last executing test programs: 8m37.145383935s ago: executing program 32 (id=510): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd9, &(0x7f0000000000), 0xf4, 0x1126, &(0x7f00000016c0)="$eJzs2bFqFEEYB/D/7J0mVidrvwS0lJBwPoApFK61VRCRgGCqHAiKr+ELBN/Cyl5S2Yf0WgQsLISTu71NciKoZA0Efj/YmW8+hvlmypkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzA2TLyW5VSV1l6uSlKRpDifHSZouf/PToErJo93J9MH++OG0nZYq5XGysZgyH9fbt9frcT2ut+t793fuHExfv3n5bG9vd3+5TEmTo5NeT1G6ZnA+V3qtAQAAAFfW7MJGeffqbypdX7TD3usDAAAAf/I/3hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sVsdBbXXVAlKUnTHE6OkzRd/unH07nXLnOTAAAAwIWUVHkyWs0dtNf/xTPAmbv5PCqn+Xn/rczjrbwfrSz4e9/73zsAAABcFS8+rAxna8vg/P/1H7PWjeV4cS9fb+ONDLO52cbLLl93kkGSrV9qHZ28fd59ZTZI1vo/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JMdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAATgoAAP//KN3juA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 8m27.079196634s ago: executing program 33 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r1, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 7m21.70829607s ago: executing program 34 (id=1149): r0 = syz_create_resource$futex(&(0x7f0000000040)) r1 = syz_create_resource$futex(&(0x7f0000001680)) futex(r0, 0x5, 0x2, 0x0, r1, 0x1f000000) 6m36.919154397s ago: executing program 4 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000001000000280012800e0001006970366772657461700010001400028006000f000000000006000e00e9"], 0x48}}, 0x0) 6m36.8203374s ago: executing program 4 (id=1692): unshare(0x22020600) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 6m36.690011733s ago: executing program 4 (id=1694): r0 = add_key$keyring(&(0x7f0000002600), &(0x7f0000002640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000002680), &(0x7f00000026c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 6m36.569450736s ago: executing program 4 (id=1698): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000003c0)={[{@gid}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@errors_continue}, {@namecase}]}, 0xfe, 0x153d, &(0x7f00000028c0)="$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") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 6m36.319414102s ago: executing program 4 (id=1700): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 6m35.911687413s ago: executing program 4 (id=1709): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x4, 0x1, 0x1020, 0xa, 0x5, 0x79, 0x8000, 0x80008, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x80000000, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x8, 0xa6b8, 0x2, 0xfffffff8]}) 6m35.62129398s ago: executing program 35 (id=1709): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x4, 0x1, 0x1020, 0xa, 0x5, 0x79, 0x8000, 0x80008, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x80000000, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x8, 0xa6b8, 0x2, 0xfffffff8]}) 5m6.467844644s ago: executing program 2 (id=2787): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1e, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x10004}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 5m6.400296945s ago: executing program 2 (id=2788): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x64, r1, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 5m6.252112539s ago: executing program 2 (id=2792): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x40, 0x80, "3cced46dc2649052d4a3b66c18f4b2b8e4e2c5364dc208141b4ef128d0ca56888507fcd97a005eaa586faeea398523a143d2218d85a30200000000000000b6", 0x21}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x30000051) 5m6.152812011s ago: executing program 2 (id=2795): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5m5.968810726s ago: executing program 6 (id=2799): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f0000001bc0)="$eJzs3M2LG+UfAPBnsk376+tvEQ/eOlCEXWhCs31Bb1VbfMGW4svBk2aTaUibZJZNmsaeBD2KB/8TUfDkUfwTPHj2Jh4Ub0Il80ystbZUkk229fOByXfmmSfffJ8htHxnlgTgP2s9/e2XJJwIh0MIayGEY0ko9pNyK1yM4bkQwskQQuUvW1KO/zlwMIRwJIRwYpo85kzKU5+fHp86//Mbv37z/aEDR7/4+ofVrRpYtedDCP2duH+7H2PeifFGOd4cd4vYPzcuYzzRv1ke5zHezraLDLebs3nNIp7txPn5zq3hNF7vNVvT2OleL8Z3BvEDh+POLE/xhhvN3eK4nW0XsTvMi9i5E+ua3In/tt0ZjmKedpnvwyJ9GI1mMY5nkyyuZ+dmEVuDUTke8+btbDKN43Y2qU7ricOhlffaRR3bc13qfe3N7uDWJB1nu8NuPkjP1xsv1BsXao3dvJ2NsnO1Zr994Vy60elNp9VGWbN/sZPnnV5Wb+X9zXSj02rVGo1041K23W0O0kajfrZ+pnZ+s9w7nb569d201043pvHl7uDWwW5vmF7Pd9P4js10q372xc30VCN9+8q19Npbly9fufbO+5feu/rSlddfKSc9UFa6sXVma6vWOFPbamzug/VP/999zPWP5ln/J2XRj7H+u4diTOa7PPBovmAA/9oD/X/Q/wN7b/X9f+W7yhz9f5i//6+EWf8/banK/j/o/x/e/1bm7//n6n/3a///BK8f5vLo/r+6tDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFi6H6tfvlbsrMfjo+X48XLomfI4CSFUQgh3/8FaOHhfzrUyT/Uh86t/q+HbJBQZpp9xqNyOhBAultvv/9/rqwAAAABPr68+OvlZ7Nbjy/qqC2KZ4k2byrEPFpQvCSFU139aULbK9OXZBSUrvt8HwmRB2YobWP9bULJ4y+3AorI9lrVZ+Pj4vcFiQUkMlaWWAwAALMXafWG5XQgAAADL9OmqC2A1kjB7lDl7Flz85f29R5uH7zsHAAAAPIGSVRcAAAAA7Lmi//f7fwAAAPB0i7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzP7lpA1EcgJ8hTtJ/Kqp6oO7CMXqELrurkqvkCJyhF+AMVN30CAhXnRmBjHBViTFu0PdJtjMT+PkZ2MzYGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMP9rVclYhZ9edp0IJAAAAwIBNu1qmPxa5/ab0vytdH0q7iYhZRJwau8/jtpc5LzntwOvboxq+R6SEP+e4K9vriPhUtu37oep/VvwkAAAA4Dqtn54f8mg97xZTF8Ql5Umb2dvPlfKaiGgXvyqlpYdSPlYKS7/vm/haKS1NYN1XCstTbjen/3db6yR9896hXMn9Y/oSU6vGI0EAAMB/pj8SGBiFAAAAcAW+TF0A02j2u/19xrt8KDcEX/VacZgmAAAAAF6KZuoCAAAAgNGl8f9F1v87emO99f8AAACAv9l2XZfX/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBMm3a1XD89Pxx6uuxbbj3+Y86uO88oFwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Zn/eUSAEwiAM9q7vTOb+h5UGDTyBSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1jjKMADgz85mtn9UjBFyiEgFD3oxyba29qgHJXjwE6gQ0k2Nbq22OdgS1Fz0JDlKL6JHEUHIsd+h5wbqod485BBB8KbMzkwzaRa7lGRm0/x+8M77zGSY93lnl5An8+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUtt/64PcybmebyTxOimN3d9aWsn7roT5ze+PeTNayuPWogb5988BzH3MvVnfOTFd2vqo/GQAAAI6HdlnfR8T9dHMh65PJrP6PtDwnq/l/fCaPy3r+4bp/a2ftZPGjmbz+//79PQNN5uNkF11e6ffm96cycQjTOxKefeQZE4M7P/jfS3vwgiTvrj+/nQ7uZ+u7O3fe7gzCE3VkCwA8jtmyL4Ly76Gs7zaZGADHxkSl8C7r//ZkszkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1GF7PZ4q41ZEzEzsxpmtnbWlYf3tjXszZbtw69ZG9ZrZJdKIWF7p99Ia5zLurt+4+cliv9+7Vn9wJiKaG70IPhzhnIj/P6d4e0Zzsxga/JMFrcbTaD5IitdnXPI5yKB87x38lRv6hQQAwBNhtrP/WFq0rK6/n24uZMdaUxH//rS3/n+lEseI9f+fH124Wx2rWv93D2+aR87c6pXP5q7fuPnaypXFy73LvU9fP9t9o3vu4vnzF+eyezU/txxJb77pNAEAADjCOkWr1v/J1P7n/6crcYxY/3/+Q/fL6lht9f9Quw/9ms4EAADgONp9WP7cS3//1RpyRqvTiS8WV1evdfPtg/2z+bbWdB/TibwsHyjr//ZUoykBAAAANdleb+15/n+pEseIz/+f/vmFX6vXbEfEqYirEdGbXbrav1TfdMbaIX8+ufV1ubJgyOc/AAAAOB5OFa26/j8drP9PHix5SCLi1ZfzuPyuq1Hq//Y73/xSHau6/v9cfVMcS8l0fj8G/XTExHTTGQEAAPAkO1m0rNj/I91c+Pi30+91rP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNt/AQAA//8crjyv") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) 5m5.781229621s ago: executing program 2 (id=2801): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m4.639834249s ago: executing program 6 (id=2810): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000080)=""/113, 0x71, 0x0) 5m3.998527005s ago: executing program 6 (id=2819): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff0100b2a1010000055600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5m3.943612056s ago: executing program 2 (id=2821): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x80000000000000a, 0x0, [{0xb3d6f7a7dc543318, 0x45, &(0x7f0000000a40)=""/69}, {0x4, 0x56, &(0x7f0000000ac0)=""/86}]}) 5m3.639543523s ago: executing program 36 (id=2821): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x80000000000000a, 0x0, [{0xb3d6f7a7dc543318, 0x45, &(0x7f0000000a40)=""/69}, {0x4, 0x56, &(0x7f0000000ac0)=""/86}]}) 5m3.627128814s ago: executing program 6 (id=2825): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5m3.105949127s ago: executing program 6 (id=2832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000080c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 4m57.811785067s ago: executing program 6 (id=2857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0xd01, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x10) 4m57.207365393s ago: executing program 37 (id=2857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0xd01, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x10) 3m49.011712599s ago: executing program 8 (id=3456): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) 3m48.896916261s ago: executing program 8 (id=3457): mknod$loop(0x0, 0x6000, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1}) 3m48.824409833s ago: executing program 8 (id=3460): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) 3m48.719137346s ago: executing program 8 (id=3462): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) 3m48.666323347s ago: executing program 8 (id=3464): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 3m48.509435591s ago: executing program 8 (id=3468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r1, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) 3m33.315442216s ago: executing program 38 (id=3468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r1, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) 2m28.936080498s ago: executing program 7 (id=4300): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) writev(r0, &(0x7f0000001b40)=[{&(0x7f0000000240)="af79", 0x2}], 0x1) 2m28.689135414s ago: executing program 7 (id=4302): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents64(r0, &(0x7f00000001c0)=""/178, 0xb2) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2m28.289491014s ago: executing program 7 (id=4308): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x41) write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40}}, 0xa0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 2m27.961764162s ago: executing program 7 (id=4312): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 2m27.618626491s ago: executing program 7 (id=4317): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010060000904000001020d0000052406000105240040000d240f01fffffffd000000000006241a82ad12090581030002800000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x5a1c, 0x2, 0x2, 0xb, 0x8, 0xc, 0x1, 0x6, 0x5, 0xfc, 0x9, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m27.186737002s ago: executing program 7 (id=4320): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0072dd8461"], 0x6) 2m26.700155743s ago: executing program 39 (id=4320): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0072dd8461"], 0x6) 1m40.887727816s ago: executing program 9 (id=4756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1m40.675433991s ago: executing program 9 (id=4759): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 1m39.065777291s ago: executing program 9 (id=4773): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x9, 0x5, 0x3) preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 1m38.861096176s ago: executing program 9 (id=4777): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0xc81}}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 1m38.126546694s ago: executing program 9 (id=4783): r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x805, r1, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x2, 0x7f, 0xe8}}}}, 0x0) 1m37.423681281s ago: executing program 9 (id=4791): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4a20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000000), 0x4) 1m37.155351228s ago: executing program 40 (id=4791): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4a20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000000), 0x4) 3.006197155s ago: executing program 0 (id=5812): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.871494969s ago: executing program 0 (id=5815): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xefffffffffffffff, 0x1) 2.659735764s ago: executing program 0 (id=5818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x4, 0x40}) 2.302526923s ago: executing program 0 (id=5821): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000001540)={[{@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb6}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 2.108506198s ago: executing program 0 (id=5823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e6509", 0x5, 0x2) 1.927163772s ago: executing program 0 (id=5825): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1ba, 0x0, &(0x7f0000000700)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 990.256405ms ago: executing program 3 (id=5836): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x20044e, &(0x7f0000000b80)={[{@minixdf}, {}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}], [{@flag='nolazytime'}, {@subj_user={'subj_user', 0x3d, 'j--\xd8\xeaH(a\x16\xd2\xbfn:)-&'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'lazytime'}}, {@audit}, {@uid_eq}]}, 0x1, 0x465, &(0x7f0000000700)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 820.636809ms ago: executing program 5 (id=5839): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000600)={0x75, 0x0}) 791.50265ms ago: executing program 3 (id=5840): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 743.556331ms ago: executing program 1 (id=5841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x6, 0xac, 0x5}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x3}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 670.698593ms ago: executing program 5 (id=5842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_delvlan={0x24, 0x70, 0x1, 0x80000, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x3}}}]}, 0x24}}, 0x0) 588.497825ms ago: executing program 3 (id=5843): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000000)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22180, 0x38) lseek(r0, 0xab07, 0x1) getdents64(r0, 0x0, 0x0) 587.601345ms ago: executing program 1 (id=5844): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 514.669997ms ago: executing program 5 (id=5845): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7fff) 488.899828ms ago: executing program 1 (id=5846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3508, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000) 446.875819ms ago: executing program 3 (id=5847): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=0x0, @ANYBLOB="0400e6d88ec313000600120004000000060010"], 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x1) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 351.568781ms ago: executing program 1 (id=5848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010000d2e1250000000000773100000000", 0x1f) 345.356801ms ago: executing program 5 (id=5849): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000000580)={0xe4000000000000, 0x24000, 0x1}}) 236.449574ms ago: executing program 3 (id=5850): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060001080006040faf5ef6aaaaaa32ac1414bb000000000000ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 236.152174ms ago: executing program 5 (id=5851): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 225.961694ms ago: executing program 1 (id=5852): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="6c8e01debdeee640eb2b759eaef1e138fb6e26efb1c2c38531e28dc77c3a7c29f550b324b99533849d445fc1ca0a38648a6f1af30b8ceec4022a1509322a4829ebacdab83bd3ff9ab59a832101c461e3ecb62edbde17ee2bb9ad69143a076187ec0fd40fc1b7", 0x66}, {&(0x7f0000000180)="cd19392cb6285c1facf06478c12dd527ed98065814b1eed99de6dc3cd11b8d4efc068131d6ede838dcdf16a0ad3e3db9d98d94c3f08798c205f88501fa3b82ba97d0518e0dd33cffe3ab3386b957ba936d759d825af518153de3630cce04cc542bd33801d4cd44ebad74c117a4930a", 0x6f}, {&(0x7f0000000200)="bdc477243373e35709cd644e6c57809a65fc9ccfbde228cef6db5c9f64d62c90be3fbae22ee4e82b3ab4a5", 0x2b}], 0x3}}], 0x1, 0x40) 104.296267ms ago: executing program 3 (id=5853): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0xe, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}) unshare(0x22020400) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 59.784408ms ago: executing program 1 (id=5854): syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101100) r0 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 5 (id=5855): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xffd3) kernel console output (not intermixed with test programs): without journal. Quota mode: writeback. [ 519.576100][T18921] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.794830][T18936] loop9: detected capacity change from 0 to 512 [ 519.815825][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.870749][T18936] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 519.904440][T18936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 519.913786][T18936] EXT4-fs (loop9): orphan cleanup on readonly fs [ 519.922482][T18936] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #13: comm syz.9.4503: iget: bad i_size value: 12154761577498 [ 519.945011][T18936] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.4503: couldn't read orphan inode 13 (err -117) [ 519.984203][T18936] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 520.040257][T18936] EXT4-fs (loop9): shut down requested (0) [ 520.133333][T13754] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.227109][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 520.235254][ C1] lec:lec_tx_timeout: lec0 [ 520.240122][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 520.394550][T18957] loop3: detected capacity change from 0 to 2048 [ 520.458115][T18960] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 520.544248][T18963] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 520.555481][ T28] audit: type=1800 audit(1792198373.387:235): pid=18957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4511" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 520.739501][T18960] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 520.772627][T18960] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 520.809918][T18960] Remounting filesystem read-only [ 520.818391][ T42] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 520.825122][ T42] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 520.855970][ T42] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 520.870152][ T42] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 520.897072][ T42] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 520.904497][ T42] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 520.942120][ T42] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 520.964759][ T42] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 520.976115][ T42] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 520.996234][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.010508][ T42] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 521.019620][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.035234][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.046779][ T42] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 521.056999][T14571] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 521.078302][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.093070][ T42] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 521.102030][ T42] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 521.120314][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.156475][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.176158][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.201506][ T42] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 521.219157][ T42] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 521.226619][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.256956][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.259257][T14571] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.282498][ T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.307750][T14571] usb 10-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 521.324515][T18308] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 521.343161][T14571] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.347768][T18308] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 521.394498][T18308] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 521.429795][T18308] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.449982][T18994] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4523'. [ 521.456909][T18308] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.479292][T14571] rtsx_usb: probe of 10-1:1.0 failed with error -22 [ 521.480770][T18308] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 521.714574][T14571] usb 10-1: USB disconnect, device number 10 [ 521.871658][T19013] loop1: detected capacity change from 0 to 1024 [ 522.084250][T19021] net_ratelimit: 4 callbacks suppressed [ 522.084282][T19021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.282735][T19028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4532'. [ 522.517029][ T28] audit: type=1326 audit(1792198375.357:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 522.630499][ T28] audit: type=1326 audit(1792198375.357:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 522.655859][T19045] sit0: entered promiscuous mode [ 522.733348][T19045] netlink: 'syz.9.4538': attribute type 1 has an invalid length. [ 522.754911][ T28] audit: type=1326 audit(1792198375.377:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 522.771092][T19045] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4538'. [ 522.885235][ T28] audit: type=1326 audit(1792198375.387:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 522.982006][ T28] audit: type=1326 audit(1792198375.387:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 523.006077][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.101685][ T28] audit: type=1326 audit(1792198375.387:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 523.176927][ T28] audit: type=1326 audit(1792198375.387:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 523.201025][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.208965][ T28] audit: type=1326 audit(1792198375.387:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 523.233026][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.277298][ T28] audit: type=1326 audit(1792198375.387:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.1.4537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 523.301385][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.455765][T19067] loop1: detected capacity change from 0 to 256 [ 523.555976][T19067] FAT-fs (loop1): Directory bread(block 64) failed [ 523.566525][T19067] FAT-fs (loop1): Directory bread(block 65) failed [ 523.580426][T19067] FAT-fs (loop1): Directory bread(block 66) failed [ 523.594117][T19067] FAT-fs (loop1): Directory bread(block 67) failed [ 523.613770][T19067] FAT-fs (loop1): Directory bread(block 68) failed [ 523.641870][T19067] FAT-fs (loop1): Directory bread(block 69) failed [ 523.662243][T19067] FAT-fs (loop1): Directory bread(block 70) failed [ 523.677024][T19067] FAT-fs (loop1): Directory bread(block 71) failed [ 523.687176][T19067] FAT-fs (loop1): Directory bread(block 72) failed [ 523.706935][T19067] FAT-fs (loop1): Directory bread(block 73) failed [ 524.128229][T19087] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)' [ 524.257692][T19091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.247150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 525.255261][ C1] lec:lec_tx_timeout: lec0 [ 525.259954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 526.222806][T19185] i2c i2c-0: new_device: Missing parameters [ 526.724551][T19204] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4591'. [ 526.933381][T19215] loop0: detected capacity change from 0 to 512 [ 526.983365][T19215] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.4595: bg 0: block 5: invalid block bitmap [ 526.999168][T19215] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 527.071212][T19215] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4595: invalid indirect mapped block 3 (level 2) [ 527.128936][ T5781] Bluetooth: hci0: command tx timeout [ 527.158853][T19215] EXT4-fs (loop0): 1 orphan inode deleted [ 527.164640][T19215] EXT4-fs (loop0): 1 truncate cleaned up [ 527.223621][T19215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.303690][T19229] loop3: detected capacity change from 0 to 2048 [ 527.408559][T19229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.531795][T19229] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 527.550476][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 527.550492][ T28] audit: type=1800 audit(1792198380.367:254): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4597" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 527.620217][T19229] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 527.651419][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.669997][T19244] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 527.697165][T19229] EXT4-fs (loop3): This should not happen!! Data will be lost [ 527.697165][T19229] [ 527.734996][T19244] EXT4-fs (loop3): This should not happen!! Data will be lost [ 527.734996][T19244] [ 527.807146][T19229] EXT4-fs (loop3): Total free blocks count 0 [ 527.837105][T19244] EXT4-fs (loop3): Total free blocks count 0 [ 527.848165][T19229] EXT4-fs (loop3): Free/Dirty block details [ 527.863478][T19244] EXT4-fs (loop3): Free/Dirty block details [ 527.867896][T19229] EXT4-fs (loop3): free_blocks=2415919104 [ 528.598321][T19281] netlink: 'syz.3.4613': attribute type 1 has an invalid length. [ 528.606109][T19281] netlink: 'syz.3.4613': attribute type 2 has an invalid length. [ 528.677520][T19285] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4614'. [ 528.686540][T19285] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 528.714239][T19287] netlink: 'syz.3.4613': attribute type 1 has an invalid length. [ 528.761586][T19287] netlink: 'syz.3.4613': attribute type 2 has an invalid length. [ 528.816061][ T49] bridge0: port 3(team0) entered disabled state [ 528.954317][T19301] loop3: detected capacity change from 0 to 512 [ 529.031958][T19301] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 529.097915][T19301] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 529.210875][ T28] audit: type=1400 audit(1792198382.057:255): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=19311 comm="syz.1.4622" [ 529.288207][ T49] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 529.377126][T19318] loop9: detected capacity change from 0 to 128 [ 529.712797][T14571] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 529.907007][T14571] usb 4-1: Using ep0 maxpacket: 16 [ 529.921996][T14571] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 529.936894][T14571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.961351][T14571] usb 4-1: Product: syz [ 529.965580][T14571] usb 4-1: Manufacturer: syz [ 529.979585][T14571] usb 4-1: SerialNumber: syz [ 530.208461][T14571] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 530.241760][T14571] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 530.266888][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 530.275011][ C1] lec:lec_tx_timeout: lec0 [ 530.280366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 530.292733][T14571] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 530.311184][T14571] usb 4-1: media controller created [ 530.347064][T19355] block device autoloading is deprecated and will be removed. [ 530.360403][T14571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.380904][T19355] syz.1.4635: attempt to access beyond end of device [ 530.380904][T19355] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 530.623124][T14571] zl10353_read_register: readreg error (reg=127, ret==-32) [ 530.732982][T14571] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 530.765126][T14571] usb 4-1: USB disconnect, device number 5 [ 530.939876][ T28] audit: type=1400 audit(1792198383.787:256): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=19369 comm="syz.9.4638" name="foo" offset=35 [ 532.747300][T19435] netlink: 'syz.9.4655': attribute type 5 has an invalid length. [ 532.765372][T19435] netlink: 'syz.9.4655': attribute type 1 has an invalid length. [ 533.177133][T13770] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 533.330728][T19452] overlayfs: upper fs does not support file handles, falling back to index=off. [ 533.362950][T19452] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 533.377354][T13770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 533.416950][T13770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.436967][T13770] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 533.456621][T13770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.510679][T13770] usb 2-1: config 0 descriptor?? [ 533.950625][T13770] hid-generic 0003:0925:8066.000C: unbalanced collection at end of report description [ 533.981923][T13770] hid-generic: probe of 0003:0925:8066.000C failed with error -22 [ 534.172261][T15064] usb 2-1: USB disconnect, device number 9 [ 534.394339][T19489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.647861][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4690'. [ 535.678891][T19550] input: syz0 as /devices/virtual/input/input16 [ 535.685741][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4690'. [ 535.695643][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4690'. [ 536.014523][T19563] tipc: Started in network mode [ 536.047503][T19563] tipc: Node identity ac14142f, cluster identity 4711 [ 536.068096][T19563] tipc: New replicast peer: 127.0.0.1 [ 536.085316][T19563] tipc: Enabled bearer , priority 10 [ 536.106430][T19570] tipc: New replicast peer: 255.255.255.255 [ 536.150624][T19573] jffs2: notice: (19573) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 536.246872][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms [ 536.255059][ C1] lec:lec_tx_timeout: lec0 [ 536.260597][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 536.369171][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4699'. [ 536.678888][T19566] loop3: detected capacity change from 0 to 32768 [ 536.721648][T19566] (syz.3.4696,19566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.747599][T19566] (syz.3.4696,19566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.820850][T19566] JBD2: Ignoring recovery information on journal [ 536.988927][T19566] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 537.054336][T19607] loop9: detected capacity change from 0 to 2048 [ 537.155256][T19607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.197121][T14571] tipc: Node number set to 2886997039 [ 537.268184][ T28] audit: type=1800 audit(1792198390.117:257): pid=19607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4707" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 537.301097][T19607] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 537.358241][T19607] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 537.404329][T19622] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 537.457085][T19607] EXT4-fs (loop9): This should not happen!! Data will be lost [ 537.457085][T19607] [ 537.486514][T19622] EXT4-fs (loop9): This should not happen!! Data will be lost [ 537.486514][T19622] [ 537.547076][T19607] EXT4-fs (loop9): Total free blocks count 0 [ 537.583705][T19622] EXT4-fs (loop9): Total free blocks count 0 [ 537.607945][T19607] EXT4-fs (loop9): Free/Dirty block details [ 537.613908][T19607] EXT4-fs (loop9): free_blocks=2415919104 [ 537.646669][T19566] (syz.3.4696,19566,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 537.651167][T19622] EXT4-fs (loop9): Free/Dirty block details [ 537.937775][T18308] ocfs2: Unmounting device (7,3) on (node local) [ 538.003593][ T5762] input: syz0 as /devices/virtual/misc/uhid/0005:FFFFFFF0:7FFF.000D/input/input17 [ 538.072072][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4715'. [ 538.163819][ T5762] hid-generic 0005:FFFFFFF0:7FFF.000D: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 538.258222][T14571] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 538.440023][T19639] loop9: detected capacity change from 0 to 8192 [ 538.475203][T14571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 538.495332][T19639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 538.515045][T19639] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 538.527327][T19639] REISERFS (device loop9): using ordered data mode [ 538.528348][T14571] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 538.538986][ T5848] IPVS: starting estimator thread 0... [ 538.548148][T14571] usb 2-1: can't read configurations, error -71 [ 538.573571][T19639] reiserfs: using flush barriers [ 538.612209][T19639] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 538.667910][T19639] REISERFS (device loop9): checking transaction log (loop9) [ 538.707127][T19650] IPVS: using max 22 ests per chain, 52800 per kthread [ 538.816456][T19658] program syz.3.4718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.906269][T19639] REISERFS (device loop9): Using tea hash to sort names [ 538.925868][T19639] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 539.086475][T19664] loop3: detected capacity change from 0 to 4096 [ 539.118221][T19664] EXT4-fs: Ignoring removed orlov option [ 539.183674][T19664] EXT4-fs (loop3): Test dummy encryption mode enabled [ 539.238207][T19664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.392974][T19673] loop1: detected capacity change from 0 to 2048 [ 539.530675][T19673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.559969][T19664] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 539.602212][ T5848] IPVS: starting estimator thread 0... [ 539.611002][T19664] CacheFiles: File cache on CacheFiles registered [ 539.705379][ T28] audit: type=1800 audit(1792198392.547:258): pid=19673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4723" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 539.710247][T19673] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 539.762356][T19673] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 539.765109][T19687] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 539.781982][T19663] CacheFiles: File cache on CacheFiles unregistering [ 539.794918][T19681] IPVS: using max 21 ests per chain, 50400 per kthread [ 539.811555][T19663] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 539.831843][T19673] EXT4-fs (loop1): This should not happen!! Data will be lost [ 539.831843][T19673] [ 539.887049][T19673] EXT4-fs (loop1): Total free blocks count 0 [ 539.892165][T19687] EXT4-fs (loop1): This should not happen!! Data will be lost [ 539.892165][T19687] [ 539.893064][T19673] EXT4-fs (loop1): Free/Dirty block details [ 539.909048][T19673] EXT4-fs (loop1): free_blocks=2415919104 [ 539.914801][T19673] EXT4-fs (loop1): dirty_blocks=64 [ 539.968374][T19673] EXT4-fs (loop1): Block reservation details [ 540.045055][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.318550][T19703] loop4: detected capacity change from 0 to 7 [ 540.377482][T19703] Dev loop4: unable to read RDB block 7 [ 540.399618][T19703] loop4: unable to read partition table [ 540.417643][T19703] loop4: partition table beyond EOD, truncated [ 540.429266][T19703] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾-ý?‹ºÐ ¥ëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 540.647630][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4734'. [ 540.694486][T19716] ipvlan2: entered allmulticast mode [ 540.714968][T19716] syz_tun: entered allmulticast mode [ 541.039935][T19735] loop9: detected capacity change from 0 to 256 [ 541.192460][ T28] audit: type=1800 audit(1792198394.037:259): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4740" name="file2" dev="loop9" ino=1048878 res=0 errno=0 [ 541.215568][T19735] syz.9.4740: attempt to access beyond end of device [ 541.215568][T19735] loop9: rw=0, sector=272, nr_sectors = 4 limit=256 [ 541.254024][T19735] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198) [ 541.264890][T19735] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198) [ 541.273555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 541.273682][ C1] lec:lec_tx_timeout: lec0 [ 541.282038][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.793399][T19766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4752'. [ 541.953329][T19774] loop1: detected capacity change from 0 to 2048 [ 542.029834][T19774] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 542.061080][T19774] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 542.081203][T19774] UDF-fs: Scanning with blocksize 512 failed [ 542.141148][T19774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.821333][T19804] loop3: detected capacity change from 0 to 1024 [ 542.912800][T19804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 542.947650][T19804] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.021932][T19804] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 6) [ 543.106143][T19804] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 543.140488][T19804] EXT4-fs (loop3): This should not happen!! Data will be lost [ 543.140488][T19804] [ 543.167576][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.168892][T13706] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 543.210886][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4769'. [ 543.234247][T19820] ipvlan2: entered allmulticast mode [ 543.255084][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.270514][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.284836][T19820] syz_tun: entered allmulticast mode [ 543.293822][T13706] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 543.306769][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.332999][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.361584][T13706] EXT4-fs (loop3): This should not happen!! Data will be lost [ 543.361584][T13706] [ 543.363618][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.417611][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.448550][T19816] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.4766: lblock 0 mapped to illegal pblock 0 (length 4) [ 543.545020][T19828] loop0: detected capacity change from 0 to 4096 [ 543.608410][T19830] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 543.950059][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 544.024390][T19842] loop9: detected capacity change from 0 to 512 [ 544.078532][T19842] EXT4-fs (loop9): orphan cleanup on readonly fs [ 544.085604][T19842] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 544.117444][T19842] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 544.212040][T19842] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.4777: attempt to clear invalid blocks 2 len 1 [ 544.301874][T19842] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.4777: invalid indirect mapped block 1819239214 (level 0) [ 544.355645][T19842] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.4777: invalid indirect mapped block 1819239214 (level 1) [ 544.398158][T19842] EXT4-fs (loop9): 1 truncate cleaned up [ 544.414566][T19842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.517527][T19842] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 544.544844][T19859] bond0: entered promiscuous mode [ 544.559141][T19859] bond_slave_0: entered promiscuous mode [ 544.577828][T19859] bond_slave_1: entered promiscuous mode [ 544.610422][T19857] bond0: left promiscuous mode [ 544.615252][T19857] bond_slave_0: left promiscuous mode [ 544.624656][T13754] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 544.637441][T19857] bond_slave_1: left promiscuous mode [ 545.048265][T19876] loop1: detected capacity change from 0 to 128 [ 545.073986][T19876] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 545.151651][ T28] audit: type=1800 audit(1792198397.997:260): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4787" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 545.194747][T14960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.391840][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.529652][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.661920][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.820209][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.026102][T19132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.040524][T19132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.056257][T19132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.070200][T19132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.079657][T19132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 546.089615][T19132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.091044][T19901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.228475][T19897] rxe_eth0 speed is unknown, defaulting to 1000 [ 546.255170][ T49] tipc: Disabling bearer [ 546.265446][ T49] tipc: Left network mode [ 547.078113][T19925] size and base must be multiples of 4 kiB [ 547.084091][T19925] CPU: 1 PID: 19925 Comm: syz.3.4799 Not tainted syzkaller #0 [ 547.091576][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 547.101696][T19925] Call Trace: [ 547.105015][T19925] [ 547.107978][T19925] dump_stack_lvl+0x18c/0x250 [ 547.112747][T19925] ? show_regs_print_info+0x20/0x20 [ 547.118221][T19925] ? load_image+0x420/0x420 [ 547.122811][T19925] ? __might_fault+0xaa/0x120 [ 547.127526][T19925] ? __might_fault+0xc6/0x120 [ 547.132324][T19925] ? __might_fault+0xaa/0x120 [ 547.137033][T19925] mtrr_del+0xc3/0xf0 [ 547.141092][T19925] mtrr_ioctl+0xcb6/0x13a0 [ 547.145549][T19925] ? mtrr_close+0x200/0x200 [ 547.150112][T19925] ? __fget_files+0x28/0x460 [ 547.154751][T19925] ? mtrr_close+0x200/0x200 [ 547.159291][T19925] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 547.164796][T19925] ? proc_reg_poll+0x290/0x290 [ 547.169589][T19925] __se_sys_ioctl+0xfd/0x170 [ 547.174181][T19925] do_syscall_64+0x55/0xb0 [ 547.178604][T19925] ? clear_bhb_loop+0x40/0x90 [ 547.183407][T19925] ? clear_bhb_loop+0x40/0x90 [ 547.188122][T19925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.194151][T19925] RIP: 0033:0x7ff9c899e559 [ 547.198633][T19925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.218368][T19925] RSP: 002b:00007ff9c6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.226807][T19925] RAX: ffffffffffffffda RBX: 00007ff9c8c25fa0 RCX: 00007ff9c899e559 [ 547.234787][T19925] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 547.242771][T19925] RBP: 00007ff9c8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 547.250746][T19925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.258757][T19925] R13: 00007ff9c8c26038 R14: 00007ff9c8c25fa0 R15: 00007ffeb3042b38 [ 547.266733][T19925] [ 547.270673][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5990 ms [ 547.278762][ C1] lec:lec_tx_timeout: lec0 [ 547.284353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.461822][T19897] chnl_net:caif_netlink_parms(): no params data found [ 547.867523][ T5815] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 547.917382][T19897] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.944282][T19897] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.952225][T19897] bridge_slave_0: entered allmulticast mode [ 547.960124][T19897] bridge_slave_0: entered promiscuous mode [ 547.985057][T19897] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.006235][T19897] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.034787][T19897] bridge_slave_1: entered allmulticast mode [ 548.053240][T19897] bridge_slave_1: entered promiscuous mode [ 548.134896][ T5815] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 548.144773][ T5815] usb 4-1: config 0 has no interface number 0 [ 548.167438][T19132] Bluetooth: hci2: command tx timeout [ 548.187704][ T5815] usb 4-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 60415, setting to 1023 [ 548.199704][ T5815] usb 4-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 6424, setting to 64 [ 548.212886][ T5815] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 548.222374][ T5815] usb 4-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0 [ 548.231169][ T5815] usb 4-1: Manufacturer: syz [ 548.259910][ T5815] usb 4-1: config 0 descriptor?? [ 548.267947][T19941] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.284855][T19897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.342955][T19897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.373572][ T49] hsr_slave_0: left promiscuous mode [ 548.380670][ T49] hsr_slave_1: left promiscuous mode [ 548.392949][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.400708][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.419670][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.437077][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.455539][ T49] team0: left allmulticast mode [ 548.465242][ T49] team_slave_0: left allmulticast mode [ 548.474186][ T49] team_slave_1: left allmulticast mode [ 548.482561][ T49] team0: left promiscuous mode [ 548.490928][ T49] team_slave_0: left promiscuous mode [ 548.508037][ T49] team_slave_1: left promiscuous mode [ 548.516108][ T5815] ftdi_sio 4-1:0.60: FTDI USB Serial Device converter detected [ 548.524035][ T49] bridge0: port 3(team0) entered disabled state [ 548.532509][ T49] bridge_slave_1: left promiscuous mode [ 548.547056][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.549538][ T5815] usb 4-1: Detected SIO [ 548.564261][ T5815] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 548.578791][ T49] bridge_slave_0: left allmulticast mode [ 548.584480][ T49] bridge_slave_0: left promiscuous mode [ 548.597535][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.607531][ T5815] usb 4-1: USB disconnect, device number 6 [ 548.656147][ T5815] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 548.696049][ T49] veth1_macvtap: left promiscuous mode [ 548.700953][ T5815] ftdi_sio 4-1:0.60: device disconnected [ 548.716340][ T49] veth0_macvtap: left promiscuous mode [ 548.725287][ T49] veth1_vlan: left promiscuous mode [ 548.731869][ T49] veth0_vlan: left promiscuous mode [ 550.247233][T19132] Bluetooth: hci2: command tx timeout [ 550.455033][ T49] team0 (unregistering): Port device team_slave_1 removed [ 550.606927][ T49] team0 (unregistering): Port device team_slave_0 removed [ 550.722121][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.873291][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.691201][ T49] bond0 (unregistering): Released all slaves [ 551.965885][T19897] team0: Port device team_slave_0 added [ 551.996039][T19897] team0: Port device team_slave_1 added [ 552.121833][T19897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.132651][T19897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.185253][T19897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.202019][T19897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.209592][T19897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.282158][T19897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.327536][T19132] Bluetooth: hci2: command tx timeout [ 552.390962][T19897] hsr_slave_0: entered promiscuous mode [ 552.425455][T20027] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4832'. [ 552.428029][T19897] hsr_slave_1: entered promiscuous mode [ 552.440572][T20028] netlink: 'syz.3.4833': attribute type 2 has an invalid length. [ 552.452554][T19897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.463512][T19897] Cannot create hsr debugfs directory [ 552.465649][T20028] netlink: 'syz.3.4833': attribute type 1 has an invalid length. [ 552.487118][T20028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4833'. [ 552.498573][T20028] netlink: 'syz.3.4833': attribute type 2 has an invalid length. [ 552.516657][T20028] netlink: 'syz.3.4833': attribute type 1 has an invalid length. [ 552.578413][T20028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4833'. [ 552.631063][T20028] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 552.838426][ T28] audit: type=1400 audit(1792198405.677:261): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=20036 comm="syz.0.4837" name="foo" offset=60 [ 553.084654][T20046] phram: illegal device length [ 553.247641][T20051] ip_tables: iptables: counters copy to user failed while replacing table [ 553.526866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6240 ms [ 553.534946][ C1] lec:lec_tx_timeout: lec0 [ 553.540272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.962970][T20079] Attempt to restore checkpoint with obsolete wellknown handles [ 554.408032][T19132] Bluetooth: hci2: command tx timeout [ 554.562350][T19897] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 554.583029][T19897] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 554.609934][T19897] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 554.634311][T19897] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 554.884417][T19897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.949420][T19897] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.990007][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.997202][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.019827][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.027130][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.566719][T20123] loop0: detected capacity change from 0 to 512 [ 555.617672][T20123] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.4860: corrupted in-inode xattr: invalid ea_ino [ 555.698343][T20128] binder: 20127:20128 ioctl c0306201 200000000080 returned -14 [ 555.713074][T19897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.722199][T20123] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.4860: couldn't read orphan inode 15 (err -117) [ 555.788734][T20123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.885968][ T28] audit: type=1800 audit(1792198408.727:262): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4860" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 556.050956][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.437980][ T28] audit: type=1807 audit(1792198409.277:263): action=measure uid>+ res=0 [ 556.449653][T19897] veth0_vlan: entered promiscuous mode [ 556.459042][T20151] ima: policy update failed [ 556.477259][ T28] audit: type=1802 audit(1792198409.297:264): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.4866" res=0 errno=0 [ 556.479604][T19897] veth1_vlan: entered promiscuous mode [ 556.523870][T20155] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 556.526919][ T28] audit: type=1802 audit(1792198409.307:265): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4866" res=0 errno=0 [ 556.631236][T19897] veth0_macvtap: entered promiscuous mode [ 556.693966][T20159] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 556.757874][T19897] veth1_macvtap: entered promiscuous mode [ 556.813746][T19897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.848928][T19897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.887032][T19897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.911363][T19897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.926896][T19897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.949629][T19897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.979282][T19897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.996687][T20167] sctp: [Deprecated]: syz.1.4872 (pid 20167) Use of int in maxseg socket option. [ 556.996687][T20167] Use struct sctp_assoc_value instead [ 557.005481][T19897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.044321][T19897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.065996][T19897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.087941][T19897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.099727][T19897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.110609][T19897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.122487][T19897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.181014][T19897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.201026][T19897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.222547][T19897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.235124][T19897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.561424][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.608421][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.647324][ T28] audit: type=1326 audit(1792198410.477:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 557.727753][ T28] audit: type=1326 audit(1792198410.477:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 557.728718][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.800198][T20192] base or size exceeds the MTRR width [ 557.816152][ T28] audit: type=1326 audit(1792198410.477:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 557.817708][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.850961][T20195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4882'. [ 557.912167][ T28] audit: type=1326 audit(1792198410.477:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 557.996509][ T28] audit: type=1326 audit(1792198410.477:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.046623][ T28] audit: type=1326 audit(1792198410.477:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.101221][ T28] audit: type=1326 audit(1792198410.477:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.158020][ T28] audit: type=1326 audit(1792198410.477:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.235921][T20209] loop0: detected capacity change from 0 to 64 [ 558.242446][ T28] audit: type=1326 audit(1792198410.477:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.298088][ T28] audit: type=1326 audit(1792198410.477:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.414647][ T28] audit: type=1326 audit(1792198410.477:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.459494][ T28] audit: type=1326 audit(1792198410.477:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.485800][ T28] audit: type=1326 audit(1792198410.477:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20188 comm="syz.1.4880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x50000 [ 558.587250][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4888'. [ 559.140133][T20240] loop5: detected capacity change from 0 to 128 [ 559.167986][T20240] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 559.210468][T20245] loop1: detected capacity change from 0 to 512 [ 559.231989][T20240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.286874][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 559.294972][ C1] lec:lec_tx_timeout: lec0 [ 559.300798][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 559.461187][T20250] loop0: detected capacity change from 0 to 256 [ 559.806356][T20267] loop3: detected capacity change from 0 to 1024 [ 559.844055][T20267] EXT4-fs: Ignoring removed oldalloc option [ 559.866959][T20267] EXT4-fs: Ignoring removed orlov option [ 559.938670][T20267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.163695][T20267] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.4905: unexpected EA_INODE flag [ 560.165563][ T9] kernel write not supported for file /tomoyo/domain_policy (pid: 9 comm: kworker/0:1) [ 560.348422][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.754332][T20309] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.776773][T20309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.784101][T20309] IPv6: NLM_F_CREATE should be set when creating new route [ 560.791456][T20309] IPv6: NLM_F_CREATE should be set when creating new route [ 560.798747][T20309] IPv6: NLM_F_CREATE should be set when creating new route [ 560.856365][T20312] pim6reg: entered allmulticast mode [ 560.876776][T20309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.904683][T20311] pim6reg: left allmulticast mode [ 561.421066][T20340] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 561.497087][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 561.716953][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 561.724211][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 561.744365][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.788528][ T9] usb 6-1: config 0 descriptor?? [ 561.827725][T20358] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.4937'. [ 562.014563][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 562.038419][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.068273][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 562.077314][ T9] usb 6-1: media controller created [ 562.124068][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.215346][ T9] az6027: usb out operation failed. (-71) [ 562.232965][ T9] az6027: usb out operation failed. (-71) [ 562.247048][ T9] stb0899_attach: Driver disabled by Kconfig [ 562.263645][ T9] az6027: no front-end attached [ 562.263645][ T9] [ 562.281729][ T9] az6027: usb out operation failed. (-71) [ 562.297035][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 562.325731][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 562.370188][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 562.390843][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 562.406740][ T9] usb 6-1: USB disconnect, device number 6 [ 562.513881][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 563.097030][T20399] ip_tables: iptables: counters copy to user failed while replacing table [ 563.148287][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.150682][T20399] ip_tables: iptables: counters copy to user failed while replacing table [ 563.154651][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.412069][T20405] ftl_cs: FTL header not found. [ 563.594088][T20405] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 564.275389][T20430] loop1: detected capacity change from 0 to 32768 [ 564.342287][T20430] JBD2: Ignoring recovery information on journal [ 564.482184][T20430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 564.627912][T20456] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.4960'. [ 564.802712][T16190] ocfs2: Unmounting device (7,1) on (node local) [ 565.046859][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 565.054917][ C1] lec:lec_tx_timeout: lec0 [ 565.060695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.896641][T20553] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4990'. [ 566.927609][T20553] netlink: 'syz.5.4990': attribute type 12 has an invalid length. [ 566.951483][T20553] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4990'. [ 567.237630][T20567] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4994'. [ 567.445220][T20578] loop3: detected capacity change from 0 to 512 [ 567.490094][T20578] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4998: inode has both inline data and extents flags [ 567.545972][T20578] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4998: couldn't read orphan inode 15 (err -117) [ 567.598506][T20578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.606571][T20584] WARNING! power/level is deprecated; use power/control instead [ 567.784544][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.623582][T20629] loop3: detected capacity change from 0 to 512 [ 568.644444][T20629] EXT4-fs: Ignoring removed oldalloc option [ 568.672946][T20629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 568.736645][T20629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.251219][T20655] loop5: detected capacity change from 0 to 8 [ 569.584300][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.974366][T20680] Bluetooth: MGMT ver 1.22 [ 569.983066][T20680] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 570.087011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 570.095135][ C1] lec:lec_tx_timeout: lec0 [ 570.100322][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 570.122127][T20686] loop3: detected capacity change from 0 to 512 [ 570.171179][T20686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 570.258458][T20686] EXT4-fs (loop3): 1 truncate cleaned up [ 570.312011][T20686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.353812][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 570.353829][ T28] audit: type=1800 audit(1792198423.197:335): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5027" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 570.583349][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.632954][T20700] loop5: detected capacity change from 0 to 512 [ 570.734541][T20700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 570.797368][T20700] System zones: 0-7 [ 570.803632][T20700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.006664][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.140027][T20713] loop3: detected capacity change from 0 to 2048 [ 571.200893][T20713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.226993][T20713] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 571.369944][T20713] fs-verity: sha512 using implementation "sha512-avx2" [ 571.611734][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.399678][T20769] loop1: detected capacity change from 0 to 512 [ 572.417811][T20769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 572.450253][T20769] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 572.519581][T20769] EXT4-fs (loop1): 1 truncate cleaned up [ 572.526041][T20769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.650324][T16190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.588531][T20783] loop1: detected capacity change from 0 to 32768 [ 573.646977][T20783] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 573.954317][T20783] XFS (loop1): Ending clean mount [ 573.984374][T20783] XFS (loop1): Quotacheck needed: Please wait. [ 574.146360][T20783] XFS (loop1): Quotacheck: Done. [ 574.335845][T16190] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 574.559367][T20845] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5067'. [ 574.670701][ T9] kernel write not supported for file /362/attr/prev (pid: 9 comm: kworker/0:1) [ 574.858021][T20859] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 575.107115][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 575.115216][ C1] lec:lec_tx_timeout: lec0 [ 575.119919][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 575.149881][ T28] audit: type=1807 audit(1792198427.997:336): UNKNOWN=? res=0 [ 575.158488][T20873] ima: policy update failed [ 575.167172][ T28] audit: type=1802 audit(1792198428.007:337): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.5076" res=0 errno=0 [ 575.205644][ T28] audit: type=1802 audit(1792198428.017:338): pid=20873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5076" res=0 errno=0 [ 575.514677][T20872] loop3: detected capacity change from 0 to 32768 [ 575.585735][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 575.626720][T20872] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 575.673975][T20872] JBD2: Ignoring recovery information on journal [ 575.790095][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 575.806893][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 575.843026][T20872] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 575.849190][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.874074][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 575.896882][ T9] usb 6-1: SerialNumber: syz [ 575.927442][T20879] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 576.157454][T20879] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 576.331287][T18308] ocfs2: Unmounting device (7,3) on (node local) [ 576.482477][T20892] loop1: detected capacity change from 0 to 32768 [ 576.519883][T20892] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.5064 (20892) [ 576.577536][T20892] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 576.605899][T20892] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 576.638381][T20892] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 576.667227][T20892] BTRFS info (device loop1): use zstd compression, level 3 [ 576.674525][T20892] BTRFS info (device loop1): using free space tree [ 576.684234][ T9] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 576.828285][T20914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5078'. [ 576.853267][ T173] usb 6-1: USB disconnect, device number 7 [ 576.873128][ T173] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 576.898784][T20892] BTRFS info (device loop1): enabling ssd optimizations [ 576.905800][T20892] BTRFS info (device loop1): auto enabling async discard [ 577.097095][ T28] audit: type=1800 audit(1792198429.937:339): pid=20892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5064" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 577.214439][T20929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5079'. [ 577.503367][T16190] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 577.706038][T20941] sctp: [Deprecated]: syz.5.5082 (pid 20941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.706038][T20941] Use struct sctp_sack_info instead [ 577.754688][T20946] loop3: detected capacity change from 0 to 736 [ 578.185710][ T789] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 578.411505][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 578.439092][ T789] usb 2-1: not running at top speed; connect to a high speed hub [ 578.459577][ T789] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 578.483022][T20964] loop5: detected capacity change from 0 to 4096 [ 578.498771][ T789] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 578.541855][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.544917][T20964] EXT4-fs: Ignoring removed nobh option [ 578.567255][ T789] usb 2-1: Product: syz [ 578.571485][ T789] usb 2-1: Manufacturer: syz [ 578.576110][ T789] usb 2-1: SerialNumber: syz [ 578.597617][T20964] EXT4-fs: Ignoring removed bh option [ 578.639502][T20964] EXT4-fs (loop5): Test dummy encryption mode enabled [ 578.704794][T20964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.878339][ T789] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 579.076013][ T789] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 579.105837][ T789] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 579.121217][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.483011][ T789] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 579.563889][ T789] usb 2-1: USB disconnect, device number 12 [ 579.650844][ T7125] udevd[7125]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.127163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 580.135247][ C1] lec:lec_tx_timeout: lec0 [ 580.140238][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 580.863325][T19132] Bluetooth: hci0: Zero size dump init pkt [ 581.382132][T21053] loop1: detected capacity change from 0 to 2048 [ 581.452163][T21053] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 581.482460][T21053] loop1: partition table partially beyond EOD, truncated [ 581.513137][T21053] loop1: p1 start 3405774849 is beyond EOD, truncated [ 581.547106][T21053] loop1: p2 start 53543428 is beyond EOD, truncated [ 581.554559][T21053] loop1: p3 start 4284289 is beyond EOD, truncated [ 581.581271][T21053] loop1: p5 start 3405774849 is beyond EOD, truncated [ 581.633963][T21053] loop1: p6 start 53543428 is beyond EOD, truncated [ 581.907006][ T5848] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 581.997156][ T173] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 582.040063][T21079] loop3: detected capacity change from 0 to 1024 [ 582.101550][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 582.111266][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 582.133722][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 582.173012][ T5848] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 582.198258][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.219337][ T173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.239852][ T173] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 4 [ 582.258088][ T5848] usb 2-1: config 0 descriptor?? [ 582.290514][ T5848] hub 2-1:0.0: USB hub found [ 582.305430][ T173] usb 6-1: config 1 interface 2 has no altsetting 0 [ 582.336551][ T173] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 582.369684][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.387396][ T173] usb 6-1: Product: syz [ 582.392182][ T173] usb 6-1: Manufacturer: syz [ 582.398093][ T173] usb 6-1: SerialNumber: syz [ 582.540530][ T5848] hub 2-1:0.0: 26 ports detected [ 582.551204][ T5848] hub 2-1:0.0: insufficient power available to use all downstream ports [ 582.641063][ T173] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 582.689249][ T173] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 582.717021][ T173] hub 6-1:1.2: Invalid hub with more than one config or interface [ 582.735122][ T173] hub: probe of 6-1:1.2 failed with error -22 [ 582.747786][ T5848] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 582.754174][ T5848] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 582.775172][ T173] usb 6-1: USB disconnect, device number 8 [ 582.803833][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 582.823440][ T5848] usbhid: probe of 2-1:0.0 failed with error -71 [ 582.888297][ T5848] usb 2-1: USB disconnect, device number 13 [ 584.506608][T21138] loop5: detected capacity change from 0 to 32768 [ 584.553769][T21138] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.5136 (21138) [ 584.631870][T21138] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 584.682811][T21138] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 584.725577][T21138] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 584.745804][T21138] BTRFS info (device loop5): use zstd compression, level 3 [ 584.787064][T21138] BTRFS info (device loop5): using free space tree [ 584.953634][T21138] BTRFS info (device loop5): enabling ssd optimizations [ 585.008374][T21138] BTRFS info (device loop5): auto enabling async discard [ 585.146897][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 585.154986][ C1] lec:lec_tx_timeout: lec0 [ 585.160010][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 585.198252][ T28] audit: type=1800 audit(1792198438.047:340): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5136" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 585.446793][T19897] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 585.698085][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 585.797094][ T173] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 586.054373][ T173] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 586.077928][ T173] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 586.126251][ T173] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.146673][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.173808][ T173] usb 2-1: SerialNumber: syz [ 586.199269][T21203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 586.466343][T21203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 586.640186][ T28] audit: type=1326 audit(1792198439.487:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21242 comm="syz.5.5164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95aad9e559 code=0x0 [ 586.926476][ T173] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 587.163111][ T173] usb 2-1: USB disconnect, device number 14 [ 587.174536][ T173] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 588.282885][ T28] audit: type=1326 audit(1792198441.127:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.0.5177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb06d9e559 code=0x0 [ 588.453819][T21282] loop5: detected capacity change from 0 to 40427 [ 588.478199][T21282] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 588.505267][T21282] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 588.532138][T21282] F2FS-fs (loop5): invalid crc value [ 588.740395][T21282] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 588.768080][T21282] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 588.948966][T21282] syz.5.5172: attempt to access beyond end of device [ 588.948966][T21282] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 589.061487][T19897] syz-executor: attempt to access beyond end of device [ 589.061487][T19897] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 589.135438][T21330] loop3: detected capacity change from 0 to 4096 [ 589.162869][T19897] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 589.177281][T21334] netlink: 'syz.1.5187': attribute type 2 has an invalid length. [ 589.184292][T21330] EXT4-fs: inline encryption not supported [ 589.271024][T21330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 589.295609][T21330] EXT4-fs (loop3): Test dummy encryption mode enabled [ 589.340598][T21330] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 589.387062][T21330] System zones: 0-5 [ 589.420539][T21330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.819818][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.827630][T21347] zswap: compressor - not available [ 589.873149][T21357] 9pnet_fd: p9_fd_create_unix (21357): problem connecting socket: ./file0: -111 [ 590.167304][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 590.175403][ C1] lec:lec_tx_timeout: lec0 [ 590.180115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 590.533822][T21385] loop1: detected capacity change from 0 to 512 [ 590.551142][T21385] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 591.079207][T21410] loop5: detected capacity change from 0 to 512 [ 591.169208][T21410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.207165][T21410] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.379905][T21410] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 591.429573][T21410] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 591.482075][T21410] EXT4-fs (loop5): This should not happen!! Data will be lost [ 591.482075][T21410] [ 591.526349][T21410] EXT4-fs (loop5): Total free blocks count 0 [ 591.568732][T21410] EXT4-fs (loop5): Free/Dirty block details [ 591.574695][T21410] EXT4-fs (loop5): free_blocks=65280 [ 591.604604][T21410] EXT4-fs (loop5): dirty_blocks=33 [ 591.629113][T21410] EXT4-fs (loop5): Block reservation details [ 591.635164][T21410] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 591.831766][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.868101][T21447] netlink: 'syz.0.5222': attribute type 39 has an invalid length. [ 591.884685][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5224'. [ 592.577554][T21471] program syz.5.5230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.031569][T21492] loop5: detected capacity change from 0 to 512 [ 593.074042][T21492] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 593.090151][T21487] loop1: detected capacity change from 0 to 8192 [ 593.142863][T21487] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 593.156210][T21487] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 593.174763][T21487] REISERFS (device loop1): using ordered data mode [ 593.181902][T21487] reiserfs: using flush barriers [ 593.201867][T21487] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 593.219042][T21487] REISERFS (device loop1): checking transaction log (loop1) [ 593.244424][T21487] REISERFS (device loop1): Using r5 hash to sort names [ 593.274448][T21487] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 593.629409][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5241'. [ 593.677867][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5241'. [ 593.766715][T21512] i2c i2c-0: delete_device: Can't find device in list [ 593.960828][ T28] audit: type=1326 audit(1792198446.807:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.025623][ T28] audit: type=1326 audit(1792198446.807:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.108191][ T28] audit: type=1326 audit(1792198446.807:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.192679][ T28] audit: type=1326 audit(1792198446.807:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.254148][ T28] audit: type=1326 audit(1792198446.807:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.316452][ T28] audit: type=1326 audit(1792198446.837:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.384877][ T28] audit: type=1326 audit(1792198446.837:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.463977][ T28] audit: type=1326 audit(1792198446.837:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.528931][T21541] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 594.540364][ T28] audit: type=1326 audit(1792198446.837:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.564447][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.607886][ T28] audit: type=1326 audit(1792198446.837:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.1.5242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 594.631891][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.187045][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 595.195168][ C1] lec:lec_tx_timeout: lec0 [ 595.200422][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 595.379605][T21564] loop1: detected capacity change from 0 to 1024 [ 595.478492][T21564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.650300][T21564] fs-verity (loop1, inode 13): Unsupported log_blocksize: 12 [ 595.767672][T16190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.680573][T21611] loop5: detected capacity change from 0 to 4096 [ 597.289561][T21630] loop5: detected capacity change from 0 to 1024 [ 597.311520][T21630] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 597.351231][T21630] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 597.363383][T21630] EXT4-fs error (device loop5): ext4_get_journal_inode:5820: inode #32: comm syz.5.5281: iget: special inode unallocated [ 597.395541][T21630] EXT4-fs (loop5): no journal found [ 597.407482][T21630] EXT4-fs (loop5): can't get journal size [ 597.426142][T21630] EXT4-fs (loop5): filesystem is read-only [ 597.454420][T21630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 597.535718][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.333062][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5294'. [ 598.362473][T21667] netlink: 'syz.5.5294': attribute type 21 has an invalid length. [ 599.041500][T21698] loop1: detected capacity change from 0 to 512 [ 599.097148][T21698] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 599.107385][T21698] FAT-fs (loop1): Filesystem has been set read-only [ 599.297202][ T5762] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 599.422485][T21717] loop5: detected capacity change from 0 to 512 [ 599.461769][T21717] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.5315: Attempting to read directory block (0) that is past i_size (16) [ 599.490800][ T5762] usb 4-1: not running at top speed; connect to a high speed hub [ 599.512313][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.537356][T21717] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 599.548028][T21717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.563204][ T5762] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 599.579391][T21717] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.5315: Attempting to read directory block (0) that is past i_size (16) [ 599.601718][T21717] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.5315: Attempting to read directory block (0) that is past i_size (16) [ 599.602063][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.691750][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.702535][ T5762] usb 4-1: Found UVC 1.00 device (046d:0825) [ 599.726742][ T5762] usb 4-1: No streaming interface found for terminal 2. [ 599.899990][ T5762] usb 4-1: string descriptor 0 read error: -71 [ 599.921040][ T5762] usb 4-1: USB disconnect, device number 7 [ 600.165189][T21744] loop5: detected capacity change from 0 to 256 [ 600.207198][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 600.215317][ C1] lec:lec_tx_timeout: lec0 [ 600.220097][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 600.520002][T21738] loop1: detected capacity change from 0 to 32768 [ 600.590271][T21738] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 600.615351][T21760] ieee802154 phy0 wpan0: encryption failed: -22 [ 600.765493][T21738] XFS (loop1): Ending clean mount [ 600.915896][T16190] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 601.533577][T21787] loop1: detected capacity change from 0 to 1024 [ 601.982546][T21801] netlink: 'syz.1.5347': attribute type 9 has an invalid length. [ 602.017286][T21801] netlink: 371 bytes leftover after parsing attributes in process `syz.1.5347'. [ 602.190417][T21812] loop5: detected capacity change from 0 to 512 [ 602.272620][T21816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'. [ 602.284287][T21812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.353920][T21812] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.368612][T21818] use of bytesused == 0 is deprecated and will be removed in the future, [ 602.399101][T21818] use the actual size instead. [ 602.429743][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 602.429758][ T28] audit: type=1800 audit(1792198455.277:358): pid=21812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5352" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 602.582308][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.788204][ T28] audit: type=1326 audit(1792198455.637:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.3.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9c899e559 code=0x0 [ 602.977182][T21846] loop5: detected capacity change from 0 to 128 [ 603.388420][ T173] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 603.401996][ T173] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 603.939101][T21883] loop3: detected capacity change from 0 to 1024 [ 604.136987][ T173] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 604.153743][ T1085] hfsplus: b-tree write err: -5, ino 20 [ 604.161064][ T1085] hfsplus: b-tree write err: -5, ino 4 [ 604.179121][ T1085] hfsplus: b-tree write err: -5, ino 2 [ 604.330151][ T173] usb 6-1: Using ep0 maxpacket: 8 [ 604.342599][ T173] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 604.361501][ T173] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.392024][ T173] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.424176][ T173] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.450737][ T173] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.466922][ T5846] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 604.502957][ T173] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 604.523915][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.696921][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 604.715423][ T5846] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 604.737782][ T5846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 604.766337][ T5846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.783896][ T173] usb 6-1: GET_CAPABILITIES returned 0 [ 604.789586][ T5846] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.803353][ T173] usbtmc 6-1:16.0: can't read capabilities [ 604.834613][ T5846] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.862219][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.874505][T21898] loop3: detected capacity change from 0 to 32768 [ 604.931638][T21898] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 605.049080][ T5848] usb 6-1: USB disconnect, device number 9 [ 605.061125][T21898] (syz.3.5390,21898,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 605.102900][ T5846] usb 2-1: GET_CAPABILITIES returned 0 [ 605.127944][ T5846] usbtmc 2-1:16.0: can't read capabilities [ 605.226910][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 605.235021][ C1] lec:lec_tx_timeout: lec0 [ 605.239705][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 605.274346][T18308] ocfs2: Unmounting device (7,3) on (node local) [ 605.361358][ T27] usb 2-1: USB disconnect, device number 15 [ 605.499443][T21911] loop3: detected capacity change from 0 to 256 [ 605.506754][T21911] exfat: Deprecated parameter 'utf8' [ 605.513143][T21911] exfat: Deprecated parameter 'utf8' [ 605.523386][T21911] exfat: Deprecated parameter 'namecase' [ 605.553783][T21911] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 605.714861][T21916] loop3: detected capacity change from 0 to 128 [ 605.724618][T21916] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 605.890801][ T1085] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 606.300912][ T789] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 606.469219][T21932] loop5: detected capacity change from 0 to 40427 [ 606.484414][T21932] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 606.490432][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 606.494522][T21932] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 606.509739][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.536774][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.540135][T21932] F2FS-fs (loop5): Found nat_bits in checkpoint [ 606.557081][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 606.586009][ T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 606.606224][ T789] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.650314][ T789] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 606.666966][ T789] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 606.683359][T21932] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 606.685555][ T789] usb 2-1: Manufacturer: syz [ 606.692637][T21932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 606.709237][ T789] usb 2-1: config 0 descriptor?? [ 606.925532][T21942] loop3: detected capacity change from 0 to 32768 [ 606.995538][T21942] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 607.048781][ T789] rc_core: IR keymap rc-hauppauge not found [ 607.054761][ T789] Registered IR keymap rc-empty [ 607.084526][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.105495][T21942] XFS (loop3): Ending clean mount [ 607.127248][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.175780][ T789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 607.197948][ T789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 607.223884][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.267090][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.284139][T18308] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 607.298332][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.327078][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.363088][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.397326][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.469713][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.517051][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.560371][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.607889][ T789] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 607.660250][ T789] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 607.685566][ T789] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 607.723110][ T789] usb 2-1: USB disconnect, device number 16 [ 607.741782][T21957] loop5: detected capacity change from 0 to 512 [ 607.811941][T21959] loop3: detected capacity change from 0 to 64 [ 607.834323][T21957] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 607.842658][T21957] System zones: 0-2, 18-18, 34-34 [ 607.882940][T21957] EXT4-fs (loop5): 1 orphan inode deleted [ 607.928580][T21957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.952675][T21957] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.045957][T19897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.517412][ T5846] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 608.587919][T21986] netlink: 'syz.5.5418': attribute type 5 has an invalid length. [ 608.711066][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 608.731231][ T5846] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 608.745678][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 608.755783][ T5846] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 608.767359][ T5846] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 608.780291][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.803788][ T5846] usb 4-1: config 0 descriptor?? [ 609.036388][ T5846] hdpvr 4-1:0.0: firmware version 0x0 dated [ 609.045246][ T5846] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 609.589661][T22027] phram: illegal start address [ 609.678836][T22032] bonding: bond0 is being created... [ 609.732192][T22032] bonding: bond0 already exists [ 609.767527][ T5846] hdpvr 4-1:0.0: Could not setup controls [ 609.789860][ T5846] hdpvr 4-1:0.0: registering videodev failed [ 609.834883][ T5846] hdpvr: probe of 4-1:0.0 failed with error -71 [ 609.904160][ T5846] usb 4-1: USB disconnect, device number 8 [ 610.248197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 610.256311][ C1] lec:lec_tx_timeout: lec0 [ 610.261196][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 610.377980][T15064] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 610.578425][T15064] usb 2-1: not running at top speed; connect to a high speed hub [ 610.599347][T15064] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 610.626554][T15064] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 610.659083][T15064] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 610.689242][T15064] usb 2-1: Product: syz [ 610.695571][T15064] usb 2-1: Manufacturer: syz [ 610.748510][T15064] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 610.924572][T15064] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 610.955464][T15064] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 610.991738][T15064] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 611.026907][T15064] usb 2-1: USB disconnect, device number 17 [ 611.620449][T22067] loop3: detected capacity change from 0 to 32768 [ 611.673173][T22067] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 611.673173][T22067] [ 611.703708][T22067] ERROR: (device loop3): remounting filesystem as read-only [ 612.214729][T22113] loop3: detected capacity change from 0 to 128 [ 612.279934][T22113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.311008][T22113] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 612.556610][T18308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.037792][T22151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 613.379556][T22170] cifs: Bad value for 'source' [ 613.724040][T22189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.026304][T22207] loop1: detected capacity change from 0 to 32768 [ 615.969219][T22251] loop1: detected capacity change from 0 to 64 [ 616.087252][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 616.095306][ C1] lec:lec_tx_timeout: lec0 [ 616.414981][T22242] loop3: detected capacity change from 0 to 40427 [ 616.447822][T22242] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 616.466780][T22242] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 616.491599][T22260] block2mtd: illegal erase size [ 616.517610][T22242] F2FS-fs (loop3): invalid crc value [ 616.876206][T22242] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 616.907750][T22242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 617.088805][T18308] syz-executor: attempt to access beyond end of device [ 617.088805][T18308] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 617.125542][T18308] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 617.264183][T22283] netlink: 'syz.5.5508': attribute type 12 has an invalid length. [ 617.287146][T22283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5508'. [ 617.844200][T22306] gretap0: entered promiscuous mode [ 617.903857][T22309] netlink: 'syz.0.5520': attribute type 14 has an invalid length. [ 618.191541][T22322] loop1: detected capacity change from 0 to 2048 [ 618.238876][T22327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.265813][ T28] audit: type=1800 audit(1792198471.107:360): pid=22322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5526" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 618.293759][ T28] audit: type=1800 audit(1792198471.137:361): pid=22322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5526" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 618.365464][T22327] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 618.376779][T22327] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 618.391668][T22327] Remounting filesystem read-only [ 618.397477][ T3478] NILFS (loop1): discard dirty page: offset=0, ino=15 [ 618.404297][ T3478] NILFS (loop1): discard dirty block: blocknr=22, size=1024 [ 618.424225][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.433564][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.445185][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.454588][ T3478] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 618.461584][ T3478] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 618.468964][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.480060][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.490640][T22334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5531'. [ 618.498584][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.524206][ T3478] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 618.542032][ T3478] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 618.557345][ T3478] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 618.572385][ T3478] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 618.591264][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.605665][ T3478] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 618.613359][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.624621][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.638544][ T3478] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 618.645953][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.655492][ T3478] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 618.662435][ T3478] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 618.669903][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.679118][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.689226][ T3478] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.699685][T16190] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 618.718425][T16190] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 618.730437][T16190] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.740026][T16190] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 618.749721][T16190] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 618.757370][T16190] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 619.232671][T22357] loop5: detected capacity change from 0 to 1024 [ 619.249060][T22357] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 619.266173][T22357] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 619.283333][T22357] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 619.342281][T22361] loop3: detected capacity change from 0 to 4096 [ 619.395971][T22363] macvlan0: entered promiscuous mode [ 619.428228][T22363] netlink: 'syz.1.5542': attribute type 1 has an invalid length. [ 619.457231][T22363] netlink: 'syz.1.5542': attribute type 2 has an invalid length. [ 619.807872][T22379] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5549'. [ 619.884774][T22382] tipc: Started in network mode [ 619.897836][T22382] tipc: Node identity 3, cluster identity 4711 [ 619.905920][T22382] tipc: Node number set to 3 [ 619.915898][T22382] tipc: Enabled bearer , priority 10 [ 621.141925][T22421] loop1: detected capacity change from 0 to 512 [ 621.202935][T22421] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.5568: iget: bad i_size value: 38620345925642 [ 621.247055][T22421] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.5568: couldn't read orphan inode 15 (err -117) [ 621.265221][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5569'. [ 621.310842][T22421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.404291][T22421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.5568: bg 0: block 5: invalid block bitmap [ 621.432605][T22421] EXT4-fs error (device loop1) in ext4_setattr:5695: error 28 [ 621.497417][T16190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.622004][T22439] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 621.836763][T22447] batman_adv: batadv0: Adding interface: gretap1 [ 621.845423][T22447] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.888168][T22447] batman_adv: batadv0: Interface activated: gretap1 [ 622.033839][T22453] loop1: detected capacity change from 0 to 512 [ 622.049771][T22453] EXT4-fs: inline encryption not supported [ 622.087724][T22453] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.094240][T22453] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.118689][T22453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 622.169675][T22453] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 622.184673][T22453] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5582: invalid indirect mapped block 2683928664 (level 1) [ 622.204042][T22453] EXT4-fs (loop1): Remounting filesystem read-only [ 622.214087][T22453] EXT4-fs (loop1): 1 truncate cleaned up [ 622.223256][T22453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.252316][T22453] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 622.383220][T16190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.598721][T22472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5590'. [ 623.167052][ T5846] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 623.352785][ T5846] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 623.362455][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.398058][ T5846] usb 4-1: config 0 descriptor?? [ 623.411345][ T5846] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 623.547086][T13770] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 623.727008][T13770] usb 2-1: Using ep0 maxpacket: 16 [ 623.739407][T13770] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 623.749335][T13770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.758089][T13770] usb 2-1: Product: syz [ 623.762397][T13770] usb 2-1: Manufacturer: syz [ 623.769693][T13770] usb 2-1: SerialNumber: syz [ 623.995846][T13770] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 624.030631][T13770] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 624.041431][T13770] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 624.051574][T13770] usb 2-1: media controller created [ 624.084070][T13770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.219792][ T5846] gspca_sunplus: reg_w_riv err -71 [ 624.225039][ T5846] sunplus: probe of 4-1:0.0 failed with error -71 [ 624.244026][ T5846] usb 4-1: USB disconnect, device number 9 [ 624.320751][T13770] zl10353_read_register: readreg error (reg=127, ret==-110) [ 624.392254][T13770] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 624.425733][T13770] usb 2-1: USB disconnect, device number 18 [ 624.520215][T22528] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 624.586626][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.593479][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.605857][ T1293] lec:lec_start_xmit: lec0:No lecd attached [ 624.850899][T22538] loop3: detected capacity change from 0 to 2048 [ 624.893041][T22538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.004645][T22536] loop5: detected capacity change from 0 to 32768 [ 625.124773][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.607334][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 625.781150][T22558] comedi comedi0: ni_at_a2150: I/O port conflict (0x20,28) [ 625.801469][T22558] comedi comedi0: ni_at_a2150: I/O port conflict (0x80,28) [ 627.019050][T22580] loop3: detected capacity change from 0 to 32768 [ 627.397148][T14571] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 627.589275][T14571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.602007][T14571] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 627.636980][T14571] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.654132][T14571] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 627.673256][T14571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.682910][T14571] usb 6-1: Product: syz [ 627.688985][T14571] usb 6-1: Manufacturer: syz [ 627.693625][T14571] usb 6-1: SerialNumber: syz [ 627.705328][T14571] usb 6-1: Found UVC 1.00 device syz (046d:0821) [ 627.717078][T14571] usb 6-1: No valid video chain found. [ 627.919351][T14571] usb 6-1: USB disconnect, device number 10 [ 628.099208][T22625] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input22 [ 628.588795][T22644] binder: 22643:22644 ioctl c0306201 0 returned -14 [ 628.668643][T22649] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 628.999315][T22661] loop3: detected capacity change from 0 to 1024 [ 629.005477][T22663] netlink: 'syz.5.5680': attribute type 1 has an invalid length. [ 629.014790][T22663] netlink: 'syz.5.5680': attribute type 1 has an invalid length. [ 629.040607][T22661] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 629.060620][T22663] iwpm_send_hello: Unable to send a nlmsg [ 629.073858][T22661] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 1: comm syz.3.5679: lblock 1 mapped to illegal pblock 1 (length 1) [ 629.146289][T22661] Quota error (device loop3): write_blk: dquota write failed [ 629.185862][T22661] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 629.247278][T22661] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.5679: Failed to acquire dquot type 0 [ 629.318690][T22661] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.5679: Freeing blocks not in datazone - block = 0, count = 4096 [ 629.380925][T22661] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.5679: Invalid inode bitmap blk 0 in block_group 0 [ 629.449429][T22661] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 629.487345][T22661] EXT4-fs (loop3): 1 orphan inode deleted [ 629.515455][T22661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.633518][T22661] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.5679: Invalid inode table block 18446744069414584321 in block_group 0 [ 629.713998][T22661] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 629.954653][T22667] loop1: detected capacity change from 0 to 131072 [ 629.976785][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.996704][T22667] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 630.004804][T22667] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 630.013158][T22667] F2FS-fs (loop1): Test dummy encryption mode enabled [ 630.021192][T22667] F2FS-fs (loop1): invalid crc value [ 630.077297][T22667] F2FS-fs (loop1): Found nat_bits in checkpoint [ 630.086940][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5480 ms [ 630.095041][ C1] lec:lec_tx_timeout: lec0 [ 630.133143][T22667] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 630.168002][T22667] F2FS-fs (loop1): Start checkpoint disabled! [ 630.232570][T22667] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 630.239745][T22667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 630.594847][ T1085] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 630.655219][T22693] pimreg: tun_chr_ioctl cmd 1074025677 [ 630.664820][T22693] pimreg: linktype set to 774 [ 630.698628][T22695] loop5: detected capacity change from 0 to 256 [ 630.736693][T22697] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5694'. [ 630.870300][T22695] FAT-fs (loop5): Directory bread(block 64) failed [ 630.904054][T22695] FAT-fs (loop5): Directory bread(block 65) failed [ 630.927663][T22695] FAT-fs (loop5): Directory bread(block 66) failed [ 630.934256][T22695] FAT-fs (loop5): Directory bread(block 67) failed [ 630.963400][T22695] FAT-fs (loop5): Directory bread(block 68) failed [ 630.976303][T22695] FAT-fs (loop5): Directory bread(block 69) failed [ 631.007503][T22695] FAT-fs (loop5): Directory bread(block 70) failed [ 631.014606][T22695] FAT-fs (loop5): Directory bread(block 71) failed [ 631.027271][T22695] FAT-fs (loop5): Directory bread(block 72) failed [ 631.033899][T22695] FAT-fs (loop5): Directory bread(block 73) failed [ 631.218388][T22695] syz.5.5693: attempt to access beyond end of device [ 631.218388][T22695] loop5: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 631.370976][T22707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input23 [ 632.117190][T15064] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 632.218910][T22739] loop3: detected capacity change from 0 to 512 [ 632.272560][T22739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.285802][T22739] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.314883][T15064] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.327355][T15064] usb 6-1: config 0 has no interface number 0 [ 632.333550][T15064] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.345553][T15064] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.357920][T15064] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.371420][T15064] usb 6-1: config 0 interface 1 has no altsetting 0 [ 632.380469][T15064] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 632.389775][T15064] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 632.397967][T15064] usb 6-1: Manufacturer: syz [ 632.406386][T15064] usb 6-1: config 0 descriptor?? [ 632.473454][T18308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.037533][T15064] uclogic 0003:145F:0212.000F: failed retrieving string descriptor #100: -71 [ 633.047416][T15064] uclogic 0003:145F:0212.000F: failed retrieving pen parameters: -71 [ 633.055811][T15064] uclogic 0003:145F:0212.000F: pen probing failed: -71 [ 633.064335][T15064] uclogic 0003:145F:0212.000F: failed probing parameters: -71 [ 633.072796][T15064] uclogic: probe of 0003:145F:0212.000F failed with error -71 [ 633.087060][T15064] usb 6-1: USB disconnect, device number 11 [ 633.278792][T22781] ip_tables: iptables: counters copy to user failed while replacing table [ 633.463333][T22784] loop1: detected capacity change from 0 to 8192 [ 633.741319][ T28] audit: type=1326 audit(1792198742.593:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 633.826931][ T28] audit: type=1326 audit(1792198742.593:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 633.880962][ T28] audit: type=1326 audit(1792198742.623:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 633.905051][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.926018][ T28] audit: type=1326 audit(1792198742.623:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 633.957813][ T28] audit: type=1326 audit(1792198742.633:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 633.995667][ T28] audit: type=1326 audit(1792198742.713:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 634.026454][ T28] audit: type=1326 audit(1792198742.713:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 634.056327][ T28] audit: type=1326 audit(1792198742.723:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22791 comm="syz.0.5733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06d9e559 code=0x7ffc0000 [ 634.186778][T22802] ip6gre1: entered promiscuous mode [ 634.193069][T22802] ip6gre1: entered allmulticast mode [ 634.413041][T22810] CacheFiles: Failed to register: -95 [ 634.685004][T22823] loop1: detected capacity change from 0 to 64 [ 635.236948][T15064] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 635.427321][T15064] usb 2-1: Using ep0 maxpacket: 8 [ 635.450582][T15064] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 635.467816][T15064] usb 2-1: config 179 has no interface number 0 [ 635.481376][T15064] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 635.492460][T22860] loop3: detected capacity change from 0 to 4096 [ 635.494007][T22860] EXT4-fs: Ignoring removed i_version option [ 635.505468][T22860] EXT4-fs: Ignoring removed oldalloc option [ 635.513941][T22860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.529805][T15064] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 635.567136][T22860] EXT4-fs (loop3): Test dummy encryption mode enabled [ 635.574183][T22860] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 635.576217][T15064] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 635.628214][T15064] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 635.641164][T15064] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 635.687914][T15064] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 635.716924][T15064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.758124][T22833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 636.147309][T13770] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 636.348070][T13770] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.372976][T13770] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 636.405405][T14571] usb 2-1: USB disconnect, device number 19 [ 636.405474][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 636.411597][T13770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.420978][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 636.440731][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5774'. [ 636.449777][T22883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5774'. [ 636.923315][T13770] usbhid 6-1:1.0: can't add hid device: -71 [ 636.936107][T13770] usbhid: probe of 6-1:1.0 failed with error -71 [ 636.956445][T13770] usb 6-1: USB disconnect, device number 12 [ 637.057233][T14571] IPVS: starting estimator thread 0... [ 637.129159][T22902] loop3: detected capacity change from 0 to 8192 [ 637.147108][T22905] IPVS: using max 19 ests per chain, 45600 per kthread [ 637.977189][T13770] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 638.167227][T13770] usb 6-1: Using ep0 maxpacket: 16 [ 638.198382][T13770] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.226992][T13770] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.256913][T13770] usb 6-1: config 0 interface 0 has no altsetting 0 [ 638.267992][T13770] usb 6-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 638.286100][T13770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.308643][T13770] usb 6-1: config 0 descriptor?? [ 638.475219][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 638.475234][ T28] audit: type=1326 audit(1792198747.323:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.521168][ T28] audit: type=1326 audit(1792198747.323:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.557645][ T28] audit: type=1326 audit(1792198747.373:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.625897][ T28] audit: type=1326 audit(1792198747.373:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.687090][ T28] audit: type=1326 audit(1792198747.373:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.719565][ T28] audit: type=1326 audit(1792198747.413:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.747081][ T173] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 638.755134][ T28] audit: type=1326 audit(1792198747.413:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.772446][T22936] loop1: detected capacity change from 0 to 64 [ 638.782382][T13770] hid (null): report_id 0 is invalid [ 638.826415][T13770] asus 0003:0B05:18C6.0010: unknown main item tag 0x3 [ 638.837768][T13770] asus 0003:0B05:18C6.0010: unknown main item tag 0x6 [ 638.849690][T13770] asus 0003:0B05:18C6.0010: unknown main item tag 0x7 [ 638.862889][ T28] audit: type=1326 audit(1792198747.473:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.897412][T13770] asus 0003:0B05:18C6.0010: report_id 0 is invalid [ 638.903991][T13770] asus 0003:0B05:18C6.0010: item 0 0 1 8 parsing failed [ 638.917892][T13770] asus 0003:0B05:18C6.0010: Asus hid parse failed: -22 [ 638.924887][T13770] asus: probe of 0003:0B05:18C6.0010 failed with error -22 [ 638.941044][ T28] audit: type=1326 audit(1792198747.473:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.973575][ T173] usb 4-1: Using ep0 maxpacket: 8 [ 638.975552][ T28] audit: type=1326 audit(1792198747.473:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.1.5794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e59e559 code=0x7ffc0000 [ 638.981018][ T173] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 639.070831][T13770] usb 6-1: USB disconnect, device number 13 [ 639.085397][ T173] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 639.106959][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.128825][ T173] usb 4-1: Product: syz [ 639.134045][ T173] usb 4-1: Manufacturer: syz [ 639.143955][ T173] usb 4-1: SerialNumber: syz [ 639.393571][ T173] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 639.400959][ T173] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 639.462233][ T173] usb 4-1: USB disconnect, device number 10 [ 639.525618][ T7125] udevd[7125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.821890][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5813'. [ 640.980812][T22995] program syz.0.5825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.238901][T23003] program syz.5.5829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.511574][T23013] loop5: detected capacity change from 0 to 7 [ 641.532102][T23013] Dev loop5: unable to read RDB block 7 [ 641.541803][T23013] loop5: AHDI p1 p2 p3 [ 641.546104][T23013] loop5: partition table partially beyond EOD, truncated [ 641.554387][T23013] loop5: p1 start 1601398130 is beyond EOD, truncated [ 641.562199][T23013] loop5: p2 start 1702059890 is beyond EOD, truncated [ 641.823414][T23020] loop3: detected capacity change from 0 to 512 [ 641.858097][T23020] EXT4-fs: inline encryption not supported [ 641.864448][T23020] ext3: Unknown parameter 'subj_user' [ 641.908642][T23020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.054595][T23028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5840'. [ 642.068813][T23030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5841'. [ 642.083415][T23030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5841'. [ 642.095976][T23030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5841'. [ 642.108730][T23030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5841'. [ 642.180387][T23034] loop3: detected capacity change from 0 to 256 [ 642.238101][T23034] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 642.432904][T23042] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5847'. [ 652.247850][T19132] Bluetooth: hci0: command 0x0406 tx timeout [ 655.578873][T14913] lec:lec_start_xmit: lec0:No lecd attached [ 661.046956][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 661.055012][ C1] lec:lec_tx_timeout: lec0 [ 686.014568][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.022084][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.032052][ T1293] lec:lec_start_xmit: lec0:No lecd attached [ 691.047016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.055080][ C1] lec:lec_tx_timeout: lec0 [ 703.484585][ T5139] udevd[5139]: worker [7125] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 719.236311][T14913] lec:lec_start_xmit: lec0:No lecd attached [ 724.247210][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 724.255293][ C1] lec:lec_tx_timeout: lec0 [ 747.461649][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.468305][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.476625][ T1293] lec:lec_start_xmit: lec0:No lecd attached [ 753.046921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 753.055014][ C1] lec:lec_tx_timeout: lec0 [ 764.887057][T19132] Bluetooth: hci2: command 0x0406 tx timeout [ 783.806427][T14913] lec:lec_start_xmit: lec0:No lecd attached [ 789.047030][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 789.055090][ C1] lec:lec_tx_timeout: lec0 [ 790.967250][ T29] INFO: task syz-executor:5760 blocked for more than 143 seconds. [ 790.975118][ T29] Not tainted syzkaller #0 [ 790.980143][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.988943][ T29] task:syz-executor state:D stack:22664 pid:5760 ppid:5759 flags:0x00004002 [ 790.998328][ T29] Call Trace: [ 791.001627][ T29] [ 791.004568][ T29] __schedule+0x15ae/0x4660 [ 791.009207][ T29] ? mark_lock+0x94/0x320 [ 791.013553][ T29] ? asan.module_dtor+0x20/0x20 [ 791.018489][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.023533][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 791.029571][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 791.034792][ T29] schedule+0xbd/0x170 [ 791.038976][ T29] io_schedule+0x80/0xd0 [ 791.043247][ T29] bit_wait_io+0x11/0xd0 [ 791.048563][ T29] __wait_on_bit+0x9f/0x2c0 [ 791.053111][ T29] ? bit_wait+0xd0/0xd0 [ 791.057358][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 791.063190][ T29] ? bit_wait+0xd0/0xd0 [ 791.067592][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 791.072405][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 791.078673][ T29] ? bit_waitqueue+0x30/0x30 [ 791.083313][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 791.088578][ T29] do_get_write_access+0x5c9/0xe00 [ 791.093714][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 791.099776][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 791.105951][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 791.112170][ T29] ? __might_sleep+0xe0/0xe0 [ 791.116782][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 791.122405][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 791.128290][ T29] ext4_dirty_inode+0xcb/0x110 [ 791.133082][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 791.138947][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 791.143990][ T29] file_update_time+0x187/0x1a0 [ 791.148939][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 791.154009][ T29] ? do_wp_page+0x4ce/0x34d0 [ 791.158718][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 791.165319][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.170465][ T29] do_page_mkwrite+0x153/0x3f0 [ 791.175251][ T29] do_wp_page+0xd4d/0x34d0 [ 791.179723][ T29] ? folio_put+0xd0/0xd0 [ 791.183981][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 791.189320][ T29] ? __rwlock_init+0x150/0x150 [ 791.194117][ T29] handle_mm_fault+0x1306/0x4a50 [ 791.199118][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 791.204072][ T29] ? numa_migrate_prep+0x350/0x350 [ 791.211344][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 791.216672][ T29] do_user_addr_fault+0x736/0x12d0 [ 791.224240][ T29] exc_page_fault+0x64/0x100 [ 791.228999][ T29] ? clear_bhb_loop+0x40/0x90 [ 791.233821][ T29] asm_exc_page_fault+0x26/0x30 [ 791.238773][ T29] RIP: 0033:0x7fb2c487cae2 [ 791.243198][ T29] RSP: 002b:00007ffeab9b20e0 EFLAGS: 00010202 [ 791.249756][ T29] RAX: 00007fb2c2770000 RBX: 00005555692554f0 RCX: 0000000000000003 [ 791.258175][ T29] RDX: 000000000000172a RSI: 0000555569254418 RDI: 0000000000000008 [ 791.266589][ T29] RBP: 00007ffeab9b25e0 R08: 00005555692545e8 R09: 0000000000000090 [ 791.274743][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeab9b2420 [ 791.283072][ T29] R13: 00007ffeab9b2210 R14: 585858582e7a7973 R15: 00007ffeab9b2160 [ 791.291346][ T29] [ 791.294416][ T29] INFO: task syz.1.5854:23056 blocked for more than 143 seconds. [ 791.302309][ T29] Not tainted syzkaller #0 [ 791.307648][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.316338][ T29] task:syz.1.5854 state:D stack:27048 pid:23056 ppid:16190 flags:0x00004004 [ 791.325732][ T29] Call Trace: [ 791.330092][ T29] [ 791.333028][ T29] __schedule+0x15ae/0x4660 [ 791.337981][ T29] ? mark_lock+0x94/0x320 [ 791.342362][ T29] ? asan.module_dtor+0x20/0x20 [ 791.347269][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.352310][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 791.358309][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 791.363526][ T29] schedule+0xbd/0x170 [ 791.368593][ T29] io_schedule+0x80/0xd0 [ 791.372965][ T29] bit_wait_io+0x11/0xd0 [ 791.377379][ T29] __wait_on_bit+0x9f/0x2c0 [ 791.381906][ T29] ? bit_wait+0xd0/0xd0 [ 791.386054][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 791.391650][ T29] ? bit_wait+0xd0/0xd0 [ 791.395821][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 791.400953][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 791.406033][ T29] ? bit_waitqueue+0x30/0x30 [ 791.410768][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 791.415985][ T29] do_get_write_access+0x5c9/0xe00 [ 791.421310][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 791.427675][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 791.434035][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 791.440364][ T29] ? __might_sleep+0xe0/0xe0 [ 791.444985][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 791.450757][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 791.456250][ T29] ext4_dirty_inode+0xcb/0x110 [ 791.461459][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 791.467339][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 791.472612][ T29] file_update_time+0x187/0x1a0 [ 791.477889][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 791.482938][ T29] ? filemap_fault+0x103c/0x1540 [ 791.488470][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 791.494212][ T29] ? pte_alloc_one+0x3b6/0x540 [ 791.499209][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 791.505476][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.510599][ T29] do_page_mkwrite+0x153/0x3f0 [ 791.515403][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 791.520737][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 791.525725][ T29] ? numa_migrate_prep+0x350/0x350 [ 791.531088][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 791.536419][ T29] do_user_addr_fault+0x736/0x12d0 [ 791.541708][ T29] exc_page_fault+0x64/0x100 [ 791.546323][ T29] asm_exc_page_fault+0x26/0x30 [ 791.551506][ T29] RIP: 0033:0x7f145e472c09 [ 791.555924][ T29] RSP: 002b:00007ffc52aaa6a0 EFLAGS: 00010202 [ 791.562297][ T29] RAX: 0000001b2f824000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 791.570375][ T29] RDX: 0000001b2f823ffc RSI: 00000000005ffde8 RDI: 00007f145f355700 [ 791.579258][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f145e812000 [ 791.587565][ T29] R10: 00007f145f355700 R11: 0000000000000000 R12: 0000000000000000 [ 791.595548][ T29] R13: 0000000000001a08 R14: ffffffff81322060 R15: 00007f145f355720 [ 791.603667][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 791.610201][ T29] [ 791.613275][ T29] INFO: task syz.3.5853:23057 blocked for more than 143 seconds. [ 791.621131][ T29] Not tainted syzkaller #0 [ 791.626073][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.634855][ T29] task:syz.3.5853 state:D stack:25384 pid:23057 ppid:18308 flags:0x00004004 [ 791.644263][ T29] Call Trace: [ 791.647611][ T29] [ 791.650562][ T29] __schedule+0x15ae/0x4660 [ 791.655107][ T29] ? mark_lock+0x94/0x320 [ 791.659633][ T29] ? asan.module_dtor+0x20/0x20 [ 791.664523][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.669866][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 791.676036][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 791.681384][ T29] schedule+0xbd/0x170 [ 791.685480][ T29] io_schedule+0x80/0xd0 [ 791.689931][ T29] bit_wait_io+0x11/0xd0 [ 791.694218][ T29] __wait_on_bit+0x9f/0x2c0 [ 791.699219][ T29] ? bit_wait+0xd0/0xd0 [ 791.703381][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 791.708909][ T29] ? bit_wait+0xd0/0xd0 [ 791.713079][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 791.718001][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 791.723052][ T29] ? bit_waitqueue+0x30/0x30 [ 791.728116][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 791.733385][ T29] do_get_write_access+0x5c9/0xe00 [ 791.738665][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 791.744677][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 791.750933][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 791.757542][ T29] ? __might_sleep+0xe0/0xe0 [ 791.762159][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 791.767875][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 791.773477][ T29] ext4_dirty_inode+0xcb/0x110 [ 791.778794][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 791.784677][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 791.790079][ T29] file_update_time+0x187/0x1a0 [ 791.795084][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 791.800242][ T29] ? filemap_fault+0x103c/0x1540 [ 791.805206][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 791.811253][ T29] ? pte_alloc_one+0x3b6/0x540 [ 791.816030][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 791.822600][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.827721][ T29] do_page_mkwrite+0x153/0x3f0 [ 791.832488][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 791.837586][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 791.842565][ T29] ? numa_migrate_prep+0x350/0x350 [ 791.847885][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 791.853177][ T29] do_user_addr_fault+0x736/0x12d0 [ 791.858426][ T29] exc_page_fault+0x64/0x100 [ 791.863043][ T29] asm_exc_page_fault+0x26/0x30 [ 791.867968][ T29] RIP: 0033:0x7ff9c8872c09 [ 791.872399][ T29] RSP: 002b:00007ffeb3042b80 EFLAGS: 00010202 [ 791.878784][ T29] RAX: 0000001b34024000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 791.887399][ T29] RDX: 0000001b34023ffc RSI: 00000000005ffde8 RDI: 00007ff9c9755700 [ 791.895405][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ff9c8c12000 [ 791.903552][ T29] R10: 00007ff9c9755700 R11: 0000000000000000 R12: 0000000000000000 [ 791.911906][ T29] R13: 0000000000004290 R14: ffffffff81322060 R15: 00007ff9c9755720 [ 791.920237][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 791.926359][ T29] [ 791.929623][ T29] INFO: task syz.5.5855:23060 blocked for more than 144 seconds. [ 791.937575][ T29] Not tainted syzkaller #0 [ 791.942536][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.951292][ T29] task:syz.5.5855 state:D stack:27560 pid:23060 ppid:19897 flags:0x00004004 [ 791.960595][ T29] Call Trace: [ 791.963873][ T29] [ 791.966799][ T29] __schedule+0x15ae/0x4660 [ 791.971680][ T29] ? mark_lock+0x94/0x320 [ 791.976032][ T29] ? asan.module_dtor+0x20/0x20 [ 791.981111][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 791.986454][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 791.992474][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 791.998065][ T29] schedule+0xbd/0x170 [ 792.002164][ T29] io_schedule+0x80/0xd0 [ 792.006429][ T29] bit_wait_io+0x11/0xd0 [ 792.010782][ T29] __wait_on_bit+0x9f/0x2c0 [ 792.015313][ T29] ? bit_wait+0xd0/0xd0 [ 792.019626][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 792.025114][ T29] ? bit_wait+0xd0/0xd0 [ 792.029840][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 792.034632][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 792.039770][ T29] ? bit_waitqueue+0x30/0x30 [ 792.044393][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 792.049708][ T29] do_get_write_access+0x5c9/0xe00 [ 792.054858][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 792.061220][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 792.067513][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 792.073716][ T29] ? __might_sleep+0xe0/0xe0 [ 792.078396][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 792.083989][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 792.090498][ T29] ext4_dirty_inode+0xcb/0x110 [ 792.095298][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 792.101178][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 792.106235][ T29] file_update_time+0x187/0x1a0 [ 792.111197][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 792.116249][ T29] ? filemap_fault+0x103c/0x1540 [ 792.121546][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 792.127372][ T29] ? pte_alloc_one+0x3b6/0x540 [ 792.132181][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 792.138802][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 792.143875][ T29] do_page_mkwrite+0x153/0x3f0 [ 792.148932][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 792.153889][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 792.159190][ T29] ? numa_migrate_prep+0x350/0x350 [ 792.164338][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 792.169788][ T29] do_user_addr_fault+0x736/0x12d0 [ 792.174946][ T29] exc_page_fault+0x64/0x100 [ 792.179926][ T29] ? clear_bhb_loop+0x40/0x90 [ 792.184633][ T29] asm_exc_page_fault+0x26/0x30 [ 792.189988][ T29] RIP: 0033:0x7f95aac6bea3 [ 792.194423][ T29] RSP: 002b:00007ffe00e042a0 EFLAGS: 00010246 [ 792.200548][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fb64000 [ 792.209077][ T29] RDX: 0000001b2fb24000 RSI: 0000000000600000 RDI: 00007f95aafe4708 [ 792.217154][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.225146][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 792.233194][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe00e04530 [ 792.241364][ T29] [ 792.244407][ T29] [ 792.244407][ T29] Showing all locks held in the system: [ 792.253576][ T29] 1 lock held by khungtaskd/29: [ 792.258547][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 792.268834][ T29] 1 lock held by khugepaged/35: [ 792.273711][ T29] #0: ffff88801bed0b20 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x216a/0x4050 [ 792.284252][ T29] 4 locks held by kworker/u4:9/4524: [ 792.290035][ T29] #0: ffff888140e7d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 792.301725][ T29] #1: ffffc9000f09fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 792.314278][ T29] #2: ffff88814dae40e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 792.324931][ T29] #3: ffff88814dae6c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 792.335666][ T29] 2 locks held by getty/5530: [ 792.340458][ T29] #0: ffff88802e7e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 792.350379][ T29] #1: ffffc900032862f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 792.360984][ T29] 3 locks held by syz-executor/5760: [ 792.366264][ T29] #0: ffff88802fe160a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 792.376239][ T29] #1: ffff88814dae4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 792.386077][ T29] #2: ffff88814dae8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 792.396491][ T29] 3 locks held by syz.1.5854/23056: [ 792.401775][ T29] #0: ffff888029f294a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 792.411878][ T29] #1: ffff88814dae4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 792.421918][ T29] #2: ffff88814dae8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 792.431820][ T29] 3 locks held by syz.3.5853/23057: [ 792.437187][ T29] #0: ffff88801bed0b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 792.447508][ T29] #1: ffff88814dae4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 792.457387][ T29] #2: ffff88814dae8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 792.467402][ T29] 3 locks held by syz.5.5855/23060: [ 792.472613][ T29] #0: ffff88801bed3aa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 792.482831][ T29] #1: ffff88814dae4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 792.492997][ T29] #2: ffff88814dae8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 792.503164][ T29] [ 792.505506][ T29] ============================================= [ 792.505506][ T29] [ 792.514226][ T29] NMI backtrace for cpu 1 [ 792.518577][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 792.525797][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 792.535859][ T29] Call Trace: [ 792.539139][ T29] [ 792.542138][ T29] dump_stack_lvl+0x18c/0x250 [ 792.546822][ T29] ? __wake_up_klogd+0xd9/0x100 [ 792.551775][ T29] ? show_regs_print_info+0x20/0x20 [ 792.556977][ T29] ? load_image+0x420/0x420 [ 792.561475][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 792.566433][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 792.572591][ T29] ? load_image+0x420/0x420 [ 792.577105][ T29] ? wq_watchdog_touch+0xef/0x170 [ 792.582139][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 792.588233][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 792.594216][ T29] watchdog+0xf59/0xfa0 [ 792.598383][ T29] ? watchdog+0x1e1/0xfa0 [ 792.602756][ T29] kthread+0x2fa/0x390 [ 792.606842][ T29] ? hungtask_pm_notify+0x50/0x50 [ 792.611884][ T29] ? kthread_blkcg+0xd0/0xd0 [ 792.616472][ T29] ret_from_fork+0x48/0x80 [ 792.620887][ T29] ? kthread_blkcg+0xd0/0xd0 [ 792.625471][ T29] ret_from_fork_asm+0x11/0x20 [ 792.630255][ T29] [ 792.634354][ T29] Sending NMI from CPU 1 to CPUs 0: [ 792.639728][ C0] NMI backtrace for cpu 0 [ 792.639740][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 792.639756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 792.639766][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 792.639790][ C0] RIP: 0010:filter_irq_stacks+0xc/0x90 [ 792.639813][ C0] Code: 38 c1 0f 8c 68 ff ff ff 4c 89 f7 e8 1e 3b 6a 00 e9 5b ff ff ff e8 64 d3 1c 09 0f 1f 40 00 f3 0f 1e fa 41 57 41 56 41 55 41 54 <53> 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff [ 792.639825][ C0] RSP: 0018:ffffc90000b9f710 EFLAGS: 00000282 [ 792.639838][ C0] RAX: 000000000000000b RBX: ffffc90000b9f790 RCX: 0000000000000001 [ 792.639849][ C0] RDX: 0000000000000820 RSI: 000000000000000b RDI: ffffc90000b9f790 [ 792.639859][ C0] RBP: 0000000000000820 R08: ffff88801aafda00 R09: 0000000000000002 [ 792.639869][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 792.639878][ C0] R13: 00000000000000f0 R14: 0000000000000001 R15: ffffc90000b9f790 [ 792.639889][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 792.639902][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.639913][ C0] CR2: 000055ec1ef46168 CR3: 000000000dd32000 CR4: 00000000003506f0 [ 792.639928][ C0] Call Trace: [ 792.639933][ C0] [ 792.639941][ C0] __stack_depot_save+0x1f/0x660 [ 792.639960][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 792.639980][ C0] kasan_set_track+0x5f/0x70 [ 792.639997][ C0] ? kasan_set_track+0x4e/0x70 [ 792.640012][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 792.640029][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 792.640042][ C0] ? kmem_cache_alloc_node+0x1af/0x310 [ 792.640062][ C0] ? __alloc_skb+0x103/0x2c0 [ 792.640168][ C0] ? nsim_dev_trap_report_work+0x253/0xa90 [ 792.640186][ C0] ? process_scheduled_works+0xa60/0x1600 [ 792.640205][ C0] ? worker_thread+0xa5e/0xfe0 [ 792.640221][ C0] ? kthread+0x2fa/0x390 [ 792.640235][ C0] ? ret_from_fork+0x48/0x80 [ 792.640252][ C0] ? ret_from_fork_asm+0x11/0x20 [ 792.640294][ C0] __kasan_slab_alloc+0x6c/0x80 [ 792.640313][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 792.640331][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 792.640352][ C0] ? __alloc_skb+0x103/0x2c0 [ 792.640371][ C0] __alloc_skb+0x103/0x2c0 [ 792.640399][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 792.640427][ C0] ? process_scheduled_works+0x975/0x1600 [ 792.640447][ C0] process_scheduled_works+0xa60/0x1600 [ 792.640480][ C0] ? worker_attach_to_pool+0x370/0x370 [ 792.640501][ C0] ? assign_work+0x3cc/0x5d0 [ 792.640522][ C0] worker_thread+0xa5e/0xfe0 [ 792.640559][ C0] kthread+0x2fa/0x390 [ 792.640573][ C0] ? pr_cont_work+0x550/0x550 [ 792.640591][ C0] ? kthread_blkcg+0xd0/0xd0 [ 792.640606][ C0] ret_from_fork+0x48/0x80 [ 792.640623][ C0] ? kthread_blkcg+0xd0/0xd0 [ 792.640638][ C0] ret_from_fork_asm+0x11/0x20 [ 792.640663][ C0] [ 792.640909][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 792.934445][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 792.941650][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 792.951701][ T29] Call Trace: [ 792.954977][ T29] [ 792.957907][ T29] dump_stack_lvl+0x18c/0x250 [ 792.962588][ T29] ? show_regs_print_info+0x20/0x20 [ 792.967797][ T29] ? load_image+0x420/0x420 [ 792.972309][ T29] panic+0x2ca/0x720 [ 792.976208][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 792.980710][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 792.986256][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 792.991659][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 792.997833][ T29] watchdog+0xf98/0xfa0 [ 793.002025][ T29] ? watchdog+0x1e1/0xfa0 [ 793.006389][ T29] kthread+0x2fa/0x390 [ 793.010461][ T29] ? hungtask_pm_notify+0x50/0x50 [ 793.015488][ T29] ? kthread_blkcg+0xd0/0xd0 [ 793.020076][ T29] ret_from_fork+0x48/0x80 [ 793.024493][ T29] ? kthread_blkcg+0xd0/0xd0 [ 793.029081][ T29] ret_from_fork_asm+0x11/0x20 [ 793.033856][ T29] [ 793.037129][ T29] Kernel Offset: disabled [ 793.041446][ T29] Rebooting in 86400 seconds..