T8] usb 4-1: USB disconnect, device number 4 [ 105.606239][ T6142] loop0: detected capacity change from 0 to 256 [ 106.199965][ T6156] tmpfs: Bad value for 'gid' [ 106.666796][ T6148] loop3: detected capacity change from 0 to 32768 [ 106.806116][ T6148] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.951563][ T6148] XFS (loop3): Ending clean mount [ 107.276154][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.285238][ T6189] netlink: 'syz.2.144': attribute type 2 has an invalid length. [ 107.299048][ T6189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.144'. [ 107.644378][ T6197] loop2: detected capacity change from 0 to 256 [ 107.816707][ T1322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.926259][ T6199] erspan0: entered promiscuous mode [ 107.986276][ T1322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.091114][ T1322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.223062][ T1322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.234031][ T6205] loop3: detected capacity change from 0 to 512 [ 108.302690][ T6205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.359030][ T6205] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.609981][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.861802][ T6215] netlink: 260 bytes leftover after parsing attributes in process `syz.2.159'. [ 108.921847][ T6219] program syz.3.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.150154][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.160284][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.168938][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.180988][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.193758][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.201308][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.595228][ T6244] loop2: detected capacity change from 0 to 128 [ 109.660898][ T6244] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.729910][ T6244] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.886182][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.988314][ T6251] warning: `syz.3.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.383324][ T6238] loop1: detected capacity change from 0 to 32768 [ 110.433587][ T6238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.166 (6238) [ 110.510207][ T6238] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.544334][ T6238] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.581102][ T6238] BTRFS info (device loop1): using free space tree [ 110.794281][ T6238] BTRFS info (device loop1): enabling ssd optimizations [ 110.862413][ T6238] BTRFS info (device loop1): auto enabling async discard [ 111.172975][ T6296] loop3: detected capacity change from 0 to 256 [ 111.276217][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.298953][ T5782] Bluetooth: hci2: command tx timeout [ 111.702143][ T5789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5789) [ 111.809204][ T970] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 111.854884][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 112.024828][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.068747][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.107335][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.133228][ T1322] hsr_slave_0: left promiscuous mode [ 112.144662][ T970] usb 4-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 112.165578][ T1322] hsr_slave_1: left promiscuous mode [ 112.208847][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.233943][ T970] usb 4-1: config 0 descriptor?? [ 112.239543][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.247055][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.367646][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.385838][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.439810][ T1322] bridge_slave_1: left allmulticast mode [ 112.445653][ T1322] bridge_slave_1: left promiscuous mode [ 112.494689][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.534542][ T1322] bridge_slave_0: left allmulticast mode [ 112.545906][ T1322] bridge_slave_0: left promiscuous mode [ 112.554914][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.682946][ T970] hid-generic 0003:093A:8002.0003: collection stack underflow [ 112.710200][ T1322] veth1_macvtap: left promiscuous mode [ 112.716365][ T1322] veth0_macvtap: left promiscuous mode [ 112.740930][ T970] hid-generic 0003:093A:8002.0003: item 0 4 0 12 parsing failed [ 112.769448][ T1322] veth1_vlan: left promiscuous mode [ 112.778461][ T970] hid-generic: probe of 0003:093A:8002.0003 failed with error -22 [ 112.783001][ T1322] veth0_vlan: left promiscuous mode [ 112.824116][ T6332] loop2: detected capacity change from 0 to 64 [ 112.896415][ T970] usb 4-1: USB disconnect, device number 5 [ 113.382055][ T5782] Bluetooth: hci2: command tx timeout [ 113.521744][ T6343] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.941956][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 113.994899][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 114.043599][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.064868][ T6347] loop2: detected capacity change from 0 to 32768 [ 114.081692][ T6347] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 114.181675][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.193346][ T5795] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 114.701955][ T1322] bond0 (unregistering): Released all slaves [ 114.739854][ T970] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.928236][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.935611][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.943491][ T6224] bridge_slave_0: entered allmulticast mode [ 114.951461][ T6224] bridge_slave_0: entered promiscuous mode [ 114.968852][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 114.987844][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 114.991080][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.038890][ T970] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.048337][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.059143][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.066420][ T6224] bridge_slave_1: entered allmulticast mode [ 115.072949][ T970] usb 3-1: Product: syz [ 115.077690][ T970] usb 3-1: Manufacturer: syz [ 115.085343][ T970] usb 3-1: SerialNumber: syz [ 115.090476][ T6224] bridge_slave_1: entered promiscuous mode [ 115.106117][ T970] usb 3-1: config 0 descriptor?? [ 115.140570][ T970] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.168869][ T970] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 115.202389][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.239884][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.369633][ T6224] team0: Port device team_slave_0 added [ 115.398343][ T6224] team0: Port device team_slave_1 added [ 115.458863][ T5782] Bluetooth: hci2: command tx timeout [ 115.552873][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.579951][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.638282][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.681845][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.698783][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.755386][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.767383][ T970] em28xx 3-1:0.0: chip ID is em2765 [ 115.998513][ T6224] hsr_slave_0: entered promiscuous mode [ 116.020721][ T6224] hsr_slave_1: entered promiscuous mode [ 116.038716][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.046338][ T6224] Cannot create hsr debugfs directory [ 116.062691][ T970] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.078914][ T970] em28xx 3-1:0.0: board has no eeprom [ 116.151969][ T6359] loop1: detected capacity change from 0 to 32768 [ 116.158856][ T970] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 116.192375][ T970] em28xx 3-1:0.0: dvb set to bulk mode. [ 116.198292][ T28] em28xx 3-1:0.0: Binding DVB extension [ 116.233976][ T970] usb 3-1: USB disconnect, device number 2 [ 116.273547][ T970] em28xx 3-1:0.0: Disconnecting em28xx [ 116.314337][ T6359] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.393312][ T28] em28xx 3-1:0.0: Registering input extension [ 116.438021][ T6389] loop3: detected capacity change from 0 to 512 [ 116.459493][ T970] em28xx 3-1:0.0: Closing input extension [ 116.531491][ T6389] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.204: invalid block [ 116.582273][ T6389] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.204: invalid indirect mapped block 10 (level 1) [ 116.599370][ T970] em28xx 3-1:0.0: Freeing device [ 116.637476][ T6389] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.204: invalid indirect mapped block 8 (level 1) [ 116.659900][ T6359] XFS (loop1): Ending clean mount [ 116.712630][ T6359] XFS (loop1): Quotacheck needed: Please wait. [ 116.744116][ T6389] EXT4-fs (loop3): 1 truncate cleaned up [ 116.790200][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.888840][ T6359] XFS (loop1): Quotacheck: Done. [ 116.893801][ T6224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.900924][ T6389] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 116.931916][ T6224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.957780][ T6224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.010126][ T6224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.019672][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.257176][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.320768][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.354450][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.403925][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.411739][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.454864][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.462288][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.539926][ T5782] Bluetooth: hci2: command tx timeout [ 118.404844][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.488846][ T6428] program syz.1.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.751191][ T6436] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 119.352020][ T6224] veth0_vlan: entered promiscuous mode [ 119.391605][ T6224] veth1_vlan: entered promiscuous mode [ 119.393997][ T6448] loop1: detected capacity change from 0 to 512 [ 119.455502][ T6422] loop2: detected capacity change from 0 to 40427 [ 119.464612][ T6448] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.529115][ T6448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.541273][ T6224] veth0_macvtap: entered promiscuous mode [ 119.546422][ T6422] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 119.557574][ T6224] veth1_macvtap: entered promiscuous mode [ 119.606075][ T6448] EXT4-fs error (device loop1): ext4_quota_enable:7140: comm syz.1.218: Bad quota inum: 458752, type: 0 [ 119.634795][ T6422] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.675799][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.746419][ T6448] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=458752). Please run e2fsck to fix. [ 119.765953][ T6422] F2FS-fs (loop2): invalid crc value [ 119.795636][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.835837][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.835836][ T6448] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 119.870181][ T6448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 119.874449][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.923947][ T6435] loop3: detected capacity change from 0 to 32768 [ 119.958867][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.971585][ T6448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.218: bg 0: block 248: padding at end of block bitmap is not set [ 120.002738][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.054863][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.136335][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.160968][ T6435] JBD2: Ignoring recovery information on journal [ 120.176471][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.207139][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.248505][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.270128][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.295867][ T6422] F2FS-fs (loop2): Start checkpoint disabled! [ 120.304101][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.321970][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 120.322265][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.364567][ T6435] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.390952][ T6422] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.398256][ T6422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 120.424957][ T6224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.468769][ T6224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.477552][ T6224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.528810][ T6224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.660377][ T12] kworker/u4:1: attempt to access beyond end of device [ 120.660377][ T12] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 120.714686][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.755715][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 120.764967][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.912371][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.959475][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.079858][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.087787][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.330026][ T27] audit: type=1400 audit(1790267104.449:5): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6476 comm="syz.1.223" name="//o" offset=55 [ 121.766340][ T6490] loop1: detected capacity change from 0 to 512 [ 121.883305][ T6490] EXT4-fs (loop1): 1 truncate cleaned up [ 121.907235][ T6493] loop4: detected capacity change from 0 to 8 [ 121.923430][ T6490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.045021][ T6498] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 122.062487][ T6493] SQUASHFS error: Unknown LZ4 version [ 122.068198][ T6493] squashfs image failed sanity check [ 122.087472][ T6504] loop2: detected capacity change from 0 to 1024 [ 122.123789][ T6504] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 122.130968][ T6490] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 122.203638][ T6490] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.203638][ T6490] [ 122.231504][ T6504] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.229: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.291949][ T6504] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 122.301015][ T6504] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.229: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.315783][ T6504] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 122.326345][ T6504] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.229: Failed to acquire dquot type 0 [ 122.341660][ T6504] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 122.368202][ T6504] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.229: mark_inode_dirty error [ 122.455948][ T6504] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 122.456539][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28 [ 122.504941][ T6504] EXT4-fs (loop2): 1 orphan inode deleted [ 122.529730][ T1322] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.533871][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.533871][ T59] [ 122.594855][ T1322] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 122.602532][ T6504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.615996][ T59] EXT4-fs (loop1): Total free blocks count 0 [ 122.632266][ T1322] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 122.632631][ T59] EXT4-fs (loop1): Free/Dirty block details [ 122.687435][ T59] EXT4-fs (loop1): free_blocks=0 [ 122.705115][ T6504] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.229: Invalid inode table block 1 in block_group 0 [ 122.738784][ T59] EXT4-fs (loop1): dirty_blocks=4 [ 122.743920][ T59] EXT4-fs (loop1): Block reservation details [ 122.761837][ T6504] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 122.927920][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.971534][ T5780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.050950][ T5780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 123.086474][ T5780] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 123.313107][ T6522] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 123.515429][ T6511] loop3: detected capacity change from 0 to 32768 [ 123.541647][ T6511] XFS: attr2 mount option is deprecated. [ 123.604464][ T6530] ipvlan2: entered promiscuous mode [ 123.618047][ T6511] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.664450][ T6530] team0: Device ipvlan2 failed to register rx_handler [ 123.740066][ T6511] XFS (loop3): Ending clean mount [ 123.795019][ T6511] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 123.912367][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.063664][ T6574] loop2: detected capacity change from 0 to 2048 [ 125.171190][ T6574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.269958][ T6581] loop1: detected capacity change from 0 to 512 [ 125.382724][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.468383][ T6557] loop4: detected capacity change from 0 to 32768 [ 125.508875][ T6581] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.556936][ T6557] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.860899][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.908784][ T6557] XFS (loop4): Ending clean mount [ 125.953256][ T6557] XFS (loop4): Quotacheck needed: Please wait. [ 125.970725][ T6606] pim6reg: entered allmulticast mode [ 126.003044][ T6606] pim6reg: left allmulticast mode [ 126.056795][ T6557] XFS (loop4): Quotacheck: Done. [ 126.157804][ T27] audit: type=1800 audit(1790267109.279:6): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="bus" dev="loop4" ino=9290 res=0 errno=0 [ 126.178031][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.253402][ T27] audit: type=1800 audit(1790267109.319:7): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 126.401949][ T6224] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.506191][ T6622] use of bytesused == 0 is deprecated and will be removed in the future, [ 126.520733][ T6622] use the actual size instead. [ 127.063810][ T6638] block2mtd: error: cannot open device /dev [ 127.169835][ T6616] loop2: detected capacity change from 0 to 32768 [ 127.207160][ T6616] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 127.313924][ T6644] loop4: detected capacity change from 0 to 256 [ 127.372607][ T6644] FAT-fs (loop4): Directory bread(block 1285) failed [ 127.403217][ T6644] FAT-fs (loop4): Directory bread(block 1286) failed [ 127.410855][ T6641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.432887][ T5795] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 127.445192][ T6644] FAT-fs (loop4): Directory bread(block 1287) failed [ 127.452562][ T6644] FAT-fs (loop4): Directory bread(block 1288) failed [ 127.476453][ T6644] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 127.563642][ T6643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.726706][ T6651] loop4: detected capacity change from 0 to 512 [ 127.760091][ T6651] EXT4-fs: Ignoring removed orlov option [ 127.865118][ T6651] EXT4-fs error (device loop4): __ext4_iget:5091: inode #11: block 1: comm syz.4.265: invalid block [ 127.987817][ T6651] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.265: couldn't read orphan inode 11 (err -117) [ 128.067207][ T6651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.173779][ T6651] EXT4-fs error (device loop4): ext4_add_entry:2488: inode #2: comm syz.4.265: Directory hole found for htree leaf block 0 [ 128.308182][ T6224] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.508729][ T5849] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.744764][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.766156][ T5849] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.780147][ T5849] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.819027][ T5849] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.854675][ T5849] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 128.867989][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.493261][ T5849] gud 4-1:1.0: Failed to get properties (error=-71) [ 129.515656][ T5849] gud: probe of 4-1:1.0 failed with error -71 [ 129.532564][ T6698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 129.544052][ T6698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 129.582415][ T5849] usb 4-1: USB disconnect, device number 6 [ 130.003272][ T6710] loop4: detected capacity change from 0 to 4096 [ 130.068516][ T6713] netlink: 'syz.1.287': attribute type 4 has an invalid length. [ 130.088945][ T6713] netlink: 17 bytes leftover after parsing attributes in process `syz.1.287'. [ 130.666747][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 130.943547][ T6740] loop4: detected capacity change from 0 to 256 [ 131.154631][ T6745] loop4: detected capacity change from 0 to 512 [ 132.180844][ T6777] loop1: detected capacity change from 0 to 256 [ 132.238204][ T6777] overlayfs: failed to resolve './file1': -2 [ 132.545187][ T6771] loop2: detected capacity change from 0 to 32768 [ 132.652240][ T6771] read_mapping_page failed! [ 132.671101][ T6771] ERROR: (device loop2): txCommit: [ 132.671101][ T6771] [ 132.969615][ T6792] WARNING! power/level is deprecated; use power/control instead [ 133.145381][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157027][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.345272][ T6805] dummy0: entered allmulticast mode [ 133.355061][ T6804] dummy0: left allmulticast mode [ 133.432860][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.635335][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.666115][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.684603][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 133.693910][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.722039][ T8] usb 5-1: config 0 descriptor?? [ 133.812834][ T6817] input: syz1 as /devices/virtual/input/input6 [ 133.830755][ T6817] input: failed to attach handler leds to device input6, error: -6 [ 134.164231][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.188823][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.196384][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.248721][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.261537][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.284660][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.298768][ T8] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 134.324845][ T6815] loop2: detected capacity change from 0 to 40427 [ 134.339333][ T8] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 134.378587][ T6815] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 134.406786][ T6815] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 134.456740][ T6815] F2FS-fs (loop2): Image doesn't support compression [ 134.469957][ T8] playstation 0003:054C:0BA0.0004: Invalid reportID received, expected 18 got 90 [ 134.490175][ T8] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -22 [ 134.505189][ T6815] F2FS-fs (loop2): Image doesn't support compression [ 134.535442][ T8] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4 [ 134.547616][ T6829] tipc: Started in network mode [ 134.565948][ T8] playstation 0003:054C:0BA0.0004: Failed to create dualshock4. [ 134.572678][ T6829] tipc: Node identity ac14140f, cluster identity 4711 [ 134.594390][ T6815] F2FS-fs (loop2): invalid crc value [ 134.601056][ T6829] tipc: New replicast peer: 255.255.255.255 [ 134.625852][ T8] playstation: probe of 0003:054C:0BA0.0004 failed with error -22 [ 134.639081][ T6829] tipc: Enabled bearer , priority 10 [ 134.709049][ T8] usb 5-1: USB disconnect, device number 2 [ 134.898224][ T6815] F2FS-fs (loop2): Start checkpoint disabled! [ 134.900982][ T6836] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.940032][ T6815] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 134.953743][ T6815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 135.094495][ T59] kworker/u4:4: attempt to access beyond end of device [ 135.094495][ T59] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.122830][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 135.343755][ T6854] program syz.4.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.366763][ T6853] loop1: detected capacity change from 0 to 164 [ 135.434291][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.652502][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.681799][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.721684][ T5778] tipc: Node number set to 2886997007 [ 135.736175][ T8] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.754789][ T8] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 135.774862][ T8] usb 4-1: Manufacturer: syz [ 135.790953][ T8] usb 4-1: config 0 descriptor?? [ 135.834099][ T6860] loop1: detected capacity change from 0 to 2048 [ 135.902069][ T6860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.937845][ T6862] Zero length message leads to an empty skb [ 136.436593][ T6873] :syz3:E:00000000000000000257::*]:./dev/kmsg: [ 136.481343][ T6874] bonding: no command found in bonding_masters - use +ifname or -ifname [ 136.572713][ T6876] loop4: detected capacity change from 0 to 1024 [ 136.594028][ T6878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.354'. [ 136.661138][ T8] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 136.694492][ T8] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 136.735286][ T8] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 136.759309][ T8] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 136.784618][ T8] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 136.831253][ T8] usb 4-1: USB disconnect, device number 7 [ 137.017947][ T6884] loop4: detected capacity change from 0 to 4096 [ 137.511450][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 137.545457][ T6896] ip_tables: iptables: counters copy to user failed while replacing table [ 137.754922][ T6900] loop4: detected capacity change from 0 to 256 [ 137.846501][ T6900] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 138.225198][ T6914] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 138.798581][ T6908] loop3: detected capacity change from 0 to 32768 [ 138.938967][ T27] audit: type=1800 audit(1790267122.059:8): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 139.042661][ T6908] ERROR: (device loop3): diWrite: ixpxd invalid [ 139.042661][ T6908] [ 139.077864][ T6908] ERROR: (device loop3): remounting filesystem as read-only [ 139.138992][ T6908] ERROR: (device loop3): txCommit: [ 139.138992][ T6908] [ 139.333167][ T5849] IPVS: starting estimator thread 0... [ 139.475121][ T6945] IPVS: using max 18 ests per chain, 43200 per kthread [ 140.008957][ T970] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.246175][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.283756][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.318041][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.343674][ T970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.373182][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.419858][ T970] usb 4-1: config 0 descriptor?? [ 140.870895][ T970] plantronics 0003:047F:FFFF.0006: unbalanced delimiter at end of report description [ 140.896146][ T970] plantronics 0003:047F:FFFF.0006: parse failed [ 140.908992][ T970] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 140.979737][ T6988] loop4: detected capacity change from 0 to 4096 [ 141.023510][ T6988] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 141.083266][ T970] usb 4-1: USB disconnect, device number 8 [ 141.167335][ T6988] ntfs: volume version 3.1. [ 141.755870][ T7015] loop4: detected capacity change from 0 to 1024 [ 142.208832][ T970] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.371226][ T7039] loop4: detected capacity change from 0 to 64 [ 142.403274][ T970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.425809][ T970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.462350][ T970] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 142.508681][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.976128][ T970] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 143.040186][ T970] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 143.090522][ T970] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0007/input/input7 [ 143.269779][ T970] usb 2-1: USB disconnect, device number 4 [ 143.334663][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 143.634181][ T7051] loop4: detected capacity change from 0 to 32768 [ 143.666058][ T7065] loop2: detected capacity change from 0 to 256 [ 143.694452][ T7065] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.766205][ T7065] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 143.788865][ T7051] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.908383][ T7065] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 144.000640][ T7065] exFAT-fs (loop2): failed to load alloc-bitmap [ 144.007085][ T7065] exFAT-fs (loop2): failed to recognize exfat type [ 144.024111][ T7051] XFS (loop4): Ending clean mount [ 144.116097][ T27] audit: type=1800 audit(1790267127.239:9): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.416" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 144.396355][ T6224] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.592238][ T7101] sctp: [Deprecated]: syz.3.428 (pid 7101) Use of int in max_burst socket option deprecated. [ 144.592238][ T7101] Use struct sctp_assoc_value instead [ 146.152584][ T7158] loop2: detected capacity change from 0 to 512 [ 146.178042][ T7158] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.211270][ T7158] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.262088][ T7158] EXT4-fs (loop2): 1 truncate cleaned up [ 146.277193][ T7158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.505745][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.117478][ T7190] loop3: detected capacity change from 0 to 16 [ 147.186318][ T7190] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.307226][ T7190] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 147.336776][ T7164] loop1: detected capacity change from 0 to 32768 [ 147.431936][ T7164] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.502827][ T7203] loop3: detected capacity change from 0 to 512 [ 147.599874][ T7203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.671672][ T7203] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.821691][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 147.832469][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.094862][ T7219] loop3: detected capacity change from 0 to 256 [ 148.152493][ T7219] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.243072][ T7219] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 148.251554][ T27] audit: type=1800 audit(1790267387.361:10): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 148.296023][ T7219] FAT-fs (loop3): Filesystem has been set read-only [ 148.339358][ T7219] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 149.328773][ T5786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.430258][ T7217] loop2: detected capacity change from 0 to 40427 [ 149.455644][ T7217] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 149.498785][ T7217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.568734][ T5786] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.580366][ T7217] F2FS-fs (loop2): invalid crc value [ 149.586673][ T7217] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 149.588811][ T5786] usb 5-1: config 0 has no interface number 0 [ 149.660801][ T5786] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.685543][ T7217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.704191][ T5786] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.749721][ T5786] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.797016][ T5786] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 149.829267][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.870870][ T5786] usb 5-1: config 0 descriptor?? [ 149.998839][ T7217] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.023917][ T7217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.091176][ T7267] loop3: detected capacity change from 0 to 128 [ 150.168055][ T7267] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.206949][ T7267] hpfs: filesystem error: improperly stopped [ 150.224750][ T7267] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.233277][ T7267] hpfs: You really don't want any checks? You are crazy... [ 150.242529][ T7267] hpfs: hpfs_map_sector(): read error [ 150.247986][ T7267] hpfs: code page support is disabled [ 150.256282][ T7267] hpfs: hpfs_map_4sectors(): unaligned read [ 150.266575][ T7267] hpfs: hpfs_map_4sectors(): unaligned read [ 150.272928][ T7267] hpfs: filesystem error: unable to find root dir [ 150.310001][ T5780] syz-executor: attempt to access beyond end of device [ 150.310001][ T5780] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 150.339927][ T7267] hpfs: hpfs_map_4sectors(): unaligned read [ 150.347199][ T7267] hpfs: hpfs_map_sector(): read error [ 150.367990][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.399836][ T5780] syz-executor: attempt to access beyond end of device [ 150.399836][ T5780] loop2: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 150.442358][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.539398][ T5786] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0008/input/input10 [ 150.629448][ T7273] loop9: detected capacity change from 0 to 7 [ 150.661306][ T5786] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0008/input/input11 [ 150.727473][ T7273] Dev loop9: unable to read RDB block 7 [ 150.749715][ T5786] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 150.779299][ T7273] loop9: unable to read partition table [ 150.798474][ T7273] loop9: partition table beyond EOD, truncated [ 150.805451][ T7273] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 150.960013][ T5786] usb 5-1: USB disconnect, device number 3 [ 151.127635][ T7283] loop3: detected capacity change from 0 to 128 [ 151.137670][ T7278] fido_id[7278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 151.185757][ T7283] FAT-fs (loop3): Directory bread(block 414) failed [ 151.219025][ T7283] FAT-fs (loop3): Directory bread(block 415) failed [ 151.238776][ T7283] FAT-fs (loop3): Directory bread(block 416) failed [ 151.245455][ T7283] FAT-fs (loop3): Directory bread(block 417) failed [ 151.277079][ T7283] FAT-fs (loop3): Directory bread(block 418) failed [ 151.314629][ T7283] FAT-fs (loop3): Directory bread(block 419) failed [ 151.360184][ T7283] FAT-fs (loop3): Directory bread(block 420) failed [ 151.388856][ T7283] FAT-fs (loop3): Directory bread(block 421) failed [ 151.529050][ T7283] FAT-fs (loop3): Directory bread(block 414) failed [ 151.569465][ T7283] FAT-fs (loop3): Directory bread(block 415) failed [ 151.625977][ T7291] loop1: detected capacity change from 0 to 2048 [ 151.684325][ T7291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.281699][ T7310] netlink: 64 bytes leftover after parsing attributes in process `syz.3.484'. [ 152.429364][ T7316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.486'. [ 152.592058][ T7320] bond1: Removing last ns target with arp_interval on [ 153.123889][ T7318] loop3: detected capacity change from 0 to 32768 [ 153.195935][ T7318] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 153.240173][ T970] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.356387][ T7346] vlan2: entered promiscuous mode [ 153.362749][ T7318] XFS (loop3): Ending clean mount [ 153.364674][ T7346] bond0: entered promiscuous mode [ 153.378969][ T7346] bond_slave_0: entered promiscuous mode [ 153.393811][ T7347] block nbd1: shutting down sockets [ 153.408938][ T7346] bond_slave_1: entered promiscuous mode [ 153.431848][ T970] usb 3-1: config 0 has no interfaces? [ 153.464078][ T970] usb 3-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 153.489089][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.521887][ T970] usb 3-1: config 0 descriptor?? [ 153.692001][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 153.759826][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.779239][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.825107][ T7355] loop1: detected capacity change from 0 to 256 [ 153.851493][ T970] usb 3-1: USB disconnect, device number 3 [ 154.340393][ T970] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 154.583921][ T970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.597710][ T970] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 154.621117][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.642050][ T970] hub 3-1:1.0: bad descriptor, ignoring hub [ 154.648022][ T970] hub: probe of 3-1:1.0 failed with error -5 [ 154.704721][ T970] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 154.969497][ T8] usb 3-1: USB disconnect, device number 4 [ 154.998536][ T8] idmouse 3-1:1.0: disconnected [ 155.083788][ T7392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.600840][ T5823] hid-generic 0005:0B57:05DF.0009: item fetching failed at offset 0/1 [ 155.616036][ T5823] hid-generic: probe of 0005:0B57:05DF.0009 failed with error -22 [ 155.686136][ T7414] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.718575][ T7415] loop1: detected capacity change from 0 to 256 [ 156.154342][ T27] audit: type=1326 audit(1790267395.281:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.238089][ T27] audit: type=1326 audit(1790267395.281:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.262006][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.366426][ T27] audit: type=1326 audit(1790267395.291:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.445471][ T27] audit: type=1326 audit(1790267395.291:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.527087][ T27] audit: type=1326 audit(1790267395.291:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.598764][ T27] audit: type=1326 audit(1790267395.291:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.688956][ T27] audit: type=1326 audit(1790267395.291:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.751707][ T7444] loop1: detected capacity change from 0 to 512 [ 156.768114][ T7444] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.775215][ T27] audit: type=1326 audit(1790267395.291:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.842689][ T27] audit: type=1326 audit(1790267395.301:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.4.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c259e159 code=0x7ffc0000 [ 156.933340][ T7444] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.543: corrupted in-inode xattr: e_value size too large [ 156.993648][ T7444] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.543: couldn't read orphan inode 15 (err -117) [ 157.008175][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.113895][ T5781] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 157.183395][ T5781] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 157.245557][ T5781] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 157.292010][ T5781] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 157.346929][ T5781] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 157.374314][ T5781] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 157.434279][ T5781] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 157.531923][ T5781] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 157.601085][ T5781] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 157.662213][ T7465] loop4: detected capacity change from 0 to 256 [ 157.680418][ T5781] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 157.728869][ T7465] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 157.997229][ T5849] wiimote 0005:057E:0306.000A: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 158.024328][ T7473] loop4: detected capacity change from 0 to 512 [ 158.063770][ T5849] wiimote 0005:057E:0306.000A: New device registered [ 158.131735][ T7473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.144343][ T7471] wiimote 0005:057E:0306.000A: Device removed [ 158.155299][ T7473] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.220706][ T6224] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.284668][ T7474] fido_id[7474]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.684961][ T7482] loop2: detected capacity change from 0 to 8192 [ 158.719117][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.811768][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.995599][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.130648][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.143007][ T5823] wiimote 0005:057E:0306.000A: detected device: Nintendo Wii Remote (Gen 1) [ 159.259982][ T5823] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input13 [ 159.322228][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.353298][ T5823] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input14 [ 159.404714][ T5823] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input12 [ 159.618828][ T7486] loop4: detected capacity change from 0 to 32768 [ 159.649205][ T7486] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.560 (7486) [ 159.732436][ T7486] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.758146][ T7486] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.780848][ T7486] BTRFS info (device loop4): setting nodatacow, compression disabled [ 159.809479][ T7486] BTRFS info (device loop4): force clearing of disk cache [ 159.816676][ T7486] BTRFS info (device loop4): enabling ssd optimizations [ 159.863057][ T12] tipc: Disabling bearer [ 159.878967][ T7486] BTRFS info (device loop4): using spread ssd allocation scheme [ 159.886535][ T12] tipc: Left network mode [ 159.939079][ T7486] BTRFS info (device loop4): turning off barriers [ 159.945598][ T7486] BTRFS info (device loop4): disabling free space tree [ 159.983530][ T7486] BTRFS info (device loop4): not using ssd optimizations [ 159.998920][ T7486] BTRFS info (device loop4): not using spread ssd allocation scheme [ 160.322728][ T7486] BTRFS info (device loop4): rebuilding free space tree [ 160.402331][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.416887][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.428201][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.437386][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.447832][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.455522][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.558260][ T7486] BTRFS info (device loop4): disabling free space tree [ 160.587928][ T7486] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.601233][ T7486] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.062102][ T6224] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.629107][ T7541] loop4: detected capacity change from 0 to 512 [ 161.636696][ T7541] EXT4-fs: inline encryption not supported [ 161.647158][ T7541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.697664][ T7541] EXT4-fs (loop4): 1 truncate cleaned up [ 161.736061][ T7541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.840304][ T7541] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.572: bad extra_isize 62 (inode size 256) [ 161.895229][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 161.898534][ T7541] EXT4-fs (loop4): Remounting filesystem read-only [ 161.933485][ T7541] EXT4-fs warning (device loop4): ext4_rename_delete:3780: inode #12: comm syz.4.572: Deleting old file: nlink 2, error=-5 [ 162.091427][ T6224] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.106220][ T7552] process 'syz.2.574' launched './file1' with NULL argv: empty string added [ 162.428313][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.437483][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.445277][ T7515] bridge_slave_0: entered allmulticast mode [ 162.454321][ T7515] bridge_slave_0: entered promiscuous mode [ 162.466110][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.478600][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.493294][ T7515] bridge_slave_1: entered allmulticast mode [ 162.502666][ T5086] Bluetooth: hci1: command tx timeout [ 162.516820][ T7515] bridge_slave_1: entered promiscuous mode [ 162.652217][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.673629][ T12] hsr_slave_0: left promiscuous mode [ 162.684799][ T12] hsr_slave_1: left promiscuous mode [ 162.693624][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.709814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.724400][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.732334][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.750992][ T12] bridge_slave_1: left allmulticast mode [ 162.757102][ T12] bridge_slave_1: left promiscuous mode [ 162.767432][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.783244][ T12] bridge_slave_0: left allmulticast mode [ 162.789306][ T12] bridge_slave_0: left promiscuous mode [ 162.795628][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.876971][ T12] veth1_macvtap: left promiscuous mode [ 162.883250][ T12] veth0_macvtap: left promiscuous mode [ 162.889584][ T12] veth1_vlan: left promiscuous mode [ 162.894965][ T12] veth0_vlan: left promiscuous mode [ 163.844661][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.912364][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.980274][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.040125][ T7573] netlink: 'syz.2.582': attribute type 11 has an invalid length. [ 164.057883][ T7573] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.582'. [ 164.081822][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.450105][ T12] bond0 (unregistering): Released all slaves [ 164.536653][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.578920][ T5086] Bluetooth: hci1: command tx timeout [ 164.646701][ T7515] team0: Port device team_slave_0 added [ 164.688401][ T7515] team0: Port device team_slave_1 added [ 164.790514][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.818865][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.894130][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.924530][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.931851][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.985980][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.178472][ T7515] hsr_slave_0: entered promiscuous mode [ 165.210374][ T7515] hsr_slave_1: entered promiscuous mode [ 165.387269][ T12] IPVS: stop unused estimator thread 0... [ 165.817419][ T7515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.860160][ T7515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.896896][ T7515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.904881][ T7602] loop2: detected capacity change from 0 to 4096 [ 165.927194][ T7515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.927443][ T7602] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 166.105124][ T7602] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 166.129080][ T7602] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 166.211200][ T7602] ntfs3: loop2: ino=1c, mi_enum_attr [ 166.241051][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.277727][ T7608] loop4: detected capacity change from 0 to 4096 [ 166.364867][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.381699][ T1322] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 166.392810][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.400058][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.413513][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.420837][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.429355][ T5780] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 166.436146][ T5780] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 166.452699][ T7609] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.463454][ T5780] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 166.464849][ T2933] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 166.525765][ T27] audit: type=1800 audit(1790267405.651:20): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.592" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 166.658779][ T5086] Bluetooth: hci1: command tx timeout [ 167.098553][ T7620] loop2: detected capacity change from 0 to 1024 [ 167.430368][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.815226][ T7641] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 168.232688][ T7623] loop3: detected capacity change from 0 to 32768 [ 168.313547][ T7623] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.398807][ T5786] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.468117][ T7515] veth0_vlan: entered promiscuous mode [ 168.482342][ T7515] veth1_vlan: entered promiscuous mode [ 168.527963][ T7623] XFS (loop3): Ending clean mount [ 168.576345][ T7623] XFS (loop3): Quotacheck needed: Please wait. [ 168.584330][ T7515] veth0_macvtap: entered promiscuous mode [ 168.601417][ T5786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.628787][ T5786] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.645373][ T7515] veth1_macvtap: entered promiscuous mode [ 168.708025][ T5786] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 168.730102][ T7623] XFS (loop3): Quotacheck: Done. [ 168.736008][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.739170][ T5086] Bluetooth: hci1: command tx timeout [ 168.750025][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.799935][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.864246][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.908811][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.939270][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.958260][ T5845] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 168.958909][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.980112][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.001908][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.028458][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.051459][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.062419][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.073671][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.083917][ T5786] rtsx_usb: probe of 5-1:1.0 failed with error -22 [ 169.108965][ T5786] usb 5-1: USB disconnect, device number 4 [ 169.118684][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.140035][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.157290][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.167209][ T5845] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.182296][ T5845] usb 3-1: config 0 has no interface number 0 [ 169.191357][ T7515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.207784][ T5845] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.224770][ T7515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.234053][ T5845] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 169.245041][ T7515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.255008][ T5845] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.264490][ T7515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.273803][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.304941][ T5845] usb 3-1: config 0 descriptor?? [ 169.318347][ T7669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.367711][ T5845] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.445588][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.471974][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.515966][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.525939][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.594879][ T5778] usb 3-1: USB disconnect, device number 5 [ 169.895242][ T5086] Bluetooth: hci2: unknown advertising packet type: 0x72 [ 169.895363][ T5086] Bluetooth: hci2: Malformed LE Event: 0x02 [ 170.331493][ T7702] kAFS: bad VL server IP address [ 170.917341][ T7718] loop3: detected capacity change from 0 to 4096 [ 170.946876][ T7718] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 171.061593][ T7718] ntfs3: loop3: ino=19, mi_enum_attr [ 171.093852][ T7718] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 171.188758][ T7718] ntfs3: loop3: failed to convert "c46c" to macturkish [ 171.217581][ T7718] ntfs3: loop3: ino=20, mi_enum_attr [ 171.244771][ T7728] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 171.652161][ T7732] loop3: detected capacity change from 0 to 4096 [ 171.800162][ T7736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.955433][ T7715] loop4: detected capacity change from 0 to 32768 [ 172.006681][ T7732] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 172.056741][ T7732] Remounting filesystem read-only [ 172.082435][ T7715] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong [ 172.082435][ T7715] [ 172.160857][ T7715] ERROR: (device loop4): remounting filesystem as read-only [ 172.182882][ T7715] ialloc: diAlloc returned -5! [ 172.205402][ T7715] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong [ 172.205402][ T7715] [ 172.239771][ T7715] ERROR: (device loop4): remounting filesystem as read-only [ 172.255115][ T7715] ialloc: diAlloc returned -5! [ 172.319468][ T5775] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 172.326223][ T5775] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 172.346567][ T5775] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 172.354403][ T5775] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 172.373860][ T5775] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 172.387684][ T5775] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 174.476707][ T7800] loop2: detected capacity change from 0 to 1024 [ 174.525441][ T7800] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 174.542974][ T7767] loop4: detected capacity change from 0 to 32768 [ 174.546289][ T7800] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 174.560356][ T7800] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.639: Failed to acquire dquot type 0 [ 174.611443][ T7800] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 174.645534][ T7800] EXT4-fs (loop2): 1 truncate cleaned up [ 174.685486][ T7767] JBD2: Ignoring recovery information on journal [ 174.723351][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.864266][ T7767] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 174.898556][ T7800] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 174.927780][ T7800] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 174.954740][ T7800] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.639: Failed to acquire dquot type 0 [ 175.147326][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.162755][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 175.385229][ T6224] ocfs2: Unmounting device (7,4) on (node local) [ 175.430299][ T7821] loop5: detected capacity change from 0 to 256 [ 176.034448][ T5786] IPVS: starting estimator thread 0... [ 176.179008][ T7841] IPVS: using max 18 ests per chain, 43200 per kthread [ 176.991497][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 177.176749][ T7880] bond0: option arp_validate: invalid value ( I) [ 177.809891][ T5845] IPVS: starting estimator thread 0... [ 177.816433][ T7904] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 177.928777][ T7905] IPVS: using max 19 ests per chain, 45600 per kthread [ 178.048567][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 178.338824][ T5782] Bluetooth: hci0: command tx timeout [ 178.537422][ T7926] loop2: detected capacity change from 0 to 256 [ 178.611405][ T7926] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 179.071859][ T7945] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.220398][ T7951] loop4: detected capacity change from 0 to 512 [ 179.271095][ T7951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.309704][ T7951] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.688: corrupted inode contents [ 179.388827][ T7951] EXT4-fs (loop4): Remounting filesystem read-only [ 179.395686][ T7951] EXT4-fs (loop4): 1 orphan inode deleted [ 179.471122][ T7951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 179.600675][ T7960] loop3: detected capacity change from 0 to 512 [ 179.639453][ T7960] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 179.679369][ T6224] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.888547][ T7969] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6) [ 180.185035][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.428789][ T5849] IPVS: starting estimator thread 0... [ 180.539336][ T7988] IPVS: using max 21 ests per chain, 50400 per kthread [ 180.781391][ T7999] program syz.3.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.131991][ T27] audit: type=1400 audit(1790267420.261:21): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8008 comm="syz.3.715" name="unknown" offset=28 [ 181.258114][ T8013] sd 0:0:1:0: PR command failed: 1026 [ 181.270832][ T8013] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 181.277623][ T8013] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 181.660197][ T8025] loop3: detected capacity change from 0 to 2048 [ 181.741166][ T8025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.861326][ T8025] EXT4-fs error (device loop3): ext4_ext_precache:639: inode #2: comm syz.3.721: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 182.028538][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.232016][ T8040] ip6tnl0: Caught tx_queue_len zero misconfig [ 182.728781][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.770264][ T8057] block nbd0: server does not support multiple connections per device. [ 182.783437][ T8057] block nbd0: shutting down sockets [ 182.880235][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'. [ 182.909154][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 182.920903][ T8] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 182.930184][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.938260][ T8] usb 4-1: Product: syz [ 182.945450][ T8] usb 4-1: Manufacturer: syz [ 182.951725][ T8] usb 4-1: SerialNumber: syz [ 182.972017][ T8] usb 4-1: config 0 descriptor?? [ 182.997299][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 183.421540][ T8] gspca_se401: ExtraFeatures: 255 [ 183.641815][ T8] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 183.682264][ T8] usb 4-1: USB disconnect, device number 9 [ 183.988969][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'. [ 184.358374][ T8097] loop2: detected capacity change from 0 to 512 [ 184.443340][ T8097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.544616][ T8097] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 184.620766][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.849601][ T8110] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 184.855739][ T8110] syzkaller0: linktype set to 825 [ 184.924801][ T8091] loop5: detected capacity change from 0 to 32768 [ 184.978287][ T8091] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.746 (8091) [ 185.025197][ T8112] __sock_release: fasync list not empty! [ 185.057812][ T8091] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.099401][ T8091] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 185.113532][ T8091] BTRFS info (device loop5): using free space tree [ 185.253909][ T8091] BTRFS info (device loop5): enabling ssd optimizations [ 185.520245][ T27] audit: type=1807 audit(1790267424.641:22): action=measure func=F res=0 [ 185.533723][ T8137] ima: policy update failed [ 185.552393][ T27] audit: type=1802 audit(1790267424.651:23): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.766" res=0 errno=0 [ 185.608799][ T27] audit: type=1802 audit(1790267424.661:24): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.766" res=0 errno=0 [ 186.118311][ T8153] team0: Caught tx_queue_len zero misconfig [ 186.172356][ T8155] loop4: detected capacity change from 0 to 512 [ 186.213195][ T8155] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 186.230760][ T8155] EXT4-fs (loop4): can't mount with commit=33527, fs mounted w/o journal [ 186.314790][ T8157] rnbd_client L127: Can't parse path ip: -93 [ 186.521335][ T8165] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.749762][ T8171] loop2: detected capacity change from 0 to 128 [ 186.786609][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.812917][ T8171] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 186.823543][ T8171] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 186.847662][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.883580][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 186.935666][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.957835][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 187.003177][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 187.023042][ T8171] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 187.046643][ T8171] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 187.184804][ T7515] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 194.595737][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602213][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.028666][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 212.032992][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 256.024527][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.032357][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.703189][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 288.819084][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 317.463909][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.470507][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.830798][ T29] INFO: task kworker/u4:4:59 blocked for more than 143 seconds. [ 348.841909][ T29] Not tainted syzkaller #0 [ 348.847033][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.856623][ T29] task:kworker/u4:4 state:D stack:22664 pid:59 ppid:2 flags:0x00004000 [ 348.871259][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 348.878363][ T29] Call Trace: [ 348.883014][ T29] [ 348.886710][ T29] __schedule+0x15ae/0x4660 [ 348.893655][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 348.916621][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 348.924175][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 348.932263][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 348.937516][ T29] ? asan.module_dtor+0x20/0x20 [ 348.943687][ T29] ? blk_check_plugged+0x250/0x250 [ 348.950260][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 348.955470][ T29] ? wq_worker_sleeping+0x63/0x240 [ 348.961675][ T29] schedule+0xbd/0x170 [ 348.966014][ T29] io_schedule+0x80/0xd0 [ 348.970520][ T29] rq_qos_wait+0x22b/0x360 [ 348.975098][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 348.981570][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 348.986944][ T29] ? rq_qos_wait+0x360/0x360 [ 348.991700][ T29] ? wbt_exit+0xb0/0xb0 [ 348.996049][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 349.001193][ T29] wbt_wait+0x34a/0x580 [ 349.005410][ T29] ? rwb_trace_step+0x320/0x320 [ 349.010406][ T29] ? dd_depth_updated+0x110/0x110 [ 349.015833][ T29] ? rwb_trace_step+0x320/0x320 [ 349.020795][ T29] __rq_qos_throttle+0x65/0xb0 [ 349.025713][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 349.030926][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.036009][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 349.041898][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 349.048229][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 349.056853][ T29] ? ktime_get+0x7f/0x280 [ 349.063960][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 349.070539][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 349.075892][ T29] __submit_bio+0x12b/0x260 [ 349.080525][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 349.085802][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 349.091595][ T29] ? __folio_end_writeback+0xe10/0xe10 [ 349.097147][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 349.102856][ T29] ? should_fail_request+0x70/0x70 [ 349.108028][ T29] ? submit_bio_noacct+0xfba/0x1b30 [ 349.113530][ T29] ext4_bio_write_folio+0x16a4/0x22d0 [ 349.119037][ T29] mpage_submit_folio+0x231/0x3c0 [ 349.124124][ T29] mpage_process_page_bufs+0x6bf/0x8c0 [ 349.129766][ T29] mpage_prepare_extent_to_map+0xecd/0x1f80 [ 349.135758][ T29] ? trace_ext4_writepages+0x1c0/0x1c0 [ 349.141377][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 349.146606][ T29] ext4_do_writepages+0xb46/0x3990 [ 349.152135][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 349.159161][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 349.165435][ T29] ? __lock_acquire+0x1336/0x7d80 [ 349.175349][ T29] ext4_writepages+0x1dd/0x350 [ 349.180302][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 349.185314][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 349.196309][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 349.202811][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 349.208080][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 349.217567][ T29] do_writepages+0x351/0x590 [ 349.223520][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 349.233730][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 349.239242][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.244349][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 349.253829][ T29] __writeback_single_inode+0x14e/0xee0 [ 349.259572][ T29] writeback_sb_inodes+0x813/0x1020 [ 349.265681][ T29] ? queue_io+0x530/0x530 [ 349.275440][ T29] __writeback_inodes_wb+0x114/0x240 [ 349.282156][ T29] wb_writeback+0x472/0xbe0 [ 349.287844][ T29] ? queue_io+0x2d1/0x530 [ 349.296756][ T29] ? percpu_ref_tryget+0x250/0x250 [ 349.302267][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 349.308491][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.313917][ T29] wb_workfn+0xad7/0xe60 [ 349.318244][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 349.324094][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 349.331217][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.336300][ T29] ? read_lock_is_recursive+0x20/0x20 [ 349.342141][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.347411][ T29] ? process_scheduled_works+0x975/0x1600 [ 349.353261][ T29] ? process_scheduled_works+0x975/0x1600 [ 349.359117][ T29] process_scheduled_works+0xa60/0x1600 [ 349.364762][ T29] ? worker_attach_to_pool+0x370/0x370 [ 349.372175][ T29] ? assign_work+0x3cc/0x5d0 [ 349.376988][ T29] worker_thread+0xa5e/0xfe0 [ 349.382059][ T29] kthread+0x2fa/0x390 [ 349.386229][ T29] ? pr_cont_work+0x550/0x550 [ 349.392832][ T29] ? kthread_blkcg+0xd0/0xd0 [ 349.397534][ T29] ret_from_fork+0x48/0x80 [ 349.402506][ T29] ? kthread_blkcg+0xd0/0xd0 [ 349.407411][ T29] ret_from_fork_asm+0x11/0x20 [ 349.412312][ T29] [ 349.415447][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 349.423340][ T29] Not tainted syzkaller #0 [ 349.428358][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.437167][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5103 ppid:2 flags:0x00004000 [ 349.446551][ T29] Call Trace: [ 349.449980][ T29] [ 349.452964][ T29] __schedule+0x15ae/0x4660 [ 349.457538][ T29] ? asan.module_dtor+0x20/0x20 [ 349.462597][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.467714][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 349.474489][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 349.479862][ T29] schedule+0xbd/0x170 [ 349.483997][ T29] io_schedule+0x80/0xd0 [ 349.488311][ T29] bit_wait_io+0x11/0xd0 [ 349.492667][ T29] __wait_on_bit+0x9f/0x2c0 [ 349.497233][ T29] ? bit_wait+0xd0/0xd0 [ 349.501648][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 349.507238][ T29] ? bit_wait+0xd0/0xd0 [ 349.511705][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 349.516531][ T29] ? do_raw_write_lock+0x11e/0x260 [ 349.522521][ T29] ? bit_waitqueue+0x30/0x30 [ 349.527212][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 349.534595][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 349.541152][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 349.548033][ T29] ? lock_chain_count+0x20/0x20 [ 349.553096][ T29] ? _raw_spin_unlock+0x40/0x40 [ 349.558016][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 349.563820][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 349.569226][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.576108][ T29] ? timer_delete_sync+0x20/0x20 [ 349.581214][ T29] ? do_raw_read_unlock+0x80/0x80 [ 349.586294][ T29] ? prepare_to_wait+0x1aa/0x200 [ 349.591371][ T29] kjournald2+0x40f/0x810 [ 349.595825][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 349.602089][ T29] ? wake_bit_function+0x200/0x200 [ 349.607257][ T29] ? _raw_spin_unlock+0x40/0x40 [ 349.613290][ T29] ? __kthread_parkme+0x71/0x1c0 [ 349.618287][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 349.623612][ T29] kthread+0x2fa/0x390 [ 349.627766][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 349.633105][ T29] ? kthread_blkcg+0xd0/0xd0 [ 349.637749][ T29] ret_from_fork+0x48/0x80 [ 349.643319][ T29] ? kthread_blkcg+0xd0/0xd0 [ 349.647969][ T29] ret_from_fork_asm+0x11/0x20 [ 349.653090][ T29] [ 349.656160][ T29] INFO: task syz-executor:5764 blocked for more than 144 seconds. [ 349.664325][ T29] Not tainted syzkaller #0 [ 349.669501][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.678943][ T29] task:syz-executor state:D stack:21904 pid:5764 ppid:5763 flags:0x00004002 [ 349.688256][ T29] Call Trace: [ 349.691684][ T29] [ 349.694696][ T29] __schedule+0x15ae/0x4660 [ 349.699334][ T29] ? mark_lock+0x94/0x320 [ 349.703726][ T29] ? asan.module_dtor+0x20/0x20 [ 349.708779][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.714832][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 349.721903][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 349.727210][ T29] schedule+0xbd/0x170 [ 349.731660][ T29] io_schedule+0x80/0xd0 [ 349.736093][ T29] bit_wait_io+0x11/0xd0 [ 349.740669][ T29] __wait_on_bit+0x9f/0x2c0 [ 349.745267][ T29] ? bit_wait+0xd0/0xd0 [ 349.749804][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 349.755325][ T29] ? bit_wait+0xd0/0xd0 [ 349.759592][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 349.764443][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 349.770247][ T29] ? bit_waitqueue+0x30/0x30 [ 349.774910][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 349.781343][ T29] do_get_write_access+0x5c9/0xe00 [ 349.786545][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 349.792905][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 349.799363][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 349.805590][ T29] ? __might_sleep+0xe0/0xe0 [ 349.810553][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 349.816174][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 349.821983][ T29] ext4_dirty_inode+0xcb/0x110 [ 349.826832][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 349.834131][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 349.839448][ T29] file_update_time+0x187/0x1a0 [ 349.844404][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 349.849808][ T29] ? do_wp_page+0x4ce/0x34d0 [ 349.854459][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 349.861060][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 349.866154][ T29] do_page_mkwrite+0x153/0x3f0 [ 349.871262][ T29] do_wp_page+0xd4d/0x34d0 [ 349.875759][ T29] ? folio_put+0xd0/0xd0 [ 349.881110][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 349.886391][ T29] ? __rwlock_init+0x150/0x150 [ 349.891574][ T29] handle_mm_fault+0x1306/0x4a50 [ 349.896622][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 349.901893][ T29] ? numa_migrate_prep+0x350/0x350 [ 349.907068][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 349.912492][ T29] do_user_addr_fault+0x736/0x12d0 [ 349.917660][ T29] exc_page_fault+0x64/0x100 [ 349.922363][ T29] ? clear_bhb_loop+0x40/0x90 [ 349.927138][ T29] asm_exc_page_fault+0x26/0x30 [ 349.932382][ T29] RIP: 0033:0x7f09bcc7c6e2 [ 349.936848][ T29] RSP: 002b:00007ffd4e40b930 EFLAGS: 00010202 [ 349.950334][ T29] RAX: 00007f09bab20000 RBX: 0000555572005eb0 RCX: 0000000000000001 [ 349.958342][ T29] RDX: 0000000000003f01 RSI: 00005555720087b8 RDI: 0000000000000002 [ 349.967572][ T29] RBP: 00007ffd4e40be30 R08: 00005555720087e8 R09: 0000000000000092 [ 349.975679][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd4e40bc70 [ 349.985004][ T29] R13: 00007ffd4e40ba60 R14: 585858582e7a7973 R15: 00007ffd4e40b9b0 [ 349.993376][ T29] [ 349.996464][ T29] INFO: task syz.2.783:8186 blocked for more than 144 seconds. [ 350.005750][ T29] Not tainted syzkaller #0 [ 350.010858][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.020012][ T29] task:syz.2.783 state:D stack:27048 pid:8186 ppid:5780 flags:0x00004004 [ 350.029443][ T29] Call Trace: [ 350.032755][ T29] [ 350.035709][ T29] __schedule+0x15ae/0x4660 [ 350.041546][ T29] ? mark_lock+0x94/0x320 [ 350.045933][ T29] ? asan.module_dtor+0x20/0x20 [ 350.052081][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 350.057167][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 350.063412][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 350.068852][ T29] schedule+0xbd/0x170 [ 350.073010][ T29] io_schedule+0x80/0xd0 [ 350.077318][ T29] bit_wait_io+0x11/0xd0 [ 350.081826][ T29] __wait_on_bit+0x9f/0x2c0 [ 350.087134][ T29] ? bit_wait+0xd0/0xd0 [ 350.091497][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 350.097001][ T29] ? bit_wait+0xd0/0xd0 [ 350.101363][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 350.106180][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 350.111557][ T29] ? bit_waitqueue+0x30/0x30 [ 350.116222][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 350.121693][ T29] do_get_write_access+0x5c9/0xe00 [ 350.126894][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 350.133067][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 350.139456][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 350.145672][ T29] ? __might_sleep+0xe0/0xe0 [ 350.150493][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 350.156107][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 350.161846][ T29] ext4_dirty_inode+0xcb/0x110 [ 350.166664][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 350.172784][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 350.177867][ T29] file_update_time+0x187/0x1a0 [ 350.182977][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 350.193144][ T29] ? filemap_fault+0x103c/0x1540 [ 350.198191][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 350.204227][ T29] ? pte_alloc_one+0x3b6/0x540 [ 350.209567][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 350.215881][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 350.221152][ T29] do_page_mkwrite+0x153/0x3f0 [ 350.225971][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 350.231140][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 350.236157][ T29] ? numa_migrate_prep+0x350/0x350 [ 350.241593][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 350.246945][ T29] do_user_addr_fault+0x736/0x12d0 [ 350.253318][ T29] exc_page_fault+0x64/0x100 [ 350.257975][ T29] asm_exc_page_fault+0x26/0x30 [ 350.263056][ T29] RIP: 0033:0x7fcd7a872809 [ 350.267537][ T29] RSP: 002b:00007ffef2def770 EFLAGS: 00010202 [ 350.273823][ T29] RAX: 0000001b2df24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 350.282200][ T29] RDX: 0000001b2df23ffc RSI: 00000000005ffde8 RDI: 00007fcd7b755700 [ 350.291975][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fcd7ac12000 [ 350.300170][ T29] R10: 00007fcd7b755700 R11: 0000000000000000 R12: 0000000000000000 [ 350.308168][ T29] R13: 000000000000000b R14: ffffffff81321df0 R15: 00007fcd7b755720 [ 350.316332][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 350.322624][ T29] [ 350.325700][ T29] INFO: task syz.3.784:8189 blocked for more than 144 seconds. [ 350.333444][ T29] Not tainted syzkaller #0 [ 350.338422][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.347510][ T29] task:syz.3.784 state:D stack:27560 pid:8189 ppid:5775 flags:0x00004004 [ 350.356945][ T29] Call Trace: [ 350.360447][ T29] [ 350.363429][ T29] __schedule+0x15ae/0x4660 [ 350.368021][ T29] ? mark_lock+0x94/0x320 [ 350.372528][ T29] ? asan.module_dtor+0x20/0x20 [ 350.377452][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 350.382821][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 350.389075][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 350.395103][ T29] schedule+0xbd/0x170 [ 350.400830][ T29] io_schedule+0x80/0xd0 [ 350.405117][ T29] bit_wait_io+0x11/0xd0 [ 350.410475][ T29] __wait_on_bit+0x9f/0x2c0 [ 350.415041][ T29] ? bit_wait+0xd0/0xd0 [ 350.419783][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 350.426322][ T29] ? bit_wait+0xd0/0xd0 [ 350.430702][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 350.435529][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 350.440795][ T29] ? bit_waitqueue+0x30/0x30 [ 350.445455][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 350.450839][ T29] do_get_write_access+0x5c9/0xe00 [ 350.456047][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 350.462206][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 350.468481][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 350.474917][ T29] ? __might_sleep+0xe0/0xe0 [ 350.479730][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 350.485380][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 350.491071][ T29] ext4_dirty_inode+0xcb/0x110 [ 350.496723][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 350.503271][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 350.508372][ T29] file_update_time+0x187/0x1a0 [ 350.514642][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 350.519924][ T29] ? filemap_fault+0x103c/0x1540 [ 350.524939][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 350.530907][ T29] ? pte_alloc_one+0x3b6/0x540 [ 350.535742][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 350.542234][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 350.547317][ T29] do_page_mkwrite+0x153/0x3f0 [ 350.552317][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 350.557317][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 350.562492][ T29] ? numa_migrate_prep+0x350/0x350 [ 350.567750][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 350.573182][ T29] do_user_addr_fault+0x736/0x12d0 [ 350.578383][ T29] exc_page_fault+0x64/0x100 [ 350.583150][ T29] ? clear_bhb_loop+0x40/0x90 [ 350.589805][ T29] asm_exc_page_fault+0x26/0x30 [ 350.595245][ T29] RIP: 0033:0x7f8b2fa6baa3 [ 350.600680][ T29] RSP: 002b:00007ffe61ad8df0 EFLAGS: 00010246 [ 350.607072][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2da64000 [ 350.615345][ T29] RDX: 0000001b2da24000 RSI: 0000000000600000 RDI: 00007f8b2fde0708 [ 350.623857][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.632034][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.640315][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe61ad9080 [ 350.648485][ T29] [ 350.652413][ T29] INFO: task syz.4.782:8188 blocked for more than 145 seconds. [ 350.660244][ T29] Not tainted syzkaller #0 [ 350.665230][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.674224][ T29] task:syz.4.782 state:D stack:27560 pid:8188 ppid:6224 flags:0x00004004 [ 350.683727][ T29] Call Trace: [ 350.687108][ T29] [ 350.690227][ T29] __schedule+0x15ae/0x4660 [ 350.695555][ T29] ? mark_lock+0x94/0x320 [ 350.701057][ T29] ? asan.module_dtor+0x20/0x20 [ 350.705991][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 350.711300][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 350.717270][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 350.723064][ T29] schedule+0xbd/0x170 [ 350.727218][ T29] io_schedule+0x80/0xd0 [ 350.731742][ T29] bit_wait_io+0x11/0xd0 [ 350.736048][ T29] __wait_on_bit+0x9f/0x2c0 [ 350.741104][ T29] ? bit_wait+0xd0/0xd0 [ 350.745309][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 350.750976][ T29] ? bit_wait+0xd0/0xd0 [ 350.755309][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 350.761463][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 350.767000][ T29] ? bit_waitqueue+0x30/0x30 [ 350.771790][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 350.777118][ T29] do_get_write_access+0x5c9/0xe00 [ 350.782596][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 350.789061][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 350.795320][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 350.802443][ T29] ? __might_sleep+0xe0/0xe0 [ 350.807101][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 350.812835][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 350.818355][ T29] ext4_dirty_inode+0xcb/0x110 [ 350.823470][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 350.829900][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 350.835011][ T29] file_update_time+0x187/0x1a0 [ 350.840304][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 350.845382][ T29] ? filemap_fault+0x103c/0x1540 [ 350.850861][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 350.856733][ T29] ? pte_alloc_one+0x3b6/0x540 [ 350.861922][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 350.868220][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 350.873710][ T29] do_page_mkwrite+0x153/0x3f0 [ 350.878757][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 350.883936][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 350.889475][ T29] ? numa_migrate_prep+0x350/0x350 [ 350.894858][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 350.900604][ T29] do_user_addr_fault+0x736/0x12d0 [ 350.906806][ T29] exc_page_fault+0x64/0x100 [ 350.911709][ T29] ? clear_bhb_loop+0x40/0x90 [ 350.916479][ T29] asm_exc_page_fault+0x26/0x30 [ 350.921754][ T29] RIP: 0033:0x7f58c246baa3 [ 350.926274][ T29] RSP: 002b:00007ffe2b805b60 EFLAGS: 00010246 [ 350.932603][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30464000 [ 350.940986][ T29] RDX: 0000001b30424000 RSI: 0000000000600000 RDI: 00007f58c27e0708 [ 350.949187][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.957229][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.965421][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe2b805df0 [ 350.973594][ T29] [ 350.976654][ T29] INFO: task syz.5.781:8190 blocked for more than 145 seconds. [ 350.984483][ T29] Not tainted syzkaller #0 [ 350.989662][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.998394][ T29] task:syz.5.781 state:D stack:26328 pid:8190 ppid:7515 flags:0x00004004 [ 351.012286][ T29] Call Trace: [ 351.017083][ T29] [ 351.020264][ T29] __schedule+0x15ae/0x4660 [ 351.024888][ T29] ? mark_lock+0x94/0x320 [ 351.029522][ T29] ? asan.module_dtor+0x20/0x20 [ 351.034444][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 351.040363][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 351.046317][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 351.051949][ T29] schedule+0xbd/0x170 [ 351.056100][ T29] io_schedule+0x80/0xd0 [ 351.060512][ T29] bit_wait_io+0x11/0xd0 [ 351.064821][ T29] __wait_on_bit+0x9f/0x2c0 [ 351.069601][ T29] ? bit_wait+0xd0/0xd0 [ 351.073823][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 351.079575][ T29] ? bit_wait+0xd0/0xd0 [ 351.083803][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 351.088964][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 351.094149][ T29] ? bit_waitqueue+0x30/0x30 [ 351.099372][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 351.104648][ T29] do_get_write_access+0x5c9/0xe00 [ 351.110858][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 351.117112][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 351.125818][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 351.132178][ T29] ? __might_sleep+0xe0/0xe0 [ 351.136828][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 351.142663][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 351.148211][ T29] ext4_dirty_inode+0xcb/0x110 [ 351.153412][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 351.159572][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 351.164695][ T29] file_update_time+0x187/0x1a0 [ 351.169912][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 351.175282][ T29] ? filemap_fault+0x103c/0x1540 [ 351.180670][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 351.186460][ T29] ? pte_alloc_one+0x3b6/0x540 [ 351.192641][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 351.199367][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 351.204482][ T29] do_page_mkwrite+0x153/0x3f0 [ 351.209449][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 351.215505][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 351.221017][ T29] ? numa_migrate_prep+0x350/0x350 [ 351.226503][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 351.232163][ T29] do_user_addr_fault+0x736/0x12d0 [ 351.237358][ T29] exc_page_fault+0x64/0x100 [ 351.242273][ T29] ? clear_bhb_loop+0x40/0x90 [ 351.247043][ T29] asm_exc_page_fault+0x26/0x30 [ 351.252080][ T29] RIP: 0033:0x7f1bf3e6baa3 [ 351.256633][ T29] RSP: 002b:00007ffd880d1c20 EFLAGS: 00010246 [ 351.263118][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30b64000 [ 351.271676][ T29] RDX: 0000001b30b24000 RSI: 0000000000600000 RDI: 00007f1bf41e0708 [ 351.280244][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.288353][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.296660][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd880d1eb0 [ 351.305057][ T29] [ 351.308197][ T29] [ 351.308197][ T29] Showing all locks held in the system: [ 351.316875][ T29] 1 lock held by khungtaskd/29: [ 351.322661][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 351.332774][ T29] 4 locks held by kworker/u4:4/59: [ 351.337938][ T29] #0: ffff88801b250138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 351.349727][ T29] #1: ffffc900015a7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 351.362433][ T29] #2: ffff88814e0880e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 351.373298][ T29] #3: ffff88814e08ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 351.385020][ T29] 2 locks held by kworker/u4:9/2933: [ 351.390734][ T29] 3 locks held by kworker/u4:10/2942: [ 351.396267][ T29] 2 locks held by getty/5535: [ 351.401835][ T29] #0: ffff88802cd7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.412471][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 351.424819][ T29] 3 locks held by syz-executor/5764: [ 351.430492][ T29] #0: ffff8880769e4420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 351.440840][ T29] #1: ffff88814e088510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 351.451893][ T29] #2: ffff88814e08c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 351.463198][ T29] 3 locks held by syz.2.783/8186: [ 351.468846][ T29] #0: ffff88802fefb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 351.479049][ T29] #1: ffff88814e088510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 351.490388][ T29] #2: ffff88814e08c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 351.501100][ T29] 3 locks held by syz.3.784/8189: [ 351.506184][ T29] #0: ffff88802fef8b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 351.516815][ T29] #1: ffff88814e088510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 351.528025][ T29] #2: ffff88814e08c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 351.538408][ T29] 3 locks held by syz.4.782/8188: [ 351.543775][ T29] #0: ffff88802fefcda0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 351.554653][ T29] #1: ffff88814e088510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 351.565358][ T29] #2: ffff88814e08c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 351.575631][ T29] 3 locks held by syz.5.781/8190: [ 351.580939][ T29] #0: ffff88802fef94a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 351.591555][ T29] #1: ffff88814e088510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 351.601842][ T29] #2: ffff88814e08c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 351.612239][ T29] [ 351.614649][ T29] ============================================= [ 351.614649][ T29] [ 351.624191][ T29] NMI backtrace for cpu 1 [ 351.628804][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 351.636239][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.646401][ T29] Call Trace: [ 351.649904][ T29] [ 351.653688][ T29] dump_stack_lvl+0x18c/0x250 [ 351.661241][ T29] ? __wake_up_klogd+0xd9/0x100 [ 351.666378][ T29] ? show_regs_print_info+0x20/0x20 [ 351.671694][ T29] ? load_image+0x420/0x420 [ 351.676745][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 351.682532][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 351.688850][ T29] ? load_image+0x420/0x420 [ 351.693692][ T29] ? wq_watchdog_touch+0xef/0x170 [ 351.698957][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 351.705095][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 351.711211][ T29] watchdog+0xf59/0xfa0 [ 351.715403][ T29] ? watchdog+0x1e1/0xfa0 [ 351.719768][ T29] kthread+0x2fa/0x390 [ 351.723874][ T29] ? hungtask_pm_notify+0x50/0x50 [ 351.728974][ T29] ? kthread_blkcg+0xd0/0xd0 [ 351.733771][ T29] ret_from_fork+0x48/0x80 [ 351.738224][ T29] ? kthread_blkcg+0xd0/0xd0 [ 351.742837][ T29] ret_from_fork_asm+0x11/0x20 [ 351.747731][ T29] [ 351.751716][ T29] Sending NMI from CPU 1 to CPUs 0: [ 351.757083][ C0] NMI backtrace for cpu 0 [ 351.757096][ C0] CPU: 0 PID: 138 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 351.757112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.757123][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 351.757150][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x8/0x90 [ 351.757175][ C0] Code: 08 02 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 20 2b 7c 7e 65 8b 0d 21 2b 7c 7e 81 e1 00 01 ff 00 74 [ 351.757189][ C0] RSP: 0018:ffffc90002e075d0 EFLAGS: 00000207 [ 351.757203][ C0] RAX: ffffffff813bb5e6 RBX: ffffffff81000000 RCX: ffff88801ab09e00 [ 351.757216][ C0] RDX: 0000000000000000 RSI: 0000000000003188 RDI: 000000000009c000 [ 351.757227][ C0] RBP: 000000000009c000 R08: ffffc90002e07770 R09: 0000000000000009 [ 351.757238][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90002e07f30 [ 351.757248][ C0] R13: 000000000009c001 R14: 0000000000003188 R15: 0000000000000001 [ 351.757258][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 351.757272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.757284][ C0] CR2: 000055cf5e119168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 351.757301][ C0] Call Trace: [ 351.757306][ C0] [ 351.757311][ C0] unwind_next_frame+0x216/0x2990 [ 351.757334][ C0] ? ret_from_fork+0x47/0x80 [ 351.757356][ C0] ? ret_from_fork+0x48/0x80 [ 351.757378][ C0] ? ret_from_fork+0x48/0x80 [ 351.757397][ C0] ? stack_trace_save+0x100/0x100 [ 351.757419][ C0] arch_stack_walk+0x144/0x190 [ 351.757446][ C0] ? ret_from_fork+0x48/0x80 [ 351.757469][ C0] stack_trace_save+0xaa/0x100 [ 351.757490][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 351.757510][ C0] ? skb_release_data+0x609/0x7f0 [ 351.757532][ C0] ? worker_thread+0xa5e/0xfe0 [ 351.757552][ C0] ? kthread+0x2fa/0x390 [ 351.757567][ C0] ? ret_from_fork+0x48/0x80 [ 351.757586][ C0] ? ret_from_fork_asm+0x11/0x20 [ 351.757611][ C0] kasan_set_track+0x4e/0x70 [ 351.757630][ C0] ? kasan_set_track+0x4e/0x70 [ 351.757647][ C0] ? kasan_save_free_info+0x28/0x40 [ 351.757669][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 351.757689][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 351.757705][ C0] ? kmem_cache_free+0xf8/0x290 [ 351.757729][ C0] ? nsim_dev_trap_report_work+0x723/0xa90 [ 351.757749][ C0] ? process_scheduled_works+0xa60/0x1600 [ 351.757770][ C0] ? worker_thread+0xa5e/0xfe0 [ 351.757790][ C0] ? kthread+0x2fa/0x390 [ 351.757805][ C0] ? ret_from_fork+0x48/0x80 [ 351.757849][ C0] ? kmem_cache_free+0xf8/0x290 [ 351.757873][ C0] kasan_save_free_info+0x28/0x40 [ 351.757896][ C0] ____kasan_slab_free+0x126/0x1f0 [ 351.757918][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 351.757940][ C0] ? nsim_dev_trap_report_work+0x723/0xa90 [ 351.757960][ C0] kmem_cache_free+0xf8/0x290 [ 351.757989][ C0] nsim_dev_trap_report_work+0x723/0xa90 [ 351.758016][ C0] ? process_scheduled_works+0x975/0x1600 [ 351.758040][ C0] process_scheduled_works+0xa60/0x1600 [ 351.758077][ C0] ? worker_attach_to_pool+0x370/0x370 [ 351.758103][ C0] ? assign_work+0x3cc/0x5d0 [ 351.758127][ C0] worker_thread+0xa5e/0xfe0 [ 351.758156][ C0] ? _raw_spin_unlock+0x40/0x40 [ 351.758176][ C0] ? __kthread_parkme+0x71/0x1c0 [ 351.758197][ C0] kthread+0x2fa/0x390 [ 351.758213][ C0] ? pr_cont_work+0x550/0x550 [ 351.758235][ C0] ? kthread_blkcg+0xd0/0xd0 [ 351.758252][ C0] ret_from_fork+0x48/0x80 [ 351.758271][ C0] ? kthread_blkcg+0xd0/0xd0 [ 351.758289][ C0] ret_from_fork_asm+0x11/0x20 [ 351.758320][ C0] [ 351.789202][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 351.789243][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 351.789304][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.789335][ T29] Call Trace: [ 351.789356][ T29] [ 351.789377][ T29] dump_stack_lvl+0x18c/0x250 [ 351.789479][ T29] ? show_regs_print_info+0x20/0x20 [ 351.789565][ T29] ? load_image+0x420/0x420 [ 351.789665][ T29] panic+0x2ca/0x720 [ 351.789744][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 351.789823][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 351.789901][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 351.789975][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 351.790083][ T29] watchdog+0xf98/0xfa0 [ 351.790156][ T29] ? watchdog+0x1e1/0xfa0 [ 351.790245][ T29] kthread+0x2fa/0x390 [ 351.790297][ T29] ? hungtask_pm_notify+0x50/0x50 [ 351.790369][ T29] ? kthread_blkcg+0xd0/0xd0 [ 351.790428][ T29] ret_from_fork+0x48/0x80 [ 351.790491][ T29] ? kthread_blkcg+0xd0/0xd0 [ 351.790594][ T29] ret_from_fork_asm+0x11/0x20 [ 351.790698][ T29] [ 351.794517][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.795163][ T29] Kernel Offset: disabled [ 352.253235][ T29] Rebooting in 86400 seconds..