last executing test programs: 3.870262834s ago: executing program 4 (id=350): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x40) 3.752816431s ago: executing program 4 (id=352): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r0, 0x0, 0xf5) readv(r0, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/166, 0xa6}, {0x0}], 0x4) 3.406794796s ago: executing program 0 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0xc4fc9e906872338b, 0x70bd28, 0x0, {{0x15}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x26044050}, 0x20048000) 3.107850956s ago: executing program 0 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001a80)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3c00, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1000", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0) 2.973382638s ago: executing program 3 (id=362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private2, 0x4e23, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, @in=@multicast1, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@loopback, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.617639038s ago: executing program 0 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) lseek(r0, 0x0, 0x0) 2.524290356s ago: executing program 3 (id=364): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xe, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 2.302859026s ago: executing program 0 (id=366): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x20400a, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="8c53bab0232c512502286773e51165e0f3c7c37ba8c9755c0af1398ffe6bd124ad8f9dd168f38a31f809e453409ed9cca6adb7b17256e63ab71dc38d53c6f0fc09949dd93241cd5be403f5c019c1c7cd4515a2a531d7178d7c06f75d721d4a536ce6db8fee1540e47e17a0f8d9144778e43542707a94757271823576f7be28aabd313daa80dc4387c81f67d13f6175356185ae439af5dad005305fee416d20376db7a032a47630bbafdc1bb75d63f067310880ee687e3af9592bdd76efad7c5ab1ea3c8bef4dc09af00a68dccfd2d82ad28c74ffe61df3fb978d67e273b5dc53bc355a"], 0x1, 0x1fb, &(0x7f0000000380)="$eJzslr+O00AQxr9dW+scAiFR0lBwElDgsx1ANEh3DRUFEn9OFEhYYE5HAiddUpBIKEQ8ABIlEgUFPS+ABC0PgQIVTehoKFi03rW9RHYSJwopmJ90c5/X4/HsjDUbEATx3/Lt68+RRCPVR7EJz6x/dwofbvl/afx49una1d2Xd9999kb+RllMKed/vwvg446Dbv4s/+vpTfP/Jniub4HjnNG7JnfFPXDcNjoBwx2jH1n6AAy+7z/cbyf+/QMBJQJlQmUiZZqT+Y2HDA/y/KRk1v1Or9+K2+3kcIViVv3GOxxXrPzsfvnQ2QZW/UJwhEY3wXDD6Mvwstroklj7P+kW8Z2p+xdYarcvqm55+YpKpUbkE8cqWyUALJYqwPKAb7BUg/HcfLKr/IYqhINUZB2tH0egJHmnwtkpc+634lcL7l196DN84P6zYgqzC1a/mJ61skgvPmzrZ7IVOdDXqc/xioByMOcrhI6zXa8sxXySbxnOWPNJj5LX6VGjWrjV6fXP7z+O95K95EkUNS8FF4LgYrSVDiJtp8y/jXQ+HSnil55JCsEEnsbd7mGY2t9SSn0daVs2cTnAx0OOs6f1tWqumIjbsDQzfy5cMD17W+8rsycIglgfp8B+SYObCXOawPqte32NORIEQRAEQRAEQRAEsRx/AgAA//8UJDw7") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x40) read$msr(r1, 0x0, 0x0) 2.291819963s ago: executing program 1 (id=367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) 2.227907085s ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000040000000400000005"], 0x50) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.038303942s ago: executing program 4 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/check_wx_pages\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/100, 0x64) 1.994885861s ago: executing program 2 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='3', 0x1) 1.875711188s ago: executing program 2 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x80) 1.85128509s ago: executing program 3 (id=372): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2000003, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xc5c30000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0x0) 1.769310246s ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000540), 0x8) 1.733812569s ago: executing program 0 (id=374): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@newtfilter={0x8a4, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x4}, {0x0, 0xfff3}, {0x10, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x874, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_POLICE={0x860, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x4, 0x5, 0x44a, {0xd, 0x1, 0x6, 0x3, 0xffff, 0x7}, {0x1, 0x1, 0x0, 0x4451, 0x4, 0x6}, 0x6, 0x38000000, 0x44d}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x9, 0x2, 0xf, 0x0, 0x8, 0x4, 0x403a, 0x9, 0x7fffffff, 0x4e3e, 0xf295, 0x3ff, 0x7, 0x0, 0x8, 0x6, 0x3, 0x80000000, 0x7c, 0x8, 0x0, 0x1, 0x80000000, 0x8, 0x10, 0x7, 0x6, 0x3c75, 0x2, 0x5, 0x5, 0x6, 0x1ff, 0x6, 0x81, 0x0, 0xa2, 0x2, 0x80, 0x3, 0x2, 0x2, 0x74, 0x1, 0x800, 0x1, 0x9, 0x4, 0x8, 0x42, 0x5, 0x3800, 0x8, 0xffffff42, 0x5, 0x1, 0x0, 0x81, 0x5, 0x4, 0x8, 0xa, 0x10000, 0x8, 0x2, 0x10, 0xfffff000, 0x8, 0x1, 0x0, 0x0, 0x5, 0x0, 0x101, 0x8f, 0xfffffffb, 0x4, 0xffff, 0x800, 0x1, 0xfffffffb, 0x157e2220, 0x3b7c, 0x7, 0xb22, 0x9, 0xffff, 0x101, 0x6, 0x7, 0x2, 0xfffffff9, 0x6, 0x0, 0x6, 0xe000, 0x9, 0x5, 0x101, 0x5, 0x1, 0x8, 0x80, 0x5, 0x5, 0xff, 0x9, 0x600, 0x8, 0x4, 0xe35e, 0x9, 0x1, 0x0, 0x2, 0x10000, 0x3, 0x4, 0x4, 0x0, 0x6, 0xffffffff, 0x2, 0xa, 0x9eba, 0xe01, 0x2, 0xd, 0x1000, 0x6, 0x0, 0x8, 0x6, 0x8, 0xffff0001, 0x7fffffff, 0x3, 0x9, 0x9, 0x7, 0xb6, 0x3, 0xeccb, 0x7fffffff, 0x7, 0x5, 0x3, 0x34, 0x9, 0x19f91594, 0x2, 0x5, 0x7ff, 0x7, 0xc, 0x9b, 0x8d, 0x400, 0x9, 0x1, 0x5, 0x8, 0x9, 0xd4, 0x0, 0x38000000, 0x2, 0x4, 0xfffffffc, 0x7, 0x5, 0x2, 0x501, 0x0, 0x80, 0x0, 0x6, 0x754, 0x2e04, 0x0, 0x8001, 0x7, 0x6c0, 0x6, 0xffff, 0x21bb, 0x8, 0x0, 0x9a49, 0x8, 0x40, 0x6, 0x24000, 0x7, 0x2, 0x70000000, 0x3, 0x5, 0x6, 0x9, 0x1, 0x1, 0x3ff, 0xffffffff, 0x8, 0x3, 0x9, 0x7f, 0xa, 0x0, 0x1, 0x5, 0x1, 0x7, 0x101, 0x1d, 0x1a, 0x8, 0x80000000, 0x2, 0x0, 0x5, 0x2, 0x7, 0x3f, 0x8, 0x0, 0x500, 0x1, 0x3, 0xc81, 0x3, 0x100, 0xd, 0x6, 0x2, 0xd0f, 0x1, 0x6, 0xffffffc9, 0x6, 0x6, 0x6, 0x3, 0x400, 0x1, 0x101, 0x1, 0xb0, 0x80, 0x0, 0x6627, 0x7, 0x348a2a30]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0xb3a, 0x8000, 0x6094, 0x6, 0x8, 0x200000, 0x9, 0x101, 0xb, 0x86c2, 0x2, 0x9, 0x9030, 0x1, 0x76c, 0x42cf7b31, 0xda3, 0x9, 0x7, 0x3cb2a96a, 0x80000001, 0xfffffffd, 0x1122ca06, 0xb66b, 0x3, 0x3be, 0x0, 0x6, 0x6, 0xc09, 0x16d1, 0xc, 0xa3c, 0x6, 0x1, 0x3, 0x3, 0x402b, 0x233b, 0x2, 0x4, 0x10000, 0xfffffffd, 0x0, 0xe66, 0x1, 0x6, 0x7, 0x8, 0x3b, 0x81, 0x8, 0x7ff, 0x8bf, 0x2, 0x6, 0x1, 0x8, 0x3, 0x401, 0x1ff, 0x1000, 0x8, 0x10000, 0x3, 0xb, 0x1, 0x3, 0x3, 0x2b, 0x3, 0x100, 0x8, 0xfffffff0, 0x8, 0x9, 0x7, 0x6, 0x1, 0x3, 0x3dd, 0x5, 0x6, 0xa, 0x0, 0x55, 0x2, 0x3, 0xffff5c04, 0x6, 0xfffffe2a, 0x7, 0x8001, 0x200, 0xb, 0x40, 0x8000, 0x5, 0x3, 0x6, 0x80, 0x453, 0x2, 0x7ff, 0x4546b347, 0x0, 0x200, 0x5, 0x3088, 0x3, 0x0, 0xfffffff2, 0x4, 0x5, 0x2b5, 0x3, 0xf9, 0x3, 0x48, 0x2, 0x8, 0x6578ef01, 0x3186, 0x5, 0x5, 0x2, 0x41, 0x6, 0x6, 0x3, 0xfffffff9, 0x6, 0xd, 0x200, 0x0, 0x4, 0x81, 0x6, 0x2, 0xffffff01, 0x8, 0x1, 0x9, 0x6, 0xdb0, 0x6, 0x40ea5b3d, 0x9, 0xfffffff7, 0x80000000, 0x6, 0x7f, 0x4, 0xd80, 0x7, 0x4, 0x10000, 0x8, 0x8d, 0x7f, 0x7fff, 0xd, 0x68c, 0x5, 0xb9, 0x4, 0x100, 0x401, 0x8, 0xe88f, 0x9, 0x2, 0xc3f, 0x5, 0x80000001, 0x1, 0x4, 0x7463d6f0, 0x10001, 0x8, 0x80, 0xffff, 0x9, 0x34, 0x0, 0x3b7d, 0x4, 0xfffffff7, 0x5, 0x32, 0x7, 0x2d8, 0x6, 0x4, 0x7, 0x401, 0x3, 0xb, 0x81, 0x0, 0x6, 0x4, 0x1000, 0x5, 0x1000, 0x7e, 0x3, 0x1ff, 0x2, 0x5234dbbf, 0xfffffff8, 0x4, 0x8, 0xffffffff, 0x200, 0xfaa4, 0x10000, 0x1, 0xb0a, 0x1, 0x6, 0x9, 0x0, 0x8, 0x0, 0x3ff, 0x899, 0x2, 0xe, 0x6, 0x81e6, 0x1, 0x5f88, 0x16c1fccb, 0x473c, 0x1ff, 0x1, 0x192, 0x4, 0x1, 0x60, 0x8, 0x5, 0xffffffcb, 0x400, 0x9, 0x1, 0x7, 0x3, 0x8, 0xcd87, 0x8d, 0x598, 0x7]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 1.507264072s ago: executing program 0 (id=375): socket$inet6_tcp(0xa, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x6, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x1, [], [{{0x9, 0x5, 0x8a, 0x10, 0x400, 0x3, 0x8, 0x7, {0x4}}}]}}}}}]}}, 0x0) syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000440)={[{@file_umask={'file_umask', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@part={'part', 0x3d, 0xc}}]}, 0x2, 0x360, &(0x7f00000004c0)="$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") 1.2975645s ago: executing program 1 (id=376): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.118774869s ago: executing program 1 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 1.073066927s ago: executing program 4 (id=378): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41e27af3a3a924308cb010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d0499ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f44363853e21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4cea22d95bd7bea39c0100fb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5dda71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d572ed87cf12b9ce4e527266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f327b3669c159abfa125ee992a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b450c894a3e95d26e14259fdb65aa49761847cc1c13f18742072e80cbed0d5622618817583d0365f807882e539ff07c9205d3ee72efb8dd6853a02f49abd1b38d4571666a4d7d98c4f34f082eea025ac7b9e9fd030791df5d98a03ed76cdbb3241f96f22b6dd0da2bd8105c3408eeb8543ebc5de0849c1f31bd94033655fd11430fd1"], 0x4, 0x272, &(0x7f0000001f40)="$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") mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='nsfs\x00', 0x1108812, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x1, 0x2) 1.061091983s ago: executing program 2 (id=379): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 804.714946ms ago: executing program 2 (id=380): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 750.187774ms ago: executing program 4 (id=381): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000670000000800010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 720.240546ms ago: executing program 1 (id=382): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca249bf6ffffffffffffff556eabdca3f6729b0ec1218002a6e5", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) 693.52557ms ago: executing program 3 (id=383): syz_open_dev$sndctrl(&(0x7f0000000400), 0xb, 0x101000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c00), 0x840, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000c40)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000c80)='.\x00', &(0x7f0000000cc0), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 533.94901ms ago: executing program 2 (id=384): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa08c0d, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x555e, &(0x7f0000000400)="$eJzs3E1vG8UbAPBZp2nTl3//EeLArStVSIlUW3VeKrgFaHkTqaICB07g2I7l1vZGseOEnHrgiDjwTRBInDjyGThw5oY4gLghgbyzaZuEIqS4OE1+P2n97M6On5mxIivP2HIAzqzZ9Pdfk3A1XAwhTIUQroSQnyfFkVuJ4aUQwrUQQumJIynaHzWcDyFcCiFcHSWPOZPi1pc3hteXf3n3t+9+uHDu8lff/ji5VQOTNnpb6W7G851ujFkrxvtFe23YzmN3aVjEeKMzE+93s9i+01zPM+zU9vvV8rjYiv2zze3+KG50avVRbLU38vbNXhywP2zt58mfcL+2lV83mut5bPezPLb24ri7e/G9ba8/iHkaRb5P8/RhMNiPsb2524zr2XyQx3pvULTHvFmjuTuKwyIWw4V61mnk81g/xgt9wr3X7m3vpsPmVr+d9dLlSvWVSvVWubqVNZqD5lK51m3cWkrnWp1Rt/KgWeuutLKs1WlW6ll3Pp1r1evlajWdu91cb9d6abVaWazcLC/PF2c30rfufph2GuncKL7e7m0P2p1+upFtpfEZ8+lCZfHV+fR6NX1/dS1du3fnzuraBx/f/ujua6vvvFF0OjKtdG7h5sJCuXqzvFCdP0XrnwmP1j/6P+DI+j8rJj3G9cOxJJOeAMDzR/0PTMLLR+r/lQP1f/IP9X/3QXGdDcObVw7X/1v3Qnj29X9Q/4/Fiap/Y/1fCme1/p/A/gcci/ofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODM+mn667fzk9l4fblo/1/R9EJxnYQQSiGEP//GVDh/IOdUkWf6Kf2nD83h+yTkGUZjXCiOSyGEleL44//P+lUAAACA0+ubh9e+iNV6fJid9IQ4tuThv+4aN21KVz4Z19AhhOnZn8eUrTR6eHFMyfK/73Nhd0zZ8g2smTEli1tu58aQ6PC+2tNNHQgzT4QkhtIYpgMAAJwwByuBcVQhAAAAnEyfT3oCTEYSHn9mWHyB/0IMxQeCFw9cAQAAAM+Nx98PTyY6DwAAAOC/kNf/fv8PAAAATrf4+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc4d5KYNRGEAfja40JaqqOq+V+kOjtEjdNldKw7QS3CALDhDLsAZyC5HiCDC4xBIWCRibCvR90lmsDE/bxAsZkYaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANt1Uqyr+/fh/ac52d5k8vQEAAADO2VSref1kms4/N9e/NJe+NedFRJQRcW7sPogPJ5mDJqd6vP/q+P7qSQ3XEXXC/jNGzfEpIn42x93Xtr8FAAAAeL/Wi+UsjdbTw7TvguhSmrQpJ78y5RURUU1vM6WV+7zvWaImf+vf9zD+ZIlLE1sxzhSWptyGudJepP67H2btxkdNkZry7NsORWbrOwAA0KHBSdPtKAQAAIAu/e67APpRxMNS5mEpcJSaZnnv48kZAAAA8AYVfRcAAAAAtK4e/3e0/9/O/n8AAADQj7T/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3aVKv5erGcPXth+Lqc7e4y+XoEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP/ryjQAiEQRjsXd+ZzP0PKw0aGptUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3f/k/MTXOJHOvjaXnkWTt1Ng6NfbOjaM/jK9fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79/MaRxUHAPw7sztb2yrGKDlERMGDXmy6ra29iYgSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3puoZd66yGHCuJxZWZnkmkTdBvtzKb5fODN+2aYzPu+WQj5znsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDZfGc77uSHmXGcludu3b+2nPe3H+pzN9bvzOctj5Mmk94fXhp377adBwAAAAdIp6rvI+JutrGY9+lMUf9n1TV5zf/9M+O4qucfrvurvqr98/bbr/de2BpoZjxOftNzK8PB8Z2pdB/fLKfbs/96Rbd48sW7l07xgaQfrD2/mRXPM/n25s33ekV4qIlsAYC9OFb1ZVD9PpT3/TYTA+DA6NYK76r+78y0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAEzbX4mgVJxEx392Oc7fvX1verb+xfme+aqevX1+Pr7fvmd8ii4hzK8PB8UZnM90uX7l6YWk4HFz6D0ES4yf9iN/+ckT8D6PvKXi7nP6Fjya4OKKFDPcS/DUdaUwUHI3GxkrLD7vtKe+voL2fSQAAPJmysuV1/d1sYzE/l8xGjH54sP5/rRbHhPX/vY9P36qPVa//+43NcPotrF78fOHylatvrFxcOj84P/j0zRP9t/onz5w6dWaheFeysOONSdpetgAAAOwTo9FotPVFr2z1+j+d3bn+f6QWx4T1/xff9b+qD9xR/+9qe9Gv7UwAAAAOtude+fOPZJfzSa/XjaXV1Uv9L4tj0utFEZ0YH1tI9ZEdKlu9/u/Mtp0VAAAA0ITNteSB9f+ztTgmXP9/+scXf67fsxMRh8v1/2PLnw3PNjedqdbEnxO3PUcAAADadbhs9fX/rNj/n25teUgj4vVXx3H5bwD/sf7Pyvq/8/43P9XHqu//P9ncFKdSOjd+HkU/F9GdazsjAAAAnmRPlS0v9n/PNhY/+eXIhz37/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9ncAAAD//wRYPJs=") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x80000001) 413.485869ms ago: executing program 3 (id=385): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x11, 0x9e21, &(0x7f0000013e80)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 386.449049ms ago: executing program 1 (id=386): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa], 0x0, [0x1, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x2, 0xd97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8]}}}}]}, 0x88}}, 0x8) 329.96354ms ago: executing program 4 (id=387): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=388): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 88.620299][ T5596] cgroup: Unknown subsys name 'net' [ 88.715024][ T5596] cgroup: Unknown subsys name 'cpuset' [ 88.724738][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.406734][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.774221][ T10] cfg80211: failed to load regulatory.db [ 92.863957][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.866740][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.867326][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.868563][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.869235][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.954111][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.958162][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.960443][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.984126][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.985275][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.986118][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.987375][ T4926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.988172][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.990091][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.990820][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.022127][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.045472][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.069834][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.077427][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.088255][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.091518][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.094068][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.097233][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.117038][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.129941][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.150541][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 94.159660][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 94.171343][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.171879][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 94.178457][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.209155][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.341577][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 94.560078][ T5616] infiniband rxe0: set active [ 94.561933][ T5616] infiniband rxe0: added rxe_eth0 [ 94.590652][ T31] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.603196][ T5616] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 94.603235][ T5616] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 94.603281][ T5616] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.669743][ T5616] RDS/IB: rxe0: added [ 94.670141][ T5616] smc: adding ib device rxe0 with port count 1 [ 94.670260][ T5616] smc: ib device rxe0 port 1 has no pnetid [ 94.706793][ T196] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.748370][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.011735][ T55] Bluetooth: hci0: command tx timeout [ 95.091862][ T55] Bluetooth: hci3: command tx timeout [ 95.092105][ T55] Bluetooth: hci1: command tx timeout [ 95.171633][ T5623] Bluetooth: hci2: command tx timeout [ 95.171784][ T5623] Bluetooth: hci4: command tx timeout [ 95.190261][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.487003][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.666399][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.668463][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.668653][ T5614] bridge_slave_0: entered allmulticast mode [ 95.691587][ T5614] bridge_slave_0: entered promiscuous mode [ 95.727258][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.727354][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.727472][ T5612] bridge_slave_0: entered allmulticast mode [ 95.728967][ T5612] bridge_slave_0: entered promiscuous mode [ 95.739268][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.739562][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.742335][ T5609] bridge_slave_0: entered allmulticast mode [ 95.746773][ T5609] bridge_slave_0: entered promiscuous mode [ 95.753376][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.753671][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.754046][ T5614] bridge_slave_1: entered allmulticast mode [ 95.761122][ T5614] bridge_slave_1: entered promiscuous mode [ 95.764972][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.827608][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.827724][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.827895][ T5612] bridge_slave_1: entered allmulticast mode [ 95.829290][ T5612] bridge_slave_1: entered promiscuous mode [ 95.865647][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.865762][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.866196][ T5609] bridge_slave_1: entered allmulticast mode [ 95.868450][ T5609] bridge_slave_1: entered promiscuous mode [ 95.918683][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.918799][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.919213][ T5618] bridge_slave_0: entered allmulticast mode [ 95.930512][ T5618] bridge_slave_0: entered promiscuous mode [ 96.002981][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.003222][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.003383][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.003515][ T5618] bridge_slave_1: entered allmulticast mode [ 96.006935][ T5618] bridge_slave_1: entered promiscuous mode [ 96.024084][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.042279][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.055690][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.106912][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.110347][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.156119][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.229290][ T5614] team0: Port device team_slave_0 added [ 96.237928][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.240097][ T5612] team0: Port device team_slave_0 added [ 96.256180][ T5609] team0: Port device team_slave_0 added [ 96.258578][ T5612] team0: Port device team_slave_1 added [ 96.273738][ T5614] team0: Port device team_slave_1 added [ 96.315977][ T5609] team0: Port device team_slave_1 added [ 96.370202][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.370221][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.370275][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.423603][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.423621][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.423644][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.426775][ T5618] team0: Port device team_slave_0 added [ 96.426931][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.429992][ T5618] team0: Port device team_slave_1 added [ 96.431777][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.431794][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.431821][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.545843][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.545862][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.545889][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.551427][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.551468][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.551542][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.618894][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.618946][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.619020][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.749619][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.749638][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.749665][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.798795][ T5612] hsr_slave_0: entered promiscuous mode [ 96.800170][ T5612] hsr_slave_1: entered promiscuous mode [ 96.843330][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.843350][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.843377][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.855998][ T5614] hsr_slave_0: entered promiscuous mode [ 96.858320][ T5614] hsr_slave_1: entered promiscuous mode [ 96.859263][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 96.859554][ T5614] Cannot create hsr debugfs directory [ 96.948376][ T5609] hsr_slave_0: entered promiscuous mode [ 96.949546][ T5609] hsr_slave_1: entered promiscuous mode [ 96.950380][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 96.950399][ T5609] Cannot create hsr debugfs directory [ 97.090262][ T5618] hsr_slave_0: entered promiscuous mode [ 97.090867][ T55] Bluetooth: hci0: command tx timeout [ 97.093606][ T5618] hsr_slave_1: entered promiscuous mode [ 97.095876][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 97.095955][ T5618] Cannot create hsr debugfs directory [ 97.181337][ T55] Bluetooth: hci1: command tx timeout [ 97.181373][ T55] Bluetooth: hci3: command tx timeout [ 97.250983][ T55] Bluetooth: hci2: command tx timeout [ 97.251636][ T5623] Bluetooth: hci4: command tx timeout [ 97.669383][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.689364][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.690528][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.713562][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.715466][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.732799][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.737343][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.751950][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.898846][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.898980][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.900001][ T5616] bridge_slave_0: entered allmulticast mode [ 97.906579][ T5616] bridge_slave_0: entered promiscuous mode [ 97.916332][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.938695][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.939394][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.939611][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.939768][ T5616] bridge_slave_1: entered allmulticast mode [ 97.947361][ T5616] bridge_slave_1: entered promiscuous mode [ 98.001293][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.005554][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.025951][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.035679][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.035913][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.055518][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.084965][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.089377][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.132818][ T5616] team0: Port device team_slave_0 added [ 98.157510][ T5616] team0: Port device team_slave_1 added [ 98.202884][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.202904][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.202931][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.231664][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.231710][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.231781][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.317278][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.321903][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.363570][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.367766][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.390533][ T5616] hsr_slave_0: entered promiscuous mode [ 98.397256][ T5616] hsr_slave_1: entered promiscuous mode [ 98.397820][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 98.397834][ T5616] Cannot create hsr debugfs directory [ 98.400201][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.412854][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.418146][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.439681][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.604104][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.607602][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.608704][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.625180][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.656817][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.659847][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.695040][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.698300][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.754183][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.853534][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.872103][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.921247][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.925824][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.927907][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.939138][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.959427][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.960218][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.986100][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.989986][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.018420][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.018515][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.019056][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.030268][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.060239][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.107783][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.107868][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.141692][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.141788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.180872][ T5623] Bluetooth: hci0: command tx timeout [ 99.196286][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.250945][ T5623] Bluetooth: hci3: command tx timeout [ 99.250979][ T5623] Bluetooth: hci1: command tx timeout [ 99.296485][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.310544][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.331271][ T55] Bluetooth: hci4: command tx timeout [ 99.331305][ T55] Bluetooth: hci2: command tx timeout [ 99.388914][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.389037][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.408975][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.436632][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.436744][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.464292][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.464382][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.511527][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.511657][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.695551][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.818507][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.867887][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.868083][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.919611][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.919760][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.549743][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.759748][ T5614] veth0_vlan: entered promiscuous mode [ 100.814655][ T5614] veth1_vlan: entered promiscuous mode [ 100.927580][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.997886][ T5614] veth0_macvtap: entered promiscuous mode [ 101.034360][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.061305][ T5614] veth1_macvtap: entered promiscuous mode [ 101.166717][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.208425][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.227991][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.251706][ T5623] Bluetooth: hci0: command tx timeout [ 101.277096][ T5612] veth0_vlan: entered promiscuous mode [ 101.325206][ T5609] veth0_vlan: entered promiscuous mode [ 101.335057][ T5623] Bluetooth: hci1: command tx timeout [ 101.335186][ T5623] Bluetooth: hci3: command tx timeout [ 101.372330][ T5612] veth1_vlan: entered promiscuous mode [ 101.411229][ T55] Bluetooth: hci2: command tx timeout [ 101.411265][ T55] Bluetooth: hci4: command tx timeout [ 101.436161][ T5609] veth1_vlan: entered promiscuous mode [ 101.471647][ T993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.482401][ T993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.482544][ T993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.482650][ T993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.526985][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.557260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.557290][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.684795][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.684819][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.715410][ T5609] veth0_macvtap: entered promiscuous mode [ 101.758765][ T5612] veth0_macvtap: entered promiscuous mode [ 101.768063][ T5609] veth1_macvtap: entered promiscuous mode [ 101.806164][ T5612] veth1_macvtap: entered promiscuous mode [ 101.880234][ T5616] veth0_vlan: entered promiscuous mode [ 101.915695][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.937850][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.957585][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.970074][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.984875][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.987348][ T5616] veth1_vlan: entered promiscuous mode [ 102.122515][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.282896][ T5616] veth0_macvtap: entered promiscuous mode [ 102.340658][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.340685][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.357618][ T5616] veth1_macvtap: entered promiscuous mode [ 102.382348][ T5618] veth0_vlan: entered promiscuous mode [ 102.412331][ T993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412429][ T993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412467][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.412480][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.412693][ T993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.471246][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.472788][ T985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.473056][ T985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.473744][ T985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.543411][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.543433][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.587552][ T5618] veth1_vlan: entered promiscuous mode [ 102.631777][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.632222][ T5818] device-mapper: ioctl: device name cannot contain '/' [ 102.684996][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.685036][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.688172][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.762085][ T985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.762960][ T985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.782224][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.782361][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.865017][ T5822] loop1: detected capacity change from 0 to 1024 [ 102.866903][ T5822] EXT4-fs: Ignoring removed orlov option [ 102.894739][ T5822] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.929941][ T5822] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 102.944777][ T5822] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.959205][ T5618] veth0_macvtap: entered promiscuous mode [ 102.972772][ T5822] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.10: Invalid inode table block 0 in block_group 0 [ 102.972934][ T5822] loop1: lost filesystem error report for type 5 error -117 [ 102.977490][ T5822] EXT4-fs (loop1): Remounting filesystem read-only [ 102.977528][ T5822] Quota error (device loop1): write_blk: dquota write failed [ 102.977631][ T5822] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 102.978161][ T5822] EXT4-fs (loop1): 1 truncate cleaned up [ 102.980851][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 102.980872][ C1] EXT4-fs (loop1): initial error at time 1792513680: __ext4_get_inode_loc:5733 [ 102.980897][ C1] EXT4-fs (loop1): last error at time 1792513680: __ext4_get_inode_loc:5733 [ 103.074093][ T5822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.108828][ T5618] veth1_macvtap: entered promiscuous mode [ 103.144039][ T5822] EXT4-fs (loop1): shut down requested (2) [ 103.189854][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.189877][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.224615][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.258701][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.259046][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.385389][ T985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.390110][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.390133][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.421226][ T993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.424272][ T993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.703501][ T985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.745477][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.745500][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.895001][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.895025][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.008841][ T5841] loop1: detected capacity change from 0 to 4096 [ 104.561586][ T5848] loop1: detected capacity change from 0 to 64 [ 104.959162][ T5862] netlink: 76 bytes leftover after parsing attributes in process `syz.4.21'. [ 105.089393][ T5866] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.173665][ T5597] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.247392][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.340867][ T5597] usb 4-1: Using ep0 maxpacket: 32 [ 105.343337][ T5597] usb 4-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 105.374380][ T5597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.374413][ T5597] usb 4-1: Product: syz [ 105.374429][ T5597] usb 4-1: Manufacturer: syz [ 105.374455][ T5597] usb 4-1: SerialNumber: syz [ 105.424642][ T5597] usb 4-1: config 0 descriptor?? [ 105.454848][ T5597] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 105.455158][ T5597] dvb-usb: bulk message failed: -22 (4/0) [ 105.455180][ T5597] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.455364][ T5597] dvb-usb: bulk message failed: -22 (5/0) [ 105.455379][ T5597] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.522306][ T5597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.524194][ T5597] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 105.524258][ T5597] usb 4-1: media controller created [ 105.596639][ T5597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.649426][ T5597] usb 4-1: selecting invalid altsetting 3 [ 105.649449][ T5597] ttusb2: set interface to alts=3 failed [ 105.671468][ T5859] ttusb2: i2c wr len=245 too high [ 105.672041][ T5859] dvb-usb: bulk message failed: -22 (7/0) [ 105.672060][ T5859] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 105.672118][ T5859] ttusb2: i2c transfer failed. [ 105.672157][ T5859] ttusb2: i2c wr len=4096 too high [ 105.759777][ T5597] DVB: Unable to find symbol tda10086_attach() [ 105.759810][ T5597] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 105.785822][ T5597] dvb-usb: bulk message failed: -22 (4/0) [ 105.785851][ T5597] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.785982][ T5597] dvb-usb: bulk message failed: -22 (5/0) [ 105.785997][ T5597] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.786070][ T5597] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 105.846282][ T5597] usb 4-1: USB disconnect, device number 2 [ 105.996823][ T5597] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.030935][ T5805] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.070489][ T5870] loop1: detected capacity change from 0 to 32768 [ 106.158440][ T5870] ea_get: invalid extended attribute [ 106.158461][ T5870] ffff88806692b828: 04 00 00 00 .... [ 106.203331][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 106.207670][ T5805] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 106.210177][ T5805] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 106.210205][ T5805] usb 3-1: config 0 has no interface number 0 [ 106.210249][ T5805] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.210278][ T5805] usb 3-1: config 0 interface 85 has no altsetting 0 [ 106.283078][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.283111][ T5805] usb 3-1: Product: syz [ 106.283129][ T5805] usb 3-1: Manufacturer: syz [ 106.283145][ T5805] usb 3-1: SerialNumber: syz [ 106.329701][ T5805] usb 3-1: config 0 descriptor?? [ 106.880127][ T5901] process 'syz.3.35' launched './file0' with NULL argv: empty string added [ 106.987342][ T5805] appletouch 3-1:0.85: Geyser mode initialized. [ 107.009840][ T5805] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5 [ 107.237741][ T5597] usb 3-1: USB disconnect, device number 2 [ 107.331414][ T5876] loop0: detected capacity change from 0 to 32768 [ 107.378969][ T5597] appletouch 3-1:0.85: input: appletouch disconnected [ 107.531814][ T5876] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.531839][ T5876] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.790634][ T5924] use of bytesused == 0 is deprecated and will be removed in the future, [ 107.790655][ T5924] use the actual size instead. [ 107.858743][ T5876] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 107.895511][ T5739] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.895536][ T5739] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 108.141170][ T5910] loop3: detected capacity change from 0 to 32768 [ 108.186600][ T5910] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.38 (5910) [ 108.335338][ T5910] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.335397][ T5910] BTRFS info (device loop3): using sha256 checksum algorithm [ 108.365491][ T5739] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 469ms [ 108.393307][ T5739] gfs2: fsid=syz:syz.0: jid=0: Done [ 108.395587][ T5876] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 108.466935][ T5876] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 108.515761][ T5910] BTRFS info (device loop3): enabling ssd optimizations [ 108.515796][ T5910] BTRFS info (device loop3): turning on async discard [ 108.515821][ T5910] BTRFS info (device loop3): enabling free space tree [ 108.609498][ T5921] loop4: detected capacity change from 0 to 32768 [ 108.619738][ T5910] capability: warning: `syz.3.38' uses 32-bit capabilities (legacy support in use) [ 108.746971][ T5921] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 108.842053][ T5616] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.908710][ T5921] XFS (loop4): Ending clean mount [ 109.094107][ T5960] loop1: detected capacity change from 0 to 1024 [ 109.096918][ T5960] ======================================================= [ 109.096918][ T5960] WARNING: The mand mount option has been deprecated and [ 109.096918][ T5960] and is ignored by this kernel. Remove the mand [ 109.096918][ T5960] option from the mount to silence this warning. [ 109.096918][ T5960] ======================================================= [ 109.097008][ T5960] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.097992][ T5960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.163456][ T5960] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.249423][ T5960] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.50: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 109.249635][ T5960] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.250966][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.250988][ C1] EXT4-fs (loop1): initial error at time 2000000004: ext4_ext_check_inode:521: inode 11 [ 109.251021][ C1] EXT4-fs (loop1): last error at time 2000000004: ext4_ext_check_inode:521: inode 11 [ 109.254473][ T5960] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.50: couldn't read orphan inode 11 (err -117) [ 109.254576][ T5960] loop1: lost filesystem error report for type 5 error -117 [ 109.333054][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.490398][ T5960] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.50: Invalid block bitmap block 0 in block_group 0 [ 109.521333][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.524097][ T5960] Quota error (device loop1): write_blk: dquota write failed [ 109.524148][ T5960] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 109.524542][ T5958] syz.2.49 (5958) used greatest stack depth: 17352 bytes left [ 109.534431][ T5960] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.50: Failed to acquire dquot type 0 [ 109.934335][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.027448][ T92] IPVS: starting estimator thread 0... [ 110.131238][ T5974] IPVS: using max 25 ests per chain, 60000 per kthread [ 110.136551][ T5976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 110.239773][ T993] IPVS: starting estimator thread 0... [ 110.320816][ T5983] IPVS: using max 30 ests per chain, 72000 per kthread [ 110.596332][ T5996] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.917104][ T6014] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 110.917131][ T6014] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.69'. [ 110.917165][ T6014] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 111.081246][ T5807] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.232004][ T5807] usb 2-1: New USB device found: idVendor=04b4, idProduct=931e, bcdDevice=0.40 [ 111.237651][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.237679][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.269841][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.269871][ T5807] usb 2-1: Product: syz [ 111.269886][ T5807] usb 2-1: Manufacturer: syz [ 111.269902][ T5807] usb 2-1: SerialNumber: syz [ 111.508754][ T6037] loop3: detected capacity change from 0 to 256 [ 111.659476][ T6037] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.659512][ T6037] FAT-fs (loop3): Filesystem has been set read-only [ 111.691717][ T6037] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 111.741269][ T5807] usb 2-1: USB disconnect, device number 2 [ 111.821770][ T6027] loop2: detected capacity change from 0 to 32768 [ 111.843689][ T6027] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.77 (6027) [ 111.864929][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.906638][ T6027] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.906675][ T6027] BTRFS info (device loop2): using blake2b checksum algorithm [ 112.088353][ T6027] BTRFS info (device loop2): enabling ssd optimizations [ 112.088386][ T6027] BTRFS info (device loop2): turning on async discard [ 112.088405][ T6027] BTRFS info (device loop2): enabling free space tree [ 112.088437][ T6027] BTRFS info (device loop2): use zstd compression, level 3 [ 112.178098][ T6033] loop4: detected capacity change from 0 to 32768 [ 112.220595][ T6033] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.313176][ T6033] XFS (loop4): Ending clean mount [ 112.389544][ T6070] capability: warning: `syz.3.85' uses deprecated v2 capabilities in a way that may be insecure [ 112.512639][ T5618] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.517859][ T6074] ip_tables: iptables: counters copy to user failed while replacing table [ 112.519480][ T6074] ip_tables: iptables: counters copy to user failed while replacing table [ 112.693482][ T5805] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.852676][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 112.856417][ T5805] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.857919][ T5805] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.857953][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.857981][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.858006][ T5805] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.858050][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.009225][ T6084] loop3: detected capacity change from 0 to 1024 [ 113.132248][ T5805] usb 2-1: GET_CAPABILITIES returned 0 [ 113.132311][ T5805] usbtmc 2-1:16.0: can't read capabilities [ 113.344455][ T5807] usb 2-1: USB disconnect, device number 3 [ 113.406786][ T5609] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.471547][ T6078] loop0: detected capacity change from 0 to 32768 [ 113.800352][ T6095] loop4: detected capacity change from 0 to 1024 [ 113.954596][ T6095] hfsplus: bad catalog entry type [ 114.877520][ T6127] loop4: detected capacity change from 0 to 128 [ 114.933506][ T6127] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.934618][ T6127] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.999567][ T6127] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 115.115903][ T5618] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.312566][ T6141] loop4: detected capacity change from 0 to 512 [ 115.317597][ T6141] EXT4-fs: Ignoring removed oldalloc option [ 115.381799][ T6141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.489020][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.531340][ T5597] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.601753][ T6130] loop2: detected capacity change from 0 to 32768 [ 115.607476][ T6130] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.114 (6130) [ 115.655280][ T6130] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 115.655316][ T6130] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 115.696259][ T5597] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 115.697594][ T5597] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.697623][ T5597] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.697649][ T5597] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.733539][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.733569][ T5597] usb 2-1: Product: syz [ 115.733584][ T5597] usb 2-1: Manufacturer: syz [ 115.733599][ T5597] usb 2-1: SerialNumber: syz [ 115.760981][ T5619] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.836386][ T6151] loop4: detected capacity change from 0 to 2048 [ 115.866864][ T6151] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.883084][ T6130] BTRFS info (device loop2): enabling ssd optimizations [ 115.883114][ T6130] BTRFS info (device loop2): turning on async discard [ 115.883131][ T6130] BTRFS info (device loop2): enabling free space tree [ 115.929294][ T5619] usb 1-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 115.952787][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.952817][ T5619] usb 1-1: Product: syz [ 115.952833][ T5619] usb 1-1: Manufacturer: syz [ 115.952849][ T5619] usb 1-1: SerialNumber: syz [ 115.992087][ T5619] usb 1-1: config 0 descriptor?? [ 115.997077][ T5619] hub 1-1:0.0: bad descriptor, ignoring hub [ 115.997108][ T5619] hub 1-1:0.0: probe with driver hub failed with error -5 [ 116.038902][ T6162] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.052798][ T5597] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 116.225848][ T5619] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 116.275132][ T5597] usb 2-1: USB disconnect, device number 4 [ 116.308203][ T5597] usblp0: removed [ 116.325150][ T5609] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 116.328114][ T5619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.340169][ T5619] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 116.340325][ T5619] usb 1-1: media controller created [ 116.502999][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 116.524311][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.815706][ T5619] DVB: Unable to find symbol dib7000p_attach() [ 116.815725][ T5619] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 117.032238][ T5619] rc_core: IR keymap rc-dib0700-rc5 not found [ 117.032258][ T5619] Registered IR keymap rc-empty [ 117.033064][ T5619] dvb-usb: could not initialize remote control. [ 117.033077][ T5619] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 117.093628][ T5619] usb 1-1: USB disconnect, device number 2 [ 117.260939][ T5807] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.265014][ T5619] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 117.382961][ T5739] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.407999][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 117.424273][ T5807] usb 3-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 117.425002][ T5807] usb 3-1: config 0 has no interfaces? [ 117.429792][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 117.429822][ T5807] usb 3-1: Product: syz [ 117.429840][ T5807] usb 3-1: Manufacturer: syz [ 117.469801][ T5807] usb 3-1: config 0 descriptor?? [ 117.490614][ T6201] loop4: detected capacity change from 0 to 1024 [ 117.560813][ T5739] usb 2-1: Using ep0 maxpacket: 32 [ 117.561555][ T5739] usb 2-1: New USB device found: idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 117.566954][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.603043][ T5739] usb 2-1: config 0 descriptor?? [ 117.609541][ T6201] hfsplus: invalid length 1280 has been corrected to 255 [ 117.655661][ T5739] gspca_main: sq930x-2.14.0 probing 041e:403c [ 117.696368][ T5807] usb 3-1: USB disconnect, device number 3 [ 117.939868][ T6197] loop0: detected capacity change from 0 to 32768 [ 117.994155][ T6197] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 118.033061][ T6216] macvlan2: entered promiscuous mode [ 118.033090][ T6216] bridge0: entered promiscuous mode [ 118.069950][ T6197] XFS (loop0): Ending clean mount [ 118.249110][ T5612] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 118.467785][ T6224] loop3: detected capacity change from 0 to 4096 [ 118.500783][ T5739] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 118.534028][ T6224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 118.561390][ T5739] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 118.569071][ T5739] usb 2-1: USB disconnect, device number 5 [ 118.659939][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.928863][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.499387][ T6258] loop1: detected capacity change from 0 to 764 [ 119.652008][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 119.982002][ T5597] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 120.136521][ T5597] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.137515][ T5597] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 120.137568][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.137597][ T5597] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.137623][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.137651][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.139856][ T5597] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 120.139904][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.139932][ T5597] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.139959][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.139985][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.201093][ T5739] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.238089][ T5597] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 120.238144][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.238171][ T5597] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.238196][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.238230][ T5597] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.313061][ T6262] loop4: detected capacity change from 0 to 32768 [ 120.333722][ T5597] usb 3-1: string descriptor 0 read error: -22 [ 120.333864][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.364486][ T5739] usb 4-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 120.381991][ T5597] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 120.400485][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.400514][ T5739] usb 4-1: Product: syz [ 120.400528][ T5739] usb 4-1: Manufacturer: syz [ 120.400543][ T5739] usb 4-1: SerialNumber: syz [ 120.440459][ T33] audit: type=1400 audit(2000000015.920:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="fo/" pid=6286 comm="syz.0.171" [ 120.471494][ T6262] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.497988][ T5739] ums-karma 4-1:1.0: USB Mass Storage device detected [ 120.562336][ T5739] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 120.562336][ T5739] Please send a copy of this message to and [ 120.618436][ T6262] XFS (loop4): Ending clean mount [ 120.761320][ T5618] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.261097][ T5807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.410939][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 121.412310][ T5807] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.413771][ T5807] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 121.413824][ T5807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 121.413853][ T5807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.413880][ T5807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 121.413909][ T5807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.413934][ T5807] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.413978][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.623942][ T5739] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 121.628718][ T5739] usb 4-1: USB disconnect, device number 3 [ 121.729596][ T6299] loop0: detected capacity change from 0 to 131072 [ 121.748821][ T6299] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 121.748874][ T6299] F2FS-fs (loop0): Test dummy encryption mode enabled [ 121.769962][ T6299] F2FS-fs (loop0): invalid crc value [ 121.795726][ T5807] usb 2-1: GET_CAPABILITIES returned 0 [ 121.795772][ T5807] usbtmc 2-1:16.0: can't read capabilities [ 121.856567][ T6299] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 121.857381][ T6299] loop0: lost filesystem error report for type 5 error -117 [ 121.870993][ T6299] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.873517][ T6299] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 121.873553][ T6299] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 121.873820][ T6299] F2FS-fs (loop0): Start checkpoint disabled! [ 121.927606][ T6299] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 121.929600][ T6299] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 122.008254][ T5807] usb 2-1: USB disconnect, device number 6 [ 122.083417][ T6299] fscrypt: AES-256-XTS using blk-crypto-fallback [ 122.122226][ T6313] loop4: detected capacity change from 0 to 512 [ 122.156113][ T6313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.293425][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.634330][ T6322] loop4: detected capacity change from 0 to 1024 [ 122.719703][ T6322] hfsplus: request for non-existent node 131072 in B*Tree [ 122.719728][ T6322] hfsplus: request for non-existent node 131072 in B*Tree [ 122.743589][ T6324] bond0: option arp_validate: invalid value (alLÓ]_) [ 123.047533][ T13] IPVS: starting estimator thread 0... [ 123.074947][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 123.075017][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 123.131283][ T6337] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.346978][ T6343] loop3: detected capacity change from 0 to 2048 [ 123.439179][ T6348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.612223][ T6354] loop1: detected capacity change from 0 to 256 [ 123.613858][ T6354] exfat: Deprecated parameter 'namecase' [ 123.692072][ T6354] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d) [ 124.053373][ T6365] loop4: detected capacity change from 0 to 256 [ 124.105885][ T6365] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 124.176157][ T6365] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 124.342735][ T6369] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 124.828876][ T6361] loop3: detected capacity change from 0 to 131072 [ 124.853054][ T5597] usb 3-1: USB disconnect, device number 4 [ 124.876852][ T6361] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 124.876881][ T6361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.894912][ T6361] F2FS-fs (loop3): invalid crc value [ 125.001490][ T6361] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.037298][ T6361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.037330][ T6361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 125.255420][ T6388] jffs2: notice: (6388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.372721][ T6392] loop0: detected capacity change from 0 to 256 [ 125.374533][ T6392] exfat: Deprecated parameter 'namecase' [ 125.480146][ T6392] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8c24d3e4, utbl_chksum : 0xe619d30d) [ 125.832912][ T6402] loop0: detected capacity change from 0 to 4096 [ 125.915318][ T6407] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.845249][ T6423] loop4: detected capacity change from 0 to 512 [ 126.858155][ T6423] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 126.858175][ T6423] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.983575][ T6423] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 126.990832][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 126.990886][ C0] EXT4-fs (loop4): initial error at time 2000000022: ext4_mb_generate_buddy:1315 [ 126.990958][ C0] EXT4-fs (loop4): last error at time 2000000022: ext4_mb_generate_buddy:1315 [ 126.992265][ T6423] EXT4-fs (loop4): Remounting filesystem read-only [ 127.070336][ T6423] EXT4-fs (loop4): 1 truncate cleaned up [ 127.082548][ T985] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 127.083035][ T985] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.083059][ T985] Quota error (device loop4): write_blk: dquota write failed [ 127.083074][ T985] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 127.083092][ T985] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.083111][ T985] Quota error (device loop4): write_blk: dquota write failed [ 127.083125][ T985] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 127.083225][ T985] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 127.083245][ T985] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 127.083264][ T985] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 127.139492][ T6423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.193319][ T6423] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.224581][ T985] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.802911][ T6438] loop9: detected capacity change from 0 to 7 [ 127.825882][ T6438] Dev loop9: unable to read RDB block 7 [ 127.825941][ T6438] loop9: unable to read partition table [ 127.826160][ T6438] loop9: partition table beyond EOD, truncated [ 127.826197][ T6438] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 128.029996][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.176724][ T6447] loop1: detected capacity change from 0 to 1024 [ 128.243061][ T6454] program syz.3.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.570026][ T6466] trusted_key: encrypted_key: keyword 'epdate' not recognized [ 128.598083][ T6464] loop1: detected capacity change from 0 to 2048 [ 128.609570][ T6464] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.656119][ T6471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.670476][ T6470] loop3: detected capacity change from 0 to 512 [ 128.730041][ T6470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 128.730073][ T6470] FAT-fs (loop3): Filesystem has been set read-only [ 128.831647][ T5739] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.984445][ T5739] usb 5-1: New USB device found: idVendor=047e, idProduct=ffff, bcdDevice=0.00 [ 128.986487][ T5739] usb 5-1: config 0 has no interfaces? [ 128.986524][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.007549][ T5739] usb 5-1: config 0 descriptor?? [ 129.148809][ T6486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.189314][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'. [ 129.234441][ T5739] usb 5-1: USB disconnect, device number 2 [ 129.302570][ T6487] Zero length message leads to an empty skb [ 129.503537][ T6502] loop0: detected capacity change from 0 to 256 [ 129.691060][ T33] audit: type=1326 audit(2000000025.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1ef9f559 code=0x7ffc0000 [ 129.692224][ T33] audit: type=1326 audit(2000000025.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.254" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1ef9f559 code=0x7ffc0000 [ 129.779969][ T6505] loop3: detected capacity change from 0 to 2048 [ 129.846294][ T6505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.349262][ T6492] loop1: detected capacity change from 0 to 40427 [ 130.369727][ T6492] F2FS-fs (loop1): build fault injection rate: 174 [ 130.369756][ T6492] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 130.398598][ T6492] F2FS-fs (loop1): invalid crc value [ 130.529809][ T6525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.595636][ T6520] loop3: detected capacity change from 0 to 4096 [ 130.770660][ T6520] ntfs3(loop3): ino=19, mi_enum_attr [ 130.771591][ T6520] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 130.846251][ T6529] zram: failed to load dictionary d (err=-2) [ 130.888952][ T6492] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 130.924379][ T6492] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.991326][ T6492] syz.1.248: attempt to access beyond end of device [ 130.991326][ T6492] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 131.005491][ T6520] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 131.049646][ T5614] syz-executor: attempt to access beyond end of device [ 131.049646][ T5614] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 131.067254][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 131.067293][ T5614] Tainted: [L]=SOFTLOCKUP [ 131.067301][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.067323][ T5614] Call Trace: [ 131.067336][ T5614] [ 131.067346][ T5614] dump_stack_lvl+0xe8/0x150 [ 131.067387][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 131.067420][ T5614] f2fs_write_end_bio+0x118e/0x15d0 [ 131.067482][ T5614] __submit_merged_bio+0x258/0x6a0 [ 131.067507][ T5614] ? rcu_is_watching+0x16/0xb0 [ 131.067544][ T5614] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 131.067574][ T5614] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 131.067627][ T5614] f2fs_write_data_pages+0x2a13/0x36e0 [ 131.067699][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.067726][ T5614] ? is_bpf_text_address+0x26/0x2b0 [ 131.067773][ T5614] ? arch_stack_walk+0xfb/0x150 [ 131.067839][ T5614] ? add_lock_to_list+0xc7/0x100 [ 131.067872][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 131.067892][ T5614] ? __lock_acquire+0x1511/0x2de0 [ 131.067949][ T5614] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.067996][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 131.068030][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.068062][ T5614] do_writepages+0x338/0x560 [ 131.068108][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 131.068147][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 131.068187][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 131.068273][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 131.068313][ T5614] f2fs_sync_dirty_inodes+0x471/0x970 [ 131.068364][ T5614] f2fs_write_checkpoint+0x860/0x24d0 [ 131.068444][ T5614] kill_f2fs_super+0x2dc/0x700 [ 131.068481][ T5614] ? rcu_do_enqueue+0x616/0x870 [ 131.068506][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 131.068532][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 131.068582][ T5614] ? __pfx_call_rcu+0x10/0x10 [ 131.068620][ T5614] ? shrinker_free+0x2a7/0x3b0 [ 131.068657][ T5614] deactivate_locked_super+0xbe/0x110 [ 131.068685][ T5614] cleanup_mnt+0x204/0x2a0 [ 131.068717][ T5614] task_work_run+0x1d9/0x260 [ 131.068746][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 131.068781][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 131.068809][ T5614] ? rcu_is_watching+0x16/0xb0 [ 131.068843][ T5614] do_syscall_64+0x328/0x520 [ 131.068866][ T5614] ? trace_irq_disable+0x3b/0x140 [ 131.068891][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.068912][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 131.068938][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.068959][ T5614] RIP: 0033:0x7f716e3a0797 [ 131.068987][ T5614] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 131.069005][ T5614] RSP: 002b:00007fff4300a008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.069027][ T5614] RAX: 0000000000000000 RBX: 00007f716e435f63 RCX: 00007f716e3a0797 [ 131.069041][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4300a0c0 [ 131.069054][ T5614] RBP: 00007fff4300a0c0 R08: 00007fff4300b0c0 R09: 00000000ffffffff [ 131.069068][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4300b150 [ 131.069081][ T5614] R13: 00007f716e435f63 R14: 000000000001fef3 R15: 00007fff4300b190 [ 131.069119][ T5614] [ 131.070630][ T5614] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.775573][ T6545] program syz.0.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.375859][ T6572] ip_tables: iptables: counters copy to user failed while replacing table [ 132.616499][ T6583] tap0: tun_chr_ioctl cmd 1074025677 [ 132.616620][ T6583] tap0: linktype set to 776 [ 132.783578][ T6580] loop2: detected capacity change from 0 to 32768 [ 132.787660][ T6580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.287 (6580) [ 132.829812][ T6580] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.829849][ T6580] BTRFS info (device loop2): using sha256 checksum algorithm [ 132.849486][ T5805] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.948843][ T6580] BTRFS info (device loop2): allowing degraded mounts [ 132.948873][ T6580] BTRFS info (device loop2): enabling ssd optimizations [ 132.948892][ T6580] BTRFS info (device loop2): disabling tree log [ 132.948909][ T6580] BTRFS info (device loop2): turning on sync discard [ 132.948926][ T6580] BTRFS info (device loop2): enabling free space tree [ 133.012559][ T5805] usb 1-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 133.014575][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 133.014625][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.049713][ T5805] usb 1-1: config 0 descriptor?? [ 133.051192][ T6584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.082926][ T6605] loop1: detected capacity change from 0 to 512 [ 133.134364][ T6608] profile_transition: unconfined exec no attachment [ 133.264435][ T5609] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.320663][ T6605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.320863][ T6605] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.584712][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584753][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584780][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584805][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584843][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584871][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584897][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584925][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584951][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.584978][ T5805] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 133.667359][ T5805] uclogic 0003:5543:0064.0001: unexpected long global item [ 133.669484][ T5805] uclogic 0003:5543:0064.0001: parse failed [ 133.669602][ T5805] uclogic 0003:5543:0064.0001: probe with driver uclogic failed with error -22 [ 133.712479][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.739499][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.739578][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.799900][ T5619] usb 1-1: USB disconnect, device number 3 [ 134.150785][ T5805] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.258852][ T6637] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.300805][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 134.301643][ T5805] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 134.309642][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.309672][ T5805] usb 4-1: Product: syz [ 134.309696][ T5805] usb 4-1: Manufacturer: syz [ 134.309712][ T5805] usb 4-1: SerialNumber: syz [ 134.354322][ T5805] usb 4-1: config 0 descriptor?? [ 134.376548][ T5805] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 134.611618][ T6646] loop0: detected capacity change from 0 to 512 [ 134.657837][ T6646] EXT4-fs error (device loop0): ext4_iget_extra_inode:6027: inode #15: comm syz.0.310: corrupted in-inode xattr: invalid ea_ino [ 134.657878][ T6646] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.658202][ T6646] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.310: couldn't read orphan inode 15 (err -117) [ 134.658232][ T6646] loop0: lost filesystem error report for type 5 error -117 [ 134.660746][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 134.660772][ C0] EXT4-fs (loop0): initial error at time 2000000030: ext4_iget_extra_inode:6027: inode 15 [ 134.660807][ C0] EXT4-fs (loop0): last error at time 2000000030: ext4_orphan_get:1409 [ 134.742336][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.977649][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.194793][ T5805] gspca_stk1135: reg_w 0x5 err -71 [ 135.195876][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.195892][ T5805] gspca_stk1135: Sensor write failed [ 135.195930][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.195940][ T5805] gspca_stk1135: Sensor write failed [ 135.195982][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.195994][ T5805] gspca_stk1135: Sensor read failed [ 135.196030][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.196040][ T5805] gspca_stk1135: Sensor read failed [ 135.196047][ T5805] gspca_stk1135: Detected sensor type unknown (0x0) [ 135.196089][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.196100][ T5805] gspca_stk1135: Sensor read failed [ 135.196135][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.196145][ T5805] gspca_stk1135: Sensor read failed [ 135.196180][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.196190][ T5805] gspca_stk1135: Sensor write failed [ 135.196225][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 135.196235][ T5805] gspca_stk1135: Sensor write failed [ 135.196313][ T5805] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 135.215963][ T5805] usb 4-1: USB disconnect, device number 4 [ 135.318028][ T6639] loop1: detected capacity change from 0 to 32768 [ 135.440850][ T33] kauditd_printk_skb: 43 callbacks suppressed [ 135.440873][ T33] audit: type=1800 audit(2000000030.920:48): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="file1" dev="loop1" ino=4 res=0 errno=-22 [ 135.502759][ T6657] loop4: detected capacity change from 0 to 256 [ 135.505751][ T6657] exfat: Deprecated parameter 'utf8' [ 135.505773][ T6657] exfat: Deprecated parameter 'utf8' [ 135.505833][ T6657] exfat: Deprecated parameter 'utf8' [ 135.579879][ T6657] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 135.598623][ T6661] loop2: detected capacity change from 0 to 512 [ 135.648770][ T6661] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.316: bg 0: block 5: invalid block bitmap [ 135.648810][ T6661] loop2: lost filesystem error report for type 5 error -117 [ 135.651842][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 135.651871][ C0] EXT4-fs (loop2): initial error at time 2000000031: ext4_validate_block_bitmap:436 [ 135.651897][ C0] EXT4-fs (loop2): last error at time 2000000031: ext4_validate_block_bitmap:436 [ 135.720643][ T6661] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 135.721050][ T6661] loop2: lost filesystem error report for type 5 error -117 [ 135.729177][ T6661] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.316: invalid indirect mapped block 3 (level 2) [ 135.729284][ T6661] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.752737][ T6657] profile_transition: name lookup ix on error [ 135.778499][ T6661] EXT4-fs (loop2): 1 orphan inode deleted [ 135.778529][ T6661] EXT4-fs (loop2): 1 truncate cleaned up [ 135.780412][ T6661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.815788][ T92] read_mapping_page failed! [ 135.815830][ T92] ERROR: (device loop1): txCommit: [ 135.815830][ T92] [ 135.855840][ T92] jfs_write_inode: jfs_commit_inode failed! [ 135.950456][ T6661] overlayfs: failed to verify upper root origin [ 135.992260][ T6665] loop3: detected capacity change from 0 to 128 [ 136.150001][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.761807][ T6669] loop1: detected capacity change from 0 to 32768 [ 136.807080][ T6669] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.820505][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.919428][ T6669] XFS (loop1): Ending clean mount [ 136.986703][ T9] usb 1-1: New USB device found: idVendor=0cf3, idProduct=311d, bcdDevice=ae.5d [ 136.989766][ T9] usb 1-1: config 127 has an invalid interface number: 87 but max is 0 [ 136.989801][ T9] usb 1-1: config 127 has no interface number 0 [ 137.026809][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.026845][ T9] usb 1-1: Product: syz [ 137.026863][ T9] usb 1-1: Manufacturer: syz [ 137.026882][ T9] usb 1-1: SerialNumber: syz [ 137.112493][ T5614] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.263189][ T6706] profile_transition: unconfined exec no attachment [ 137.271496][ T6708] profile_transition: unconfined exec no attachment [ 137.337257][ T9] usb 1-1: USB disconnect, device number 4 [ 137.410123][ T6712] profile_transition: unconfined exec no attachment [ 137.496485][ T6715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 137.496796][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.337'. [ 137.498103][ T6715] netlink: 84 bytes leftover after parsing attributes in process `syz.2.337'. [ 138.411445][ T6724] loop1: detected capacity change from 0 to 40427 [ 138.431925][ T6724] F2FS-fs (loop1): invalid crc value [ 138.560447][ T6724] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.588338][ T6724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 138.651123][ T5807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.801195][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 138.801924][ T5807] usb 5-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 138.806435][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.806462][ T5807] usb 5-1: Product: syz [ 138.806478][ T5807] usb 5-1: Manufacturer: syz [ 138.806493][ T5807] usb 5-1: SerialNumber: syz [ 138.810493][ T5807] usb 5-1: config 0 descriptor?? [ 138.867570][ T5807] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 138.867704][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 138.867722][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.867877][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 138.867893][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.916719][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.918380][ T5807] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 138.918437][ T5807] usb 5-1: media controller created [ 138.958731][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.989403][ T5807] usb 5-1: selecting invalid altsetting 3 [ 138.989427][ T5807] ttusb2: set interface to alts=3 failed [ 139.003096][ T6763] profile_transition: unconfined exec no attachment [ 139.123348][ T5807] DVB: Unable to find symbol tda10086_attach() [ 139.123367][ T5807] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 139.124185][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 139.124205][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.124317][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 139.124333][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.124402][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 139.172037][ T6747] ttusb2: i2c wr len=245 too high [ 139.173142][ T6747] dvb-usb: bulk message failed: -22 (7/0) [ 139.173245][ T6747] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 139.173352][ T6747] ttusb2: i2c transfer failed. [ 139.173426][ T6747] ttusb2: i2c wr len=4096 too high [ 139.225236][ T5807] usb 5-1: USB disconnect, device number 3 [ 139.330220][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 139.387133][ T6767] loop2: detected capacity change from 0 to 512 [ 139.410180][ T6767] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.361: inode has both inline data and extents flags [ 139.410217][ T6767] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.410731][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 139.410751][ C1] EXT4-fs (loop2): initial error at time 2000000034: ext4_orphan_get:1404: inode 15 [ 139.410782][ C1] EXT4-fs (loop2): last error at time 2000000034: ext4_orphan_get:1404: inode 15 [ 139.442786][ T6767] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.361: couldn't read orphan inode 15 (err -117) [ 139.442877][ T6767] loop2: lost filesystem error report for type 5 error -117 [ 139.474063][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.694267][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.887356][ T6780] loop2: detected capacity change from 0 to 256 [ 139.905122][ T6780] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.961161][ T6782] loop0: detected capacity change from 0 to 16 [ 140.112864][ T6782] erofs (device loop0): mounted with root inode @ nid 36. [ 140.169664][ T6787] usbip-vudc usbip-vudc.0: gadget not bound [ 140.925006][ T6792] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 140.943999][ T5805] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.055452][ T6807] loop4: detected capacity change from 0 to 256 [ 141.076455][ T6807] FAT-fs (loop4): Directory bread(block 1285) failed [ 141.076497][ T6807] FAT-fs (loop4): Directory bread(block 1286) failed [ 141.076524][ T6807] FAT-fs (loop4): Directory bread(block 1287) failed [ 141.076707][ T6807] FAT-fs (loop4): Directory bread(block 1288) failed [ 141.112462][ T5805] usb 1-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40 [ 141.114280][ T5805] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 141.130605][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.130636][ T5805] usb 1-1: Product: syz [ 141.130652][ T5805] usb 1-1: Manufacturer: syz [ 141.130765][ T5805] usb 1-1: SerialNumber: syz [ 141.167689][ T6807] FAT-fs (loop4): Directory bread(block 1285) failed [ 141.167728][ T6807] FAT-fs (loop4): Directory bread(block 1286) failed [ 141.167755][ T6807] FAT-fs (loop4): Directory bread(block 1287) failed [ 141.167780][ T6807] FAT-fs (loop4): Directory bread(block 1288) failed [ 141.169275][ T6807] FAT-fs (loop4): Directory bread(block 1285) failed [ 141.169306][ T6807] FAT-fs (loop4): Directory bread(block 1286) failed [ 141.439875][ T6801] loop0: detected capacity change from 0 to 64 [ 141.477656][ T6801] hfs: hfs: invalid btree header node [ 141.477674][ T6801] hfs: (loop0): catalog (cnid 0x4) bitmap corrupted, forcing rdonly [ 141.477689][ T6801] hfs: Run fsck.hfs to repair. [ 141.504709][ T6801] hfs: get root inode failed [ 141.572142][ T5805] usb 1-1: USB disconnect, device number 5 [ 141.577519][ T6820] ip_tables: iptables: counters copy to user failed while replacing table [ 141.579070][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 141.609392][ T5807] kernel read not supported for file /vcsa (pid: 5807 comm: kworker/0:6) [ 141.762654][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.868333][ T6824] loop3: detected capacity change from 0 to 128 [ 141.958356][ T6824] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 141.958725][ T6824] hpfs: filesystem error: improperly stopped [ 141.958743][ T6824] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.958760][ T6824] hpfs: You really don't want any checks? You are crazy... [ 141.958771][ T6824] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 141.958784][ T6824] hpfs: code page support is disabled [ 142.026061][ T6824] hpfs: hpfs_map_4sectors(): unaligned read [ 142.026319][ T6824] hpfs: hpfs_map_4sectors(): unaligned read [ 142.026333][ T6824] hpfs: filesystem error: unable to find root dir [ 142.151112][ T6822] loop2: detected capacity change from 0 to 40427 [ 142.154398][ T6822] F2FS-fs: heap/no_heap options were deprecated [ 142.158479][ T6822] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 142.158508][ T6822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.201509][ T6822] F2FS-fs (loop2): invalid crc value [ 142.204911][ T6824] hpfs: hpfs_map_4sectors(): unaligned read [ 142.325046][ T6822] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 142.343050][ T6822] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 142.343095][ T6822] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.172714][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.172768][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.740898][ T6838] Bluetooth: hci1: command 0x0406 tx timeout [ 217.740964][ T6838] Bluetooth: hci3: command 0x0406 tx timeout [ 217.740992][ T6838] Bluetooth: hci4: command 0x0406 tx timeout [ 217.741014][ T6838] Bluetooth: hci0: command 0x0406 tx timeout [ 217.741178][ T6838] Bluetooth: hci2: command 0x0406 tx timeout [ 256.613410][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.613469][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.091089][ T35] INFO: task kworker/u8:8:985 blocked in I/O wait for more than 143 seconds. [ 293.091121][ T35] Tainted: G L syzkaller #0 [ 293.091134][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.091144][ T35] task:kworker/u8:8 state:D stack:21544 pid:985 tgid:985 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 293.091215][ T35] Workqueue: writeback wb_workfn (flush-8:0) [ 293.091260][ T35] Call Trace: [ 293.091268][ T35] [ 293.091280][ T35] __schedule+0x17dd/0x5820 [ 293.091302][ T35] ? blk_mq_flush_plug_list+0x415/0x540 [ 293.091335][ T35] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 293.091364][ T35] ? __blk_flush_plug+0x416/0x4d0 [ 293.091385][ T35] ? __pfx___schedule+0x10/0x10 [ 293.091412][ T35] ? schedule+0x90/0x2b0 [ 293.091437][ T35] schedule+0x164/0x2b0 [ 293.091458][ T35] io_schedule+0x7f/0xd0 [ 293.091480][ T35] rq_qos_wait+0x266/0x360 [ 293.091510][ T35] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 293.091531][ T35] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 293.091554][ T35] ? __pfx_rq_qos_wait+0x10/0x10 [ 293.091582][ T35] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 293.091611][ T35] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 293.091644][ T35] wbt_wait+0x326/0x550 [ 293.091666][ T35] ? __pfx_wbt_wait+0x10/0x ** replaying previous printk message ** [ 293.091666][ T35] ? __pfx_wbt_wait+0x10/0x10 [ 293.091684][ T35] ? __pfx_dd_bio_merge+0x10/0x10 [ 293.091732][ T35] ? __pfx_wbt_wait+0x10/0x10 [ 293.091750][ T35] __rq_qos_throttle+0x6b/0xb0 [ 293.091777][ T35] blk_mq_submit_bio+0x1697/0x2c40 [ 293.091801][ T35] ? blk_mq_submit_bio+0x490/0x2c40 [ 293.091829][ T35] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 293.091849][ T35] ? blk_cgroup_bio_start+0x5d7/0x670 [ 293.091877][ T35] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 293.091905][ T35] ? __submit_bio+0x7e/0x340 [ 293.091931][ T35] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 293.091958][ T35] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 293.091997][ T35] ext4_bio_write_folio+0x101a/0x18c0 [ 293.092035][ T35] mpage_process_page_bufs+0x6bd/0x8a0 [ 293.092074][ T35] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 293.092103][ T35] ? process_scheduled_works+0xc3d/0x1630 [ 293.092151][ T35] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 293.092200][ T35] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 293.092232][ T35] ? ext4_init_io_end+0x29/0x130 [ 293.092256][ T35] ? kmem_cache_alloc_noprof+0x151/0x600 [ 293.092289][ T35] ? ext4_init_io_end+0x29/0x130 [ 293.092343][ T35] ext4_do_writepages+0xc08/0x44a0 [ 293.092388][ T35] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 293.092412][ T35] ? blk_mq_submit_bio+0x1c65/0x2c40 [ 293.093276][ T35] ? __pfx_ext4_do_writepages+0x10/0x10 [ 293.093309][ T35] ? __lock_acquire+0x747/0x2de0 [ 293.093341][ T35] ? filemap_get_folios_tag+0x639/0x720 [ 293.093373][ T35] ? filemap_get_folios_tag+0x118/0x720 [ 293.093405][ T35] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 293.093438][ T35] ? lock_acquire+0x115/0x350 [ 293.093486][ T35] ext4_writepages+0x1fe/0x4e0 [ 293.093525][ T35] ? __pfx_ext4_writepages+0x10/0x10 [ 293.093577][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 293.093612][ T35] ? __pfx_ext4_writepages+0x10/0x10 [ 293.093648][ T35] do_writepages+0x338/0x560 [ 293.093682][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.093731][ T35] ? reacquire_held_locks+0x117/0x1a0 [ 293.093760][ T35] ? writeback_sb_inodes+0x450/0x1af0 [ 293.093789][ T35] __writeback_single_inode+0x136/0x1220 [ 293.093816][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 293.093855][ T35] writeback_sb_inodes+0x9de/0x1af0 [ 293.093907][ T35] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 293.093969][ T35] ? __pfx_down_read_trylock+0x10/0x10 [ 293.094003][ T35] ? __pfx___up_read+0x10/0x10 [ 293.094049][ T35] __writeback_inodes_wb+0x114/0x240 [ 293.094083][ T35] wb_writeback+0x42f/0xad0 [ 293.094109][ T35] ? queue_io+0x251/0x470 [ 293.094139][ T35] ? __pfx_wb_writeback+0x10/0x10 [ 293.094159][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.094230][ T35] wb_workfn+0xc92/0x10f0 [ 293.094284][ T35] ? __pfx_wb_workfn+0x10/0x10 [ 293.094320][ T35] ? trace_hrtimer_start+0x82/0x200 [ 293.094352][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.094396][ T35] ? lock_acquire+0x115/0x350 [ 293.094431][ T35] ? rcu_is_watching+0x16/0xb0 [ 293.094465][ T35] ? process_scheduled_works+0x97a/0x1630 [ 293.094498][ T35] process_scheduled_works+0xc3d/0x1630 [ 293.094565][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.094628][ T35] ? assign_work+0x3cf/0x5d0 [ 293.094667][ T35] worker_thread+0xa47/0xfb0 [ 293.094738][ T35] kthread+0x38b/0x480 [ 293.094763][ T35] ? __pfx_worker_thread+0x10/0x10 [ 293.094793][ T35] ? __pfx_kthread+0x10/0x10 [ 293.094819][ T35] ret_from_fork+0x514/0xb70 [ 293.094847][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 293.094871][ T35] ? __switch_to+0xc78/0x1410 [ 293.094906][ T35] ? __pfx_kthread+0x10/0x10 [ 293.094932][ T35] ret_from_fork_asm+0x1a/0x30 [ 293.094974][ T35] [ 293.095039][ T35] INFO: task jbd2/sda1-8:4938 blocked in I/O wait for more than 143 seconds. [ 293.095055][ T35] Tainted: G L syzkaller #0 [ 293.095064][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.095071][ T35] task:jbd2/sda1-8 state:D stack:26280 pid:4938 tgid:4938 ppid:2 task_flags:0x240040 flags:0x00080000 [ 293.095121][ T35] Call Trace: [ 293.095126][ T35] [ 293.095136][ T35] __schedule+0x17dd/0x5820 [ 293.095164][ T35] ? percpu_ref_put_many+0x18e/0x240 [ 293.095189][ T35] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 293.095215][ T35] ? __pfx___schedule+0x10/0x10 [ 293.095240][ T35] ? schedule+0x90/0x2b0 [ 293.095259][ T35] schedule+0x164/0x2b0 [ 293.095277][ T35] io_schedule+0x7f/0xd0 [ 293.095295][ T35] bit_wait_io+0x13/0x110 [ 293.095316][ T35] __wait_on_bit+0xac/0x300 [ 293.095334][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.095355][ T35] out_of_line_wait_on_bit+0x13b/0x190 [ 293.095374][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.095392][ T35] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 293.095413][ T35] ? __pfx_wake_bit_function+0x10/0x10 [ 293.095439][ T35] ? __wait_on_buffer+0xe/0x80 [ 293.095466][ T35] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 293.095488][ T35] ? trace_hrtimer_start+0x82/0x200 [ 293.095536][ T35] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 293.095565][ T35] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.095609][ T35] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.095627][ T35] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 293.095643][ T35] ? __timer_delete_sync+0x4a7/0x520 [ 293.095667][ T35] kjournald2+0x3bc/0x740 [ 293.095704][ T35] ? __pfx_kjournald2+0x10/0x10 [ 293.095734][ T35] ? __pfx_autoremove_wake_function+0x10/0x10 [ 293.095759][ T35] ? __kthread_parkme+0x71/0x1f0 [ 293.095785][ T35] ? __kthread_parkme+0x199/0x1f0 [ 293.095814][ T35] kthread+0x38b/0x480 [ 293.095831][ T35] ? __pfx_kjournald2+0x10/0x10 [ 293.095854][ T35] ? __pfx_kthread+0x10/0x10 [ 293.095872][ T35] ret_from_fork+0x514/0xb70 [ 293.095890][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 293.095907][ T35] ? __switch_to+0xc78/0x1410 [ 293.095933][ T35] ? __pfx_kthread+0x10/0x10 [ 293.095950][ T35] ret_from_fork_asm+0x1a/0x30 [ 293.095979][ T35] [ 293.095990][ T35] INFO: task syz-executor:5596 blocked in I/O wait for more than 143 seconds. [ 293.096003][ T35] Tainted: G L syzkaller #0 [ 293.096012][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.096018][ T35] task:syz-executor state:D stack:22600 pid:5596 tgid:5596 ppid:5595 task_flags:0x440100 flags:0x00080800 [ 293.096062][ T35] Call Trace: [ 293.096067][ T35] [ 293.096076][ T35] __schedule+0x17dd/0x5820 [ 293.096103][ T35] ? __lock_acquire+0x747/0x2de0 [ 293.096131][ T35] ? __pfx___schedule+0x10/0x10 [ 293.096155][ T35] ? schedule+0x90/0x2b0 [ 293.096174][ T35] schedule+0x164/0x2b0 [ 293.096192][ T35] io_schedule+0x7f/0xd0 [ 293.096211][ T35] bit_wait_io+0x13/0x110 [ 293.096232][ T35] __wait_on_bit+0xac/0x300 [ 293.096249][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.096270][ T35] out_of_line_wait_on_bit+0x13b/0x190 [ 293.096290][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.096308][ T35] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 293.096329][ T35] ? __pfx_wake_bit_function+0x10/0x10 [ 293.096360][ T35] do_get_write_access+0x658/0x10c0 [ 293.096391][ T35] jbd2_journal_get_write_access+0x1d7/0x230 [ 293.096412][ T35] __ext4_journal_get_write_access+0xec/0x620 [ 293.096439][ T35] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 293.096461][ T35] ? trace_kmem_cache_alloc+0x29/0xe0 [ 293.096486][ T35] ? jbd2__journal_start+0x145/0x5d0 [ 293.096509][ T35] ext4_reserve_inode_write+0x294/0x360 [ 293.096539][ T35] __ext4_mark_inode_dirty+0x141/0x7e0 [ 293.096565][ T35] ext4_dirty_inode+0xd0/0x110 [ 293.096588][ T35] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 293.096610][ T35] __mark_inode_dirty+0x3a8/0x13b0 [ 293.096638][ T35] file_update_time_flags+0x399/0x440 [ 293.096663][ T35] ext4_page_mkwrite+0x21f/0x1470 [ 293.096694][ T35] ? __pfx_filemap_fault+0x10/0x10 [ 293.096723][ T35] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 293.096754][ T35] do_page_mkwrite+0x147/0x310 [ 293.096775][ T35] do_pte_missing+0x70f/0x3570 [ 293.096800][ T35] ? handle_mm_fault+0xee/0x3540 [ 293.096826][ T35] handle_mm_fault+0x1a2a/0x3540 [ 293.096856][ T35] ? handle_mm_fault+0xee/0x3540 [ 293.096889][ T35] ? __pfx_handle_mm_fault+0x10/0x10 [ 293.096910][ T35] ? lock_vma_under_rcu+0x45a/0x500 [ 293.096933][ T35] ? __pfx_set_user_sigmask+0x10/0x10 [ 293.096972][ T35] do_user_addr_fault+0xb35/0x1480 [ 293.097000][ T35] ? trace_page_fault_user+0x84/0x1e0 [ 293.097020][ T35] exc_page_fault+0x6a/0xc0 [ 293.097039][ T35] asm_exc_page_fault+0x26/0x30 [ 293.097055][ T35] RIP: 0033:0x7fad334715e3 [ 293.097070][ T35] RSP: 002b:00007ffc60cdfff0 EFLAGS: 00010216 [ 293.097083][ T35] RAX: 00007fad307da774 RBX: 00007ffc60ce0120 RCX: 0000000000000000 [ 293.097094][ T35] RDX: 00007fad307da770 RSI: 0000000000000008 RDI: 00007ffc60ce0120 [ 293.097105][ T35] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 293.097115][ T35] R10: 00007ffc60ce0100 R11: 0000000000000000 R12: 0000000000000000 [ 293.097125][ T35] R13: 000000000002588c R14: fffffffffffda774 R15: 0000000000000000 [ 293.097150][ T35] [ 293.097179][ T35] INFO: task syz.2.384:6821 blocked in I/O wait for more than 143 seconds. [ 293.097193][ T35] Tainted: G L syzkaller #0 [ 293.097201][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.097208][ T35] task:syz.2.384 state:D stack:25576 pid:6821 tgid:6821 ppid:5609 task_flags:0x440040 flags:0x00080002 [ 293.097255][ T35] Call Trace: [ 293.097260][ T35] [ 293.097269][ T35] __schedule+0x17dd/0x5820 [ 293.097296][ T35] ? __schedule+0x17f3/0x5820 [ 293.097321][ T35] ? __pfx___schedule+0x10/0x10 [ 293.097346][ T35] ? schedule+0x90/0x2b0 [ 293.097365][ T35] schedule+0x164/0x2b0 [ 293.097382][ T35] io_schedule+0x7f/0xd0 [ 293.097400][ T35] bit_wait_io+0x13/0x110 [ 293.097420][ T35] __wait_on_bit+0xac/0x300 [ 293.097438][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.097459][ T35] out_of_line_wait_on_bit+0x13b/0x190 [ 293.097478][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.097496][ T35] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 293.097517][ T35] ? __pfx_wake_bit_function+0x10/0x10 [ 293.097548][ T35] do_get_write_access+0x658/0x10c0 [ 293.097579][ T35] jbd2_journal_get_write_access+0x1d7/0x230 [ 293.097600][ T35] __ext4_journal_get_write_access+0xec/0x620 [ 293.097626][ T35] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 293.097647][ T35] ? trace_kmem_cache_alloc+0x29/0xe0 [ 293.097673][ T35] ? jbd2__journal_start+0x145/0x5d0 [ 293.097696][ T35] ext4_reserve_inode_write+0x294/0x360 [ 293.097730][ T35] __ext4_mark_inode_dirty+0x141/0x7e0 [ 293.097756][ T35] ext4_dirty_inode+0xd0/0x110 [ 293.097779][ T35] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 293.097801][ T35] __mark_inode_dirty+0x3a8/0x13b0 [ 293.097828][ T35] file_update_time_flags+0x399/0x440 [ 293.097853][ T35] ext4_page_mkwrite+0x21f/0x1470 [ 293.097884][ T35] ? __pfx_filemap_fault+0x10/0x10 [ 293.097907][ T35] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 293.097930][ T35] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 293.097952][ T35] do_page_mkwrite+0x147/0x310 [ 293.097972][ T35] do_pte_missing+0x70f/0x3570 [ 293.098002][ T35] handle_mm_fault+0x1a2a/0x3540 [ 293.098031][ T35] ? handle_mm_fault+0xee/0x3540 [ 293.098064][ T35] ? __pfx_handle_mm_fault+0x10/0x10 [ 293.098085][ T35] ? lock_vma_under_rcu+0x45a/0x500 [ 293.098108][ T35] ? __pfx_do_futex+0x10/0x10 [ 293.098149][ T35] do_user_addr_fault+0xb35/0x1480 [ 293.098176][ T35] ? trace_page_fault_user+0x84/0x1e0 [ 293.098199][ T35] exc_page_fault+0x6a/0xc0 [ 293.098219][ T35] asm_exc_page_fault+0x26/0x30 [ 293.098235][ T35] RIP: 0033:0x7fd151c73ba9 [ 293.098248][ T35] RSP: 002b:00007ffca7821d80 EFLAGS: 00010202 [ 293.098261][ T35] RAX: 0000001b33724000 RBX: ffffffff825e320a RCX: 0000001b33723ff8 [ 293.098273][ T35] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007fd152b55700 [ 293.098283][ T35] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fd152012000 [ 293.098294][ T35] R10: 00007fd152b55700 R11: 0000000000000000 R12: 00007fd152026038 [ 293.098304][ T35] R13: 0000000000000000 R14: ffffffff825e3b60 R15: 00007fd152b55720 [ 293.098316][ T35] ? __x64_sys_mount+0x20/0xc0 [ 293.098333][ T35] ? mnt_add_to_ns+0x44a/0x6c0 [ 293.098358][ T35] [ 293.098365][ T35] INFO: task syz.4.387:6827 blocked in I/O wait for more than 143 seconds. [ 293.098378][ T35] Tainted: G L syzkaller #0 [ 293.098386][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.098392][ T35] task:syz.4.387 state:D stack:25576 pid:6827 tgid:6827 ppid:5618 task_flags:0x440040 flags:0x00080002 [ 293.098437][ T35] Call Trace: [ 293.098442][ T35] [ 293.098451][ T35] __schedule+0x17dd/0x5820 [ 293.098483][ T35] ? __lock_acquire+0x747/0x2de0 [ 293.098506][ T35] ? __pfx___schedule+0x10/0x10 [ 293.098530][ T35] ? schedule+0x90/0x2b0 [ 293.098549][ T35] schedule+0x164/0x2b0 [ 293.098567][ T35] io_schedule+0x7f/0xd0 [ 293.098585][ T35] bit_wait_io+0x13/0x110 [ 293.098604][ T35] __wait_on_bit+0xac/0x300 [ 293.098622][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.098643][ T35] out_of_line_wait_on_bit+0x13b/0x190 [ 293.098662][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.098680][ T35] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 293.098701][ T35] ? __pfx_wake_bit_function+0x10/0x10 [ 293.098738][ T35] do_get_write_access+0x658/0x10c0 [ 293.098769][ T35] jbd2_journal_get_write_access+0x1d7/0x230 [ 293.098790][ T35] __ext4_journal_get_write_access+0xec/0x620 [ 293.098817][ T35] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 293.098838][ T35] ? trace_kmem_cache_alloc+0x29/0xe0 [ 293.098863][ T35] ? jbd2__journal_start+0x145/0x5d0 [ 293.098886][ T35] ext4_reserve_inode_write+0x294/0x360 [ 293.098916][ T35] __ext4_mark_inode_dirty+0x141/0x7e0 [ 293.098941][ T35] ext4_dirty_inode+0xd0/0x110 [ 293.098970][ T35] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 293.098992][ T35] __mark_inode_dirty+0x3a8/0x13b0 [ 293.099019][ T35] file_update_time_flags+0x399/0x440 [ 293.099045][ T35] ext4_page_mkwrite+0x21f/0x1470 [ 293.099075][ T35] ? __pfx_filemap_fault+0x10/0x10 [ 293.099097][ T35] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 293.099128][ T35] do_page_mkwrite+0x147/0x310 [ 293.099147][ T35] do_pte_missing+0x70f/0x3570 [ 293.099171][ T35] ? handle_mm_fault+0xee/0x3540 [ 293.099196][ T35] handle_mm_fault+0x1a2a/0x3540 [ 293.099227][ T35] ? handle_mm_fault+0xee/0x3540 [ 293.099260][ T35] ? __pfx_handle_mm_fault+0x10/0x10 [ 293.099281][ T35] ? lock_vma_under_rcu+0x45a/0x500 [ 293.099304][ T35] ? __pfx_do_futex+0x10/0x10 [ 293.099351][ T35] do_user_addr_fault+0xb35/0x1480 [ 293.099378][ T35] ? trace_page_fault_user+0x84/0x1e0 [ 293.099398][ T35] exc_page_fault+0x6a/0xc0 [ 293.099417][ T35] asm_exc_page_fault+0x26/0x30 [ 293.099432][ T35] RIP: 0033:0x7fc65ce73ba9 [ 293.099445][ T35] RSP: 002b:00007ffe076b45d0 EFLAGS: 00010202 [ 293.099458][ T35] RAX: 0000001b33923000 RBX: ffffffff820eba09 RCX: 0000001b33922ff8 [ 293.099470][ T35] RDX: 0000001b3332421c RSI: 0000000000000008 RDI: 00007fc65dd55720 [ 293.099480][ T35] RBP: 00000000000001eb R08: 00007fc65d210000 R09: 00007fc65d212000 [ 293.099491][ T35] R10: 00000000820eba0d R11: 0000000000000002 R12: 00007fc65d226128 [ 293.099501][ T35] R13: 000000000001985d R14: ffffffff820ebd96 R15: 00007fc65dd55720 [ 293.099513][ T35] ? __filemap_remove_folio+0x3d6/0x530 [ 293.099540][ T35] ? __filemap_remove_folio+0x49/0x530 [ 293.099578][ T35] [ 293.099585][ T35] INFO: task syz.1.388:6830 blocked in I/O wait for more than 143 seconds. [ 293.099598][ T35] Tainted: G L syzkaller #0 [ 293.099607][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.099613][ T35] task:syz.1.388 state:D stack:26024 pid:6830 tgid:6830 ppid:5614 task_flags:0x440040 flags:0x00080002 [ 293.099660][ T35] Call Trace: [ 293.099665][ T35] [ 293.099674][ T35] __schedule+0x17dd/0x5820 [ 293.099701][ T35] ? lock_acquire+0x115/0x350 [ 293.099736][ T35] ? __pfx___schedule+0x10/0x10 [ 293.099760][ T35] ? schedule+0x90/0x2b0 [ 293.099779][ T35] schedule+0x164/0x2b0 [ 293.099797][ T35] io_schedule+0x7f/0xd0 [ 293.099814][ T35] bit_wait_io+0x13/0x110 [ 293.099842][ T35] __wait_on_bit+0xac/0x300 [ 293.099860][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.099881][ T35] out_of_line_wait_on_bit+0x13b/0x190 [ 293.099900][ T35] ? __pfx_bit_wait_io+0x10/0x10 [ 293.099918][ T35] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 293.099939][ T35] ? __pfx_wake_bit_function+0x10/0x10 [ 293.099970][ T35] do_get_write_access+0x658/0x10c0 [ 293.100002][ T35] jbd2_journal_get_write_access+0x1d7/0x230 [ 293.100022][ T35] __ext4_journal_get_write_access+0xec/0x620 [ 293.100049][ T35] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 293.100070][ T35] ? trace_kmem_cache_alloc+0x29/0xe0 [ 293.100095][ T35] ? jbd2__journal_start+0x145/0x5d0 [ 293.100118][ T35] ext4_reserve_inode_write+0x294/0x360 [ 293.100148][ T35] __ext4_mark_inode_dirty+0x141/0x7e0 [ 293.100173][ T35] ext4_dirty_inode+0xd0/0x110 [ 293.100196][ T35] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 293.100218][ T35] __mark_inode_dirty+0x3a8/0x13b0 [ 293.100246][ T35] file_update_time_flags+0x399/0x440 [ 293.100271][ T35] ext4_page_mkwrite+0x21f/0x1470 [ 293.100301][ T35] ? __pfx_filemap_fault+0x10/0x10 [ 293.100324][ T35] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 293.100348][ T35] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 293.100369][ T35] do_page_mkwrite+0x147/0x310 [ 293.100389][ T35] do_pte_missing+0x70f/0x3570 [ 293.100412][ T35] ? _raw_spin_unlock+0x28/0x50 [ 293.100427][ T35] ? __pmd_alloc+0x40a/0x630 [ 293.100452][ T35] handle_mm_fault+0x1a2a/0x3540 [ 293.100482][ T35] ? handle_mm_fault+0xee/0x3540 [ 293.100515][ T35] ? __pfx_handle_mm_fault+0x10/0x10 [ 293.100536][ T35] ? lock_vma_under_rcu+0x45a/0x500 [ 293.100578][ T35] do_user_addr_fault+0xb35/0x1480 [ 293.109594][ T35] ? trace_page_fault_user+0x84/0x1e0 [ 293.109633][ T35] exc_page_fault+0x6a/0xc0 [ 293.109662][ T35] asm_exc_page_fault+0x26/0x30 [ 293.109686][ T35] RIP: 0033:0x7f716e26cea3 [ 293.109714][ T35] RSP: 002b:00007fff4300af00 EFLAGS: 00010246 [ 293.109734][ T35] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b33064000 [ 293.109750][ T35] RDX: 0000001b33024000 RSI: 0000000000600000 RDI: 00007f716e5e7708 [ 293.109765][ T35] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.109778][ T35] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 293.109791][ T35] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff4300b190 [ 293.109826][ T35] [ 293.109846][ T35] [ 293.109846][ T35] Showing all locks held in the system: [ 293.109859][ T35] locks held by pr/ttyS0/34: 1, last CPU#1: [ 293.109875][ T35] #0: ffffffff8fc33f58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 293.109938][ T35] locks held by khungtaskd/35: 1, last CPU#1: [ 293.109953][ T35] #0: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 293.110014][ T35] locks held by kworker/u8:8/985: 4, on CPU#0: [ 293.110030][ T35] #0: ffff888021e9e148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 293.110091][ T35] #1: ffffc90004d6fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 293.110152][ T35] #2: ffff888033fc80e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 293.110211][ T35] #3: ffff888034780cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 293.110291][ T35] locks held by klogd/4965: 2, last CPU#0: [ 293.110307][ T35] #0: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 293.110369][ T35] #1: ffffffff8feaafe0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 293.110436][ T35] locks held by getty/5365: 2, on CPU#1: [ 293.110452][ T35] #0: ffff888036e450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 293.110512][ T35] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 293.110567][ T35] locks held by syz-executor/5596: 3, on CPU#0: [ 293.110582][ T35] #0: ffff88807e103bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 293.110687][ T35] #1: ffff888033fc8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 293.110759][ T35] #2: ffff888034546950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 293.110822][ T35] locks held by syz.2.384/6821: 3, on CPU#1: [ 293.110837][ T35] #0: ffff88803736f808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 293.110898][ T35] #1: ffff888033fc8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 293.110959][ T35] #2: ffff888034546950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 293.228915][ T35] locks held by syz.4.387/6827: 3, on CPU#0: [ 293.228933][ T35] #0: ffff88807cd3a6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 293.228999][ T35] #1: ffff888033fc8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 293.229153][ T35] #2: ffff888034546950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 293.229288][ T35] locks held by syz.1.388/6830: 3, on CPU#0: [ 293.229341][ T35] #0: ffff888076cd7588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 293.229491][ T35] #1: ffff888033fc8558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 293.229650][ T35] #2: ffff888034546950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 293.229970][ T35] [ 293.229983][ T35] ============================================= [ 293.229983][ T35] [ 293.230032][ T35] NMI backtrace for cpu 1 [ 293.230084][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 293.230158][ T35] Tainted: [L]=SOFTLOCKUP [ 293.230177][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.230203][ T35] Call Trace: [ 293.230225][ T35] [ 293.230246][ T35] dump_stack_lvl+0xe8/0x150 [ 293.230343][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 293.230438][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.230509][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 293.230624][ T35] sys_info+0x135/0x170 [ 293.230708][ T35] watchdog+0x1073/0x10f0 [ 293.230803][ T35] ? watchdog+0x209/0x10f0 [ 293.230895][ T35] kthread+0x38b/0x480 [ 293.230953][ T35] ? __pfx_watchdog+0x10/0x10 [ 293.231049][ T35] ? __pfx_kthread+0x10/0x10 [ 293.231114][ T35] ret_from_fork+0x514/0xb70 [ 293.231185][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 293.231240][ T35] ? __switch_to+0xc78/0x1410 [ 293.231326][ T35] ? __pfx_kthread+0x10/0x10 [ 293.231390][ T35] ret_from_fork_asm+0x1a/0x30 [ 293.231493][ T35] [ 293.231758][ T35] Sending NMI from CPU 1 to CPUs 0: [ 293.231824][ C0] NMI backtrace for cpu 0 [ 293.231840][ C0] CPU: 0 UID: 0 PID: 34 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.231866][ C0] Tainted: [L]=SOFTLOCKUP [ 293.231872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.231883][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 293.231905][ C0] Code: e8 8e 83 45 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f fb bb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a b5 78 06 cc 44 89 f9 80 e1 07 [ 293.231920][ C0] RSP: 0018:ffffc90000aa78b8 EFLAGS: 00000002 [ 293.231936][ C0] RAX: 1ffffffff37b3e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 293.231949][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 293.231961][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 293.231972][ C0] R10: dffffc0000000000 R11: ffffffff85836340 R12: dffffc0000000000 [ 293.231987][ C0] R13: 0000000000000000 R14: ffffffff9bd9f6e0 R15: 0000000000000000 [ 293.231999][ C0] FS: 0000000000000000(0000) GS:ffff888123a6f000(0000) knlGS:0000000000000000 [ 293.232014][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.232026][ C0] CR2: 000055c4e5e5a660 CR3: 000000007f188000 CR4: 00000000003526f0 [ 293.232043][ C0] Call Trace: [ 293.232050][ C0] [ 293.232058][ C0] wait_for_lsr+0x184/0x2f0 [ 293.232090][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 293.232119][ C0] serial8250_console_write+0xa7e/0x1200 [ 293.232149][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 293.232175][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 293.232210][ C0] ? __schedule+0x17f3/0x5820 [ 293.232238][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 293.232271][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 293.232298][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 293.232330][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 293.232362][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 293.232388][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 293.232409][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 293.232435][ C0] ? __kthread_parkme+0x71/0x1f0 [ 293.232465][ C0] ? __kthread_parkme+0x199/0x1f0 [ 293.232496][ C0] kthread+0x38b/0x480 [ 293.232514][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 293.232535][ C0] ? __pfx_kthread+0x10/0x10 [ 293.232554][ C0] ret_from_fork+0x514/0xb70 [ 293.232574][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 293.232592][ C0] ? __switch_to+0xc78/0x1410 [ 293.232620][ C0] ? __pfx_kthread+0x10/0x10 [ 293.232639][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.232666][ C0] [ 293.232862][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 295.722558][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 295.733349][ T35] Tainted: [L]=SOFTLOCKUP [ 295.737691][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.747763][ T35] Call Trace: [ 295.751189][ T35] [ 295.754148][ T35] vpanic+0x26f/0x710 [ 295.758182][ T35] panic+0xc5/0xd0 [ 295.761948][ T35] ? __pfx_panic+0x10/0x10 [ 295.766417][ T35] ? preempt_schedule_common+0x7f/0xd0 [ 295.771907][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 295.777300][ T35] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 295.783486][ T35] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 295.789673][ T35] watchdog+0x10e7/0x10f0 [ 295.794035][ T35] ? watchdog+0x209/0x10f0 [ 295.798485][ T35] kthread+0x38b/0x480 [ 295.802587][ T35] ? __pfx_watchdog+0x10/0x10 [ 295.807305][ T35] ? __pfx_kthread+0x10/0x10 [ 295.812018][ T35] ret_from_fork+0x514/0xb70 [ 295.816722][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 295.821878][ T35] ? __switch_to+0xc78/0x1410 [ 295.826629][ T35] ? __pfx_kthread+0x10/0x10 [ 295.831263][ T35] ret_from_fork_asm+0x1a/0x30 [ 295.836063][ T35] [ 295.839720][ T35] Kernel Offset: disabled [ 295.844068][ T35] Rebooting in 86400 seconds..